06-23-2009 08:51 AM
Run the Hijackthis Scan, select only the following entries and click Fix. Then run a scan from Norton program in Safe mode once, restart the computer to normal mode and then check whether you still get any prompts.
O1 - Hosts: 155.64.4.53 prg.ges.symantec.com
O1 - Hosts: 155.64.226.84 prg.ges.symantec.com
O1 - Hosts: 155.64.1.25 uscu-tpforms.symantec.com
O1 - Hosts: 155.64.94.15 worldview.ges.symantec.com
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O23 - Service: Routing and Remote Access RemoteAccessSysmonLog (RemoteAccessSysmonLog) - Unknown owner - C:\WINDOWS\system32\appwizr.exe (file missing)
06-23-2009 10:29 AM - edited 06-23-2009 10:35 AM
Thank you Y_M, I will follow your instructions, one follow up question - For the Norton scan in Safe Mode, should I run full system scan or quick scan?
>> I see that I can only perform a Full System Scan in Safe Mode
Also, the Trojan.Agent virus is being captured by my MBAM scan, my Norton scans are all coming up clean.
kw
06-23-2009 10:58 AM
Hi Kwalker:
One more little check if you don't mind. Please update your Malwarebytes again, go into safe mode, and run a full scan.
When that is completed, go back into normal mode, and scan again. Please post both logs, and will get Y_M to have a look for comparison. If the trojan agent keeps coming back, we have a whole other problem to deal with.
06-23-2009 08:31 PM
Delphinium, dbrisendine, Stu, Quads & Y_M
I've solved my problem, the Trojan.Agent was not a virus but rather a file necessary to run an application I have on the desktop. In the MBAM scan I have it now flagged as Ignore. All is now working well and MBAM & Norton scans are clean.
A thousand thank yous for the help and patience in both cases. I wish I had known to come here first when needing help.
very grateful,
kw
