topic Registry check in Norton Internet Security / Norton AntiVirus

Registry check

99Jimmy — Fri, 06 Jan 2012 12:40:17 GMT

Yes I'm a newbie. I'm a NIS user with my Windows Vista Basic OS. During a web session Norton warned me that my registry may have been compromised. The message included a description of Trojan Horse (TH) malware. I attempted to execute a restore point (not sure if that's the correct term), but Windows told me it was unsuccessful. I was told yesterday that someone attempted to use my Visa account number and I had to close the account. This morning I used the on-line support tool from Norton which installed the most current version of NIS 2012. My NIS is reporting System Status: Secure.

How can I be sure there is not a TH in my registry? Thanks in advance for your help.

Re: Registry check

PC_confused — Fri, 06 Jan 2012 13:03:01 GMT

Hello 99Jimmy and welcome to the Community. Have you tried running a full system scan while in the safe mode? Are you running any other security software? If you would like a second opinion, you might try scanning with another On-Demand scanner. Here are two examples that play nice with Nortons, Malwarebytes or SUPERAntiSpyware. Make sure you select the Free versions. Come back and let us know if they help.

Re: Registry check

99Jimmy — Fri, 06 Jan 2012 13:39:05 GMT

Thanks for the quick response PC_Confused. After I finished posting I downloaded the NPE Beta program and ran it - it found no threats. Something else that bugs me (no pun intended) is not knowing who/what my machine is talking to in the background when I'm connected to my broadband service. Do you know of any monitoring program that would let me know what's happening real time?

Also, I have not run the scan in Safe Mode and am not using any other protection software other than NIS 2012.

Re: Registry check

SendOfJive — Fri, 06 Jan 2012 19:24:00 GMT

Hi 99Jimmy,

TCPView, a free program from Microsoft / Sysinternals will show all connections and what programs are involved:

http://technet.microsoft.com/en-us/sysinternals/bb897437

Did you use the Visa card online? Can you provide the details of what Norton alerted to and what Norton did about the threat (should find this in Norton History)?