Norton 360

[Aarca]

Norton 360 wont scan files and suspends after a while of use

i've worked with a symantec agent online but didn't help

[yogesh_mohan]

Aarce,

Welcome to Norton Community!

Please provide the following details:

1. The version of Norton 360 you have, you can find it from Help & Support > About.

2. The Operating System you have.

3. Are you getting any error message from Norton program during scan? or What exactly happens during the scan?

4. What are the steps you tried or the Symantec Agent tried when you worked online?

Yogesh

[Aarca]

norton 360 version 2.5.0.5

running vista

there are no error messages

whenever i run the antivirus and spyware scan, it says its scanning but the number of files scanned dosen't go up and after a while it just says its suspended

the most ive tried was downloading AVG to see if it was juss norton that was not working but it refused to install

and the symantec agent using remote access downloaded something off the norton website file name "20090705-020-v5i32.exe"  but still didn't work

[dbrisendine Norton Fighter]

Please download the following and run a scan so we can check for possible malware that could be interfering with your system.

---

Please download SysProt here http://homepages.slingshot.co.nz/~crutches/SysProt  and run it.

Choose the Log tab and select all the items in the Write to log box. Then select Create Log to start scanning. When it is done, a message window will appear with the location of the log file.

Please attach the log file to a post here; the Add Attachments links is below the orange Post button. Thanks

[Aarca]

the log was made, thanks for helping

[dbrisendine Norton Fighter]

Thank you for your help.  You have the MSIVX rootkit on your system.  I will notify the proper people to help you remove the problem but it may be later this evening beofre they can get to you.  They are kind of backed up right now but Quads will get to you in time.

Message Edited by dbrisendine on 08-13-2009 01:57 PM

[Aarca]

alright

thanks guys this is much appreciated

Aarca

[Quads]

Hi

Now  (read carefully) If you have Spybot S&D uninstall it.

Also during the restarts with Avenger if Your PC has a Startup repair center like with HP and Toshiba tell it to start Normally if it kicks in.

1. Download Avenger to your desktop,

Unzipped version http://homepages.slingshot.co.nz/~crutches/Avenger/

OR  Creators website http://swandog46.geekstogo.com/avenger2/avenger2.html with zipped version to the unzip to desktop 

2. Click to run "Avenger.exe"  (right click "Run as Administrator" if using Vista)

3. In the "Input script here:" copy and paste the script between the lines

---

Drivers to disable:

MSIVXserv.sys

Drivers to delete:

MSIVXserv.sys

Files to delete:

C:\Autorun.inf

D:\Autorun.inf

C:\WINDOWS\System32\drivers\MSIVXhqppyoenrmfdxcusyqioefyirldyitth.sys

C:\WINDOWS\System32\MSIVXvjoxqngecitvtsintjuxvprxjsbbbgfc.dll

C:\WINDOWS\System32\MSIVXwsbdcjvatqmfsmqibsfputpsgrrgcosf.dll

C:\WINDOWS\System32\MSIVXcount

Registry keys to delete:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSIVXserv.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSIVXserv.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\MSIVXserv.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\MSIVXserv.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\MSIVXserv.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet005\Services\MSIVXserv.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet006\Services\MSIVXserv.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet007\Services\MSIVXserv.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet008\Services\MSIVXserv.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet009\Services\MSIVXserv.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet010\Services\MSIVXserv.sys

HKEY_LOCAL_MACHINE\SOFTWARE\MSIVX 

---

Here is a screenshot (script updated since shot)

Make sure the "Automatically disable any rootkits found" is NOT selected

4. Click "Execute"

You will be asked to restart the PC click "Yes", when the PC restarts the load screen will takes slightly longer, then when it looks as though windows is loading the PC will restart again.

Then when Windows fully loads the Avenger log will be loaded, showing files it could or could not find.

5. Restart the PC again, then see if you can install  Update and run Malwarebytes http://www.filehippo.com/download_malwarebytes_anti_malware/

Quads