When I log on Norton pops up a message saying a virus has been detected, and proceeds to remove it, but when I restart/log on again the virus is back and Norton pops up again. The file is vbstub.exe, but I can't figure out which program is creating/running it every time I log on. I've tried deleting it in safe mode, but the file isn't even present when in safe mode.

Please download and install the latest version of HijackThis v2.0.2: Download the HijackThis Installer from this link: HijackThis 1. Save " HJTInstall.exe" to your desktop. 2. Double click on HJTInstall.exe to run the program. 3. By default it will install to C:\Program Files\Trend Micro\HijackThis. 4. Accept the license agreement by clicking the "I Accept" button. 5.Click on the "Do a system scan and save a log file" button. It will scan and then ask you to save the log. 6. Click "Save log" to save the log file and then the log will open in Notepad. 7. Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log. 8. Paste the log in your next reply. 9. Do NOT have HijackThis fix anything yet! Most of what it finds will be harmless or even required.

HiJackThis list is not needed I think. Take a look at the forum below: http://forums.spybot.info/showthrea... Seems it can be removed manually.. I wonder why it reappears when norton removes it..

Description: vbstub.exe is a process which is registered as the Backdoor.W32.Agent Trojan. This Trojan allows attackers to access your computer from remote locations, stealing passwords, Internet banking and personal data. This process is a security risk and should be removed from your system. Scan Your PC including vbstub.exe to Detect any Security Threat Recommendation: http://www.processlibrary.com/direc...