symantec email proxy

CTRL+ALT+DEL to activate the Windows Task Manager. Open the Services tab, search for the file lsvchost.exe and End process. Now delete the file. Furthermore follow these steps:

Click Start > Run.
Type regedit
Then click OK.

Navigate to the key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

In the right pane, delete the value:
".mscdr"="%System%\lsvchost.exe"

Exit the Registry Editor.


Now you should be clean from this trojan. Good luck!

Thanks too~

Cuz I've encountered the same virus~

Yes, I was able to successfully delete it, not that I was aware of any problems it was causing, but thanks nevertheless.

Norton Error

Since I did my update data night before last I encounter the same message. I looked for the file in Windows Task Manager but it is NOT there. In fact I have the error up in front of me now and it says SYMANTEC EMAIL PROXY " An encrypete email connection has been detected. At the bottom left it has 1003. 15 which I did a search on GOOGLE and drew a blank.

I rean Ad-Aware, Norton Anti Virus, and XoftSpy but all came up clean. I do believe it is a trojan but it must have come from Norton themselves eh ?

Any help appreciated as it is VERY ennoying and I refuse to pay $29.95 for support.

I don't understand why you people insist on living with the inadequacies of that Norton bloatware.
Get rid of it, or better, don't buy it anymore and tell your fiends not to buy it either.
Sooner or later Symantec will get the message that their programs are junk.

Uninstall it and replace with the free AVG from http://free.grisoft.com
AVG catches more than Norton, so why put up with Norton's crap?

i have the same problem with this. i get random emails and stuff that pop up frequently. it looks just liek that guys screen shot. but ive looked in windows/prefetch, system, system32 but i cant find lscvchost. But in windows/prefetch i have some really random files. here are the names of some of them:

ACRORD32.EXE-039F4C01.pf
ACSD.EXE-15DAB531.pf
ACSUNINSTALL.EXE-12C45482.pf

i dont really know much about viruses and stuff.. but recently my aol Instant messenger was crashed by some guy that i pissed off. I think it saved some files.. but i dont remember the names of them. write back plz

-Ronnie

Symantec Email Proxy NOT the Problem

I encountered this problem, yesterday and presumed the Symantec Email Proxy warnings I was getting (alerting to emails being sent every few seconds) was a Norton problem. I uninstalled Symantec, and of course, the pop up warnings stopped.

I installed McAfee's Internet Security Suite, and immediately started getting McAfee's "emails are being sent" warning pop-ups. This is the McAfee equivalent to the Symantec "email proxy" warning. BOTH Symantec and McAfee were telling me my computer had become a slave email proxy spam-sender. I updated the scan feature to the most current version, DAT 4660. I ran a scan and found two Trojan viruses that Norton had not found. One of them was called Proxy-Agent.aj. The description of the virus said it causes one's computer to send spam without the user's knowledge or control.

I removed Proxy-Agent.aj and the problem was solved. So, for what it's worth, I don't agree this was a problem with Norton's Symantec, EXCEPT for the fact that Symantec could not find the virus (but McAfee did).

Just thought I'd pass it along... it was a frustrating day, but I slept well last night. :giddy:

Email proxy

If anyone is interested, I had a client with this same problem, and Symantec AV CE did not locate any viruses or trojans. However, this problem continued to occur until I did a system restor to a point 3 days prior to the problem occuring. Temporary solution, probably, but it did manage to fix the problem.

I'm going to simply install Windows Defender on my client's computer, as all of our experiences with WD shows that it will catch more spyware and adware than AVG (a program I personally do no like) or Ad-Aware.

Just my two cents. Thanks for the postings everyone. I'll have to search my client's computer tomorrow and see if I find anything like what you all have found.

A fix for this issue

I ran a Trend Micro housecall scan and removed the Trojan W32.Mixor.Q@mm, then I uninstalled Symantec, removed the folders under program files and then re-installed Symantec. This took care of the problem for us, hope it helps others as well.

hey i had same problem. i tried using Trend Micro housecall but it doesnt show anything. it says my system doesnt have anything harmful. please help me

To delete a file when you get that message, right click on the file, cut the file, minimize the window you are working in and paste the file on your desk top. From there you should be able to delete the file as you have disassociated it. If you still cannot delete it, reboot (leaving the rogue files on the desktop and then you should be able to delete them. Be sure to empty recycle bin.

If you are unsure about a file, move it to a cd before you delete it so you have a backup copy just in case.

I'm working on the Symantec Email Proxy problem too. So far, some luck but not through yet.

Quick Fix to problem...

If you get the Symantec e-mail Proxy window you probably have a trojan of some kind on your computer.

As a cure for the symptoms (but not the disease!) you can block it from sending data from your PC.

Open up Norton Internet Security, click on Statistics then View Logs.
Close down any legitimate e-mail connections (e.g. Outlook).
Click on "Connections", then Refresh.

You will probably see several connections to an SMTP server. This is the Trojan program using your machine to "send" e-mails.
There will be probably be a common connection preceding all the different SMTP connections.
Configure Norton Internet Security to block it (Personal Firewall -> configure -> Networking -> Restricted -> Add.
Then type in the address.
In my case I blocked connections to 72.9.98.10 and 194.146.207.11 and the Proxy messages stopped.

This won't remove the worm/trojan from your PC, but at least you will prevent it doing any damage whilst you figure out how to remove it.

AVG worked for me

virus name=Proxy.LMB
where it was=C:\WINDOWS\winlogon.exe

showed up in task manager as winlogon.exe

Fix= Ran Free AVG Virus scan it did the rest problem solved

I tried doing a norton scan but it would hit this virus and the email proxy errors would go crazy(even if not connected to the internet)until my norton would crash ending the virus scan.

And thank you to everyone who posted here you.I've been living with this for about 2 months now and was to the point where all i wanted to do was kick the crap PC so I and my PC Thank you very much

NOTE:There were 2 winlogon.exe in task manager now there is 1

Ugh, I have the same problem and I've tried all of these techniques but the thing KEEPS popping up!

I'm getting sick of seeing this "Grow 3 inches" "impress a broad" "rocket Science" was unable to be sent because the connection to your mail server was interrupted. Please open your email client and re-send the message from the Sent Messages folder thing.

Can someone help me please? I don't know what to do.

*I can't reboot my box. This is the situation here.