In case someone else should get infected I have copied this removal from another site
just cleaned up a PC with this problem. not only do you have to clean out
mssearchnet you also have to clean out nvctrl mscornet possably others.
I used info from this site techspot
from
http://www.geekstogo.com/forum/nvct...exe-t82457.htmlfrom
http://www.sophos.com/virusinfo/ana...trojzlobbc.htmland from norton
http://securityresponse.symantec.co...valinstructions
I started in safe mode admin account and deleted
mscornet.exe
mssearch.exe
nvctrl.exe
ld????.tmp
ncompat.tlb
msvol.tlb
hp????.tmp
from c:\win*\system32
and from c:\win*\prefetch
and from %UserProfile%\Application Data\Microsoft\Crypto\RSA
and
%UserProfile%\Application Data\Microsoft\Protect
I think that was all of them.
Then I went into run regedit
did a find on the above files and deleted all of them. had to do some find next too.
then all seemed well so I went to norton and ran there Free Scan for Viruses
http://www.symantec.com/home_homeoffice/ its in the upper right hand side of page.
It found one more virus called spyaxe.trojan which I think is what started it all I deleted it and have had no more problems.
good luck took me about 6 hours. then again though im kinda slow.
Reply With Quote
Be aware that it also puts files in your RSA crypo folder