Hi Dan,
Quote:
|
Ok I uninstalled Norton AV, but it is still showing up in the add/remove program list.
|
Hmmm..I also still see it active on your system. All of the following are components of Norton that I pulled off of the extra.txt you provided. Go into your Add or Remove programs and uninstall every one of these:
Norton AntiVirus 2005
Norton AntiVirus 2005
Norton AntiVirus Help
Norton AntiVirus Parent MSI
Norton AntiVirus SYMLT MSI
Norton WMI Update
Norton WMI Update
Symantec
Symantec Script Blocking Installer
-------------------------------------------------------------
After you've done that...
Open
notepad and copy/paste the text in the quotebox below into it:
Quote:
Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ogp156a4"=-
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Ataa"=-
|
Save this as
CFScript, in the same location as ComboFix.exe
Refering to the picture above, drag CFScript into ComboFix.exe
When finished, it shall produce a log for you at
C:\ComboFix.txt
Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall
--------------------------------------------------------------------
Please run this online scan to search for any remnants. It can take some time, so please be patient and allow it to run it's full course:
Perform an online scan with Internet Explorer with
Panda ActiveScan- Click on
located at the bottom of the page.
- A "pop up" window will appear. * Please ensure that your pop up blocker doesn't block it *
- Enter your e-mail address, country, and state & click "Free Online Scan" *The download of the 8 MB Panda's ActiveX control will take place*
Begin the scan by selecting
- If it finds any malware, it will offer you a report.
- Please ignore any entry it finds and the offer to buy the program to remove the entry, as we will address this later.
- Click on
then click 
* You needn't remain online while it's doing the scan but you have to re-connect after it has finished to see the report.
* Turn off the real time scanner of any existing antivirus program while performing the online scan
--------------------------------------------------------------------
Run a new scan with HijackThis and save the log.
--------------------------------------------------------------------
Please include the following in your next reply:
C:\ComboFix.txt
Panda results
New HijackThis log
__________________
Member of ASAP since 2005
Member of UNITE since 2006
"It is one life whether we spend it laughing or weeping." "Take the time to laugh--it is the music of the soul."