Norton 360

[snowcomm]

I've tried several scanners (to absolutely no avail) and I've read several forum posts but I just don't have the skill base to remove this thing. I do know that I need OTL, but I have no idea what to do with it. Can anyone help me remove this bad boy? I'll even pay for it (if that's possible)...

[snowcomm]

Not sure if this info helps...

Category: Resolved Security Risks Date & Time,Risk,Activity,Status,Recommended Action,Path - Filename 5/19/2012 9:19 PM,High,80000000.@ (Trojan.Gen.2) detected by Auto-Protect,Blocked,Resolved - No Action Required, 5/19/2012 9:19 PM,High,800000cb.@ (Trojan.Gen.2) detected by Auto-Protect,Blocked,Resolved - No Action Required, 5/19/2012 9:11 PM,High,800000cb.@ (Trojan.Gen.2) detected by Auto-Protect,Blocked,Resolved - No Action Required, 5/19/2012 9:11 PM,High,80000000.@ (Trojan.Gen.2) detected by Auto-Protect,Blocked,Resolved - No Action Required, 5/19/2012 9:07 PM,High,800000cb.@ (Trojan.Gen.2) detected by Auto-Protect,Quarantined,Resolved - No Action Required,c:\windows\installer\{7faaaafa-cf14-2f74-3593-878a94dc601b}\u\800000cb.@ 5/19/2012 8:08 PM,High,800000cb.@ (Trojan.Gen.2) detected by Auto-Protect,Blocked,Resolved - No Action Required, 5/19/2012 8:08 PM,High,80000000.@ (Trojan.Gen.2) detected by Auto-Protect,Blocked,Resolved - No Action Required, 5/19/2012 8:00 PM,High,800000cb.@ (Trojan.Gen.2) detected by Auto-Protect,Blocked,Resolved - No Action Required, 5/19/2012 8:00 PM,High,80000000.@ (Trojan.Gen.2) detected by Auto-Protect,Blocked,Resolved - No Action Required, 5/19/2012 7:51 PM,High,80000000.@ (Trojan.Gen.2) detected by Auto-Protect,Blocked,Resolved - No Action Required, 5/19/2012 7:51 PM,High,800000cb.@ (Trojan.Gen.2) detected by Auto-Protect,Blocked,Resolved - No Action Required, 5/19/2012 7:47 PM,High,80000000.@ (Trojan.Gen.2) detected by Auto-Protect,Quarantined,Resolved - No Action Required,c:\windows\installer\{7faaaafa-cf14-2f74-3593-878a94dc601b}\u\80000000.@

[Quads]

What is your Operating system??

Quads

[snowcomm]

Vista 32-bit SP2

[Quads]

Found he 2 folder locations

C:\Users\[username]\AppData\Local\{7faaaafa-cf14-2f74-3593-878a94dc601b}
C:\Windows\Installer\{7faaaafa-cf14-2f74-3593-878a94dc601b}

Can you find them??  You probably won't be able to manually delete the folders.

Quads

[snowcomm]

I was able to find:

C:\Windows\Installer\{7faaaafa-cf14-2f74-3593-878a94dc601b}

Should I attempt to delete it?

Thank you so much btw. Do you take donations or anything for your help?

[Quads]

You may have to change the folder options to show Hidden files and folders and show protected system files to find the other folder.

Quads

[snowcomm]

Oh, I found it now!

[Quads]

Is it exactly as I typed it out above?? for the folder names and the locations.

Quads

[snowcomm]

Actually yes. It's a perfect match.