OK... I was unable to turn on Real Time file system protection (Symantec Corporate edition). I was also unable to update my virus definitions. When I tried to run a virus scan, it would immediately stop, and say "scan stopped by user". I rebooted into safe mode, did an update, and then a scan. It came up with nothing. I am still unable to turn on my real time file system protection.
I did a scan with Ad-aware and Spybot. It came up with nothing.
We reinstalled IE. Didn't help. I cannot access the internet.
But Mozzilla FireFox works fine.
TrojanHunter- No trojan files found
Logfile of HijackThis v1.99.1
Scan saved at 9:16:38 AM, on 01/09/2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\LEXBCES.EXE
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\msdtc.exe
C:\Program Files\APC\PowerChute Business Edition\agent\pbeagent.exe
C:\Program Files\APC\PowerChute Business Edition\server\pbeserver.exe
C:\PROGRA~1\SAV\DefWatch.exe
C:\WINNT\system32\Dfssvc.exe
C:\WINNT\System32\tcpsvcs.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\cba\pds.exe
C:\PROGRA~1\Iomega\System32\AppServices.exe
C:\WINNT\System32\ismserv.exe
C:\WINNT\System32\llssrv.exe
C:\WINNT\SYSTEM32\lexmvservice.exe
C:\WINNT\SYSTEM32\LexWebService.exe
C:\PROGRA~1\SAV\Rtvscan.exe
C:\WINNT\system32\ntfrs.exe
C:\PROGRA~1\Bell\ACCESS~1\app\pppoeservice.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\System32\locator.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\System32\wins.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\dns.exe
C:\WINNT\System32\inetsrv\inetinfo.exe
C:\WINNT\system32\ams_ii\hndlrsvc.exe
C:\WINNT\system32\MsgSys.EXE
C:\WINNT\system32\ams_ii\iao.exe
C:\WINNT\system32\cba\xfr.exe
C:\WINNT\Explorer.EXE
C:\PROGRA~1\SAV\vptray.exe
C:\WINNT\system32\internat.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Documents and Settings\tl\Desktop\HijackThis.exe
MicroWorld Antivirus & Spywaqre Toolkit:
System found infected with PowerReg Scheduler Spyware/Adware (powerreg scheduler v3.exe)! Action taken: No Action Taken.
Please let me know if you have any ideas I can try.
Thanks, Elena
Edited by ocasi, 01 September 2005 - 08:12 AM.
Sign In
Create Account
