Norton 360

[Lmaco]

One of our computers has been infected with this virus.  I was finally able to have Norton 360 installed and ran the scans.  It did detect the virus and said it repaired it but it was still in the computer.  I am trying to remove it per the instructions on this website but am unable to disable the system restore.  I can not access the C drive or the control panel.  Can you help me with that?

[Lmaco]

I finally was able to access control panel and am currently running another scan.  The next step is to edit the registry.  "Run" is no longer an option due to this virus.  Is there another way I can access the registry to remove the entry?

[Floating_Red]

This should have been Posted here: http://community.norton.com/norton/board?board.id=Norton_360.

Have you Ran a Full System Scan in Safe Mode?  Have you been able to update your Product via LiveUpdate?  You should Update your Product via LiveUpdate before Running the Scan in Safe Mode.

Message Edited by Floating_Red on 08-05-2008 06:46 PM

[Lmaco]

I've run Live Update as well as a full system scan a few times.  It did locate the virus and said it took care of it.  But it's still there.  After the scan runs, the summary page that comes up said Live Update has a message that my license isn't valid but it is.  The date on the computer is not correct as it says the correct date then VIRUS ALERT!! after it.  That is how the date appears on all areas of the computer. 

I was able to get to the registry thru command prompt and deleted the first two listings as described on the removal page but the third isn't there.  

I have started the computer in safe mode but Norton 360 says it does not run in 360.

The problem persists.

[Lmaco]

I meant to say I've started the computer in safe mode but Norton 360 says it does not run in safe mode.

[Tony_Weiss]

I'm not sure I read your original post correctly; did you say that you installed Norton 360 v2 after the malware was on your system? Below are the removal instructions for antivirus 2008. Please review and perform the steps listed:

http://www.symantec.com/security_response/writeup.jsp?docid=2008-050906-3727-99&tabid=3

I would also recommend that you follow the steps listed in the How To Troubleshoot a Suspected Malware Infection announcement. This document provides information on submitting the malware to Symantec for review as well.

[Stu]

---

Tony_Weiss wrote:

I'm not sure I read your original post correctly; did you say that you installed Norton 360 v2 after the malware was on your system? Below are the removal instructions for antivirus 2008. Please review and perform the steps listed:

http://www.symantec.com/security_response/writeup.jsp?docid=2008-050906-3727-99&tabid=3

I would also recommend that you follow the steps listed in the How To Troubleshoot a Suspected Malware Infection announcement. This document provides information on submitting the malware to Symantec for review as well.

---

Please follow these instructions very carefully.

If these won't work , come back over here or PM me and we will try something else

[Lmaco]

Yes, I installed 360 after the virus was detected.  There was an older version of Norton that had expired.  I'll check out your suggestions and see what happens.

[Stu]

Please do that and let us know

[Lmaco]

I thought I reported back but I guess I didn't.  This is so frustrating.  I've done all that I have been able to do.  But, I can not access the "c" drive, the run command or msconfig due to this virus.  Is there a "back door" way to get to these things?