possible virus, Norton Internet Security and microsoft office not working

[cimon9999]

Hi, I've got a bit of a problem... For no apparent reason, my Norton Internet Security, Norton Anti-Virus and Microsoft Office are not working.

Norton Anti-Virus and Norton Internet Security tell me the same thing:
Norton Anti-Virus/Internet Security has encountered an internal program error. Please uninstall and reinstall Norton Anti-Virus.

Microsoft Office programs tell me, when I try to open a file:
The file "name" is not available.

I have tried system restore and initially it did the trick for a couple of hours but the problem keeps on appearing for no obvious reason.

I have broadband internet so I'm actually exposed at the moment.

Any suggestions? I would like to uninstall and reinstall Norton Anti-virus but I don't have the information which I need to re-download the program, so any solutions other than that would be helpful.

Thanks a lot
Eamon

[bookworm]

take a look at this post by bonnie "removing a virus please" dated 09-01-2004. these should help, also I don't know it may be spyware. Get these 2 free programes Ad-Aware SE, SpyBot Search&Destroy, update and run them.They will clean your system.Note " TURN OFF SYSTEM RESTORE " before useing AV or spyware programes.

Hope this helps.

[cimon9999]

Thanks for the reply, Ive now tried all those virus removers on that thread. Bit Defender does indeed find a virus, but it cannot, for some reason, do anything about it(which kinda sucks!). Are there any other avenues I could try to clean my computer?

[bookworm]

what virus did it say, did you try Ad-Aware SE and SpyBot Search & Destroy, did you turn off system restore. If you get the name of the virus Norton may have a removal tool.

Let me knowhow you go on.

[cimon9999]

I tried those two you offered, and they did find a lot of spyware but spybot got rid of it all and the problem is still there.

Yep, system restore's been turned off for all the virus checkers.

I've tried looking on microsoft office online for a solution to the opening of the files problem but to no avail.

Anything else I could try?

thanks.

[cimon9999]

Just an update on what I've tried which might shed more light on the matter:

I've tried repairing and reinstalling microsoft office but I still cannot open any file...... rather annoying.

[bookworm]

With Bit Defender finding a virus and being unable to remove it, I think you have been infected and need to find out by what.In the Software and Usefull Utilities the Sticky by Vidster at the top "Free system security software and advice" at the bottom there are links to Trojan scans and Antivirus scans, the trojan scan takes you to Microsoft Windows Security site where I think you shoud try the free scans especially the Trojan, the other virus scans Panda and Trend Micro are very good. If the scans find anything make a note of them and then I can look to find a removal tool.

[cimon9999]

sorry, couldn't find that link you were talking about.

Here's the scan from BitDefender


//-----------------------------------------------------------------
//
// Product: BitDefender 8 Standard
// Version: (no ver)
//
// Created on: 14/01/2005 22:48:50
//
//-----------------------------------------------------------------


Statistics

Scan path : C:\
Folders : 5181
Files : 723761
Archives : 4994
Packed files : 99994
Identified viruses : 12
Infected files : 13
Warnings : 0
Suspect files : 0
Disinfected files : 0
Deleted files : 2
Copied files : 0
Moved files : 10
Renamed files : 0
I/O errors : 33
Scan time : 01:33:21
Scan speed (files/sec) : 129

Virus definitions : 98195
Scan plugins : 13
Archive plugins : 38
Unpack plugins : 4
Mail plugins : 6
System plugins : 1

Scan options

Detection
[X] Scan boot sectors
[X] Scan archives
[X] Scan packed files
[X] Scan email

File mask
[ ] Programs
[X] All files
[ ] User defined extensions:
[ ] Exclude extensions: ;

Action

Infected objects
[ ] Ignore
[X] Disinfect
[ ] Delete
[ ] Copy to quarantine
[ ] Move to quarantine
[ ] Rename
[ ] Prompt user

Second action
[ ] Ignore
[ ] Delete
[ ] Copy to quarantine
[X] Move to quarantine
[ ] Rename
[ ] Prompt user

Scan options
[X] Enable warnings
[X] Enable heuristics
[ ] Show all files in log
[X] Report file: vscan.log
[ ] Append to existing report

Summary:

