i left the house while running a full maleware anti bytes full scan and came home to a clean report from mb and a restaert request from norton.
it says it revmoved files but when i had a virus in a sandboxie sandbox.
it siad the same thing. this seem's to have started in a system restore file.
log follows. any ideas?
sorry about the log formatting is all messed up so i removed the registry part of the log.
c:\system volume information\_restore{928f9006-42f5-4902-9ffc-e16a6351fd0a}\rp291\a0050383.exe ____________________________ ____________________________c:\system volume information\_restore{928f9006-42f5-4902-9ffc-e16a6351fd0a}\rp291\a0050383.exe ____________________________ ____________________________ On computer as of 6/18/2010 at 7:58:48 AM Last Used: 6/18/2010 at 8:00:52 AM Startup Item: No Launched: No ____________________________ ____________________________ Very Few Users Fewer than 10 users in the Norton Community have used this file. ____________________________ High This file risk is high. ____________________________ Threat Details Programs that infect other programs, files, or areas of a computer by inserting themselves or attaching themselves to that medium. ____________________________ Origin Downloaded from Not Available ____________________________ URL Not Available UNTESTED Source a0050383.exe ____________________________ File Actions File: c:\system volume information\_restore{928f9006-42f5-4902-9ffc-e16a6351fd0a}\rp291\a0050383.exe Removed File: c:\windows\system32\ntos.exe Removed File: c:\windows\system32\wsnpoem\audio.dll Removed File: c:\windows\system32\wsnpoem\video.dll Removed File: c:\windows\system32\wsnpoem Removed ____________________________ File Thumbprint: Not Available ____________________________