Quads
Malware Removalists
In New Zealand
Posts: 9,387
|
Post by Quads on Apr 21, 2014 17:28:42 GMT -8
You can try without disabling (the auto-Protect function first.
Quads
|
|
|
Post by squirrel on Apr 21, 2014 17:37:37 GMT -8
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 21-04-2014 02 Ran by Bobby at 2014-04-21 18:31:23 Run:3 Running from C:\Users\Bobby\Desktop Boot Mode: Normal ==============================================
Content of fixlist: ***************** start C:\Users\Bobby\AppData\LocalLow\yhecl.dll end *****************
Could not move "C:\Users\Bobby\AppData\LocalLow\yhecl.dll" => Scheduled to move on reboot.
=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2014-04-21 18:33:16)<=
C:\Users\Bobby\AppData\LocalLow\yhecl.dll => Is moved successfully.
==== End of Fixlog ====
|
|
Quads
Malware Removalists
In New Zealand
Posts: 9,387
|
Post by Quads on Apr 21, 2014 17:41:21 GMT -8
OK it has moved it.
Now when you go to into you Hard Drive in Computer you should see a folder called FRST ( C:\FRST) sitting there.
Quads
|
|
|
Post by squirrel on Apr 21, 2014 17:43:25 GMT -8
Yes, I see it.
|
|
Quads
Malware Removalists
In New Zealand
Posts: 9,387
|
Post by Quads on Apr 21, 2014 17:48:21 GMT -8
Inside the FRST folder should be a folder called Quarantine
and inside the Quarantine folder Which your are to right click to get a menu appear.
Select send to and from there select Compressed (Zipped) Folder and now a zip archive is created.
Quads
|
|
|
Post by squirrel on Apr 21, 2014 17:50:57 GMT -8
Auto protect came on and Norton quarantined it?
|
|
Quads
Malware Removalists
In New Zealand
Posts: 9,387
|
Post by Quads on Apr 21, 2014 17:52:31 GMT -8
Did Norton take the zip file??
Quads
|
|
|
Post by squirrel on Apr 21, 2014 17:55:30 GMT -8
I don't believe it did, it wouldn't let me put it in a zip. I went back to C:\FRST and it still appears to be there.
|
|
Quads
Malware Removalists
In New Zealand
Posts: 9,387
|
Post by Quads on Apr 21, 2014 18:03:45 GMT -8
Because Norton detected the file inside as W32Mezit!Inf so won't allow it.
Hmmmm looks like we will have to Disable Auto-Protect so that the Quarantine folder can be zipped.
Quads
|
|
|
Post by squirrel on Apr 21, 2014 18:06:17 GMT -8
So, disable auto protect, save the file to a zip and attach it in my next post?
|
|