04-08-2012 01:36 AM - edited 04-08-2012 02:08 AM
Please help, Ik have a trojan zeroaccess!kmem and its not removable bij norton internet security and neither bij norton 360. Everytime i go to google and click a link a go to hxxp://abnow.com (xx should be tt) and I'm getting really tired and desperate of this.
I tried a lot of (anti)spyware programs but nothing helped. I have this problem for two weeks now.
please help me
04-08-2012 05:04 PM
You should not have Norton Internet Security (NIS) and Norton 360 (N360) installed on the PC at the same time.
Could you please list all the programs you have tried.
Quads
04-10-2012 09:32 AM
Thanks for your reply.
I first had Norton 360 and it found this virus: zeroaccess!kmem and couldn't remove it manually. So, I went to the Symantec site and downloaded ''Norton power eraser''. Well, after I installed it, runned it and saw the results, there still were a problem. zeroaccess!kmem could not be removed cause it was in use by windows. The virus apparently had infected serial.sys and I must remove it manually by going to the windows recovery module. But, it doesn’t have service pack 3 (running XP) and I do not want to install it.
Then I went to the Symantec site and downloaded the fixzeroaccess because that seemed a good idea to me. After installing it and running it, it found it and tried to remove it. It wanted to restart and when I did it found a lot of files. I clicked repair. And then there was no Norton in my taskbar anymore. Even couldn’t run taskman. So I restarted but there was no change.
On another pc I downloaded Norton removal tool and after that there was a little change: I can use task manager again! After that I installed Norton system works and Norton Internet security. The installation of Norton system works went right but Norton Internet security didn't. There still wasn't any icon in the taskbar. After using system works (it found A LOT of malware) I used Norton power eraser again and Norton removal tool. Then installed malwarebytes antimalware and it found a lot of things. I kept all the logs. I used the fixzeroaccess tool and restarted again and again. Then used malwarebytes antimalware again and the fixzeroaccess tool again. I did this a lot of times. Well after a while it could not find anything anymore. What should I try now to MAKE sure it is all right now? I did not try to find anything in google anymore so I don’t know if the site still directs to abnow.com... And do you think it's safe to install Norton again?
04-10-2012 04:05 PM - edited 04-10-2012 04:33 PM
I won't be touching this for the reasons you have said.
I have told and told people not to use NPE, FixTDSS, Combofix and other advanced tools, yet you have done so, making things harder.
1. You could have files missing.
2. Windows could be screwed up
maybe System Restore back to when you were clean before you were infected, or even everything back to so you are infected, it is better then what you have done.
Good Luck.
Quads
04-11-2012 01:40 AM
So now i've done it.
Norton (long before I went to this Forum) advised me to take GREAT CARE when using powereraser, so I did. Now you are telling me that I maybe screwed up my PC ?
There could still be ANOTHER way besides SYSTEM RECOVERY. And if this program NPE is so extremely dangerous to you pc health why is it advised by norton in any way?
http://security.symantec.com/nbrt/npe.aspx
This is where i've got it.
Then again, I checked google and now it seemed that google is not redirecting to ABNOW. Now I wil try installing norton360 again. I will post the results here.
Thanks
04-11-2012 05:13 AM
I did not say System Recovery, I said System restore.
Quads
