Norton Internet Security / Norton AntiVirus

[shevo11]

Alright, any new steps to do?

[Quads]

Please download SystemLook and save it to your Desktop.  hxxp://jpshortstuff.247fixes.com/SystemLook.exe  (change hxxp to http)

Double-click SystemLook.exe to run it.
Copy the content below between the lines into the main textfield:

---

:reg
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost /s

---

Click the Look button to start the scan.
When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.

Quads

[shevo11]

Here it is. What's next?

It's very strange that in the last time all this infections appear, because the activity that i do and the other persons do on this computer has been the same. What do you suggest to avoid this things? windows firewall or something?

[Quads]

Here is the netsvcs XP reg fix attached

Download and remame the file just XP_netsvcs.reg   so that means you take the .txt off the end then click to run it.

Quads

[shevo11]

I can't do that because even if i save it witouth the .txt my computer saves the file in txt.

[Quads]

Is your PC set up to show know extenstion types?? If yes then download it, Right click it and select "Rename"   and then delete the .txt off the end so the end is instead .reg

The other way is to right click the attachment and select "Save Link as" then the dialog box appears and you can take the .txt part off then.

Quads

[shevo11]

I made it. Open the file and put OK, what's next?

[Quads]

So the registry added the data??

Quads

[shevo11]

It asked me to do it and i clicked yes and it apperently do it.

[Quads]

OK,  delete your copy of Combofix and download a new copy, then restart the PC then disable Norton and just run another scan.

Quads