• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

Kudos0

OneStep Adware removal

A Norton scan has identified OneStep (and on my son's laptop but says it is unable to remove it (detected but remained) and that it must be removed manually.

I have followed the instructions (http://www.symantec.com/business/security_response/writeup.jsp?docid=2008-112613-5052-99) disabling System Restore and running the scan and got the same message.

I then followed the instructions and ran the scan in Safe Mode

("If you are unable to start your Symantec antivirus product or the product reports that it cannot delete a detected file, you may need to stop the risk from running in order to remove it. To do this, run the scan in Safe mode. Once you have restarted in Safe mode, run the scan again.")

Got same message that the OneStep is there but isn't removed after telling Norton to remove (or quarantine it).

The instructions say after running the scan in Safe Mode:

"After the files are deleted, restart the computer in Normal mode and proceed with the next section." which is to "To delete the value from the registry"

I'm concerned about proceeding to the next step (deleting the values from the registry) because the "files are not deleted" after running the scan in Safe Mode as instructed.

Any advice?

Thanks.

Replies

Kudos0

Re: OneStep Adware removal

Hi RDM:

Try giving us a Hijackthis log.  Download and run.

http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis

And also Malwarebytes free version.  Download, install, disable system restore and clear your browser caches.  Update the program, and run a full scan.  Delete what is found.  You will be able to click the log tab for the resulting log.

http://www.malwarebytes.org

Post both logs by using the "add attachments" Link under the orange post button.

Under certain circumstances profanity provides relief denied even to prayer.Mark Twain
Kudos0

Re: OneStep Adware removal

rdm:

Were you able to get the scans completed?

Under certain circumstances profanity provides relief denied even to prayer.Mark Twain

This thread is closed from further comment. Please visit the forum to start a new thread.