I think i have virus problems

Run the Norton scan in safemode?
I am guessing whatever it is, is generating itself on startup from the system restore (if that's even possible)
 
"Run the Norton scan in safemode?" Will do, thanks

"have you checked the MSCONFIG entries to see whether this thing is just replicating itself on startup?" Ay!?!!?
 
If you don't think system will fall over any time soon, I'd turn off system restore until you resolve issue. This will delete all restore points made so far.

You could try downloading the trial of Kaspersky anti virus, updating it and then doing a complete scan.

You might need to unistall Norton first, unless it can be disabled (maybe tell it not to load on startup, if option available).
 
disable system restore
ditch norton
install nod32 antivirus


What were you trying to install to get the virus in the first place?
 
I wouldn't recommend Nod32 unless it's very cheap. And i wouldn't bother buying it now after my experiences of the trial that missed two Trojans. So for the price they are asking I'd expect better.

I knew I was going to get an infection when I decided to download a file. But as I'm planning to format soon I'd though what the hell it's a good test for Nod32, that didn't do anything. Then started getting messages alerts that AHI.exe (or similar) had stopped responding, and similar names. Anyway switched to Kaspersky trial and it found two Trojans and some other related files. I would list them, but don't seem to have a log entry for them anymore. The Trojan names were original listed when I clicked on the sonar style graphic at the bottom.
 
Bane said:
If you don't think system will fall over any time soon, I'd turn off system restore until you resolve issue. This will delete all restore points made so far.

You could try downloading the trial of Kaspersky anti virus, updating it and then doing a complete scan.

You might need to unistall Norton first, unless it can be disabled (maybe tell it not to load on startup, if option available).
Click to expand...

well it seems to be working but hanging a lot and running very slowly!!! I delete my system restore points everynow and again, so will do this again and also stop them.

So, does anyone know what i am dealing with here? I am struggling to understand why norton is picking something up and the other software isn't.

As for what i was downloading and installing i cant remember now but i didnt get very far in the installation from what i can remember!
 
bledd. said:
disable system restore
ditch norton
install nod32 antivirus


What were you trying to install to get the virus in the first place?
Click to expand...

Don't forget to run CCleaner to remove temp files etc which just make the scanning take longer :)
 
keygens are sometimes compressed using tools that are also used in viruses. This means that they are sometimes seen as viruses by antivirus progs. Of course sometimes they DO have real viruses in them also :-)
 
edscdk said:
download combofix.exe from http://www.bleepingcomputer.com/

reboot safe mode and run it...

I'd guess you have a rootkit thats trying to install other components, norton cannot see the rootkit but I can see the files its trying to download.
Click to expand...

Already done this buddy! Just got to find the time to do what others have suggested! Thanks for your time and effort though :)
 
18th Mar 2010, 21:03, time and date of original post.

23rd Mar 2010, 20:42 Nearly five days later Still not sorted.

25th Mar 2010, 19:15 Almost a week later Still not sorted.

Fresh os install would have been approx 6 days 22 hours quicker :p
 
Last edited:
coupe69 said:
18th Mar 2010, 21:03, time and date of original post.

23rd Mar 2010, 20:42 Nearly five days later Still not sorted.

25th Mar 2010, 19:15 Almost a week later Still not sorted.

Fresh os install would have been approx 6 days 22 hours quicker :p
Click to expand...

:D Not on my pc matey :D! I havent had a chance to look at it with studying and going on holiday! Hopefully this week will be the week to get it sorted or throw it in the bin and build a new one :D
 
You must log in or register to reply here.
Back
Top Bottom