[Resolved] PC infected w/ possible antispyware soft virus

forgot how to get in task manager

never mind, found task manager, didnt find anythinf that u listed running, gonna try the safe mode approach

Make certain all your security programs are totally disabled, or they will interfere

im getting prompt about norton security running in the bachground, ive checked just about everything and dont see anything about norton running

Did you uninstall Norton?

If so, then there are some leftovers and you should use the Norton Removal Tool

Norton has a tool that will remove all of its products from failed uninstalls or installs

• Download the appropriate Norton Removal Tool from HERE and save it to your desktop.
• Next Double click on Norton_Removal_Tool.exe to run the tool.
• Follow the on-screen instructions.
• Your computer may be restarted more than once, and you may be asked to repeat some steps after the computer restarts.

running it again in safe mode. ok, so far didnt get prompted for norton

it still says it is scanning, its got a blue screen with a blinking cursor

is it a small blue box with a cursor? If so, that is how it is supposed to be.

yes. ok wasnt sure altho, just how long does this scan for? LOL

blue box is just sitting its says: scanning for infected files this typically doesnt take more then 10 minutes However, scan times for badly infected machines may easily double the cursor is also blinking under the above sentences

Hi Cat combofix, still isnt working and its been about an hour or so.

OK,

It should have completed by now if it was going to,

lets try another tool

Please do the following:

Download OTL to your Desktop

• Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
• When the window appears, underneath Output at the top change it to Minimal Output.
• Check the boxes beside LOP Check and Purity Check.
• Under the Custom Scan box paste this in
  
  
  netsvcs
  %SYSTEMDRIVE%\*.exe
  /md5start
  eventlog.dll
  scecli.dll
  netlogon.dll
  cngaudit.dll
  sceclt.dll
  ntelogon.dll
  logevent.dll
  iaStor.sys
  nvstor.sys
  atapi.sys
  IdeChnDr.sys
  viasraid.sys
  AGP440.sys
  vaxscsi.sys
  nvatabus.sys
  viamraid.sys
  nvata.sys
  nvgts.sys
  iastorv.sys
  ViPrt.sys
  eNetHook.dll
  ahcix86.sys
  KR10N.sys
  nvstor32.sys
  ahcix86s.sys
  nvrd32.sys
  symmpi.sys
  adp3132.sys
  /md5stop
  %systemroot%\*. /mp /s
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\Tasks\*.job /lockedfiles
  %systemroot%\system32\drivers\*.sys /lockedfiles
  %systemroot%\System32\config\*.sav
  %systemroot%\system32\drivers\*.sys /90
  CREATERESTOREPOINT
  
  
• Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  
• When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
• Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post them in your next reply.

Ok, scan is running, i get a prompt from my computer with one of them Yellow triangles that says. windows system restore and roxio backontrack are both active.this is not recommended click this messaage to find out how to solve this problem, i think it wants me to shut system restore

don't do anything at this point, let the scan finish

Ok, now it seems like its not doing anything, should i have my internet disconnected? thats like the only thing on