Endpoint Protection

May we seek support regarding the virus outbreak incident here in our office . were infected by a virus/worm/trojan/spyware (e.g. W32.SillyFDC, Hijack.Regedit, Hijack.TaskManager, Tojan.Backdoor. Trojan.Agent, Disabled.SecurityCenter). Among the common symptoms are the ff:

1. Registry editing has been disabled
2. TaskManager has been disabled
3. Cannot Installed Software (e.g. SEP)
4. Unable to access SafeMode mode
5. Hijacked desktop tray icons and desktop shortcuts
6. Web browser and search engines redirected to strange webpages (e.g redtube.com) - only 1PC

How can we work on this issue

Restart the computer in safe mode with networking  and run NSS

ftp://ftp.symantec.com/misc/tools/nss/NortonSecurityScan.exe

If you are not able to open regedit, you can alwys try and use unhook.inf tool from symantec to fix it for more details on same and for downloding it please visit following website,
http://www.symantec.com/security_response/writeup.jsp?docid=2004-050614-0532-99

I cant even start my pc on safemode

Please try my utility,

https://www-secure.symantec.com/connect/downloads/simple-utility-reset-folder-options-show-all-hidden-enable-registry-editing-enable-task-ma

if still doesnt work, please try to run Loadpoint Diagnostic Tool from Symantec, and post the logs here.

You can download the tool here:

https://www-secure.symantec.com/connect/sites/default/files/ESUGLPDU_2.07a.zip

Run NSS in normal mode

He said he cannot access safe mode.

Boot the computer using Bootable Disk(CD)

Try to repair the OS through recovery console, this may replace the corrupt files.

My suggestion is to run Nss.exe in safe mode.

IF ur able to use CMD u can use reg add /? commands to start ur registry editor...........

Revert back for more details