Spyware changing system settings

[jholland1964]

This should remain here and not be in another thread. I find it very odd the only program you can access is that Xoft program. Can you shut down, reboot and choose another user? Even though you are the only user you may have the option to log on as administrator...I know that is you...but see if you can.

[smitty1366]

I can't tried all of that, won't let me do anything. I'm the only user on the computer, it shows a guest icon but it is off. I just don't know what happened, everyhting was running great till norton was removed. I even tried to access thing the the run button but get the same message.

I tried to delte the other one but can't figure it out

[jholland1964]

See if you can log on with the guest account.

[smitty1366]

I'll try that when I get home, and either post from there or go up to my kids room and post the results

[smitty1366]

Well, it came down to the dreaded format "C" command. I tried evrything from running the windows reapir from the disc, putting in a windows internals disc so I could at least do the most basic, and even creating an new account and taking control of ownership, but nothing worked.

So I just wanted to say thankyou for all the help, and time you gave me. I'm just sorry I couldn't get to the end, it was working. Thanks again.

Bill

[jholland1964]

I am sorry too Bill. Sounds as if there is/was a major nasty working there. Especially since this stuff happened after using that tool. Makes me believethat even though you thought originally you had uninstalled Norton, it was not uninstalled, probably because it had been severely damaged itself by one of these Trojans.
The F-Secure scan removed no fewer than 6 High Risk Trojans. All of these are rated HIGH and all found in the Norton Quarantine folder and all will do the following;

High risks are typically installed without user interaction through security exploits, and can severely compromise system security. Such risks may open illicit network connections, use polymorphic tactics to self-mutate, disable security software, modify system files, and install additional malware

The MBAM removed another huge number. Your Uninstall list showed virtually ALL of that Norton program still there, even though you thought you had uninstalled it.
At this point, I always hate to say this, but a reformat reinstall is probably the only way to go to be absolutely certain that this computer is completely clean. Remove the internet connection from that computer immediately.

The other warning I have to give is this;
These risks may also collect and transmit personally identifiable information (PII) without your consent and severely degrade the performance and stability of your computer. So if you do online banking or shopping then I would contact your bank and credit card companies and let them know that this has happened, chances are you should change your credit card numbers and any other number which can cause you credit problems in the future.
I am so VERY, VERY sorry.