Reply
Visitor
JeremyRath
Posts: 9
Registered: ‎01-03-2012

Trojan.Spyeye!

Whenever I start my computer in Windows XP (I have Vista on the computer too and it doesn't have the virus), Norton, after about a minute, will pop up and say "Trojan.Spyeye! has been removed". It does this almost everytime I turn on my computer. Sometimes when I start it it doesn't delete it and explorer.exe doesn't work on the C drive (which is where the virus and XP are located). What creates this virus? Norton always deletes "C:\Fonts\096016738e797b8". When I turn on the computer and Norton doesn't delete that file, it still doesn't exist (I do have hidden files showing).

Bot Obliterator
Quads
Posts: 13,250
Registered: ‎07-21-2008

Re: Trojan.Spyeye!

[ Edited ]

Spyeye (loads of releases) places itself in the address space of legit system processes loaded. (injects)

 

http://www.threatexpert.com/report.aspx?md5=279daf2c9c82346ff4dab207cd31d1bf

 

Quads

MagnusLindh
Posts: 155
Topics: 9
Kudos: 22
Blog Posts: 0
Ideas: 0
Solutions: 5
Registered: ‎05-09-2011

Re: Trojan.Spyeye!

Hey

 

Try Norton Power Eraser and Malwarebytes Anti-Malware and se if it helps you with your problem.

 

Malwarebytes Anti-Malware

http://filehippo.com/download_malwarebytes_anti_malware/

 

Norton Power Eraser

http://security.symantec.com/nbrt/npe.aspx?

 

Have you checked Norton History and unsolved threats?

 

Sweman

 

 

Bot Obliterator
Quads
Posts: 13,250
Registered: ‎07-21-2008

Re: Trojan.Spyeye!

Norton Power Eraser with injected legit files  OUCH good luck.

 

 

Quads

Symantec Employee
Stephen_Nyhan
Posts: 5
Registered: ‎05-06-2010

Re: Trojan.Spyeye!

JeremyRath,


Could you try running a full scan from the Norton bootable recovery disk or safemode, and let us know the result?