Norton Virus Alert. help?

  silverdragon4 12:52 29 Apr 2005

Ok, heres the problem.

Last night, A Norton virus alert poped up on my computer. The virus is called Trojan.Vundo.B I did a full system scan and found 3 viruses. 1 was deleted, 1 was put in quarenteen and another, (called gamespy adware) which was a non viral risk, I was not given the option to remove it. I thought the Gamespy virus was the multiplayer program, so I deleted it. After which, I went to sleep.
I woke up this morning to find that Norton Virus Alert appear on my computer as soon as I turned on the computer and entered Windows XP.

Will the Alert appear if the virus is in quarenteen?
I am a tech noob. how do I get rid of these virus'?

thx for any help

  silverdragon4 13:21 29 Apr 2005

just in addition. I completed another scan. found the trojan again. Quarentine failed, delete failed. "sigh"

  GroupFC 13:52 29 Apr 2005

This doesn't really help but it seems you are not alone (click here and click here). There are some thing in the second link that you could try.

  VoG II 14:06 29 Apr 2005

click here

Removal tool click here

  gudgulf 14:09 29 Apr 2005

click here

click here

Two links to forums where others have this problem.The second link contains this "I am a little suspicious of the message itself because none of my other Norton messages come in red, white, and blue boxes.".I don't know if this applies to you but I am wondering if this is in fact a Norton problem...Could be that other infections are causing this so maybe a Hijack This Log needs posting click here

Tutorial click here

  silverdragon4 18:18 29 Apr 2005

hi again.
ok, heres the jist of things.

I have a Red Norton Virus warning on my screen which will not go away.
Object name: C:\WINDOWS\AppPatch\logeula.dll
Virus Name: Trojan.Vundo.B
Access to the file was denied

I ran a scan with Norton and it shows the virus, but failes to repair, quarentine or delete it.
I went looking through all my files manually, but could not find it anywhere.
I scanned with Adware, Spybot, TrendMicro. Neither one could see it.
I rescanned with Norton, and there it was. laughing at me! grrr

Im gonna try the things suggested above now...I hope they work "prays"

  silverdragon4 18:51 29 Apr 2005

The Norton link i tried. I can not delete the file, so that does not work
I tried the FixVundo. Its says there is no virus.

  VoG II 18:52 29 Apr 2005

Try in Safe Mode click here

  silverdragon4 00:28 30 Apr 2005

ok, i did the Hijackthis log. here it is:

Logfile of HijackThis v1.99.1
Scan saved at 00:16:57, on 30/04/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton Internet Security\ISSVC.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
c:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDet.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Yahoo!\Messenger\ypager.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Symantec Shared\AdBlocking\NSMdtr.exe
C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\Temporary Directory 3 for\HijackThis.exe

  silverdragon4 00:37 30 Apr 2005

ok, cant post the rest, keeps saying theres an error posting

  silverdragon4 00:39 30 Apr 2005

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = click here
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = click here
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = click here
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = click here
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = click here
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = click here*click here
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = click here
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = click here
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = click here
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = click here*click here
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = click here
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_3_12_0.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: MSEvents Object - {44240BB5-BD7D-4D49-A1AA-8AB0F3D3CB44} - C:\WINDOWS\AppPatch\logeula.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
O2 - BHO: CNisExtBho Class - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: HP view - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 - Toolbar: Norton Internet Security - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_3_12_0.dll

This thread is now locked and can not be replied to.

Elsewhere on IDG sites

Samsung Galaxy S9 review

Wacom Cintiq Pro 24 and 32 review – hands-on

When is the next Apple event?

Qu’est-ce qu’Amazon Prime ?