[hotkey]

i am having a problem loading norton antivirus, anytime i try to run it it automatically shuts itsself off. I ran a system scan with RAV online and got this log.

Scanning memory...
Scanning boot sectors...
Scanning files...
C:\Documents and Settings\kondwani\Local Settings\Temp\optimize.exe - TrojanDownloader:Win32/Dyfuca.BQ -> Infected
C:\Documents and Settings\kondwani\Local Settings\Temp\THI62B3.tmp\twaintec_cab.vir->twaintec.dll - Trojan:Win32/Spy.BiSpy.C -> Infected
C:\WINDOWS\istinstall_si.exe - TrojanDownloader:Win32/Small.GL -> Suspicious
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\JPAWT89T\http[1].hta->(SCRIPT0000) - Trojan:VBS/Startpage.J* -> Infected

Scanned
============================
Objects: 33009
Directories: 1457
Archives: 696
Size(Kb): -1511701
Infected files: 3

Found
============================
Viruses found: 3
Suspicious files: 1
Disinfected files: 0
Mail files: 53

please help

[Advertisements]

You may want to try the free version of AVG ANTI VIRUS. I don't know how often the NORTON ANTI VIRUS program updates but AVG ANTI VIRUS program has an update every day!!!! It also flags you right away when it finds a TROJAN HORSE virus so that you can run a scan to remove it
I used a trial version of NORTON ANTI VIRUS,briefly,and did not like how the program worked. AVG ANTI VIRUS is AWESOME,I have used it for years and best of all its free!!!! You may also want to get the free version of AD-WARE and run if you don't have it already!!! That program is great for AD-WARE and SPYWARE scanning and removal,it always has updates and its also FREE!!!!

[chimchim]

You may want to try the free version of AVG ANTI VIRUS. I don't know how often the NORTON ANTI VIRUS program updates but AVG ANTI VIRUS program has an update every day!!!! It also flags you right away when it finds a TROJAN HORSE virus so that you can run a scan to remove it
I used a trial version of NORTON ANTI VIRUS,briefly,and did not like how the program worked. AVG ANTI VIRUS is AWESOME,I have used it for years and best of all its free!!!! You may also want to get the free version of AD-WARE and run if you don't have it already!!! That program is great for AD-WARE and SPYWARE scanning and removal,it always has updates and its also FREE!!!!

[ditto]

You have some suspicious files. Please run a free online virus scan here:
http://housecall.ant...start_frame.asp

And a free trojan scan here:
http://www.moosoft.com/

[hotkey]

thank you for your replies, i ran house call it detected only one of the viruses which i then deleted. i then ran RAV online as well and it detected the following viruses,
C:\Documents and Settings\kondwani\Local Settings\Temp\optimize.exe - TrojanDownloader:Win32/Dyfuca.BQ -> Infected
C:\Documents and Settings\kondwani\Local Settings\Temp\THI62B3.tmp\twaintec_cab.vir->twaintec.dll - Trojan:Win32/Spy.BiSpy.C -> Infected
Any clues on how i can get rid of these nasties?
Thank you

[chimchim]

I used the below nnline virus scan at work. It was free and it removed the virus's
it found as well:
http://www.pandasoft...n_principal.htm

Give that a try!!!!
I also used this on a computer that had NORTON ANTI VIRUS installed and it didn't cause a problem.

[hotkey]

the situation has gone from bad to worse because now i can not open any program using my destop icons. i have to go into safe mode for me to even be able to access my documents. i am using a friend's machine right now at his home. I think i will just have to reformat my whole hard drive unless someone has an idea of what i can do?

[ditto]

Try restarting the computer using "last known good configuration":
1. Start Windows, or if it is running, shut Windows down, and then turn off the computer.
2. Restart the computer. The computer begins processing a set of instructions known as the Basic Input/Output System (BIOS). What is displayed depends on the BIOS manufacturer. Some computers display a progress bar that refers to the word BIOS, while others may not display any indication that this process is happening.
3. As soon as the BIOS has finished loading, begin tapping the F8 key on your keyboard. Continue to do so until the Windows Advanced Options menu appears. If you begin tapping the F8 key too soon, some computers display a "keyboard error" message. To resolve this, restart the computer and try again.
4. Using the arrow keys on the keyboard, scroll to and select the Last Known Good Configuration menu item, and then press Enter.

Next, let us take a closer look at what is running on your PC. We'll need you to use a free diagnostic tool (HiJackThis) and post a log back here with the results.

Click the HijackThis Guide in my signature, download it and follow the instructions in the guide.

Most of what it lists will be harmless or even essential, DO NOT delete or modify anything yet! Someone will be along to tell you what steps to take after you post the contents of the scan results.

[netscout]

Hotkey,
It sounds like you have the same problem I just had. It is likely caused by the Pinon.A worm which I found on my system along with Byfuca BQ and M trojans. All from a rogue website I think. It seemed to attach itself to my Benign program, and only by deleting all Benign files and doing a disc clean could I get the virtual memory back. I shut down and restarted several times to complete this process. Only then did I have enough memory to get my browser to run and login to HouseCall. They were all found by Trendmicro House call.
Norton found and cleaned the same number of infections but did not use the same names but descriptios of types. I don`t know why.
For Spyware I find that Pest Patrol finds many that other programs don`t but of course I haven`t tried them all.
I have switched to another Firewall, Sygate, in hopes of preventing these intrusions again and am also trialling a different browser, mozilla firefox, which is claimed to be much safer than IE. Time will tell if they are any better.

[Kat]

Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.