My computer has NIS 2009. Vista 64- bit. I was just on Foxnews.com and norton notified me that "an atack on your computer has been blocked and it mentioned Trojan.Malscript!html. " Even though it said the attack had been blocked i still got something appear saying that i had infections on my computer etc... is this part of the trojan that had gotten through. I know that when something comes up saying i have infections/ viruses or whatever that is usually the virus trying to trick me into downloading the virus. The wierd thing is that the popup or whatever it was didnt ask me to download anything or start running any programs. Does that mean that norton had done its job and blocked the trojan or that something got through? Norton is showing that everything is fine right now and I havent noticed any changes.
Bonjour, je vous remercie d'avoir été aussi rapide à repondre,
voici le lien demandé http://pjjoint.malekal.com/files.php?id=ZHPDiag_20121006_c10r9c13j6c6
Bonjour,
Non je ne vois aucune trace de virus.
Si vous le souhaitez, nous pouvons soit continuer et faire des scans additionels (histoire d'être sur qu'il n'y a vraiment rien), ou vous pouvez juger d'arrêter la procédure.
à vous de voir ! 
Bonne fin de journée,
Bonsoir,
D'accord, n'hésitez pas à revenir en cas de problème.
J'ai fais analyser le fichier Winrar de 01net.com sur VirusTotal, voici le résultat : https://www.virustotal.com/file/87ac3992814051b2cf708875ea189689a39305fbf53661ff2e22bba83bf04a5e/analysis/1349630603/ (donc aucun prob', seul 2 antivirus le détectent, sans doute un faux-positif)
Bonne soirée,
Hello, could someone help with theTrojan virus? Everytime I start my computer Norton tells me it blocked a file but does not/cannot get rid of the virus permanently.
I have Norton Internet Security Netbook Edition 2010. My computer’s os is Windows XP, Service Pack 3
zaksit:
What is the name of the trojan it is blocking? If you go to History>resolved threats, You should be able to click on the entry, and then the option for more details will provide the file name and path. Let us know.
Well, at every instance of quarantine, Norton tells me a different name. The last one is W32.Waledac. The previous one is zs8ckkl.vbs.
zaksit:
In more details, it will provide a path, such as C:/XXXXX/XXXXX/ which should tell you where the file is. Please let us know where that is. Also, if you have more than one entry in your resolved or unresolved threats, could you also advise what the entries say.
Ok. Here you go:
c:\windows\system32\inetcfg32.dll
c:\windows\system32\dmband32.dll
c:\windows\system32\dhcpsapi32.dll
c:\windows\system32\ipxwan32.dll
c:\windows\system32\avmeter32.dll
c:\windows\system32\cfgbkend32.dll
c:\windows\system32\332.setup.zip
c:\windows\system32\localservice\inetcfg32.dll
c:\windows\system32\localservice\329.crack.zip
c:\windows\system32\zs8ckkl.vbs
c:\windows\system32\dnsrslvr32.dll
and it goes on and on.. These were all in resolved threats. Software says "auto-protect blocked this virus". Some of those threats were quarantined. None in unresolved threats.
Sorry for interrupting . It seems that Norton does actually kill the selected file but there is something that it does not detect (some dropper or else).
Download , install and run Malwarebytes AntiMalware
http://www.malwarebytes.org/mbam.php
Be sure to update it and perform Quick Scan . Follow the instructions to remove whatever it finds. If necessary restart the machine afterwards.
Please, post its log file that is going to be generated after the scan completes
I did as you suggested. Do you think my computer is clean now?
Hi zaksit
If I were you, I would stay away from the sites you must have been on to get all these trojans etc. After you have rebooted your machine, I would suggest you run another scan. Some times it says it will delete on reboot and it doesn't always do it. Some times also, these trojans etc can come back. I would suggest that you delete from your computer the sites you must have used to get these malwares. If you keep those sites and use them, you will never get cleaned or stay cleaned.
Well, thank you all who’ve helped me in this. I sure will be more careful !
Hi zaksit
Once your computer is clean, I would remove your system restore points and start new ones. All this malware could be in the restore points and these restore points don't get cleaned.
As a final check, I ran a full scan with Malwarebytes and found 14 more instances of Trojan in c:\system Volume Information\_restore....
I was able to create a new restore point but couldn't delete the old ones. Any help?
Can you confirm that you right clicked on “My Computer,” chose properties, System Restore tab, and unchecked the box for system restore? There is not much point in setting a new restore point until the system is clean.
Zaksit
Excuse me for jumping in here.
Have you done a Malwarebytes check on your External Drives, incase anything has been copied across.
I managed to get rid of the old system restore points. I do not have any external drives. I checked once more with malwarebytes and the system looks clean now. Thank you all who've helped me.
Zaksit
ZAKSIT:
If you return to the thread, please click on the green button in whatever post you feel helped you solve the problem, so we all know that it is completed.
Best wishes