• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs

Not what you are looking for? Ask the experts!

Kudos0

norton blocked 2 virus' now internet explorer wont start

hi,

yesterday norton 360 v3  sonar and auto protect detected blocked and removed 4 trojans virus . after norton removed/blocked them every time i try to open internet explorer i get an internet explorer has stopped working message. i have tried a system restore but it fails each time.

thanks

[edit: Resized image to fit.]

Message Edited by shannons on 06-07-2009 05:04 AM

Replies

Kudos0

Re: norton blocked 2 virus' now internet explorer wont start

hi,

yesterday norton 360 v3  sonar and auto protect detected blocked and removed 4 trojans virus . after norton removed/blocked them every time i try to open internet explorer i get an internet explorer has stopped working message. i have tried a system restore but it fails each time.

thanks

[edit: Resized image to fit.]

Message Edited by shannons on 06-07-2009 05:04 AM
Kudos0

Re: norton blocked 2 virus' now internet explorer wont start

Hi Redarrow183,

 

Go to Control Panel > Internet Options. On the Advanced tab, click Reset. In the Reset Internet Explorer Settings dialog box, click Reset to confirm. Run LiveUpdate from Norton 360 repeatedly until you see the message "No more updates..." and then run a comprehensive scan. Check whether it detects any more threats. If the problem persists, remove the Internet Explorer from your computer through Uninstall a Program in Control Panel. Then download/reinstall Internet Explorer from the Microsoft Web Page. Let us know how it goes.

 

Yogesh

Kudos0

Re: norton blocked 2 virus' now internet explorer wont start

HI,

thank you for your reply. i have found out there is more to the problem than thought.

this virus/trojan/whatever it is has hidden or removed my recovery drive so i cannot restore c:\ also it is preventing me from running scans on folders. if i scan a folder is scans and says no virus' or ..... found if i click more detailes i find that it has not scanned anything.

i am also unable to go to the microsoft page i get an connection error, i cannto use any other anti-spyware, anti-virus or anti-malware it shuts my pc down saying it is preventing damage to my pc.

i cannot shut my laptop down, since yesterday 5GB space on my HDD has been taken up.

there is lots more problems but i cannot think of the rest at this moment.

hope you can help other wise i will have to get recovery cds from sony and hope that fixes it and also makes me a recover partiton.

thanks

Kudos0

Re: norton blocked 2 virus' now internet explorer wont start

Try running the scan using the Norton Recovery tool mentioned by Tim_Lopez in this thread:

http://community.norton.com/norton/board/message?board.id=Norton_360&message.id=5754

Kudos0

Re: norton blocked 2 virus' now internet explorer wont start


Redarrow183 wrote:

i cannot shut my laptop down, since yesterday 5GB space on my HDD has been taken up.


Just push your laptop's power button for 5-10 seconds, or get out the battery and the power cable, and it will shut down... I know both are very agressive, but you can only turn it off this way if it won't let you to turn it off.
When you are done with the power off, turn it on, and right after you turned it on puch the F8 continually until you see a list where you can choose how to start your windows. Select the Safe Mode with LAN, and start windows. It will load just some of the components, what will help you to get rid of this threat.
Start your norton program, and do a full system scan.
If it can't load it, go to Control Panel -> Administrative Tools -> Services, and on the list find Norton 360, and start it. Now open the main window, and run the full system scan or click on start menu -> run, and in the "text box" write navw32.exe /a (it will scan all your drives).

Let us know the results.Message Edited by PapauZ on 06-07-2009 05:30 PM
Windows 8.1 Embedded Industry Pro x64 Hungarian, Norton 360 v21.5.0.19
Kudos0

Re: norton blocked 2 virus' now internet explorer wont start

i've tried running a scan in safe mode but i still get the same thing (it not scanning).  im not sure why norton didnt detect the threat when it detected the rest of them. i want to run a scan in safe mode but norton wont scan and this laptop im using now (the infected one is off at the moment) doesnt have iso burning program on it

Kudos0

Re: norton blocked 2 virus' now internet explorer wont start

Once the scan concludes following the suggestions of Yogesh and PapauZ you can download Malwarebytes here to see if there are any infections left.  If you have difficulty downloading or installing Malwarebytes, you will need to go into the download packeage and change the name of the .exe file to something like stop.exe.  Once it is installed, change the name of the program .exe file to the same name.  It should then allow you to update the definitions.  Disable system restore, disconnect from the internet, and run the scan.  A log will be produced that can be pasted here for us to view.
Under certain circumstances profanity provides relief denied even to prayer.Mark Twain
Kudos0

