![]() |
![]() |
![]() |
|||||
![]() |
![]() |
![]() |
![]() |
![]() |
|||
| Welcome
to Tech Support Forum home to more then 136,000 problems solved. Issues
have included: Spyware, Malware, Virus Issues, Windows, Microsoft,
Linux, Networking, Security, Hardware, and Gaming Getting your
problem solved is as easy as: 1. Registering for a free account 2. Asking your question 3. Receiving an answer Registered members: * See fewer ads. * And much more..
|
| Want to know how to post a question? click here | Having problems with spyware and pop-ups? First Steps |
|
|||||||
| Resolved HJT Threads Resolved spyware and popup issues. |
|
|
LinkBack | Thread Tools |
|
|
#1 (permalink) | |
|
Registered User
Join Date: Dec 2007
Posts: 8
OS: xp sp2
|
Norton being attacked by a virus
Recently when i got on the computer, symentec keeps popping up saying it blocked a certain type of e-mail for some reason from being sent. It does this multiple times, about 50 messages in 10 seconds, and it does it tell norton crashes altogether. I ran virus scans but norton doesnt find anything.
Deckards main Quote:
thank you, i really appreciate it |
|
|
|
| Important Information |
|
Join the #1 Tech Support Forum Today - It's Totally Free!
TechSupportForum.com is a leading support website for your computer needs. We offer free, friendly and personalized computer support. Why pay to have your computer fixed when you can do it for free. Join TechSupportforum.com Today - Click Here |
|
|
#3 (permalink) |
|
Analyst, Security Team
Join Date: Sep 2006
Location: Ontario, Canada
Posts: 2,948
OS: Windows 7 Ultimate
|
Re: Norton being attacked by a virus
Hi datvakid703,
You can attach the log by doing the following: To attach a file to a new post, simply
------------------------------------------------- Please subscribe to this thread so that you are notified when you receive a reply. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Add Subscription. --------------------------------------------------------------
__________________
![]() Proud Member of ASAP Proud Member of UNITE Keep this forum alive - if you've been helped at this forum, please do consider a donation. Thank you for your support. Donation link for Tech Support Forum Last edited by forhockey; 12-28-2007 at 08:44 PM. |
|
|
|
|
#4 (permalink) | ||
|
Registered User
Join Date: Dec 2007
Posts: 8
OS: xp sp2
|
Re: Norton being attacked by a virus
Combofix
Quote:
Quote:
Activescan.txt |
||
|
|
|
|
#5 (permalink) | ||
|
Analyst, Security Team
Join Date: Sep 2006
Location: Ontario, Canada
Posts: 2,948
OS: Windows 7 Ultimate
|
Re: Norton being attacked by a virus
Hi datvakid703,
Please subscribe to this thread so that you are notified when you receive a reply. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Add Subscription. -------------------------------------------------------------- Please copy this page to Notepad and save to your desktop for reference as you will not have any browsers open while you are carrying out portions of these instructions. Also be sure to carry out the instructions in the sequence listed below. -------------------------------------------------------------- Please download ATF Cleaner * Double-click ATF-Cleaner.exe to run the program. * Click Select All found at the bottom of the list. * Click the Empty Selected button. If you use Firefox browser, do this also: * Click Firefox at the top and choose Select All from the list. * Click the Empty Selected button. * NOTE : If you would like to keep your saved passwords, please click No at the prompt. If you use Opera browser, do this also: * Click Opera at the top and choose Select All from the list. * Click the Empty Selected button. * NOTE : If you would like to keep your saved passwords, please click No at the prompt. Click Exit on the Main menu to close the program. -------------------------------------------------------------- Crack Programs The use of crack programs are an open door for malware to enter in your computer. I strongly discourage you from participating in using such programs if you wish to keep your system clean in the future. Quote:
