Norton AV disabled!!!

[SHAWN]

I would run a virus scan. See my sig. I would use Trend instead of norton as well.

 

[thatdarngood]

i use firefox. the installation says it needs netscape browser.

due to this trojan, i cannot goto anyother link on that site.
looks like i'll have to do the good ol format method.

 

[thatdarngood]

this is one hell of a trojan

 

[Blitze105]

You are right, this is one hell of a trojan . However, I can and will help you out.
Follow these instructions: (before u do this make a restore point!!!)
1. Go to start -> run -> type in 'regedit'
2. Locate these strings and delete them.
a. HKEY_CURRENT_USER\ Software\ Microsoft\ Windows\ CurrentVersion\ Run
winshost.exe = %sysdir%\ winshost.exe
b. HKEY_LOCAL_MACHINE\ Software\ Microsoft\ Windows\ CurrentVersion\ Run
winshost.exe = %sysdir%\ winshost.exe
3. Also hit cntl+alt+del -> processes -> end WINSHOST.EXE if found there. (might want to try step 3, first if it doens't work)
4. Do a windows update as well, this trojan loves to screw ur security patches over.
5. Reboot your computer. Post results.
6. If this doesn't go right, i have something we can try next.

 

[Osiris]

Try this:

http://securityresponse.symantec.com/avcenter/venc/data/w32.beagle@mm.removal.tool.html

 

[Blitze105]

P.S.
You got that information from a guy who counted as follows:
1, 2, 3, 4, 4, 5, 7.

Doesn't that make you trust him even more?

 

[EricB]

this the new virus trick for NAV. you think norton is scanning your computer when everybody else is. Ditch norton. it code is so old and widespread my son could probably crack it. people are using norton to their advantage

give me your email I will send you avast.

 

[Lucky_Penguin]

Norton sucks
Use Avast its free and good and doesnt use up many
resources

 

[thatdarngood]

You are right, this is one hell of a trojan . However, I can and will help you out.
Follow these instructions: (before u do this make a restore point!!!)
1. Go to start -> run -> type in 'regedit'
2. Locate these strings and delete them.
a. HKEY_CURRENT_USER\ Software\ Microsoft\ Windows\ CurrentVersion\ Run
winshost.exe = %sysdir%\ winshost.exe
b. HKEY_LOCAL_MACHINE\ Software\ Microsoft\ Windows\ CurrentVersion\ Run
winshost.exe = %sysdir%\ winshost.exe
3. Also hit cntl+alt+del -> processes -> end WINSHOST.EXE if found there. (might want to try step 3, first if it doens't work)
4. Do a windows update as well, this trojan loves to screw ur security patches over.
5. Reboot your computer. Post results.
6. If this doesn't go right, i have something we can try next.

this may sound strange but i dont have any of those entries in my registry. also there is no winshost.exe running.
i have uninstalled norton anyway.

 

[thatdarngood]

happy news

well i finally got rid of it. i installed a evaluation copy of panda 2005
and did a full scan of it. i think iam free of the virus as i can now connect to symantec.com.