Hello,
When I turned on my computer this morning, I found that the "Antivirus" and "Antispyware" options on my Norton Internet Security 2009 were turned off. On top of that, windows defender was turned off, and some of my Mozilla Firefox settings were different (homepage, bookmarks bar, there's a skype thing for some reason).
I also tried to do a system restore to 3/31/09, but that also failed.
How do I update the virus definitions now??
My pc runs Windows Vista (64-bit).
Regards,
tallgeese
Any news? Did you do the uninstall / re-install suggested and did that help? Let us know; here to help, if can.
I haven’t tried yet since I have to wait for my dad to get home so he can show me where the key is.
While you are waiting, can you download HiJackThis (from this Link ), install and run a Scan and save Log? If you can please post the log file (either copy and paste or attach the text file to a post) for review. I’ m not convinced this is an installion issue; if you are blocked from all malware scanning regaurdless of product…
Phil_D
April 8, 2009, 12:42am
5
Good point by dbrisendine .
It sounds like a malware issue. (NIS disabled, Defender disabled, Firefox settings changed)
And if so, trying to reinstall NIS would be difficult to impossible.
This is the log for hijack this
Logfile of Trend Micro HijackThis v2.0.2http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=83&bd=Pavilion&pf=cndt http://go.microsoft.com/fwlink/?LinkId=54896 http://www.daemon-search.com/startpage http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=83&bd=Pavilion&pf=cndt http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=54896 http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=83&bd=Pavilion&pf=cndt
Run HiJackThis again and check the following (you can restore from it backup if you want later);
F2 - REG:system.ini: UserInit=userinit.exe
then click Fix Checked.
Download Malwarebytes free version of Anti Malware from this link and install it / update to latest definitions.
For now, uninstall all Google apps and Google tool bars from Add / Remove programs. Also, turn off the auto load of Dameon Tools; also make sure this is the latest version of Dameon Tools as a previous version has a driver issue.
When done with that, boot into Safe Mode (start system and tap F8 key untill start up menu appers and choose Safe Mode). Log in and run a full scan with MB Anti Malware. If it finds anything, be sure to complete the removal process (you have to do this manually by agreeing to let MBAM fix / quaratine what it finds). Copy / save MBAM log to your desktop (so you can find later) and post the log here (of course, you will have to reboot into normal mode). Let's see what happens now.
Message Edited by dbrisendine on 04-07-2009 09:23 PM
I did the scan, and there was 1 infection found.
Malwarebytes' Anti-Malware 1.36
-- I still can't run a scan with NIS.
Message Edited by tallgeese on 04-07-2009 07:47 PM
Getting there. Please download ComboFix from here ; when you do the download rename the file to combo_fix.exe to save it. Disable Norton and run combfix. Reboot your system after combofix runs (we will only use the basic modes on this now); either post the log or attach it to your next message.
Hello,
When I turned on my computer this morning, I found that the "Antivirus" and "Antispyware" options on my Norton Internet Security 2009 were turned off. On top of that, windows defender was turned off, and some of my Mozilla Firefox settings were different (homepage, bookmarks bar, there's a skype thing for some reason).
I also tried to do a system restore to 3/31/09, but that also failed.
How do I update the virus definitions now??
My pc runs Windows Vista (64-bit).
Regards,
tallgeese
It appears combofix isn’t compatible with Vista.
I have run it on Vista platforms before; why do you say not compatible with Vista?
When I tried to install Combofix, I got a message saying that it’s incompatible with my OS which is vista (64bit).
Ok, let’s back up then. do you have the key to your NIS2009?
Good. Download the Norton Removal Tool from the NRT LINK Here . Also download the most current version of NIS2009 from here .
Boot into safe mode and run the NRT.
Boot into Safe Mode and run the NRT again.
After this run, delete any folders with Norton or Symantec in the name in the Program Files directory. Also, delete any folders with Norton or Symantec in the name in the Program Data directory.
Boot into normal mode and install NIS2009 from the file you downloaded. Use your key and then run live update until it says there are no more updates. Reboot your system and then run a quick scan with NIS2009. If all ok, then start a full scan and report here. I will wait for your reply.
Hey, I did what you said, but I'm still running the full system scan. It has lasted like 2 hours or somethin, so I'll post againn/edit this post in the morning.
Thanks for your help! :]
Regards,
tallgeese
Not a problem; that’s why we’re here. My scans run over 2 hours (1.1+ M files) so don’t worry. Let us know how it goes; if you have any more issues with updating or running scans.
Good morning everyone! Everything is working fine now. The full system scan only found 1 tracking cookie, and it was fixed. Seems like everything is good now. Thanks for all your help and time.
Sincerely,
~Tallgeese
Hi -
I was monitoring this thread and didn't want to intervene.
I had security suspicions as well, but I waited to see the outcome.
Glad to see that all is OK now.
Use Malwarebytes on your system and update the definitions on a daily basis.
Enjoy!
Message Edited by Compumind on 04-08-2009 02:08 PM
