Norton Internet Security / Norton AntiVirus

[Ln]

I am having a problem with two risks.

They are: Spyware.CometCursor  & Tracking Cookie

I've used your help at this link  http://securityresponse.symantec.com/security_response/writeup.jsp?docid=2004-091615-0103-99&tabid=3   and did everything what you advise but I couldn't track the Spyware in my Registry Editor.  

How can I delete it? 

Thank you.

[Stu]

Could you find the files on you computer?

[Ln]

I could find the Tracking cookie and deleted it but I can't find the spyware.cometcursor files anywhere.

[Stu]

Try downloading Superantispyware at www.superantispyware.com.

Update the database and run a full scan 

[Ln]

Ok, thank you, I'll do that.

[Stu]

Please let me know if that helps

[Ln]

I did the scan and the system found a tracking cookie. I've deleted it. It didn't find the spyware. I run one more software called Spybot and it found the spyware and the tracking cookie. I deleted them. I run norton 360 again and got this message: Your computer must restart in order to complete the removal of some security risks. (It found the spyware again). But when I restart my pc I get the same result from Norton - it finds the spyware again. So it's not really deleted.

The SuperAntiSpyware and Spybot are not finding the risks again. The results from their scan are negative now (no spyware or tracking cookie found).

[Stu]

Let's try something else.

Please download Malwarebytes. http://www.majorgeeks.com/Malwarebytes_Anti-Malware_d5756.html

Update signatures and run a full scan 

[Ln]

I got this result:

Folders Infected:
C:\Program Files\Screensavers.com (Adware.Comet) -> Quarantined and deleted successfully.
C:\Program Files\Screensavers.com\SSSInst (Adware.Comet) -> Quarantined and deleted successfully.
C:\Program Files\Screensavers.com\Wallpaper (Adware.Comet) -> Quarantined and deleted successfully.
C:\Program Files\Screensavers.com\SSSInst\bin (Adware.Comet) -> Quarantined and deleted successfully.

Files Infected:
C:\Program Files\Screensavers.com\SSSInst\bin\iebyterange.xml (Adware.Comet) -> Quarantined and deleted successfully.
C:\Program Files\Screensavers.com\SSSInst\bin\iebyterange.xml.backup (Adware.Comet) -> Quarantined and deleted successfully.
C:\Program Files\Screensavers.com\Wallpaper\swpstart.exe (Adware.Comet) -> Quarantined and deleted successfully.

I scanned it again and it's clean. Thank you so much. I appreciate that.

[Stu]

Great work.

Thanx for the feedback