This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

TR/Agent

15 min read

✨ The volunteers who helped with this thread aren't active anymore, but you can still get a personalized answer — click Ask AI below.

This thread's last reply is from August 8, 2010, 6:30 AM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

muppy03 MRU Emeritus
So if you are not having any further problems, I would suggest you proceed as follows.

TFC is a great tool for you to keep and use on a regular basis.

You can delete RSIT from your Desktop and it associated folder C:\RSIT
You can also delete System Look

Uninstall ComboFix:

  • Click on Start >> Run...
  • Now type in ComboFix /Uninstall into the and click OK.
  • Note the space between the X and the /Uninstall, it needs to be there.


The above procedure will implement some cleanup procedures as well as reset System Restore points


Remember to update your Antivirus programs and other security products regularly to avoid new threats that could infect your system. If you do not update your anti virus software then it will not be able to catch any of the new variants that may come out.

You can use one of these sites to check if any updates are needed for your pc.
Secunia Software Inspector
F-secure Health Check



Please reply if you have any problems or questions.
pt521
I have a couple questions-

1. I now have a little red "Windows Security Alert" shield in the tray at the lower right, and every time I start up the computer it tells me that Norton Internet Worm Protection is turned off. Again, I didn't even know I had Norton software. Their recommendation is to "Turn on Windows firewall for all network connections". Should I do so? Was this on before all the cleanup we did?

2. Secunia shows vulnerabilities in older versions of Flash and Windows Media Player, but I downloaded the updates and still get the same results in the scan. Is this something worth pursuing further?

3. Thank you for being awesome. You've saved me so much time, money, and aggravation. How can I repay you/the site?
muppy03 MRU Emeritus
I now have a little red "Windows Security Alert" shield in the tray at the lower right, and every time I start up the computer it tells me that Norton Internet Worm Protection is turned off. Again, I didn't even know I had Norton software. Their recommendation is to "Turn on Windows firewall for all network connections". Should I do so? Was this on before all the cleanup we did?

Let’s work on this one first :)

Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2

  • Double-click SystemLook.exe to run it.
  • Copy the content of the following codebox into the main textfield:
    :folderfind
    Norton

  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
Note: The log can also be found on your Desktop entitled SystemLook.txt
pt521
this is the SystemLook log-

SystemLook v1.0 by jpshortstuff (11.01.10)
Log created at 12:13 on 02/08/2010 by [redacted] (Administrator - Elevation successful)

No Context: Code:

========== folderfind ==========

Searching for "Norton"
No folders found.

-=End Of File=-
muppy03 MRU Emeritus
I would like you to run The Norton Removal tool, try the “I have a Norton 2006/2007/2008/2009/2010 product.

Remove Norton

Note : You should first attempt to remove your Norton product using Add/Remove Programs in the Windows Control Panel (Programs and Features, in Windows Vista). This is the best method. After uninstalling using Windows Add/Remove Programs, run the Norton Removal Tool to ensure successful removal of all Norton references.

Please go to this -page- and select the product you have

    1 Download the Norton Removal Tool.
    Save the file to the Windows desktop.
    2 On the Windows desktop, double-click the Norton Removal Tool icon.
    3 Follow the on-screen instructions.
    Your computer may be restarted more than once, and you may be asked to repeat some steps after the computer restarts.


Let me know if this fixes the problem.
pt521
I ran the Norton Removal tool, and the "Windows Security Center" window does not tell me anymore that Norton Internet Worm Protection is turned off. Now tells me that "firewall" is off. What should I do next?
muppy03 MRU Emeritus
Now tells me that "firewall" is off. What should I do next?


Turn it on :)

  1. Please press Start... then choose Run from the menu.
  2. In the Run, text entry box, please copy/paste the following:
    wscui.cpl
  3. Press the OK... button.
    The Security Center window will open.
  4. In the "Manage security settings for:" section, click the "Windows Firewall" link.
    In the "Windows Firewall" window... under the General tab.
  5. Check the radio button, marked "On (recommended)".
  6. Click the OK...button.
  7. Close the Security Center Window, using the X button at the top right of the window.


Take note that the built-in Windows XP firewall it is not recommended as it does not block outgoing connections. This means that any malware on your computer is free to phone home for more instructions and you should consider using a third party Firewall. Remember to use only one firewall at the same time.

Let me know if any problems. :)
pt521
I finally go rid of the messages that windows security center was given me. Thanks a lot. About third party firewall, do you recommend any?
muppy03 MRU Emeritus
There are several good free firewalls available, below are three that you can read up on.

  • PC Tools
  • Online-Armor Free
  • Agnitum


Your can also remove System Look and the Norton Removal tool from your Desktop. :)
NonSuch Administrator
As this issue appears to be resolved, this topic is now closed.

You can help support this site from this link :
Donations For Malware Removal

✨ Ask AI about this thread

No ads, no affiliate links — generated on request from this thread's own archived content, not written by forum staff. Never run a scan/removal tool as a self-service step if the original thread describes it being done under a helper's direct supervision, and don't include your name, email, or other personal details in a follow-up question. See our privacy page for details on how this works.