Help - Search - Members - Calendar
Full Version: Norman
Computer Help Forum > Other Computer Issues > HijackThis logs, and Malware Removal
fairlopgirl
My AV caught a Trojan (Norman) - now I can't get rid of the message! No matter how many times I click on 'close' it keeps coming back! It is the same Trojan - I checked. The friend who supplied it has since died. The message is:

Click to view attachment

I am able to move it out of the way - it goes to the inactive bar - so I can continue to use my computer.

Thank you!
Broni
I'm moving this topic...

Print these instructions out.

1. Download SUPERAntiSpyware Free for Home Users:
http://www.superantispyware.com/

* Double-click SUPERAntiSpyware.exe and use the default settings for installation.
* An icon will be created on your desktop. Double-click that icon to launch the program.
* If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download and unzip them from here: http://www.superantispyware.com/definitions.html.)
* Close SUPERAntiSpyware.

PHYSICALLY DISCONNECT FROM THE INTERNET

Restart computer in Safe Mode.
To enter Safe Mode, restart computer, and keep tapping F8 key, until menu appears; select Safe Mode; you'll see "Safe Mode" in all four corners of your screen

* Open SUPERAntiSpyware.
* Under Configuration and Preferences, click the Preferences button.
* Click the Scanning Control tab.
* Under Scanner Options make sure the following are checked (leave all others unchecked):
- Close browsers before scanning.
- Scan for tracking cookies.
- Terminate memory threats before quarantining.

* Click the Close button to leave the control center screen.
* Back on the main screen, under Scan for Harmful Software click Scan your computer.
* On the left, make sure you check C:\Fixed Drive.
* On the right, under Complete Scan, choose Perform Complete Scan.
* Click Next to start the scan. Please be patient while it scans your computer.
* After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click OK.
* Make sure everything has a checkmark next to it and click Next.
* A notification will appear that Quarantine and Removal is Complete. Click OK and then click the Finish button to return to the main menu.
* If asked if you want to reboot, click Yes.
* To retrieve the removal information after reboot, launch SUPERAntispyware again.
- Click Preferences, then click the Statistics/Logs tab.
- Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
- If there are several logs, click the current dated log and press View log. A text file will open in your default text editor.
- Please copy and paste the Scan Log results in your next reply.

* Click Close to exit the program.
Post SUPERAntiSpyware log.
NOTE: Tracking cookies can be omitted from the log.

RECONNECT TO THE INTERNET

RESTART COMPUTER!

2. Download Malwarebytes' Anti-Malware: http://www.malwarebytes.org/mbam.php to your desktop.
(Malwarebytes is free to use. Only, if you want to use realtime protection, scheduled scanning, and scheduled updating, you have to pay one-time fee)

* Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform full scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When completed, a log will open in Notepad.
* Post the log back here.

The log can also be found here:
C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt
Or at C:\Program Files\Malwarebytes' Anti-Malware\Logs\log-date.txt

RESTART COMPUTER!

3. Download, install, and run HijackThis:
http://www.snapfiles.com/get/hijackthis.html
Post HijackThis log.


DO NOT make any other changes to your computer (like installing programs, using other cleaning tools, etc.), until it's officially declared clean!!!
fairlopgirl
Broni - Does this put superantispyware on my machine? Will it conflict with Norman? I am happy with Norman - besides I have paid until April 2010! Norman caught the Trojan - it's the message I need to get rid of!
Broni
Don't worry about anything. Simply follow my instructions, and you'll be fine. No conflict.
fairlopgirl
I couldn't boot up this morning - I'm at the library now! The technicin has taken my computer away to do a reinstall of XP. He said my computer is the most unstable of all his customers - I will ask him what he means!! Thank you for your help! I'm hopin my computer will be as good as new!!
jram
QUOTE
He said my computer is the most unstable of all his customers
Of course he said that, your paying him to do a simple thing, he probably will be doing it again if you don't get spyware protection, malware and spyware is worst than most viruses, you need protection.
frazzm737
A Mac would solve all of Fairlopgirl's computer problems!
Broni
With our help, you could have reinstalled Windows by yourself.
frazzm737
I had never heard of Norman internet security--had to look it up. Have any of you ever heard of it?
fairlopgirl
Jram has heard of Norman - he gives updates.

Broni - I couldn't boot up - I couldn't ask you for help!! My technician says it's all the programs I download! It's the second time I've had to have a clean install. I have been without my computer for a week! In case it happens again - how do you wipe out the existing programs and what about the printers? Can I print out directions?

