This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

Can't remove virus detected by Norton 360 and Ad-Aware AE

53 min read

This thread's last reply is from April 11, 2009, 3:22 AM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

Hi,

There were reboots prior to Norton flagging the error. I'm delighted with the results, since this is only a reference to a non-existent file from a backup configuration I'm not going to let it keep me up. Just wanted to give the laptop back to my neighbor without having to explain that they need to ignore what appears to be a scary message.

I appreciate EVERYTHING you helped me through !!!!

Thanks,

Louis
Hi,

I took a quick peek in the registry with REGEDIT, all I saw was ControlSet001 and ControlSet003. I looked in both but saw no reference to UACd.sys under services. I even took a peek in CurrentControlSet. I've made no changes, am going to let my neighbor work it out with Norton.

Thanks !

Louis
Hi
Just another thought.... that errant entry may also be in the System Restore though that should have been reset when we removed Combofix. You could try creating a new clean System Restore point to see if that gets rid of it:
Click Start->All Programs->Accessories->System Tools->System Restore
Select Create a restore point, then Next, type a name like All Clean then press the Create button and once it's done press Close
Now remove old System Restore points:
Next click Start->Run and type cleanmgr in the box and click OK
Ensure the boxes for Temporary Files & Temporary Internet Files are checked. You can choose to check other boxes if you wish but they are not required.
Select the More Options tab, under System Restore click Clean up... and click Yes to the prompt
Click OK and Yes to confirm.
Hi,

I've returned the laptop, but I will insure this process is also followed.

Thanks !

Louis
OK... no worries

Good luck & Safe Surfing :)
As this issue appears to be resolved,