• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

Kudos0

Virus keeps re-appearing with system restore disabled.

Hey there, I keep having trouble with a virus on my computer. I run a scan, my Norton finds and remvoes a "Trojan.Maliframe!html", but next time I run a scan, say, after a restart start, it turn sup with another of those viruses. Typically I would suspect that system restore was restoring the virus, however I double checked and my system restore is completely disabled. Can anyone tell me what's causing my problem and how I should go about fixing it? Thank you!

Replies

Kudos0

Re: Virus keeps re-appearing with system restore disabled.


TGShepherd wrote:

Hey there, I keep having trouble with a virus on my computer. I run a scan, my Norton finds and remvoes a "Trojan.Maliframe!html", but next time I run a scan, say, after a restart start, it turn sup with another of those viruses. Typically I would suspect that system restore was restoring the virus, however I double checked and my system restore is completely disabled. Can anyone tell me what's causing my problem and how I should go about fixing it? Thank you!


Hi TGShepherd,

Welcome to the forum. Can you please tell us the Anti Virus product and exact version you have? Is it AV, NIS, etc? Also what is you OS version and SP level to include 32 or 64 bit?

Thanks much

Allen

Windows 7 Ultimate SP 1, 64 bit, 32 GB * NIS Vers. 21.6.0.32* Ghost 15 * IE 9, Firefox, Safari. Test laptop with W7 Home Premium 64 bit * NIS Vers. 21.6.0.32
Kudos0

Re: Virus keeps re-appearing with system restore disabled.

I'm currently using NIS 2008, says version is 15.5.0.23.

My OS is the 32-bit Vista. 

Not sure which service pack I have, how can I find that?

Thanks!

Kudos0

Re: Virus keeps re-appearing with system restore disabled.


TGShepherd wrote:

I'm currently using NIS 2008, says version is 15.5.0.23.

My OS is the 32-bit Vista. 

Not sure which service pack I have, how can I find that?

Thanks!


Hi TGShephard,

Thanks for the update. You should have a Computer icon on your desktop, right click on that and select Properties. It will show your Service Pack level in the top half of that next screen. If you do not have a Computer icon on your desktop you can bring up Windows Explorer and right click on the Computer on the left hand pane.

You NIS is very much out of date. Do you have a current subscription? It should show number of days remaining on the main screen when you bring up NIS. If you have a current subscription you are entitled to a free upgrade to the latest NIS 2010 but unitl we confirm if you have an infection and get it cleaned I want to hold off requesting that you upgrade your NIS.

Please follow the procedure from this link. Once completed you need to download Malware Bytes to run a scan on your system. Please then follow the procedure below:

Please go to www.malwarebytes.org

1. Download Malwarebytes’ Anti-Malware (mbam-setup.exe) free version and save it on your Desktop.
2. After downloading, double-click on mbam-setup.exe to install the application.
3. Follow the prompts and install as “default” only
4. Before the installation completes, check on the following prompts:
- Update Malwarebytes’ Anti-Malware
- Launch Malwarebytes’ Anti-Malware
5. Click “Finish.” The programme will run automatically and you will be prompt to update the programme before doing a scan. Please update.
6. Scan your computer thoroughly choosing a "full scan".
7. When scanning is finished click on “Show Results”
8. Make sure that all detected threats are marked with a check mark, click on "Remove Selected".
9. Restart your computer.

Please post the logs back to this thread using "add attchments" below the orange "post" button.

Note: Some malware may prevent mbam-setup.exe from downloading and/or running. You can download and rename this program from a different computer before running it on an infected system.

I'll look forward to an update.

Thanks

Allen

Windows 7 Ultimate SP 1, 64 bit, 32 GB * NIS Vers. 21.6.0.32* Ghost 15 * IE 9, Firefox, Safari. Test laptop with W7 Home Premium 64 bit * NIS Vers. 21.6.0.32
Kudos0

Re: Virus keeps re-appearing with system restore disabled.

Try to run a Scan from your Norton program on Safe mode.

