I have just upgraded to NIS 2012, and after a scan it says it has found the avove virus and it needs manual removal.
The help page says to run Norton Power Eraser, which I do, but it does not find anything.
I reboot the PC and do another scan and it says the Trojan.Zeroaccess!kmem is still there and the same answer do a manual removal.
It tells me the infected file is windows/system32/ntos
Now I have serached for this file but have only found ntoskrnl in that directory.
I have also run several other Zeroaccess removers and they are all negative for infection.
Is Norton Mistaken ?
Advice is greatly appreciated.
Here is the Log from the scan.
Full Path: c:\windows\system32\ntos ____________________________ ____________________________ On computers as of Not Available Last Used 1/26/2012 at 4:18:31 PM Startup Item No Launched No ____________________________ ____________________________ Unknown Number of users in the Norton Community that have used this file: Unknown ____________________________ Unknown This file release is currently not known. ____________________________ High This file risk is high. ____________________________ Threat Details Threat type: Virus. Programs that infect other programs, files, or areas of a computer by inserting themselves or attaching themselves to that medium. ____________________________
____________________________ File Actions Infected file: c:\windows\system32\ntos Manual removal required ____________________________ File Thumbprint - SHA: Not Available ____________________________ File Thumbprint - MD5: Not Available ____________________________