Click > Start > Control Panel > Add / Remove Programs and uninstall the following programs: AutoCAD 2004 Autodesk Express Viewer CureROM Pro 2.0.3.3 -------------------------------------------------------------- Click > Start > Control Panel > Add / Remove Programs and uninstall the following programs (if they exist): Viewpoint Media Player <<<this is considered foistware instead of malware since it is installed without users approval, but doesn't spy or do anything "bad". Read this article: http://www.clickz.com/news/article.php/3561546 Additional info: http://vil.nai.com/vil/content/v_137262.htm Delete the following folders and file: C:\Program Files\Viewpoint C:\Documents and Settings\All Users\Application Data\Viewpoint G:\My Shared Folder\STEINBERG the big pack ALL VST music programs (cubase 5+sx-wavelab3+4+manuels+rb338+recycle+full plugs-ins etc....).rar *** Also, empty out your recycling bin*** -------------------------------------------------------------- Please delete only the ComboFix.exe from your desktop and download an updated copy below: Download Combofix from Here or Alternate link **Save it directly to your desktop** Open notepad and copy/paste the text in the quotebox below into it: Quote:
![]() Referring to the picture above, drag CFScript into ComboFix.exe Follow the prompts, and post the resulting log, C:\ComboFix.txt Warning: Do not mouseclick combofix's window whilst it's running. That may cause it to stall -------------------------------------------------------------- Open HijackThis and click on 'Do a System Scan Only'. Check the following entries (If they still exist, make sure you do not miss any) O2 - BHO: Verizon Broadband Toolbar - {4E7BD74F-2B8D-469E-D0FC-E57AF4D5FA7D} - C:\WINDOWS\DOWNLO~1\vzbb.dll (file missing) O3 - Toolbar: Verizon Broadband Toolbar - {4E7BD74F-2B8D-469E-D0FC-E57AF4D5FA7D} - C:\WINDOWS\DOWNLO~1\vzbb.dll (file missing) O9 - Extra button: - {1A9897FA-2946-47E3-B784-B51C106046A9} - C:\WINDOWS\DOWNLO~1\vzbb.dll (file missing) O9 - Extra button: (no name) - {4094C4BB-2629-47C6-9C8E-16801C3FAC6B} - C:\WINDOWS\DOWNLO~1\vzbb.dll (file missing) O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://aolsvc.aol.com/onlinegames/be...loader_v10.cab Please remember to close all other windows, including browsers then click Fix checked. -------------------------------------------------------------- Establish an internet connection & perform an online scan with Internet Explorer at Kaspersky Online Scanner Answer Yes, when prompted to install an ActiveX component.
-------------------------------------------------------------- Please reply back with the following: C:\ComboFix.txt Kaspersky Online Scan Results New HiJackThis Log
__________________
![]() Proud Member of ASAP Proud Member of UNITE Keep this forum alive - if you've been helped at this forum, please do consider a donation. Thank you for your support. Donation link for Tech Support Forum |
||
|
|
|
|
#6 (permalink) | ||
|
Registered User
Join Date: Dec 2007
Posts: 8
OS: xp sp2
|
Re: Norton being attacked by a virus
combofix
Quote:
Quote:
|
||
|
|
|
|
#7 (permalink) | |
|
Registered User
Join Date: Dec 2007
Posts: 8
OS: xp sp2
|
Re: Norton being attacked by a virus
kaspersky
Quote:
|
|
|
|
|
|
#8 (permalink) | |
|
Analyst, Security Team
Join Date: Sep 2006
Location: Ontario, Canada
Posts: 2,948
OS: Windows 7 Ultimate
|
Re: Norton being attacked by a virus
Hi datvakid703,
Please copy this page to Notepad and save to your desktop for reference as you will not have any browsers open while you are carrying out portions of these instructions. Also be sure to carry out the instructions in the sequence listed below. -------------------------------------------------------------- Open notepad and copy/paste the text in the quotebox below into it: Quote:
![]() Referring to the picture above, drag CFScript into ComboFix.exe Follow the prompts, and post the resulting log, C:\ComboFix.txt Warning: Do not mouseclick combofix's window whilst it's running. That may cause it to stall -------------------------------------------------------------- Please reply back with the following: C:\ComboFix.txt Update on system behaviour?
