Several XP probs - possibly Norton-related

Hello,

This is my first post so apologies in advance for my lack of computer nous. I'm having a number of problems with my Compaq nx9005. MY OS is Windows XP Pro.

I managed to get infected with the Sasser worm about a month ago, which was pretty crippling. My computer had Norton Anti-virus 2003 with up-to-date subscription but out-of-date virus definitions. However, I couldn't run LiveUpdate or connect to Norton/Symantec websites. I tried to install Norton 2002 (as I had a CD for it) but the same problem persists.

Then the worm problems seemed to go away (I suspect they didn't). My computer was running much better with more speed and less crashing. But still I can't use Norton and other problems persist, namely:

- My ipod isn't recognised and musicmatch won't open. I'm told that there could be a software conflict with Norton but I can't unistall Norton 2003 because of a Fatal Error during Installation.

- Computer still runs slowly and is prone to crashing. Task Manager often just freezes for example.

- (Possibly unrelated) but I cannot set up a home network. At first Network Wizard was carshing due to an error with the "Spooler subsystem App" but I disabled that for the Wizard process, it ran fine but still doesn't recognise an incoming connection with another machine (And I have checked the cable).

Basically, the machine's quite buggered. Sorry for rambling but any advice would be gratefully received!

Thanks.

 

if i remember correctly you can d/load the fix for the sasser i think from nortons site. try to go to nortons site via your ie rather than going through nortons live update because if you do have other virus it usually wont let you do a live update . also you can do a online virus scan.also [ this is a shot in the dark] have you ran spybot aswell as adware remover. this should hopefully help clean the puter out and maybe speed things up a little.

 

Cheers, Bern.

I can't get onto the Symantec/Norton web site. I get one of those Canot find server / 'This page cannot be displayed' page instead. Any other ideas?

I will run spybot too though. Thanks!

 

Try this
http://www.majorgeeks.com/download.php?det=4063

 

Cheers Kodo,

Well, good and bad.

After about 5 seconds, the stinger detected W32/Dumaru.al.dll trojan in my C:Windows/prntsrvr folder but the program then encountered a problem and had to close. It does this on repeat attempts too.

Any ideas on what to do next?

 

see if you can get this installed and scan
http://www.majorgeeks.com/download.php?det=1968

 

I've had to run Stinger from Safe Mode before. I'd say give it a shot.

I'm finding that people are forgetting that there are times when viruses "piggyback" with Sasser onto the system.

They remove Sasser, but they forget about it and it shows up later that there is still another baddie or more on the system

 

Thanks guys.

Firstly, I downloaded and ran avast. It found a number of infected files but couldn't repair them due to Error 42060. I deleted files containing:

Win32:Bobax-b [UPX]
Win32:Gobot-C [Trj]
Win32:Gaobot-S72 [Wrm]
Win32:Korgo-F [Wrm]

Other files in my Windows folder (mainly in the system32 folder) contained:

Win32:Sasser-e [Wrm]
Win32:Bobax-B [Wrm]
Win32:Korgo-F [Wrm]
Win32:Bobax-B [Wrm]

When I chose to delete them I was asked if I was sure. I wasn't, so I ignored them, instead of deleting.

I then tried to run Stinger again in Safe Mode but found I no longer have permission to access it.

Any ideas on how to proceed?

 

In Avast, schedule a boot-time scan. This will allow Avast to access all files before Windows can lock them. Choose to repair (or delete if it can't repair) everything Avast finds.

 

Alan c & Kaula,

Thanks. Followed both of your advice and have managed to remove Sasser using the removal tool, plus my other viruses using Avast.

Bizzarely, I'm still not able to get on the Norton/Symantec websites. And for some reason I'm unable to remove Norton. Any ideas what this could be?

I'm told that my antivirus software may be causing my computer to not recognise my ipod when it's connected, so I'd like to shift it and then repurchase the latest one.

 

Cheers DV8Cowboy.

I've no real affinity to Norton. Just want whatever's safest for an easy life. Any idea why it won't let me uninstall?

 

one of the viruses probably toasted the install of norton.. it's a bitch to clean out.
You may need to do the uninstall manually, but you might want to hit Symantec's site and search for anything related to the inability to uninstall.
Use avast as your main.

 

Thanks again Kodo.

First up, how do I do a manual unistall? I've tried getting shot of it in Add/Remove Programs but it freezes on me.

Also, part of the problem is I can't get on the any Symantec page at all. I guess that's the virus again.

If I even search google for 'anti virus' my internet explorer window shuts. Is that the virus too? That seems really sophisticated if it is...

 

yeah definately sounds like you still have a nasty on your machine.
Run another Avast scan but set it for scan on boot and then reboot the machine. That will hopefully catch anything before it loads up and can't be removed.

 

Okay. Tried a boot-scan and it's not picking anything else up.

Any ideas how I can uninstall Norton?

 

I am trying to be helpful not hurtful with this statment. Ok? If my computer was this buggered I would backup,format,re-install and start over providing you have the software you need to do it with and won't lose anything you can't do without. I have done it having way less problems than you are having now. Maybe one of these great helpful (smarter than me) peeps here can give you a real no BS assesment of time to fix your problem Vs formatting and re-installing. I know from experience and because I am stubborn about fighting lost causes mind you I'm not saying your cause is. Good luck and I hope you win!

 

Hi mw7734,

I know you're talking sense, but formatting is a real last resort to me. For one thing I've downloaded so much stuff that it'd be a huge pain in the arse to get it all onto CDs. So if I can possibly avoid it. I will.

Any other ideas would be gratefully received.