What should I try next

[Steve]

I have a PC with Norton Internet Security which was disabled. After the PC
was rebooted and NIS restarted the PC started behaving oddly.

If it is not connected to the internet I get a dial up prompt saying that
windows is trying to contact various hosts e.g. spazattack.hax0r3d.net with
a dial or close box. I am fairly certain I have no reason to be going there.

Additionally if the PC is dialled up to the net I keep getting Norton
Internet security alerts for various programs trying to access the internet
winload.exe winuser32.exe msgfixed.exe and symantec.exe or symantec32.exe (I
can't remember which) I've looked at the properties of most of these
programs in explorer and they don't have any version or company information
which makes me suspicious.

I have run a full Norton Anti Virus scan which found nothing and also ran
spybot and adaware with nothing suspicious found.

I'm at a loss for what to try next - I do not know if my Norton Internet
Security list of applications allowed applications has become corrupt and
that is why it is alerting or whether there really is a problem

Very grateful for any advice

 

[Geese_Hunter]

I have a PC with Norton Internet Security which was disabled. After the PC
was rebooted and NIS restarted the PC started behaving oddly.

If it is not connected to the internet I get a dial up prompt saying that
windows is trying to contact various hosts e.g. spazattack.hax0r3d.net with
a dial or close box. I am fairly certain I have no reason to be going there.

Additionally if the PC is dialled up to the net I keep getting Norton
Internet security alerts for various programs trying to access the internet
winload.exe winuser32.exe msgfixed.exe and symantec.exe or symantec32.exe (I
can't remember which) I've looked at the properties of most of these
programs in explorer and they don't have any version or company information
which makes me suspicious.

I have run a full Norton Anti Virus scan which found nothing and also ran
spybot and adaware with nothing suspicious found.

I'm at a loss for what to try next - I do not know if my Norton Internet
Security list of applications allowed applications has become corrupt and
that is why it is alerting or whether there really is a problem

Very grateful for any advice

Go to majorgeeks.com then the spyware tools section & download, install
& then update spybot search & destroy, cwshredder,
coolwww.search.smartkiller, hijackthis & ad-aware.
Try the windows Startup Inspector that is supposed to remove unwanted
dialers.
Becareful of hijack this as you can destroy your registry if you don't
know what you are doing. You can post your results at http
://tomcoyote.com/forums/ or www. spywareinfo.com/forums/

 

[Steve]

Go to majorgeeks.com then the spyware tools section & download, install
& then update spybot search & destroy, cwshredder,
coolwww.search.smartkiller, hijackthis & ad-aware.
Try the windows Startup Inspector that is supposed to remove unwanted
dialers.
Becareful of hijack this as you can destroy your registry if you don't
know what you are doing. You can post your results at http
://tomcoyote.com/forums/ or www. spywareinfo.com/forums/

OK - I've already tried Ad-aware and spybot. I've now tried cwshredder and
collwww.seach.smartkiller which found nothing.

I've installed Sophos antivirus and run a scan with nothing found

I've run hijackthis and have posted the results spywareinfo.com forum.

Additionally one of the other sites the PC tries to dial is
serd.freesubdomains.net and when I disconnect from the net the first time
after booting up I get a windows saying "msgfixed.exe has generated an error
and will close" or similar

 

[Netuser 58]

Try Symantec's online scanner:

http://security.symantec.com/sscv6/vc_about.asp?langid=ie&venid=sym&plfid=20&pkj=NOGLGBYNCJEIMXQKCDT