matyellott wrote:
No it does not say this, it just pops up for a second says "backdoor trojan detected" in addion I can run a scan fine in safe mode with no issues at all.
I hate to add advice when good advice is already being given -- but something vital has been left out.
You should turn off your system restore.
[My Computer - Right click - select properties - click on System Restore - Click on Turn Off System Restore on All Drives - click Apply].
The reason is twofold. First, much contemporary malware embed themselves in a System Restore File so that when you restore an earlier system, you're back where you started from, malware-wise.
Second, if NIS is trying to scan the System Restore File -- considering that it is a huge! collection, compressed, on many images of the registry and other key components -- it can apparantly freeze trying to work its way through these files; and if it actually tries to delete one, it won't be allowed to, which can create a behavior loop that might lock on the software.
Since you can no longer rely on the integrity of the System Restore, until you know your computer is clear of malware, there is no reason to keep it, for now; and doing so could be dangerous.
Why the scan is successful in Safe Mode, but not in regular mode, I don't know. My guess would be that something is loaded into the system that is not essential to the system and that it fights removal. Norton itself fights removal and shut-down in order to protect its integrity from malware.
It is even possible that what is being detected it something that "might" be malware, but is not convincingly enough so that Norton actually removes it. You get the notice, but no action, tending to make me think your might well be safe.
Still ...
What I'd suggest about this is do the following:
Start>Run
type:
msconfig
press:
enter
click on
Startup
uncheck everything except Norton, Symantec items.
Reboot
If the problem doesn't occur, then you have isolated the problem.
Now check about half the items and reboot again.
Either the problem will occur, or not. Keep checking or unchecking until you have found the guilty party.
Then leave it unchecked, and report back here.
On the other hand, if the problem is not in startup, move to the Services Tab.
Make sure you check Hide All Microsoft Services.
Then use a similar strategy with the items left behind.
In less than an hour, you will most likely have identified the culprit.
If not, tell us and we'll see what we can do next.