Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Norton PE detected infection


  • This topic is locked This topic is locked
52 replies to this topic

#1 mrsbeautiful05

mrsbeautiful05

  • Members
  • 122 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Pennsylvania
  • Local time:08:08 PM

Posted 05 December 2012 - 11:10 PM

Norton PE has informed me that I have a bad file. I need some help with how i could go about disinfecting my computer. I have done some of the steps I found on other posts which were similar to my situation. Need help from here.

Namaste!

Love & Light

:flowers:


BC AdBot (Login to Remove)

 


#2 CatByte

CatByte

    bleepin' tiger


  • Malware Response Team
  • 14,664 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Canada
  • Local time:07:08 PM

Posted 06 December 2012 - 05:47 PM

Please do the following:

Please download DDS from either of these links

LINK 1
LINK 2

and save it to your desktop.
  • Disable any script blocking protection
  • Double click dds to run the tool.
  • When done, two DDS.txt's will open.
  • Save both reports to your desktop.
---------------------------------------------------
Please include the contents of the following in your next reply:

DDS.txt
Attach.txt.


NEXT

Please download aswMBR to your desktop.
  • Double click the aswMBR.exe icon to run it
  • When asked if you want to download Avast's virus definitions please select Yes.
  • Click the Scan button to start the scan
  • On completion of the scan, click the save log button, save it to your desktop and post it in your next reply.
  • You will also notice another file created on the desktop named MBR.dat. Right click that file and select Send To>Compressed (zipped) file. Attach that zipped file in your next reply as well

Microsoft MVP - 2010, 2011, 2012, 2013, 2014, 2015


#3 mrsbeautiful05

mrsbeautiful05
  • Topic Starter

  • Members
  • 122 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Pennsylvania
  • Local time:08:08 PM

Posted 06 December 2012 - 06:09 PM

Hello thanks for your reply. Since my post, my computer has stopped responding while running Norton virus scans, and shuts down. I have even gone into Safe Mode, and w/networking. So I'm not sure how far I will get with your instructions thus far. I hope you are able to help quickly. I have some log files already that I could attach, but I don't know which ones you would want. I will do my best with your instructions. Thank you so much

Namaste!

Love & Light

:flowers:


#4 CatByte

CatByte

    bleepin' tiger


  • Malware Response Team
  • 14,664 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Canada
  • Local time:07:08 PM

Posted 09 December 2012 - 12:34 PM

post what you have and we can go from there

Microsoft MVP - 2010, 2011, 2012, 2013, 2014, 2015


#5 mrsbeautiful05

mrsbeautiful05
  • Topic Starter

  • Members
  • 122 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Pennsylvania
  • Local time:08:08 PM

Posted 10 December 2012 - 02:13 PM

post what you have and we can go from there


Having probs with my Internet so I can't post any logs just yet. Thanks for your trouble. I've had other help though. I'll do my best to keep posting here.

Namaste!

Love & Light

:flowers:


#6 CatByte

CatByte

    bleepin' tiger


  • Malware Response Team
  • 14,664 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Canada
  • Local time:07:08 PM

Posted 10 December 2012 - 08:44 PM

ok, thanks for letting me know

Microsoft MVP - 2010, 2011, 2012, 2013, 2014, 2015


#7 mrsbeautiful05

mrsbeautiful05
  • Topic Starter

  • Members
  • 122 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Pennsylvania
  • Local time:08:08 PM

Posted 10 December 2012 - 09:08 PM

ok, thanks for letting me know


:thumbsup:
Thanks for your willingness to help, but I have had my problem solved by other techs. I will definitely come back here for help, if i ever need it. Thanks so much for your time.

Namaste!

Love & Light

:flowers:


#8 CatByte

CatByte

    bleepin' tiger


  • Malware Response Team
  • 14,664 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Canada
  • Local time:07:08 PM

Posted 10 December 2012 - 09:28 PM

no problem

I'm glad you have resolved your situation

Microsoft MVP - 2010, 2011, 2012, 2013, 2014, 2015


#9 CatByte

CatByte

    bleepin' tiger


  • Malware Response Team
  • 14,664 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Canada
  • Local time:07:08 PM

Posted 10 December 2012 - 09:28 PM

It appears that this issue is resolved, therefore I am closing the topic. If that is not the case and you need or wish to continue with this topic, please send me or any Moderator a Personal Message (PM) that you would like this topic re-opened.

Microsoft MVP - 2010, 2011, 2012, 2013, 2014, 2015


#10 CatByte

CatByte

    bleepin' tiger


  • Malware Response Team
  • 14,664 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Canada
  • Local time:07:08 PM

Posted 15 January 2013 - 09:33 PM

This topic has been re-opened at the request of the person who originally posted.

Microsoft MVP - 2010, 2011, 2012, 2013, 2014, 2015


#11 CatByte

CatByte

    bleepin' tiger


  • Malware Response Team
  • 14,664 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Canada
  • Local time:07:08 PM

Posted 15 January 2013 - 09:34 PM

please post the requested logs from this post

http://www.bleepingcomputer.com/forums/topic477551.html/page__view__findpost__p__2914793

Microsoft MVP - 2010, 2011, 2012, 2013, 2014, 2015


#12 mrsbeautiful05

mrsbeautiful05
  • Topic Starter

  • Members
  • 122 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Pennsylvania
  • Local time:08:08 PM

Posted 15 January 2013 - 09:59 PM

Ok, here's the info. I hope you can open it.

Attached Files

  • Attached File  DDS.zip   14.6KB   6 downloads

Namaste!

Love & Light

:flowers:


#13 CatByte

CatByte

    bleepin' tiger


  • Malware Response Team
  • 14,664 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Canada
  • Local time:07:08 PM

Posted 17 January 2013 - 07:24 PM

have you been able to run the aswMBR scan? If so, please post the log so we can begin cleaning your computer.

Microsoft MVP - 2010, 2011, 2012, 2013, 2014, 2015


#14 mrsbeautiful05

mrsbeautiful05
  • Topic Starter

  • Members
  • 122 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Pennsylvania
  • Local time:08:08 PM

Posted 17 January 2013 - 08:29 PM

No, I cannot open the file. Is there something else we can try?

Namaste!

Love & Light

:flowers:


#15 CatByte

CatByte

    bleepin' tiger


  • Malware Response Team
  • 14,664 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Canada
  • Local time:07:08 PM

Posted 17 January 2013 - 08:50 PM

Please run the following

Refer to the ComboFix User's Guide

  • Download ComboFix from the following location:

    Link

    * IMPORTANT !!! Place ComboFix.exe on your Desktop
  • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with ComboFix.
    You can get help on disabling your protection programs here
  • Double click on ComboFix.exe & follow the prompts.
  • Your desktop may go blank. This is normal. It will return when ComboFix is done. ComboFix may reboot your machine. This is normal.
  • When finished, it shall produce a log for you. Post that log in your next reply

    Note:
    Do not mouseclick combofix's window whilst it's running. That may cause it to stall.


    ---------------------------------------------------------------------------------------------
  • Ensure your AntiVirus and AntiSpyware applications are re-enabled.

    ---------------------------------------------------------------------------------------------

NOTE: If you encounter a message "illegal operation attempted on registry key that has been marked for deletion" and no programs will run - please just reboot and that will resolve that error.

Microsoft MVP - 2010, 2011, 2012, 2013, 2014, 2015





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users