__________________
![]() Proud Member of ASAP Proud Member of UNITE Keep this forum alive - if you've been helped at this forum, please do consider a donation. Thank you for your support. Donation link for Tech Support Forum |
|
|
|
|
|
#9 (permalink) |
|
Analyst, Security Team
Join Date: Sep 2006
Location: Ontario, Canada
Posts: 2,948
OS: Windows 7 Ultimate
|
Re: Norton being attacked by a virus
The following instructions are supposed to be completed after you've done what I previously asked.
Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system. Please follow these steps to remove older version Java components and update. Updating Java:
__________________
![]() Proud Member of ASAP Proud Member of UNITE Keep this forum alive - if you've been helped at this forum, please do consider a donation. Thank you for your support. Donation link for Tech Support Forum |
|
|
|
|
#10 (permalink) | |
|
Registered User
Join Date: Dec 2007
Posts: 8
OS: xp sp2
|
Re: Norton being attacked by a virus
Quote:
|
|
|
|
|
|
#11 (permalink) |
|
Analyst, Security Team
Join Date: Sep 2006
Location: Ontario, Canada
Posts: 2,948
OS: Windows 7 Ultimate
|
Re: Norton being attacked by a virus
All depends on the user's preference.
Purchased Subscriptions
Free Subscriptions
---------------------------------------------------------------- Well done, your logs are clean! There are just a few more things I would like you to do. The following procedure will clear out ComboFix.exe, as well as the backups and quarantines created by the fix. It will also reset your System Restore by flushing out previous restore points (which contain the infections) and create a new restore point. Click Start > Run and copy/paste, or type the following bolded text into the Run box and click OK: ComboFix /u ---------------------------------------------------------------- Microsoft Updates It is very important that you get all of the critical updates for your Operating System and Internet Explorer. Keeping your OS and browser up to date will help make you less susceptible to attacks by Trojans and viruses. Please go to Microsoft and download all the critical updates to help prevent possible re-infection. Malware Prevention Tools These programs configure your computer to prevent known malware-related changes. You can have more than one of these at a time and they take up minimal resources.
Alternative Web Browsers Using an alternative browser can help prevent malware from being installed without your knowledge, but may not work on all websites. Firewalls If you do not have a firewall, here are a few free ones available for personal use: Understanding and Using Firewalls Informational Reading In light of your recent troubles, I'm sure you'll like to avoid any future infections. Please take a look at these well written articles:
Please respond to this thread one more time so we can mark this thread as resolved.
__________________
![]() Proud Member of ASAP Proud Member of UNITE Keep this forum alive - if you've been helped at this forum, please do consider a donation. Thank you for your support. Donation link for Tech Support Forum Last edited by forhockey; 01-03-2008 at 01:08 AM. |
|
|
|
|
#12 (permalink) |
|
Registered User
Join Date: Dec 2007
Posts: 8
OS: xp sp2
|
Re: Norton being attacked by a virus
Quick question, now everytime i get online this thing called cingular gprs keeps popping up and its a dial up log on to connect to the internet. I have DSL and never seen this before tell lately and everytime it pops up it freezes my internet connection untel i close it.
|
|
|
|
|
#13 (permalink) |
|
Analyst, Security Team
Join Date: Sep 2006
Location: Ontario, Canada
Posts: 2,948
OS: Windows 7 Ultimate
|
Re: Norton being attacked by a virus
Hi datvakid703,
As your remaining issues do not appear to be malware related, you would be better served discussing these issues in the Windows XP section of this forum.
__________________
![]() Proud Member of ASAP Proud Member of UNITE Keep this forum alive - if you've been helped at this forum, please do consider a donation. Thank you for your support. Donation link for Tech Support Forum |
|
|
| Thread Tools | |
|
|