Help, Norton antivirus 2012 repeatedly detecting both trojan.gen.2 and trojan.zeroaccess.b

Norton Security | Norton Internet Security
41

ESET file follows:

 

Thanks,

 

Larry

42

Part 4. (b)

 

Download OTL http://www.bleepingcomputer.com/download/otl/

 

Disable Norton for say 30 minutes

 

Start OTL,  

Click the Scan All Users checkbox.

Change file age to 60 days

 

Press the 

 

 

An OTL.txt  and extras.txt will be created.

 

Quads

43

Part 4 b: OTL  files:

 

Thanks,

 

Larry

 

 

44

The Windows 7 OTL script

 

Disable Norton for say 30 minutes

 

Start OTL,   under   Copy and paste the custom script attached which you open in for instance Notepad,(include the : at the start of :OTL and all the way to the end / bottom)  and run the script. (Red Run Fix Button)

 

The output log, should be placed in the C:\ _OTL folder after.

 

Quads

45
Quads wrote:

The Windows 7 OTL script

 

Disable Norton for say 30 minutes

 

Start OTL,   under   Copy and paste the custom script attached which you open in for instance Notepad,(include the : at the start of :OTL and all the way to the end / bottom)  and run the script. (Red Run Fix Button)

 

The output log, should be placed in the C:\ _OTL folder after.

 

Quads

Done..............PLEASE Note:

 

The output log went to F:\_OTL\MovedFiles folder,  NOT the WIN XP Pro (C:) drive..?

 

file named:07122012_112447

 

There is also A folder in MovedFiles folder named the same as the file above...?

 

Thanks,

 

Larry

 

46

That's OK.

 

Now Load Vista to Run a OTL scan, same settings from that Desktop.

 

Quads

47

I'm A little lost..........not sure what to do.....next...       Red Run Fix Button like above..?

 

Do I run the OTL scan just like I did above with "The Windows 7 OTL script"  ..?????

 

Where is the Vista _script.txt to run....?

 

Thanks,

 

Larry

48

Below, but with Vista loaded not Win 7 this time

 

Part 4. (b)

 

Download OTL http://www.bleepingcomputer.com/download/otl/

 

Disable Norton for say 30 minutes

 

Start OTL,  

Click the Scan All Users checkbox.

Change file age to 60 days

 

Press the 

 

 

An OTL.txt  and extras.txt will be created.

 

Quads

49

Ok Done:

 

Thanks,

 

Larry

50

From The Vista Desktop

 

Disable Norton for say 30 minutes

 

Start OTL,   under   Copy and paste the custom script attached which you open in for instance Notepad,(include the : at the start of :OTL and all the way to the end / bottom)  and run the script. (Red Run Fix Button)

 

 

Quads

 

51

Done......

 

See attached log

 

Thanks,

 

Larry

52

Below, but with XP Loaded

 

Part 4. (b)

 

Download OTL http://www.bleepingcomputer.com/download/otl/

 

Disable Norton for say 30 minutes

 

Start OTL,  

Click the Scan All Users checkbox.

Change file age to 60 days

 

Press the 

 

 

An OTL.txt  and extras.txt will be created.

 

Quads

53
Quads wrote:

Below, but with XP Loaded

 

Part 4. (b)

 

Download OTL http://www.bleepingcomputer.com/download/otl/

 

Disable Norton for say 30 minutes

 

Start OTL,  

Click the Scan All Users checkbox.

Change file age to 60 days

 

Press the 

 

 

An OTL.txt  and extras.txt will be created.

 

Quads

Tried to run and keep getting mesage:

 

OTL

"WIN 32 Error, Code: 1500

The event.log is corrupted"

 

Would not produce a event log.

 

At the bottom of the OTL screen: Application event.log record 198.....

 

When I went back to Win 7 I keep getting A message from Norton:

 

"OTL.EXE(Bsckdoor.Graybird)

Detected By Auto Protect"

 

Norton says A reboot is require to remove.....but it KEEPS coming back after each reboot.......!

 

 

 


 

54
wwldo wrote:
Quads wrote:

Below, but with XP Loaded

 

Part 4. (b)

 

Download OTL http://www.bleepingcomputer.com/download/otl/

 

Disable Norton for say 30 minutes

 

Start OTL,  

Click the Scan All Users checkbox.

Change file age to 60 days

 

Press the 

 

 

An OTL.txt  and extras.txt will be created.

 

Quads

Tried to run and keep getting mesage:

 

OTL

"WIN 32 Error, Code: 1500

The event.log is corrupted"

 

Would not produce a event log.

 

At the bottom of the OTL screen: Application event.log record 198.....

 

When I went back to Win 7 I keep getting A message from Norton:

 

"OTL.EXE(Bsckdoor.Graybird)

Detected By Auto Protect"

 

Norton says A reboot is require to remove.....but it KEEPS coming back after each reboot.......!

 

 

 


 

Also The hard drive keeps running and running and running................  then Norton finds " OTL.exe(Backdoor.Graybird)

 

HELP

55

That is why I tell people to disable Norton.

 

Norton may now have the threat stuck in the unresolved threats list.

 

Quads

56
Quads wrote:

That is why I tell people to disable Norton.

 

Norton may now have the threat stuck in the unresolved threats list.

 

Quads

I promise you....I did disable Norton........! for 1 hour at a time.

 

I attached to the last post Nortons Info file about what it found.

 

The OTL file was in the G: backup drive.

 

Larry

57

That's a bit odd, OTL has picked up as Windows  Professional Service Pack 1 (Version = 6.1.7601)  XP = 5.xxxx

 

Quads

58
Quads wrote:

That's a bit odd, OTL has picked up as Windows  Professional Service Pack 1 (Version = 6.1.7601)  XP = 5.xxxx

 

Quads

It is WIN XP Pro......!

 

Win7 has stopped giving the Backdoor.Graybird message........!

 

Just tried to run OTL again after telling Norton it was OK to use and it still gives the same WIN32 Error, code 1500 the event.log is corrupted.....????

 

What in the world is wrong with this computer.........??????

 

Thanks,

 

Larry

 


 

59

Norton detection,  SSR would have updated the definitions for OTL

 

From The Vista Desktop

 

Disable Norton for say 30 minutes

 

Start OTL,   under   Copy and paste the custom script attached which you open in for instance Notepad,(include the : at the start of :OTL and all the way to the end / bottom)  and run the script. (Red Run Fix Button)

 

 

Quads

60

Done.......!

 

Attached report

 

Thank You,

 

Larry