C:\Documents and Settings\Eamon Keane\Start Menu\Programs\Startup\PowerReg Scheduler V3.exe Detected: Application.Adware.PowerReg.3.0
C:\Documents and Settings\Eamon Keane\Start Menu\Programs\Startup\PowerReg Scheduler V3.exe Disinfection failed
C:\Documents and Settings\Eamon Keane\Start Menu\Programs\Startup\PowerReg Scheduler V3.exe Moved
C:\Program Files\Common Files\updmgr\rvupdmgr.exe Infected Trojan.Downloader.KeenValue.A
C:\Program Files\Common Files\updmgr\rvupdmgr.exe Disinfection failed
C:\Program Files\Common Files\updmgr\rvupdmgr.exe Moved
C:\Program Files\Common Files\updmgr\simgr.exe Infected Trojan.Downloader.KeenValue.C
C:\Program Files\Common Files\updmgr\simgr.exe Disinfection failed
C:\Program Files\Common Files\updmgr\simgr.exe Moved
C:\Program Files\Common Files\updmgr\updmgr.exe Infected Trojan.Downloader.Keenval.H
C:\Program Files\Common Files\updmgr\updmgr.exe Deleted
C:\Program Files\n-CASE\msbb.exe Detected: Application.Adware.180solutions.A
C:\Program Files\n-CASE\msbb.exe Disinfection failed
C:\Program Files\n-CASE\msbb.exe Moved
C:\updaterInstall_112.exe Infected Backdoor.Blarul.D
C:\updaterInstall_112.exe Disinfection failed
C:\updaterInstall_112.exe Moved
C:\WINDOWS\alchem.exe Infected Trojan.Downloader.Alchemic.A
C:\WINDOWS\alchem.exe Disinfection failed
C:\WINDOWS\alchem.exe Moved
C:\WINDOWS\iNetPal\m3tsp8.exe Infected Trojan.Dropper.Small.JH
C:\WINDOWS\iNetPal\m3tsp8.exe Disinfection failed
C:\WINDOWS\iNetPal\m3tsp8.exe Moved
C:\WINDOWS\preInsTT.exe Detected: Adware.Serchentrix.A
C:\WINDOWS\preInsTT.exe Disinfection failed
C:\WINDOWS\preInsTT.exe Moved
C:\WINDOWS\preInstTT.exe Detected: Adware.Serchentrix.A
C:\WINDOWS\preInstTT.exe Disinfection failed
C:\WINDOWS\preInstTT.exe Moved
C:\WINDOWS\satmat.exe Infected Trojan.Downloader.Stubby.D
C:\WINDOWS\satmat.exe Deleted
C:\WINDOWS\SYSTEM\WinStart001.EXE Detected: Application.BHO.Ignet.A
C:\WINDOWS\SYSTEM\WinStart001.EXE Disinfection failed
C:\WINDOWS\SYSTEM\WinStart001.EXE Moved
C:\WINDOWS\SYSTEM32\ss_msi1_setup.exe=>(NSIS o)=>zlib_nsis0003 Detected: Adware.SideSearch.A
C:\WINDOWS\SYSTEM32\ss_msi1_setup.exe=>(NSIS o)=>zlib_nsis0003 Disinfection failed
C:\WINDOWS\SYSTEM32\ss_msi1_setup.exe=>(NSIS o)=>zlib_nsis0003 Move failed



I dunno if "moved" means that it's been dealt with or not. Does it?
Are there any viruses there that might be causing the problem?

[bookworm]

ok at top of page under calender click Main Index - go to SOFTWARE

Software and Usefull Utillities

First Entry

STICKY: FREE system security software and advice
Scroll to bottom it says

There are also various online scanners that work really well

THIS is an online Trojan scan

THIS is an excellent online virus scan

and THIS is another very good online virus scan.

It looks like Bit Defender dealt with the virus's but no harm in scanning again.

[scagrat]

moving just means that its been moved to somewhere e.g. quarantine

[ajrfman]

It seems you have the Keenvalue Adware. Symantec Security had a removal tool to download at the following URL:

http://securityresponse.symantec.com...e.keenval.html
ajrfman

Originally Posted by cimon9999

sorry, couldn't find that link you were talking about.

