Login/Malware?/NSW2007

Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Sed posuere consectetur est at lobortis. Vestibulum id ligula porta felis euismod semper. Donec ullamcorper nulla non metus auctor fringilla. Aenean lacinia bibendum nulla sed consectetur. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Cras mattis consectetur purus sit amet fermentum. Morbi leo risus, porta ac consectetur ac, vestibulum at eros. Sed posuere consectetur est at lobortis. Etiam porta sem malesuada magna mollis euismod. Cum sociis natoque penatibus et magnis dis parturient montes, nascetur ridiculus mus. Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Aenean eu leo quam. Pellentesque ornare sem lacinia quam venenatis vestibulum. Curabitur blandit tempus porttitor. Sed posuere consectetur est at lobortis.

Are you using other Norton Programs apart from N.SW 2007?  If that is all you use, I would suggest using N.I.S. 2008 as that has a two-way Firewall and lots of other things that N.AV does not have.  If you would like to do that, let me know and I will give you Steps on how to do this.  Also, I would Upgarde to the 2008-Version of all Norton Products as soon as possible.

 

 

So, if I understand you correctly, you cannot log-in to your system again? 

 

I would try the Steps you have done, i.e. re-store your system to it's brand-new state.  Then, if you can, I would fully Update Norton AntiVirus 2003 and Run a Full System Scan.  If it comes up Clean, then I would - as fast as possible - use the N.R.T. and then re-install your N.SW 2007, Update date it via LiveUpdate and Run a Full System Scan in Normal and then in Safe Mode (Dis-connect from the Internet while the Scan is Running) as soon as it is Updated.  Make sure all the Boxes are Checked on the "Manual Scanning" sub-heading and un-check the "Caching" and Check the "Load Auto-Protect during system start-up".  I would then Update your Windows X.P. system.

 

Let me know how you get on.

Message Edited by Floating_Red on 07-13-2008 08:31 PM
Message Edited by Floating_Red on 07-13-2008 08:31 PM
Message Edited by Floating_Red on 07-13-2008 08:45 PM
Message Edited by Floating_Red on 07-13-2008 08:47 PM

Thanks for the reply.  OK, I'll restore to new again and try this procedure.  I'll let you know how things go.  I assume you'll mean to do the Norton update first, then restore Windows to SP2. 

 

Thanks

BTW,  I do only have NSW2007, except when NAV2003 is restored. 

 

01. Re-store your system.

02. Run LiveUpdate to Update N.AV 2003, Dis-connect from the Internet and Run a Full System Scan in Normal and in Safe Mode.

03. Use the N.R.T. to Remove N.AV 2003.

04. Install N.SW 2007 and Run LiveUpdate to Update N.SW 2007.

05. Dis-conntect from the Internet and Run a Full System Scan in Normal and Safe Mode.

06. Run Windows Update to get all the Updates for your computer and Update to Windows X.P., Service Pack 02/03.

 

Remember to Upgrade to the Latest Versions of your Norton Products; see this Thread for more information: http://community.norton.com/norton/board/message?board.id=nis_feedback&thread.id=2267 .

Message Edited by Floating_Red on 07-14-2008 12:13 AM
Message Edited by Floating_Red on 07-14-2008 12:16 AM
Message Edited by Floating_Red on 07-14-2008 12:18 AM
Message Edited by Floating_Red on 07-14-2008 12:19 AM

Only had a little time to work on this last night, but didn't seem to go well.

 

After the HP system restore with the ethernet cable unplugged, during setup it started asking for lots of internet ISP information (provider, userid, PW).  As this was new and I had changed answers to other questions, I did another restore.  This time I answered everything as before and got similar results, to a point.  When I clicked the icon for NAV, it simply vanished.  Going through the start menu didn't work either, there were NAV icons there, but the one that should have launched NAV was represented by a text file icon and didn't work.  When trying NSW, it told me to go load Windows SP2,  (System Restore on this machine goes all the way back to SP1).  After the next restore, it was taking a very long time after reinitializing Windows and I noticed that my second hard drive was working a lot.  Suspecting the worst and out of time, I shut the system off.  I now plan to disconnect the second hard drive (slave) until I can get the first cleaned up.

 

 

I believe I've resolved the situation.  Here's the scoop for anyone else having a similar problem.

It wasn't the action of a virus or malware.  It was a Spybot S&D issue.  Turns out that if you've not noticed that the current Version of Spybot is 1.5.2, AND you're running Versions 1.3 or 1.4, AND you've updated to the bot definitions for ver 1.5.2, AND you've been infected with HellzLittleSpy1.3, AND you've used Spybot to clean it up, THEN there's a corruption that takes place in one of your system registry files that causes the problem.  I discovered a thread on a microsoft forum that led me to spybot.

 

See http://forums.spybot.info/showthread.php?t=30447 and http://forums.spybot.info/blog.php?b=14 for possible solutions and details.

 

So far, I'm also following the above advice and have also uninstalled spybot (for now) and have completed the scans above, with only low level tracking cookies so far.  I'm planning to upgrade to NIS2008 at a minimum, and am considering Norton 360.

 

As far as I can tell, when I used the HP System Restore function, it reset the affected registry file.  This would explain why the problem kept coming back, every time I brought the system back, I'd run Norton scans, then run Spybot re-corrupting the registry file.  I'll run complete NSW scans tonight.  One of the packages mentioned to use if you don't have the recovery option is to buy Fix It Utilities ver 8.0. 

 

I'll check back later to see if anyone has further questions/opinions.