Norton 360

[Lavie]

So what should I do now?

Several stuff aren't working as they should, for example, I can't change my language, or when I turn up and down the volume through my keyboard it doesn't show it on the screen as it used to.

Also, the Registry Mechanic is showing a lot more errors, around 850+, what does this mean? Any way to fix them without spending money on that program?

[delphinium Norton Fighter]

How many errors did you fix already through Registry Mechanic?  When you say, you could only do six at a time, I assume that you know that from practical experience. Did you do backups before the fixing?

[Quads]

There is nothing I can do from here as it's the fact that the .exe files etc are gone, Multimedia keyboards can have their own program with .exe that could also be gone.

The registry entries that could be picked up on are possibly because of the file for the program missing, the registry entry is now pointing to a missing file.

Quads 

[Lavie]

So how can I know that the problem is gone?

I fixed something like 18 error.

Backed up what?

Like I said, I have these application + system recovery disks.

[silverhawk]

 "Userinit Logon Application" and "Windows Logon UI" both are crucial system files..you need to repair your copy of windows installed in your HDD..Insert windows disk and run this:

System File Checker (SFC)

The System File Checker is an important application which scans the integrity of all the protected system files on your PC. Should it locate an incorrect version of a specific protected file SFC automatically replaces it with the correct Microsoft version.

To check your Windows protected files, proceed as follows:

1/ Click the Start button

2/ From the Start Menu, Click All programs followed by Accessories

3/ In the Accessories menu, Right Click on the Command Prompt option

4/ From the drop down menu that appears, Click on the 'Run as administrator' option

5/ If you have the User Account Control (UAC) enabled you will be asked for authorisation prior to the command prompt opening. You may simply need to press the Continue button if you are the administrator or insert the administrator password etc.

6/ In the Command Prompt window, type: sfc /scannow and then press Enter

7/ A message will appear stating that 'the system scan will begin'

8/ Be patient because the scan may take some time

9/ If any files require replacing SFC will replace them. You may be asked to insert your Vista DVD for this process to continue

10/ If everything is okay you should, after the scan, see the following message "Windows resource protection did not find any integrity violations"

11/ After the scan has completed, Close the command prompt window

After this if your computer does not come to stable condition than repair by botting through the CD\DVD of windows..

[SendOfJive Norton Fighter]

Registry Mechanic makes a backup prior to fixing registry entries, so you could restore any changes you made with that program.  That may not solve everything, however.  It's hard to know what changes to your system were the result of Registry Mechanic, HiJackThis!, or the virus itself.  Virut can be very destructive.  Try Silverhawk's suggestions to use the SFC and Windows Repair.  Failing those, if you do decide to reformat and reinstall Windows make sure you research this online first so you have a reasonably good idea of what you are doing and what to expect.  Your computer manufacturer's support website probably offers a step-by-step guide or you could start here.  Most likely however your computer has a hidden restore partition that will return your machine to the exact configuration it was in when you first got it, which will be faster and easier than a reinstallation.  Again, check your manufacturer's website for documentation.  Either way, you will need to backup all your data as it will be erased on the hard drive.  Another consideration for you is that Virut can infect almost any executable file it sees, so when restoring your applications you will need to be sure you use a known good source that was not previously stored on the infected computer.  Be very careful with your backed up data as well, as you don't want to take any chances on reinfecting a fresh reinstallation.  Good luck.

[Lavie]

Yes, this "hidden restore partition" is those recovery disks I kept asking about.

There isn't much I want to back up, only 1 folder and maybe my bookmarks, but how can I make sure my external hard drive isn't infected? That is much more important to me.

Is there a safe way to connect it?

[dbrisendine Norton Fighter]

At this point in time, with your system the way it is there is no going back.  Virut has 'marred' enough of the system files (both essential and nonessential) that your system will not be fully operational with out a total reinstall of windows; in this case, a factory image reinstall.  Even doing a SFC will not get the non- essential files repaired so as the core services will work the others will not.  Virut has been known to be so poorly coded that it damages every file it attacks.  Sorry, but the truth is best instead of clinging to hope that is not there.

Registry Mechanic is a great program but if you have close to 900+ errors on your system you don't need it to 'fix' them through Registry Mechanic; you need them repaired.  RM will not fix but delete the errors which is not want you want.  The 18 errors you 'repaired' so far are just removed references to temp files that have been deleted previously (or some similar things that really don't affect the operation of the system but could be cleaned up in needed).

I would NOT connect your external drive to this system at this point; either your drive or your system could become infected or compromised again.

You may be able to save the Favorites list by writing them down on paper.

Do the factory reinstall; put N360 on the new installation and fully update it (you need v3 of N360 if you do not have it yet) and then disconnect from the Internet, attach your external drive and scan it fully.  Sorry this is not want you want to hear but this is the best way to handle the situation now.

[Lavie]

Ok, just one more thing.

I'm not sure if I still have the Norton serial key, any way to recover it?

[delphinium Norton Fighter]

You can access the key in your Norton account