Here's the scan from BitDefender


//-----------------------------------------------------------------
//
// Product: BitDefender 8 Standard
// Version: (no ver)
//
// Created on: 14/01/2005 22:48:50
//
//-----------------------------------------------------------------


Statistics

Scan path : C:\
Folders : 5181
Files : 723761
Archives : 4994
Packed files : 99994
Identified viruses : 12
Infected files : 13
Warnings : 0
Suspect files : 0
Disinfected files : 0
Deleted files : 2
Copied files : 0
Moved files : 10
Renamed files : 0
I/O errors : 33
Scan time : 01:33:21
Scan speed (files/sec) : 129

Virus definitions : 98195
Scan plugins : 13
Archive plugins : 38
Unpack plugins : 4
Mail plugins : 6
System plugins : 1

Scan options

Detection
[X] Scan boot sectors
[X] Scan archives
[X] Scan packed files
[X] Scan email

File mask
[ ] Programs
[X] All files
[ ] User defined extensions:
[ ] Exclude extensions: ;

Action

Infected objects
[ ] Ignore
[X] Disinfect
[ ] Delete
[ ] Copy to quarantine
[ ] Move to quarantine
[ ] Rename
[ ] Prompt user

Second action
[ ] Ignore
[ ] Delete
[ ] Copy to quarantine
[X] Move to quarantine
[ ] Rename
[ ] Prompt user

Scan options
[X] Enable warnings
[X] Enable heuristics
[ ] Show all files in log
[X] Report file: vscan.log
[ ] Append to existing report

Summary:

C:\Documents and Settings\Eamon Keane\Start Menu\Programs\Startup\PowerReg Scheduler V3.exe Detected: Application.Adware.PowerReg.3.0
C:\Documents and Settings\Eamon Keane\Start Menu\Programs\Startup\PowerReg Scheduler V3.exe Disinfection failed
C:\Documents and Settings\Eamon Keane\Start Menu\Programs\Startup\PowerReg Scheduler V3.exe Moved
C:\Program Files\Common Files\updmgr\rvupdmgr.exe Infected Trojan.Downloader.KeenValue.A
C:\Program Files\Common Files\updmgr\rvupdmgr.exe Disinfection failed
C:\Program Files\Common Files\updmgr\rvupdmgr.exe Moved
C:\Program Files\Common Files\updmgr\simgr.exe Infected Trojan.Downloader.KeenValue.C
C:\Program Files\Common Files\updmgr\simgr.exe Disinfection failed
C:\Program Files\Common Files\updmgr\simgr.exe Moved
C:\Program Files\Common Files\updmgr\updmgr.exe Infected Trojan.Downloader.Keenval.H
C:\Program Files\Common Files\updmgr\updmgr.exe Deleted
C:\Program Files\n-CASE\msbb.exe Detected: Application.Adware.180solutions.A
C:\Program Files\n-CASE\msbb.exe Disinfection failed
C:\Program Files\n-CASE\msbb.exe Moved
C:\updaterInstall_112.exe Infected Backdoor.Blarul.D
C:\updaterInstall_112.exe Disinfection failed
C:\updaterInstall_112.exe Moved
C:\WINDOWS\alchem.exe Infected Trojan.Downloader.Alchemic.A
C:\WINDOWS\alchem.exe Disinfection failed
C:\WINDOWS\alchem.exe Moved
C:\WINDOWS\iNetPal\m3tsp8.exe Infected Trojan.Dropper.Small.JH
C:\WINDOWS\iNetPal\m3tsp8.exe Disinfection failed
C:\WINDOWS\iNetPal\m3tsp8.exe Moved
C:\WINDOWS\preInsTT.exe Detected: Adware.Serchentrix.A
C:\WINDOWS\preInsTT.exe Disinfection failed
C:\WINDOWS\preInsTT.exe Moved
C:\WINDOWS\preInstTT.exe Detected: Adware.Serchentrix.A
C:\WINDOWS\preInstTT.exe Disinfection failed
C:\WINDOWS\preInstTT.exe Moved
C:\WINDOWS\satmat.exe Infected Trojan.Downloader.Stubby.D
C:\WINDOWS\satmat.exe Deleted
C:\WINDOWS\SYSTEM\WinStart001.EXE Detected: Application.BHO.Ignet.A
C:\WINDOWS\SYSTEM\WinStart001.EXE Disinfection failed
C:\WINDOWS\SYSTEM\WinStart001.EXE Moved
C:\WINDOWS\SYSTEM32\ss_msi1_setup.exe=>(NSIS o)=>zlib_nsis0003 Detected: Adware.SideSearch.A
C:\WINDOWS\SYSTEM32\ss_msi1_setup.exe=>(NSIS o)=>zlib_nsis0003 Disinfection failed
C:\WINDOWS\SYSTEM32\ss_msi1_setup.exe=>(NSIS o)=>zlib_nsis0003 Move failed



I dunno if "moved" means that it's been dealt with or not. Does it?
Are there any viruses there that might be causing the problem?