Solved Virus on laptop

[ozer256]

My norton still says that it is blocking unauthorised access from svchost.exe and conhost.exe

 

[Broni]

Your computer is definitely clean so I'm not sure what Norton is bothered with.

Can you post some sample notice from Norton?

 

[ozer256]

Date 19/06/2015 16:06:41
actor C:\WINDOWS\SYSTEM32\CONHOST.EXE
Actor PID 4980
Target C:\Program Files (x86)\Norton Internet Security\ Engine\21.7.0.11\cltlmh.exe
Target PID 3508
Action Access Process Data
Reaction Unauthorized access blocked

 

[ozer256]

Date 19/06/2015 16:05:29
actor C:\WINDOWS\SYSTEM32\CONHOST.EXE
Actor PID 4748
Target C:\Program Files (x86)\Norton Internet Security\ Engine\21.7.0.11\conathst.exe
Target PID 4816
Action Access Process Data
Reaction Unauthorized access blocked
Terminal Session 1

 

[ozer256]

Date 19/06/2015 00:40:20
Actor C:\WINDOWSSYSTEM32\SVCHOST.EXE
Actor PID 792
Target HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BHDRVX64\0000\Control\
Action Set Registry Security Key
Reaction Unauthorized access blocked

 

[ozer256]

Date 18/06/2015 23:19:02
Actor C:\WINDOWS\SYSTEM32\SVCHOST.EXE
Actor PID 5240
Target C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF91126E7}\NIS_21.6.0.32\CmnClnt\ccSubSDK\{0616D225-8EEB-4D55-A9DF-CC7E814F2636}
Action Open File
Reaction Unauthorized access blocked

 

[ozer256]

Date 18/06/2015 23:17:42
Actor C:\WINDOWS\SYSTEM32\SVCHOST.EXE
Actor PID 5240
Target C:\Windows\System32\drivers\NISx64
Action Open File
Reaction Unauthorized access blocked

 

[ozer256]

Date 18/06/2015 23:17:37
Actor C:\WINDOWS\SYSTEM32\SVCHOST.EXE
Actor PID 5240
Target C:\Program Files (x64)\ Norton Internet Security
Action Open File
Reaction Unauthorized access blocked

 

[Broni]

According to various topics on Norton site, like this one: http://community.norton.com/en/forums/unauthorized-access-blocked-set-regietry-security-key (you can Google for more) you shouldn't be concerned about those entries.