Re: norton blocked 2 virus' now internet explorer wont start

whatever the virus is it is trying to let more in but so far norton has protected me and blocked them

Kudos0

Re: norton blocked 2 virus' now internet explorer wont start

its crashing my laptop it opened 100 mozilla firefoxs and 100 capture programs its playing the fool with me

Message Edited by Redarrow183 on 06-07-2009 09:47 AM I am running a malwarebits scan nowMessage Edited by Redarrow183 on 06-07-2009 10:15 AM
Kudos0

Re: norton blocked 2 virus' now internet explorer wont start

i ran the scan 2 times one in safe mode the other in normal, it deleted a virus and some reg keys but thats it. i have uninstalled ie 8 and reinstalled it but it still will not work. my norton still will not scan, i tried installing search and destroy anti-spyware but that will not launch if i try clicking on properties my system says it is shutting down to avoid damage. i think restoring the c:\ would be the next option but i will have to buy the dvds from sony. if i restore my c:\ do you think i will also make a recovery partition.

thank you  

ps here is the log you asked for. 

Malwarebytes' Anti-Malware 1.37

Database version: 2182

Windows 6.0.6001 Service Pack 1

07/06/2009 19:03:19

mbam-log-2009-06-07 (19-03-18).txt

Scan type: Full Scan (C:\|)

Objects scanned: 263095

Time elapsed: 1 hour(s), 6 minute(s), 23 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 1

Registry Values Infected: 1

Registry Data Items Infected: 12

Folders Infected: 0

Files Infected: 1

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

HKEY_CURRENT_USER\SOFTWARE\ColdWare (Malware.Trace) -> Quarantined and deleted successfully.

Registry Values Infected:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\coldware (Trojan.Agent) -> Quarantined and deleted successfully.

Registry Data Items Infected:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.139,85.255.112.136 -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{c63bc921-57d1-437b-855f-ba788028af6a}\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.139,85.255.112.136 -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{ccbe103c-b359-4473-a812-930aa5785192}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.112.139,85.255.112.136 -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{ccbe103c-b359-4473-a812-930aa5785192}\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.139,85.255.112.136 -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.139,85.255.112.136 -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{c63bc921-57d1-437b-855f-ba788028af6a}\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.139,85.255.112.136 -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{ccbe103c-b359-4473-a812-930aa5785192}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.112.139,85.255.112.136 -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{ccbe103c-b359-4473-a812-930aa5785192}\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.139,85.255.112.136 -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Tcpip\Parameters\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.139,85.255.112.136 -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{c63bc921-57d1-437b-855f-ba788028af6a}\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.139,85.255.112.136 -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{ccbe103c-b359-4473-a812-930aa5785192}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.112.139,85.255.112.136 -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{ccbe103c-b359-4473-a812-930aa5785192}\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.139,85.255.112.136 -> Quarantined and deleted successfully.

Folders Infected:

(No malicious items detected)

Files Infected:

c:\Windows\Tasks\{5B57CF47-0BFA-43c6-ACF9-3B3653DCADBA}.job (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Kudos0

Re: norton blocked 2 virus' now internet explorer wont start

Please don't do anything else with it until I get Quads to have a look at your log.  At this point in time it is not a panic situation.  If you can uninstall Spybot S&D please do so as that particular program blocks the removal of some malware.

Message Edited by delphinium on 06-07-2009 03:05 PM
Under certain circumstances profanity provides relief denied even to prayer.Mark Twain
Kudos0

Re: norton blocked 2 virus' now internet explorer wont start

Quads has had a look at the log and will be along shortly.  See if you can get this to run a scan  http://www.gmer.net/

If it will scan copy the log to notepad and post it in sections as it will be too large for one post. If you need to do so, download it into your working computer and transfer it to the problem one.Unhook that one from the internet to try to stop the redirect.

Message Edited by delphinium on 06-07-2009 06:26 PM
Under certain circumstances profanity provides relief denied even to prayer.Mark Twain

Replies are locked for this thread.