Norton Internet Security / Norton AntiVirus

[Vidaria]

No I haven't.  I think someone had the same problem yesterday, but their thread is dead.  Its 3:30 am here and i'm exhausted.  I'll try it tomorrow morning and see what happens.  My only concern is if it screw up the admin account too becuase at least that works perfectly fine.

Should I run the UnHook thing from my limited account (the one affected) or from my admin account?

Thanks for all your help so far Quads!

[Quads]

Probably the limited account, 

Here is a poster where they used "UnHookExec.inf" as seen in their post http://community.norton.com/t5/Norton-360/Got-a-Virus-and-a-Complaint/m-p/198747/highlight/true#M263...

You can also see where their Malwarebytes log shows the same infection named file as yours.

Quads

[Vidaria]

Yup, I've read that thread too.  They used the unhook in the beginning, i did some crazy other method - which is probably why I have the problem with the exe files.  I guess its worth a shot to see if i can salvage the account.

I'll report back tomorrow morning.

[Quads]

Even though Malwarebytes deleted the Rogue's main file does not mean the registry entry is fixed like some magic spell.

Quads

[Tryer]

It's reading accounts like this that makes me think I'm right to only use any virus/trojan/spyware detection programs as a secondary line of defence. I'm sure a sandbox would have provided protection from the trouble. I wish Norton included one. Kaspersky and Avast! does now. Not as good as Sandboxie yet but working on it.

[Vidaria]

Hi everyone,

I tried to run the update like Quad suggested from the limited account.  The file came as a .txt file when it was saved, (actually it was ".inf.txt"), so I just removed the .txt part.  I got an error saying installation failed.  Perhaps I have to do this from admin account?

[Quads]

I have created a long fix including the Handlers here

http://homepages.slingshot.co.nz/~crutches/LongexeFix/

You might have to right click then "Save as" to download

Once Downloaded, just run the .reg file (click with Mouse)

Quads

[floplot Norton Fighter]

Thank you Quads

[Vidaria]

Will running the .reg file fix the problem, or will I need to run mbam again after the fix?

Also, (sorry for asking again), do I do this from my affected (limited) account or the admin account?

[Quads]

Limited account

I can understand the possible "UnHookexec.inf" install problem in the limited account due to possible restrictions that have been set for the Limited Account.

You can run Regedit??  

Then Regedit will run the .reg file adding or correcting all the entries I have placed in the .reg file for the .exe settings

You may want to Run Malwarebytes after within the Limited Account as it will scan registry entries that won't be there when you are in the Admin account.

Quads