I recently fought through a Trojan.Vundo infection, and it looks like I've gotten pretty much everything straightened out. The only lingering problem that I'm seeing is that after startup, I get a popup warning from SAV saying that the Auto Protect is not running. Opening Symantec and checking the Auto Protect settings reveals that it is indeed running.
After some scouring of various web sources, I think I've found the problem- I'm not sure whether it was Vundo or some other opportunistic infection, but something appears to have over-written three of the .dat files associated with SAV. Specifically, they are:
C:\Program Files\Symantec AntiVirus\savrt.dat
C:\Program Files\Symantec AntiVirus\SRTPV.dat
C:\Program Files\Symantec AntiVirus\SRTSEXCL.dat
At this point, this is little more than an annoyance, but my searching has indicated that I'm not the only one who is annoyed, and I haven't found where anyone has definitively worked out the problem.
thread742-1183531
After some scouring of various web sources, I think I've found the problem- I'm not sure whether it was Vundo or some other opportunistic infection, but something appears to have over-written three of the .dat files associated with SAV. Specifically, they are:
C:\Program Files\Symantec AntiVirus\savrt.dat
C:\Program Files\Symantec AntiVirus\SRTPV.dat
C:\Program Files\Symantec AntiVirus\SRTSEXCL.dat
At this point, this is little more than an annoyance, but my searching has indicated that I'm not the only one who is annoyed, and I haven't found where anyone has definitively worked out the problem.
thread742-1183531