Search:

nevermind, 'it' seems to have gon. first time NIS did something:P

oh, and something disabled safe mode and system restore. I will perform a factory image reset if nessesscary, although I hope I don't have too.

I have just setup my new vista pc, but it seems to have an infection. Norton Internet Security(NIS) has given me page after page of adware, worms and trojans.
...

Isn't it close enough? :clown:

scorched

It's probably too late... I have trouble booting into safe mode, it freezes:sad:. Thanks for the help but I'll just reformat. I've moved my important files to my new computer and neither sbybot or...

l o l ...

Try running msconfig from a run dialog or the task manager
Just disable qttask from the startup tab;)(If you're running spybot you may have to whitelist it to stop the confirmation dialogs at...

I meant half an hour before you have to restart the program

well, symantec has a norton removal tool
Use the Norton Removal Tool to remove a failed installation or a damaged Norton product.



Warning The Norton Removal Tool uninstalls all Norton...

well, there is cpukiller, seach google.
Trial lasts for around half an hour

dread;)

Combofix now says it's been uninstalled after i finally managed to get it to run... The app has disappeared from my desktop.

not much chance of re-running combofix, the image errors pop up at least 30 times when I execute the file. :blink:

sorry, combofix never saved a log.
and the symantec results are just from files quarrantined by avast, I checked. It appears I only have 1 week to troubleshoot it before it's reformated:sad:
My new...

:oops:sorry, forgot to add: it appears when an application opens, really annoying at startup.:mad:

got a 'blue screen' (system error, memory dumping) message. combofix removed that file and put it into a compressed 'catchme' folder.

attached file is one I got after the 'blue screen', it's some...

thanks for the reply. Is it possible this is affecting the way vista recognises a pc? On my new pc, it's a 'media device'.
Btw, I scanned this computer with another one, symantec corporate 10.1.......

no, that file's still there for some reason

using hjt i removed that file, it was in the apptini_dlls, explaning why vundofix couldn't remove it.

HJT log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:04:36 PM, on 24/11/2007...

Please ignore that question, found it:


VundoFix V6.6.2

Checking Java version...

Java version is 1.5.0.6
Old versions of java are exploitable and should be removed.

Still could not be deleted:sad:.

And I really hope someone can answer this question: WHERE'S THE LOG FILE????????
It deleted around 15 files.

C:\windows\system32\_c006A7C4 could not be deleted
not even on reboot, I think it somehow managed to put something into the startup entries, possibly winlogon notify. Should I try safe mode w/...

After reading some of the other posts, I have renamed hijackthis to hijack123this. I didn't post my previous logfile, but this one has several new entries:sad:. Both were saved after I renamed it.
...

I was wondering if you could add an option to scan a file when the resident blocks a registry change.
I'm currently using Spybot S&D 1.4, great program btw, and am not sure whether it already has...

I should note that I have not been able to see the hidden files option for a few months, around the time my pc was first diagnosed with Virtumonde. The system files option is still visible. This...

I have some constant popup problems on my pc, and a few days ago, spybot notified me about something called iifdbxx being added to the winlogon notifiers.

13/11/2007 4:44:43 PM Denied value...