03-14-2012 11:46 AM
i'm having problems with this virus, i read all the post realted to it, but couldn't remove it. I don't know too much about this, so it's dificult for me to understand all the posts.
I run the removal tool, it said that it removed the virus, but it didin't. I also run the Power Eraser, it removed some other files, including this trojan, but then , when running a scan, it detected on windows/system32 as a fil name NTOS. The action is LOG ONLY and the file is left unchanged, what can i do?
Sorry for my english.
Solved! Go to Solution.
03-14-2012 12:36 PM
Welcome. And sorry for the trouble you're having. Please tell us what removal tool you ran "I run the removal tool, it said that it removed the virus"
What kind of scan you ran with Norton Power eraser: Is it without Rootkit or with Rootkit ?
03-14-2012 01:00 PM
I ran the removal tool that appears on symantec website for this virus, you can find it here http://www.symantec.com/security_response/writeup.
This removal tool needs you tu desactivate system restauration.
My antivirus is called Symantec Endpoint Protection.
And the Power Eraser is set with Rootkit Scan, the one that requires system restart.
03-14-2012 01:06 PM
Start NPE, at the main window go to History . Look at the repair point and click Next, it will show what was removed.
You can click on the Link for each item to see the exact file path.
Do Not Run a scan or Undo .
03-14-2012 01:07 PM
Sorry for the inconvenience. The Norton Community is for issues dealing with Norton Products offered by Symantec. And there is a separate community available for our Enterprise Products like Symantec Antivirus, Symantec Endpoint Protection,etc
People in our Symantec Community will surely help you out.
03-14-2012 01:10 PM
Norton (Symantec) Tech Support are having troubles with these rootkits and trying to clean the computers, probably for one because they are stuck using Symantec products only.
03-14-2012 01:19 PM
Quads, what would you recommend me to do? When i want to see the history on the NPE it opens a window on IE and its full of codes, i don't understand. I want to get this virus removed, any ideas? Is it possible?
By the way, I enter to the other site for Symantec products but couldn't understand where to make my petittion.
03-14-2012 01:31 PM
I spent several weeks getting this virus removed. Norton's techs could not do it. The second shop finally got rid of it, but I have also lost my battery meter and cannot get it restored.
I would recomend bitting the bullet and reformating your HD.
03-14-2012 01:35 PM
Do not reformat, do not take advive like that especially from people who couldn't work their own infection out, I have infected my system with all of these types of families (Pihar, zeroaccess, MaxSS.......................)
I am just trying to work out which one to use to get a log showing what has changes from using NPE and ZA removal tool.