Yep..Notepad.Have done the edit.

Pancake and Lady Greenwitch,

I tried Pancakes Reg fix this morning, as I just had a little time, and it did not make a difference. I can not find a svchost.exe in the windows directory.

I repeated the processes of yesterday, except I could not get Housecall to run all the way through. It would download all of the files, and then sit with no action. I left it for up to 20 minutes, twice and tried two other times with less patience.

I currently do not have any small icons showing in the bottom right of my taskbar when running in normal mode.

Pc is getting slower - or I am just getting more tired.

thanks in advance for any other ideas you can give me. I will keep trying the Housecall, but must turn in soon.

Jmelo

That reg fix I posted should have removed that PowerManager key...

Hey Guys,

@Pancake, you know I really think that Norton AV is somehow allowing that virus to keep reinstalling itself. (had it happen to me a couple of times, bleh) It has been so many years since I had to deal with the ins and outs of NAV, do you know how to remove the files NAV stores the quarrantine in?

@Jmelo, This may be way out there, but it is still worth a try, please first right click on My Computer, choose Explorer, Click on Tools, Folder Options, click on the View tab. Make sure that under Files and Folders, Display the Contents of System Folders is checked. Under Hidden Files and Folders, Show hidden Files and Folders is selected, and Hide protected operating system files is deselected.

Now navigate to your Windows Folder, locate the INF folder, sort the files by size in ascending order, please post back with the number of 0kb .inf files.

Looking forward to your reply,

TTFN

LGW

I have seen problems before trying to remove these files.....

There is a tool to remove the 0000.temp

http://www.google.com.au/url?sa=U&st...00.html&e=9797

But I think the best tool for Nortons is......a blasted big axe.


If you ever think of uninstalling Nortons, here is a good guide

http://www.google.com.au/url?sa=U&st...71.html&e=9797

Hello Lady Greenwitch and @Pancake

There are three 0 KB files in my \windows\inf directory

I had spent a bit of time chasing the Norton described w32.jeefo, but could not find the rogue svchost, nor a powermanagment service running. But, then again, I am very new to this nasty infection business. I guess I have just been very lucky.

I looked at the dir000 removal tool, but could not find any of the dir0000 directories the symentic site referred to.

thanks again for your ideas.

Look forward to your next.

Jmelo