1. Restart your computer.

2. As soon as the computer starts, tap the F8 key about once per second until you see the Windows Advanced Options menu.

3. Use the arrow keys on the keyboard to select Safe Mode, and then press Enter.

4. Click Yes to proceed to Safe mode.

5. Click Start button, and then click Run.

6. Type the following text and click OK:

navw32.exe /L

7. Check whether the scan runs completely and then restart the computer.

If you have currently installed Norton Internet Security 2008 with active subscription, you can obtain Norton Internet Security 2010 free upgrade.

1. Go to your Norton Account using this LINK and get the Product Key. You may require this same Product Key for activating the Norton 2010 program.

2. Download the free upgrade(NIS 2010) using this LINK.

3. Install NIS 2009 and activate it using the Product Key from your Norton Account.

 

Let us know the results.

 

Yogesh
Kudos0

Re: Virus keeps re-appearing with system restore disabled.

Here's the log from the Anti-Malware scan. I did delete two files earlier using a different program, so I'm not sure if it will show up.
Kudos0

Re: Virus keeps re-appearing with system restore disabled.

I've already run multiple scans in safe mode and it hasn't found anything. Usually my Norton deletes the files while I'm logged into the main account on my computer and when I reboot to run in safe mode, the malicious files haven't been restored yet.
Kudos0

Re: Virus keeps re-appearing with system restore disabled.

Hi TGShepherd,

Thanks for the update. Did you run through the procedure I linked to here?

The Malware Bytes scan was clean. So if you ran through the procedure above, please upgrade to NIS 2010. Please make sure and install this new version to the same directory that NIS 2008 is already installed to.

After upgrading to NIS 2010, please run a full system scan from NIS and let us know the results.

Thanks much

Allen

Windows 7 Ultimate SP 1, 64 bit, 32 GB * NIS Vers. 21.6.0.32* Ghost 15 * IE 9, Firefox, Safari. Test laptop with W7 Home Premium 64 bit * NIS Vers. 21.6.0.32
Kudos0

Re: Virus keeps re-appearing with system restore disabled.

I can't figure out why, but for some reason I'm not having the virus pop up anymore. I've restarted many times and run many scans in both safe mode and regular mode, but nothing is being found. I appreciate all of your help. :-)

Thanks!

Kudos0

Re: Virus keeps re-appearing with system restore disabled.

Hi TGShepherd,

This is good to hear, thank you for coming back on to let us know how things are going.

Just to confirm, did you do your free upgrade to NIS 2010? If not, you really should. You should also re-enable system restore.

Please mark the relevant post which you believe contained the solution by clicking on the green Solution button that only you can see. This will allow others to know the problem is solved and quickly get to the solution when they search the forums.

Allen

Message Edited by AllenM on 11-24-2009 08:32 AMMessage Edited by AllenM on 11-24-2009 08:38 AM
Windows 7 Ultimate SP 1, 64 bit, 32 GB * NIS Vers. 21.6.0.32* Ghost 15 * IE 9, Firefox, Safari. Test laptop with W7 Home Premium 64 bit * NIS Vers. 21.6.0.32
Kudos0

Re: Virus keeps re-appearing with system restore disabled.

I haven't upgraded yet but I definitely will be doing that shortly.

Thanks again!

Kudos1 Stats

Re: Virus keeps re-appearing with system restore disabled.

Glad that your system seems to be clear of the virus; can you tell us what two files you deleted and with what program you used to delete them with (you mentioned earlier that you had done this; just curious).

Can you check your system one more time with the following scan and post the results here?  Thanks.


Please download SysProt here http://sites.google.com/site/sysprotantirootkit/ (direct link for latest version is at the bottom of the page), disable Norton's Auto-Protect feature (Settings > Real Time Protection > Auto-Protect > Off) and run SysProt.

Choose the Log tab and select all the items in the Write to log box. Then select Create Log to start scanning. When it is done, a message window will appear with the location of the log file.

Please attach the log file to a post here; the Add Attachments links is below the orange Post button. Thanks
Win10 x64; Proud graduate of GeeksToGo

This thread is closed from further comment. Please visit the forum to start a new thread.