Spyware applications won't update; Microsoft Word won't work

I'm running Microsoft Windows XP Home Edition OS Version 5.1.2600 Service Pack 2 Build 2600 on a Dell Dimension 8300 with a x86 Family 15 Model 2 Stepping 9 GenuineIntel ~3192 Mhz processor.

Many of my Microsoft Office products do not work and many of your malware, antivirus tools either fail to install or fail to update. My Norton Internet Security is acting funny as well.

In particular, when I try to open Microsoft Word 2002, the initial identification screen appears then the opening processes stops, leaving the initial identification screen. When I then open something else, such as Internet Explorer, a 3" x 3" square window from the initial Microsoft Word identification screen stayed center on my computer display, in front of Internet Explorer or what ever else I open. This 3" x 3" square window blocks my view and access to whatever is behind it. Microsoft excell opens, but freezed on use. The 3" x 3" square window has grown to a 5" x 5" square window .

As I continue to use my computer, other programs fail to work and overlay their images in that 5" x 5" square window. The following programs froze on updating and added their images to that 5" x 5" square window: Microsoft Antispyware, Spy Sweeper, and Spybot Search & Destroy. Kaspersky On-line Scanner froze on selecting install active-x control. Panda ActiveScan froze on selecting "scan your PC." Images from both of these frozen programs were added to that 5" x 5" square window. Spy Sweeper also froze on installation and added it's image to the 5" x 5" square window.

Microsoft Word works in safe mode. After running the below, I still am having the same problems. However, the 3" x 3" square window is now a 5" x 5" square window.

I followed the "READ & RUN ME FIRST Before Asking for Support" instructions at http://forums.majorgeeks.com/showthread.php?t=35407. I attached my HijackThis log.

A. What I ran and my results

1. Bitdefender - Found trojan.banker.vb.67647772 in cwschredder.exe file. I had down loaded that cwschredder.exe file last June 2005. Old cwschredder.exe filed was deleted and I downloaded new cwschredder application.

2. Kaspersky On-line Scanner - Application froze on selecting install active-x control. Kaspersky On-line Scanner would not run.

3. Trend Micro's Free Online Virus Scan - No potential threat found on computer.

4. TrojanScan - Each time TrojanScan reached a particular folder containing four Microsoft Word files, all my open internet explorer windows would shut down. I moved that folder to a floppy disk and reran TrojanScan. No problems were found.

5. Panda ActiveScan - Application froze on selecting "Scan your PC." Panda ActiveScan would not run.

6. Ccleaner - cleaned with no problems

7. Microsoft Windows Malicious Software Removal Tool - no malicious software detected.

8. Ad-Aware SE - no fixes required.

9. Spybot Search & Destroy - Application froze on updating. Spybot Search & Destroy would not run.

10. Microsoft Antispyware - Application froze on updating. I ran Microsoft Antispyware without undating and found no items infested.

11. CWShredder - No CWS present

12. Kill2Me - No parasites present

13. Spy Sweeper - Application froze on installation at point where green indicator installation bar indicated 100% installation (I think it was at the point where it communicated over the Internet). The application was installed, but froze on updating. I ran Spy Sweeper without updating - no spyware, adware and other unwanted items found.

14. Ewido Security Suite - No skipped or infected objects found.

15. a-squared (a²) - No Malware found

16. McAfee AVERT Stinger - No virus, trojans, variants found

17. avast! Virus Cleaner Tool scan results:
No virus body found in memory.
Memory scanning finished (53.6s).
----------
Files scanning started...
C:\Documents and Settings\Mine\Local Settings\Temp\Perflib_Perfdata_f44.dat... file could not be scanned!
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcrst.dll... file could not be scanned!
C:\Program Files\Norton Internet Security\Norton AntiVirus\Savrt\0864NAV~.TMP... file could not be scanned!
C:\Program Files\Norton Internet Security\Norton AntiVirus\Savrt\0928NAV~.TMP... file could not be scanned!
C:\Program Files\Spyware Tools\McAfee AVERT Stinger\stng259.exe... file could not be scanned!
C:\WINDOWS\system32\CatRoot2\edb.log... file could not be scanned!
C:\WINDOWS\system32\CatRoot2\tmp.edb... file could not be scanned!
No virus body found.
Files scanning finished (0 infected).

 

OK, after two days of trying to attach a spyware problem and posting the message below , I read through the software thread and came across http://forums.majorgeeks.com/showthread.php?t=80154.

