Norton Internet Security / Norton AntiVirus

[Angelal]

I am unable to log in to my HSBC online bank account.  As soon as I start to enter ID user number on the log in page, it immediately switches to a never seen before 3D secure page, followed by a further page asking for my debit card details.  At the same time all the icons disappear off my desktop.  HSBC says this is a scam/virus.  I can access my account normally  through other computers.  So why has this virus attached itself  and  not been removed by Norton?  I have Norton Internet Security 2011, have run a full scan and live update.  HELP please!

[cgoldman]

Suggest you download, install and run Malwarebytes scanner http://www.malwarebytes.org/, or Mcafee scanner and advise if either show that you are uninfected.

I cant answer your questions because I do not know which virus if any or malware you have.

[Angelal]

have used the malwarebytes scanner and that has shown 0 infected items.  I understand that 3-D Secure is a system to authenticate Visa and Mastercard purchases online.  However, the one that has attached itself to my ID user box for HSBC online banking is a fake registration form.  According to searches on Google, it is part of the Zeus virus family.  What is so odd is that if I close the form, all the icons on my desktop disappear including the start button.  Task Manager shows nothing running so the only way I can get the computer operating is to switch off at the mains.

[donziehm]

Unfortunately, there are many different versions Zeus with new ones appearing at fast the Bot Kits that generate then are being sold. For a technical read, check out this article: http://www.malwarehelp.org/find-and-remove-zeus-zbot-banking-trojan-2009.html.

Have you tried running a full Norton scan in Windows safe mode without the network option? Try that and see if it finds anything.

[donziehm]

Here is also a link where you can download some free anti-rootkit scanners: http://www.techsupportalert.com/best-free-rootkit-scanner-remover.htm?page=2. As with all security software make sure you read their help files and understand what they do before running then.

If you are sure you are infected with Zeus, the free version of Prevx will stop it in it's tracks. It is referenced in the above link. Make sure you download the "randomized name" option since Zeus will try to destroy Prevx the minute it sees it. Also before starting a scan with Prevx, turn off Norton's AV auto-protect since it might interfere with Prevx. Do not turn off Norton's firewall!

When you are done with Prevx, I recommend you uninstall it since it can interfere with NIS 2011. Make sure you turn Norton's auto-protect back on.