• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
This forum thread needs a solution.
Kudos0

Virus remover 2008

I purchased the subscription to Norton 360 and it has worked well.  However, a malware got into my computer called Virus Remover 2008.  It is obviously entrenched in my computer so my question is this:  why didn't Norton 360 catch it and stop it and why doesn't Norton 360 take it out?

There are only two people that log unto my computer so one of us let the virus in.  How?  Thru email?

Also I chatted with the virus staff from Symantec and they will charge me $99 to remove the software.  Why?

Replies

Kudos0

Re: Virus remover 2008

A) How do you know that there is a virus on your computer called "Virus Remover 2008"? The Symantec support staff probably used Norton, which would have been of no help. Did you use another antivirus? Sometimes they interfere with each other.

B) Can you describe the symptoms?

  1. Are there annoying pop-ups when you logon to the computer, even when you disconnect the internet?
  2. Has your Internet homepage changed?
  3. Can you tell us what is under the startup tab when you type "msconfig" in the run dialogue? 
  4. Can you tell us or take a screenshot of the processes in Task Manager. Note, not applications running, but processes.
  5. Are there any suspicious files and folders in your C:\Windows directory, C:\Program Files, and the startup directory (Start>All Programs>Startup. 

C) Actions to Take

  1. Clear System Restore (Right Click on My Computer>Properties>System Restore>Turn System Restore Off) Leave System Restore off
  2. Backup all important files and documents to a flash drive. Be sure NOT to plug the drive into any other computer unless it has an antivirus. 
  3. Update Norton with LiveUpdate (Run>luall)
  4. Run a Comprehensive Scan. If nothing is found, run scans of C:\Windows, C:\Program Files, the start menu (Right Click>Norton 360>Scan Now
  5. If Norton finds nothing after performing those scans, go to Settings>Turn Eavesdropping Detection On. Also go to Virus Protection and Removal, and make sure that SONAR and scanning for low risk threats is turned on. Also make sure to take all files and folders and file extensions out of Exceptions
  6. Then Repeat Step 4
  7. If Nothing found, download Norton Antibot from: http://www.download.com/Norton-AntiBot/3000-8022_4-10698973.html
Norton 360 includes certain aspects of Norton Antibot, but sometimes the real thing is needed. Researching, I have found Virus Remover 2008 to be an widespread epidemic. Please tell me if you have Norton 360 version 1 or 2. Version 1 uses the 2007 engine, while 2 uses the 2008 engine. Version info. can be found under Support>About. You should preferably have 2.4.0.4
=\
Kudos0

Re: Virus remover 2008

I will check this at home this evening for the version of the virus.  Yes, it does do the annoying popups, claiming that I am under siege and need to buy their product to rid of the virus.  I have an icon in the taskbar that is a shield or red circle with a black 'x' in the middle.  When I try to click on it, it disappears, then will reappear in a minute or so, claiming the same messge over again.  Yes my homepage did change.

Was this an email attachment to my computer?

Thanks.

Claire

Kudos0

Re: Virus remover 2008

Possibly, but highly unlikely. What email provider do you use? Yahoo, Hotmail, Gmail, etc.?

All major email clients prevent sending of executables and use a virus scanner to detect all outgoing and incoming infected files. A virus would need to sneak past the sender's email provider and past your email provider's antivirus. 

Just by connecting to the internet, you risk being exposed and infected by malware. You can try to visit legimate sites and download trusted files and keep your computer patched, but without an Antivirus, you are certain to be infected. 

The information you provided was extremely useful. Could you be more specfic. 

  1. Changed Homepage URL.
  2. What the popup's say
  3. The name of the rouge program (Antivirus 2008, Vista AV, Spyware KIller, etc.)
Also, can you please complete the previous steps and post the results as soon as possible. As for now, I suggest disconnecting from the internet unless absolutely necessary as you risk having your personal information and files being exposed.
=\
Kudos0

Re: Virus remover 2008

Thank you Tech0utsider!!!

You saved the day!

I followed your suggestion and downloaded Norton AntiBot.  The AntiBot scanned my computer, said it found a spyware program and boom it was gone.

I will be keeping an eye open to make sure the malware is gone but for now, all is good.

Sincerely,

Claire

Kudos0

Re: Virus remover 2008


Claire wrote:

Thank you Tech0utsider!!!

You saved the day!

I followed your suggestion and downloaded Norton AntiBot.  The AntiBot scanned my computer, said it found a spyware program and boom it was gone.

I will be keeping an eye open to make sure the malware is gone but for now, all is good.

Sincerely,

Claire


Thank you Claire. I take pleasure in helping others. 

To check if all the malware was removed, please run a HiJackThis Scan and post the contents of the log file here.

A download mirror is provided below:

http://www.download.com/Trend-Micro-HijackThis/3000-8022_4-10227353.html 

=\
Kudos0

Re: Virus remover 2008

Question: Should be the case, always? IOW, should I always keep the Exceptions cleared out?

Tnxs, in advance.

rws8258


Tech0utsider wrote:

Also make sure to take all files and folders and file extensions out of Exceptions.

Replies are locked for this thread.