Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

W32:agent-isi


  • This topic is locked This topic is locked
3 replies to this topic

#1 JehutyFoo

JehutyFoo

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:01:50 PM

Posted 07 July 2007 - 02:22 AM

Hey Everybody, I'm pretty good about keeping my system safe and luckily no major Viruses yet. Sadly my friend wasn't so lucky... over the past week her avast was popping up with a message about finding "W32:Agent-ISI", she updated her definitions and ran a few scans. At the end it promted about it being successfully removed. Now her computer seems to be worse, everytime she runs Internet Exlorer now, her system will lockup causing her to having to restart, mouse is still moveable but nothing is clickable. I went through all the processes with her and she seems to have a crapload of Norton processes, even though norton is no longer installed and shes running avast. She also has a process(isafe.exe) that traces to "etrust antivirus". Even though no trace of it installed. Another process(vetmsg.exe) traces to "CA Antivirus", yet again she does'nt have it installed. Although what worries me is the 10 Norton related processes that run in the background. Any help would be greatly appreciated, and thanks in advance.

-Foo

BC AdBot (Login to Remove)

 


#2 buddy215

buddy215

  • Moderator
  • 13,254 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:01:50 PM

Posted 07 July 2007 - 06:57 AM

Below is a link to Norton's uninstaller.
http://service1.symantec.com/SUPPORT/tsgen...005033108162039

I would also suggest she post a Hijack This log in the Hijack This forum. The instructions for doing that are in the link below.
http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/
“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#3 JehutyFoo

JehutyFoo
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:01:50 PM

Posted 08 July 2007 - 07:47 PM

Thx Buddy215, posted a log on the HJT forum. Here's the Link:

http://www.bleepingcomputer.com/forums/t/99134/w32agent-isi/

#4 rigel

rigel

    FD-BC


  • Members
  • 12,944 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:South Carolina - USA
  • Local time:02:50 PM

Posted 09 July 2007 - 09:42 PM

Hi JehutyFoo

Since you now have an active HJT log, please follow only the advice of the team member who works the log. You are in good hands - our HJT team is one of the best on the web. :thumbsup:

This thread is now closed

"In a world where you can be anything, be yourself." ~ unknown

"Fall in love with someone who deserves your heart. Not someone who plays with it. Will Smith





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users