07-31-2010 11:45 AM
I have a local disk that I didn't create or have access on my computer I just realized that I have it when I went to my computer. I just recently scan my computer and it had scanned up nothing,but when I left my computer on and my idle scan came up with like 6 trogans. I was looking at my security history and I saw a local q but i don't know where it came from and it was accessing the internet from a word.exe. I was wondering if anyone could help with this problem.
07-31-2010 01:44 PM - edited 07-31-2010 01:46 PM
Hello!
# Open Norton support website http://www.symantec.com/norton/support/index.jsp
# Click on Virus and supyware Removal
# Download the free Norton Power Eraser tool (NPE) and save it to your Desktop
# Start the program and perform a System scan in Normal mode.
# When the scan is complete, be sure that everything is checked (be cautios) , and follow the instructions to remove what it finds.
Be cautions because NPE might finds a false positve , too.
Download Malwarebytes' Anti-Malware to your desktop
http://download.cnet.com/Malwarebytes-Anti-Malware
Download DDS and save it to your desktop
http://download.bleepingcomputer.com/sUBs/dds.scr
Disable any script blocker, and then double click dds.scr to run the tool.
When done, DDS will open two (2) logs
DDS.txt
Attach.txt
Save both reports to your desktop.
1. Let us know exactly what Norton Power eraser has found
2. Let us know what MBAM has found (attach its log file)
3. Attach the DDS.txt and Attach.txt files in your next reply here
07-31-2010 03:19 PM
Hello ablackcloak9
# When the scan is complete, be sure that everything is checked (be cautios) , and follow the instructions to remove what it finds.
Be cautions because NPE might finds a false positve , too
I would strongly suggest before you let the Norton Power Eraser remove what it finds, that you please post a screen shot of what it has found and await further instructions.. Here are instructions on how to post a screen shot.
Success always occurs in private and failure in full view.
07-31-2010 11:19 PM
I would strongly suggest before you let the Norton Power Eraser remove what it finds, that you please post a screen shot of what it has found and await further instructions.. Here are instructions on how to post a screen shot.
More or less the same would apply for MBAM . It may also produce a false positive . I have seen 2 in the past month.
08-01-2010 05:31 AM
could you explain what a false positive means because I have no idea what that means. The NPE didn't find anything, but the malwarebytes found a Registry Key infected with Adware.BHO.FL.
08-01-2010 07:19 AM
Hello ablackcloak9
Here is a writeup by Malwarebytes about Adware. BHO.FL
http://www.malwarebytes.org/malwarenet.php?name=Ad
Would you please post the log from malwarebytes after you have saved it in notebook.? You can then add it with Add Attachments Thanks.
Please see this link for a definition of what a false positive is.
http://service1.symantec.com/sarc/sarc.nsf/info/ht
I hope that this answers your questions.
Success always occurs in private and failure in full view.
08-01-2010 07:46 AM
ablackcloak9 wrote:could you explain what a false positive means because I have no idea what that means. The NPE didn't find anything, but the malwarebytes found a Registry Key infected with Adware.BHO.FL.
It would be great if you follow the instructions strictly and post the necessary logs . This includes DDS , too.
Thank you!
08-01-2010 08:34 AM
08-01-2010 07:04 PM
Hello
Would you please post the log from malwarebytes after you have saved it in notebook
I just saw my error I made in my previous post. I should have said notepad instead of notebook. Sorry about that..
Success always occurs in private and failure in full view.
08-12-2010 04:47 PM
I actually solved I believe that it was something to do with how I downloaded microsoft office 2010 to my computer because now it is gone, but thanks for the help.