Jram - I have spyware protection - I had Norman (which I liked) but the friend who sold me it died and he didn't give me the registration!
Broni
fairlopgirl
What kind of protection do you have right now?

As for Windows fixes, you may print out these two:
- Windows XP repair: http://www.michaelstevenstech.com/XPrepairinstall.htm
- Windows XP clean reinstall: http://www.michaelstevenstech.com/cleanxpinstall.html
frazzm737
Fairlopgirl, so glad to see you back with us. What protection programs are you using now? I can't answer your specific questions, but do be cautious with down loads now that you have a clean machine.
rokytnji
On my Wifes Vista computer, I got her in the habit of saving the download to Desktop, then right click on the download, and use her Norton Antivirus scanner option to scan the download before she opens it. Saves a lot of aggrevation. Most Antivirus software like Avast, and Avira, which are both free to download, have that option. On our On her laptop with XP I downloaded Avast and Spybot Search and destroy and she has been trouble free since after I set it up for her. Just remember. Save file to Desktop, right click, scan before opening any download file. Just a friendly heads up from a Linux user.


P.S. I noticed quite a few members of the forum also use Winpatrol, which has a fine detection and removal system for pesky malware.
PeggyB
Here is the very best place to learn how to reinstall Windows XP and it comes with pictures and it was posted by our very own Smokey..............

http://www.smartestcomputing.us.com/index.php?showtopic=6742
jram
QUOTE
Jram - I have spyware protection - I had Norman (which I liked)

Norman is virus protection, spyware protection is different programs. All user should have at least 3 spyware programs. I like THIS for protection all you have to do is update and enable all protection. This isn't a scanner, it just helps protect you.
I use This to scan........... it's called malwarebytes, it scans your machine and removes spyware. It's free, just hit download. Another good one that is free is SuperAntiSpyware, another scanner.
Right here.......... I prefer Malwarebytes, it only takes 4 or 5 min. on my machine.
fairlopgirl
I will bear that in mind, jram. At the moment, I have promised my technician not to download anything until I am sure the reinstall is working correctly! I usually use Norman (it has a sandbox) and three others for scanning.

Fran and Broni - I have McAfee suite which is given free from Comcast.

Peggy and Broni - I will print out the items you suggested.

rokytnji - It is a good habit to get into. I use Winpatrol plus - but I'm not ready to download that yet.
frazzm737
You can't go wrong if you follow the suggestions of the guys here on the forum. They will direct you to the best of the free programs and they know how to deal with problems that may arise.
Broni
IMHO, McAfee is close to worthless.
fairlopgirl
I remembered some negatives about McAfee - but I let the technician install it rather than have another suite. He said the Firewall was better than Microsoft's! He has the job of fixing my computer - unless I do it myself, with your help! I am not like Peggy - who dares everything. I don't know enough!! head_wall.gif noob.gif
Broni
fairlopgirl
Your technician is either a fool, or he gets some commission from McAfee.
I'm telling you as a person, who lost teeth on security issues - McAfee is worthless program.
I said that for the last time.
jram
McAfee is garbage as you will find out, it will slow your machine to a stand still. You have Norman, McAfee also has a Virus program, having two on the same machine causes problems. McAfee has a better firewall, not really , Windows firewall does the job, the only reason everyone doesn't use it is because it stops everything from coming in, doesn't alert you to what's going out. In some cases this is better, if a firewall keeps alerting you to whats coming in and going out, if your not computer savvy, your bound to let the wrong thing in or out. You have to use spyware programs, McAfee isn't enough.
dobhar
I'm not going to get into a pissing match for what's the best and what isn't. Everybody has their own opinion. IMHO McAfeee and Symantec both suck cuz their now so bloated.

I use...
- NOD32 for AV
- Comodo Firewall for firewall protection
-- I also use the Hardware Firewall on my Wireless Router
- Comodo BOClean for Trojan's
- SuperAntispware for Spyware
- AVG AntiSpyware (Formerly Ewido Antispyware)
frazzm737
Fairlopgirl, with your computer wiped clean and a fresh install, you would do well to heed the advice offered here. Most of the programs suggested are free and will serve you well. I learned long ago that these guys know computers and will offer only sound advice.
fairlopgirl
Thanks for all the advice!!

jram: I don't have Norman, (because the friend that installed it has since died and he didn't give me the registration) only McAfee.

I don't want to change my AV as I am having trouble with my computer and until the technician figures it out I don't want to download anything!

Fran - I can't take their advice until the technician fixes the problems - of which there are many! He did a clean install last time and I didn't have any problems!! head_wall.gif
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.