Wintems.exe trojan infected my system, can not complete uninstall of Norton 360

BurntOfferings · 01-19-2008, 10:10 AM

Well, as the title of the post states, I was infected by the Wintems.exe trojan. I have worked with a tech at the Safer Networking Forums and got the majority of my system cleaned up. However, when running the Norton Removal Tool, it reaches 100% freezes up, and auto-reboots my system. I have figured out that this is because the folders located at
C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\Quarantine

and

C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtETmp

can not be accessed, and the virus is possibly located in these folders.

I have ran trend micro housecall
CCleaner
Spybot S&D
Registry Repair
Uniblue Registry Booster 2
Uniblue SpyEraser
Uniblue SpeedUpMyPC 3
Spyware Doctor
ComboFix
HijackThis
ATF Cleaner
Gmer
Kaspersky

and none of them detect anything on the system or did anything to resolve the issue

When I was first infected the Wintems.exe trojan blocks and/or deletes all security programs from the hard drive, forcing you to uninstall them and then reinstall them after you get rid of the virus. I currently have ZERO (none) virus protection on my computer and can not install any until Norton360 is completely removed. I, as well as Blade81 at the Safer Networking Forums are at the limits of our knowledge. Any help would be greatly appreciated.

You can read more about what I've already attempted here:
http://forums.spybot.info/showthread...388#post153388

Thanks!

01-19-2008, 10:10 AM	#1 (permalink)
BurntOfferings Registered User Join Date: Jan 2008 Posts: 1 OS: Windows XP Media Center Edition 2005	Wintems.exe trojan infected my system, can not complete uninstall of Norton 360 Well, as the title of the post states, I was infected by the Wintems.exe trojan. I have worked with a tech at the Safer Networking Forums and got the majority of my system cleaned up. However, when running the Norton Removal Tool, it reaches 100% freezes up, and auto-reboots my system. I have figured out that this is because the folders located at C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\Quarantine and C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtETmp can not be accessed, and the virus is possibly located in these folders. I have ran trend micro housecall CCleaner Spybot S&D Registry Repair Uniblue Registry Booster 2 Uniblue SpyEraser Uniblue SpeedUpMyPC 3 Spyware Doctor ComboFix HijackThis ATF Cleaner Gmer Kaspersky and none of them detect anything on the system or did anything to resolve the issue When I was first infected the Wintems.exe trojan blocks and/or deletes all security programs from the hard drive, forcing you to uninstall them and then reinstall them after you get rid of the virus. I currently have ZERO (none) virus protection on my computer and can not install any until Norton360 is completely removed. I, as well as Blade81 at the Safer Networking Forums are at the limits of our knowledge. Any help would be greatly appreciated. You can read more about what I've already attempted here: http://forums.spybot.info/showthread...388#post153388 Thanks!