Norton Internet Security / Norton AntiVirus

[Quads]

How is your system feeling and acting now??

Quads

[Retired_USAF]

It seems a little quicker, but then again I never did notice any strange events before.  Just the new Norton's alerted me to the issue.  I suppose another full Norton scan would be the next step?

[Quads]

If you start OTL again but this time click the Black ClenUp button, then make sure the C:\_OTL folder is deleted.

After that you can Turn on System Restore and create a nice new restore point.

Quads

[Retired_USAF]

C:\_OTL deleted itself okay.

System Restore was already on again.....did one of the scripts do that?

[Quads]

That's OK

If a Norton Scan with definitions up to date doesn't find anything  you are free to go on your merry way.  You are now fixed / Solved.

Quads

[Retired_USAF · Accepted solution]

I'll do that.

I really appreciate the help Quads.  You clearly know what you are doing.  I can appreciate the methodology you use to locate, isolate and remove the viruses.  I learned a lot, not enough to tackle on my own though!!!!

Thanks again. 

PS: When do after-shocks turn into pre-shocks?

[Quads]

A Preshock is an Earthquake that occurs before the mainshock  and is in the same region thus is linked to the Mainshock

Our 7.1 mag quake may have had a foreshock of 1.9 mag

If say the largest shake was 5.9 mag,  in our case happen within the 24 hours of the 7.1,   that would have been the Mainshock, with aftershocks after that, well until the Feb22nd 6.3 mag, 2.2g.  That would become the mainshock as it's larger than 5.9 mag. so the 5.9 and all shakes up to the 6.3 become foreshocks, the 6.3 becomes the mainshock, and shakes after the 6.3 become aftershocks.

Our sequence is strange for science guys worldwide due to our pattern  of 7.1,   6.3,  June 2011 - 6.4 and Decemeber 2011 6.0 shakes.

The aftershock sequence does not finish until the earth in the region gets back to pre  September 2010 levels, they say it may take 40 years.

There are occasions with earthquakes where you may just get a group of say 3.5 mags and smaller, so not clear Mainshock that are classed as Clusters or Swarms

Quads 

[Quads]

That does not work for many variants and is extremely dangerous to do, you can end up with a screwed windows or worse won't load.

There are many variants to Trojan.Zeroaccess.B some with the backddor as well, or other malware including Pihar, MaxSS etc.

Also these instructions are not for many PC's / Laptops.

For instance these instructions would not have worked on this thead at all, Wonder Why??  I know why.    Do not play with what you do not understand, leave it to the people trained in safe removal !!!!!!!

The above instructions are just copied and pasted and in no way match clean safe scripted removal for individual variants on a individual PC whether 32 or 64 bit by myself or other trained removal people.

Quads

[Jeevith]

I Have Fixed So Many Cases By using that Step. Be Clear While You Replace the good substring ServerDll. It Only Works Out For 64Bit..!!! Not For 32Bit.Beware that if you do not defeat the replication mechanism and delete the consrv.dll file from the hard drive, the machine may BSOD during reboot because it is trying to load the missing DLL