07-08-2009 04:41 PM
Hi, I couldn't find my exact problem on this board so if it does exist somewhere could you please just direct me to that. When I run a system scan there are no problems found, but as soon as I open Internet, Norton finds the Infostealer. It started as 1 affected area now it is up to 18 Files and 1 Browser Cache.
It reads as follows:
Again, this message appears 18 times in the Details window.
Could you please help me ASAP as this is slowing down my computer extremely and causing all sorts of problems for me.
Thank you very much for any help you can give!
07-08-2009 05:56 PM
Which is the Norton program(name and version) you use? Also, mention your Operating System details.
First, run LiveUpdate repeatedly until you see the message that "No more Updates...". Then start your computer in Safe Mode, and try to run a scan using your Norton program. If you are using Norton 2009 version, double-click the Norton icon on desktop and it will prompt you to run the scan, you can click Yes.
07-08-2009 06:10 PM
07-08-2009 08:17 PM
Here is the GMER log. I stopped it early because it was scanning my MatLab files and it was taking hours. It looked to me that it found the problems though because they were in red. Let me know if this is incomplete.
07-08-2009 08:25 PM
Bad news Corvese210:
You do have an MSIVX rootkit. The GMER looks excellent. Quads will be along with a fix, but it may take some time. We only have one Quads and a number of rootkits. You could do a few things in the meantime. Disable system restore, dump your temp files and browser caches.
Download Malwarebytes for use when you have finished Quads' chores.
07-09-2009 07:42 PM
Now (read carefully) If you have Spybot S&D uninstall it.
Also during the restarts with Avenger if Your PC has a Startup repair center like with HP and Toshiba tell it to start Normally if it kicks in.
1. Download Avenger to your desktop,
Unzipped version http://homepages.slingshot.co.nz/~crutches/Avenger
Creators website http://swandog46.geekstogo.com/avenger2/avenger2.h
2. Click to run "Avenger.exe" (right click "Run as Administrator" if using Vista)
3. In the "Input script here:" copy and paste the script between the lines
Drivers to disable:
Drivers to delete:
Files to delete:
Registry keys to delete:
Here is a screenshot (script updated since shot)
Make sure the "Automatically disable any rootkits found" is NOT selected
4. Click "Execute"
You will be asked to restart the PC click "Yes", when the PC restarts the load screen will takes slightly longer, then when it looks as though windows is loading the PC will restart again.
Then when Windows fully loads the Avenger log will be loaded, showing files it could or could not find.
5. Restart the PC again, then see if you can install Update and run Malwarebytes