Norton Internet Security / Norton AntiVirus

[renroc]

Norton Anti Virus keeps popping up telling me it has blocked or resolved a threat from trojan.zeroaccess.b  - it also asks me to reboot my computer.  This message pops up repeatedly and wont go away.  I have run a virus scan, I have run the norton  removal tool, I have run norton power eraser - they all say that the threat does not exist, yet i still get pop up messages from norton saying it is blocking auto-protect blocked the threat and then details show that the threat is being resolved.  HELP clearly I have a virus and cant get rid of it!!!!!

[Quads]

ANY other user other than the thread starter is not to use any instructions, scripts or proceedures,  The work though in cleaning a system is individual and only for that system due to a number of factors.

Please do not run any tools unless instructed to do so. 

• We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability. Do as the instructions ask nothing extra or run things twice
• If I ask a Question just answer it, don't run anything unless it states.
• Major steps used:

1. Find

2. Break

3. Destroy

4. Cleanup  (including system as a whole)

Please read every post completely before doing anything. 

• Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.

• Logs from malware removal programs (OTL is one of them) can take some time to analyze. I need you to be patient while I analyze any logs you post. Please remember, I am a volunteer, and I do have a life outside of these forum, (sometimes )
  
  
• Attention to detail is important! Since I cannot see or directly interact with your computer I am dependent on you to "be my eyes" and provide as much information as you can regarding the current state of your computer.

What is your Operating System, Incliuding if it's 32 bit or 64 bit??

Quads

[renroc]

System:

     Microsoft Windows XP
     Professional
     Version 2002
     Service Pack 3

How do I find out if it's 32 or 64 bit?

[renroc]

and.. THANK YOU SO MUCH FOR HELPING ME!!!!!!! I am so so appreciative!

[Quads]

Please download SystemLook from one of the links below and save it to your Desktop.

http://jpshortstuff.247fixes.com/SystemLook.html  the 32 bit version

Disable Norton for say 30 mins

Double-click SystemLook.exe to run it.

Copy the content of the following codebox into the main textfield:  (don't forget the : in front of :filefind)

---

:filefind

\n

\@
*.@

services.exe

---

Click the Look button to start the scan.

When finished, a notepad window will open with the results of the scan. Please post this log in your next reply (attach to message).

Note: The log can also be found on your Desktop entitled SystemLook.txt

Quads

[renroc]

/

[renroc]

 -

 SystemLook 30.07.11 by jpshortstuff
Log created at 11:20 on 10/07/2012 by Andrew
Administrator - Elevation successful

========== filefind ==========

Searching for "\n"
No files found.

Searching for "\@"
C:\Documents and Settings\Andrew\Local Settings\Application Data\{8053ac1d-1f11-6507-5009-0211b94aad05}\@    --ahs-- 2048 bytes    [23:00 13/04/2008]    [15:09 10/07/2012] 0B4C64CBBE6DC1FF42B29732A802EDC4
C:\WINDOWS\Installer\{8053ac1d-1f11-6507-5009-0211b94aad05}\@    ---hs-- 2048 bytes    [23:00 13/04/2008]    [15:15 09/12/2010] 04E30E5D3B765DD5643E84DF10273438

Searching for "*.@"
No files found.

Searching for "services.exe"
C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\services.exe    --a--c- 110592 bytes    [12:45 10/09/2011]    [11:06 06/02/2009] 020CEAAEDC8EB655B6506B8C70D53BB6
C:\WINDOWS\$NtUninstallKB956572$\services.exe    -----c- 108544 bytes    [13:15 11/09/2011]    [23:00 13/04/2008] 0E776ED5F7CC9F94299E70461B7B8185
C:\WINDOWS\system32\services.exe    --a---- 110592 bytes    [23:00 13/04/2008]    [11:11 06/02/2009] 65DF52F5B8B6E9BBD183505225C37315
C:\WINDOWS\system32\dllcache\services.exe    --a--c- 110592 bytes    [23:00 13/04/2008]    [11:11 06/02/2009] 65DF52F5B8B6E9BBD183505225C37315

-= EOF =-

[Quads]

Please attach the log to a post.

Quads

[renroc]

oh, i thought that was the log. i'll try again