Me and that poster had something in common: 1. We recently updated microsoft windows products http://update.microsoft.com/microsoftupdate/v6/default.aspx?ln=en-us, 2. Microsoft Office products not working, 3. Norton Internet Security acting funny.

Here's what I did that seemed to work:

1. In Norton Internet Security, options, general, I selected manual start up.
2. I disconnected my computer from the Internet
3. I reboot my computer
4. With Norton Internet Security turned off, I opened Microsoft Word
5. Microsoft Word opened in safe mode.
6. I shut down Microsoft Word and restarted
7. IT OPENED!!!!!
8. I then manually started Norton Internet Security
9. With Norton Internet Security turned ON, I opened Microsoft Word
10. It Opened!!!!
11. In Norton Internet Security, options, general, I selected automatic start up.
12. I reconnected my computer to the Internet
13. I rebooted my computer.
14. With Norton Interent Security running and my computer connected to the internet, I tryed to open Microsoft Word
15. IT OPENED!!!

HERE IS WHAT MAY HAVE HAPPENED (Perhaps the experts here can confirm this)

The recent microsoft windows updateds affect Microsoft Office. If Norton Internet Security automatically boots up on restart, the Microsoft Office products (word, power point, etc.) never have a chance to fully integrate the new Microsoft Office updates. Thus, the Microsoft Office products stop working. By keeping Norton Internet Security from automatically starting in restart, the Microsoft Office products (word, power point, etc.) finally had a chance to fully integrate the new Microsoft Office updates.

Now, my computer seems to be back to normal.

 

Re: Spyware applications still won't update; Microsoft Word won't work

OK, everything's not OK. Even though I got MS word to work by jury-rigging it (turning off Norton Internet Explorer), MS word doesn't work with Norton Internet Explorer on. Also, the Spyware applications still won't update.

Because of the trojan.banker.vb.67647772 and the program files that could not be scanned by avast!, I still think there is a malware problem.

PLEASE PLEASE PLEASE look over my original post and review my HijackThis log. I spent a lot of time on this and I'm at my wits end Thanks.

 

As I suspected, my computer was massively infected with malware.

After updating with Microsoft Office XP Service Pack 3, my Norton Internet Security, including my Norton AntiVirus, started acting up, preventing me from using many malware and spyware applications, particularly Spybot - Search & Destroy. Norton also prevented my Microsoft Word from working (here's why).

Disabling the Norton AntiVirus Office plug-in allowed my Microsoft Word to work. By disabling Norton Interent Security, I finally was able to install, update, and run Spybot - Search & Destroy.

Spybot - Search & Destroy found problems:
1. Registry Cleaner - RegistryOptimizer.com
2. SearchSquire - adware/spyware
3. Sgrunt - Malware
4. My Norton Antivirus Disabled notification was turned off
5. My Norton Internet Security Disabled notification was turned off

Apparently, the authors of the above adware/spyware/malware know of the Norton/Microsoft Office/Windows Update problem and know how to take advantage of it.

I appreciate all the help you guys at MajorGeeks.com have give me on this spyware problem (look over the replys to this string and you'll see who I am thanking).

 

Hopefully, this is my last post on this saga.

I ran Norton's Automated Support Assistant at http://www.symantec.com/techsupp/home_homeoffice/index_ts.html?src=hho_us which determined that my Norton Internet Security alert/firewall settings were changed to block most anti-spyware and anti-malware programs. That's why I could not run/update many of the anti-spyware and anti-malware programs listed in this string.

Norton's Automated Support Assistant says it fixed the problem. We'll see.

 

Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.

- Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

• Make sure you check version numbers and get all updates.

After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis:

Downloading, Installing, and Running HijackThis

 

Shadow - Thanks for responding. If you look at my first post in this string, I did follow all the instructions at READ & RUN ME FIRST Before Asking for Support.

Hopfully, this will be my last post on this topic.

I thought I fixed Norton Internet Security, but I was still having problems. F-it. I uninstalled Norton Internet Security and followed the instructions at How to Protect yourself from malware!

In hindsite, I'm not sure whether I was using Norton's firewall or Windows Firewall. I assued that by installing Norton Internet Security, it would take care of everyting and use Norton's firewall.

Now I have a different firewall. I still have months to go on my Norton Internet Security subscription. Maybe I'll try to get a refund.

 

I'm not a fan of Norton products, especially NIS. NIS is bloated and a resource hog, it has brought down many systems.