08-24-2009 03:51 PM
Hello and thank you for having me.
I see other people are having the same problem that I am so won't get into to much detail. When ever I run a complete scan of Norton 360, the virus scanner shows 0 for items scanned never changing. I know I have an infection on my computer because web pages are being redirected on both IE8 and Firefox. I've included the Sysprotlog, the HiJackthis log, and the SuperAntiSpy log in case it adds additional information.
I look forward to receiving a response and I'd like to thank you all in advance
08-24-2009 05:21 PM
08-25-2009 01:08 PM
The location of the log would be for instace for Vista in "Users" folder , oh well
Continuation of Stage 1, File removal
Now the registry entries will be greyed out I think, will get them later.
Tick (check) these entries (little square box beside each entry) Only the entries below, not the others
Then click the Clean items button
Follow the prompts to remove them and restart your computer.
After reboot, a dialog box displays the files you selected for removal and the action taken.
Step 2 after
08-25-2009 06:41 PM
Step 2. Detect - Delete any buddies
Download, Install, Update the definitions and run a Full Scan with Malwarebytes http://www.filehippo.com/download_malwarebytes_ant
08-26-2009 07:41 AM
OK I ran Malwarbytes again.
I don't know if I should mention that I downloaded Malwarbytes on Sunday after reading some of the other posts and, after running a quick scan, it did find and delete some infected files. I ran it last night and it behaved a little strange; 20 minutes into a complete scan and it locked my computer. I had to do another complete scan in Safe Mode and it found nothing.
08-26-2009 08:20 AM
Please see if you can run it again in normal mode. Update it again. If successful, please attach the log for Quads to view when he becomes available.
08-26-2009 08:02 PM
Step 3. Registry
If you have Spybot S&D installed remove it
Also during the restarts with Avenger if Your PC has a Startup repair center like with HP and Toshiba tell it to start Normally if it kicks in.
1. Download Avenger to your desktop,
Unzipped version http://homepages.slingshot.co.nz/~crutches/Avenger
OR Creators website http://swandog46.geekstogo.com/avenger2/avenger2.h
2. Click to run "Avenger.exe" (right click "Run as Administrator" if using Vista)
3. In the "Input script here:" copy and paste the script between the lines
Drivers to disable:
Drivers to delete:
Files to delete:
Registry keys to delete:
Here is a screenshot (script updated since shot)
Make sure the "Automatically disable any rootkits found" is NOT selected
4. Click "Execute"
You will be asked to restart the PC click "Yes", when the PC restarts the load screen will takes slightly longer, then when it looks as though windows is loading the PC will restart again.
Then when Windows fully loads the Avenger log will be loaded, showing files it could or could not find.