Norton 360

[jsold406]

here is the output

[Quads]

you may have a corrupt netsvcs but you also have a missing driver

1.  Download OTL   hxxp://oldtimer.geekstogo.com/OTL.exe   (change the hxxp to http) save it to your Desktop.

Double click on OTL.exe to run it.  Right click OTL.exe and select run as administator for Vista and Win 7.

Click the Scan All Users checkbox.

Change file age to 60 days

under  Copy and paste what is below between the lines

---

drivers32

netsvcs
"%WinDir%\$NtUninstallKB*$." /30
%SYSTEMDRIVE%\*.exe
/md5start
volsnap.sys
atapi.sys
explorer.exe
winlogon.exe
wininit.exe
intelppm.sys

redbook.sys
tdx.sys
afd.sys
/md5stop

---

Press the 

Quads

Post back the  log OTL.txt (attach)

2.  Download hxxp://download.bleepingcomputer.com/farbar/FSS.exe  (change the hxxp to http) and run it on the computer with the issue.

Make sure the following options are checked:

Internet Services
Windows Firewall
System Restore
Security Center/Action Center
Windows Update

Press "Scan".
It will create a log (FSS.txt) in the same directory the tool is run.

With all thouse files I might have to find a free upload site so I can get the zipped quarantine.

Quads

[Quads]

1.  Download OTL   hxxp://oldtimer.geekstogo.com/OTL.exe   (change the hxxp to http) save it to your Desktop.

Double click on OTL.exe to run it.  Right click OTL.exe and select run as administator for Vista and Win 7.

Click the Scan All Users checkbox.

Change file age to 60 days

under  Copy and paste what is below between the lines

---

drivers32

netsvcs
"%WinDir%\$NtUninstallKB*$." /30
%SYSTEMDRIVE%\*.exe
/md5start
volsnap.sys
atapi.sys
explorer.exe
winlogon.exe
wininit.exe
intelppm.sys

redbook.sys
tdx.sys
afd.sys
/md5stop

---

Press the 

Quads

Post back the  log OTL.txt (attach)

2.  Download hxxp://download.bleepingcomputer.com/farbar/FSS.exe  (change the hxxp to http) and run it on the computer with the issue.

Make sure the following options are checked:

Internet Services
Windows Firewall
System Restore
Security Center/Action Center
Windows Update

Press "Scan".
It will create a log (FSS.txt) in the same directory the tool is run.

With all thouse files I might have to find a free upload site so I can get the zipped quarantine.

Quads

[jsold406]

here are the outputs

[Quads]

You have 2 drivers missing not one, that I will have to figure is the best way to place them back.

Quads

[jsold406]

alright keep me posted

[Quads]

Can you get a copy of redbook.sys out of the archive  C:WINDOWS\ServicePackFiles\i386\sp3.cab       redbook.sys

And the same for  :intelppm.sys  C:\WINDOWS\ServicePackFiles\i386\sp3.cab   intelppm.sys

and place the copies in the C:\Windows\System32\drivers\ folder

Quads

[jsold406]

alright i got both files copied into that folder. now what?

[Quads]

Do the same as from these few messages on this thread http://community.norton.com/t5/Norton-Internet-Security-Norton/GOOGLE-REDIRECTS-TO-http-abnow-com/m-...

Download Netsvcs reg fix etc. to correct the data.

Quads

[jsold406]

ok i downloaded the file and ran the registry  fix. do i have to do the combofix thing too?

[Quads]

NO

OK, Restart your PC, then with the same instructions do this, post, http://community.norton.com/t5/Norton-360/infected-with-trojan-zeroaccess-inf/m-p/692387/highlight/t...

If all with the drivers comes back correct then we can start to look at a full system scan and cleanup script.

Quads