Infection

So I have spent 3 days and almost 10 hours with Norton it then the supervisors then the engineers trying to correct a problem with Norton 360 Premier i.e. wouldn't back up or do a comprehensive scan. I gave the error codes from Norton etc and the only thing that happened was each person tried, repeatedly, to run Scan/Backup. My PC crashed a few times, gave blue screen errors and we rebooted a few times. After the 3 days and 10 hours the engineer finally got it to backup/scan. However, I didn't feel any better, seeing as how nobody really did anything other than rerun the scans.

 

So I scanned with Malwarebytes and found these:

 

Malwarebytes' Anti-Malware 1.44
Database version: 3781
Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.11

2/23/2010 3:53:51 PM
mbam-log-2010-02-23 (15-53-51).txt

Scan type: Full Scan (C:\|)
Objects scanned: 222063
Time elapsed: 1 hour(s), 26 minute(s), 42 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 3
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

 

Can someone tell me what this means and also tell me whether, when Norton is installed, your windows firewall should be up too?

Hi 360premier,

 

The Malwarebytes' entries have to do with Windows Security Center.  Your settings for antivirus, firewall and Windows updates were configured not to alert you if these functions were disabled.  I'm not certain about the updates setting but the antivirus and firewall alerts may have been disabled by Norton to avoid duplicate warnings, as Norton will also notify you when these things are turned off.  At any rate, these are just common registry settings that Malwarebytes' checks and do not indicate any active infection currently on your PC.  When the Norton Smart Firewall is enabled you should turn off the Windows Firewall as two firewalls can cause problems with your connectivity.

Thanks Superbot

You're welcome.