Other Norton Products

[Stereophile11]

I have Comcast Internet  and I receive norton security suite free. Whenever the norton idle-time scan runs and ends, it always finds the same 3 medium/high-risk items and says they have been removed.  This has been happening for a few months now. Please help! 

P.S. ----The computer I am using runs fine.

[mdturner]

---

Stereophile11 wrote:

I have Comcast Internet  and I receive norton security suite free. Whenever the norton idle-time scan runs and ends, it always finds the same 3 medium/high-risk items and says they have been removed.  This has been happening for a few months now. Please help! 

P.S. ----The computer I am using runs fine.

---

Hi sterophile11

It is probably finding tracking cookies and they tend to be the same cookies most of the time depending on what sites you browse to - for example you will get doubleclick.net from Google sites.

[Stereophile11]

I don't mean cookies. It's finding Trojans. Norton labels these findings as medium/high risk.

[mdturner]

---

Stereophile11 wrote:

I don't mean cookies. It's finding Trojans. Norton labels these findings as medium/high risk.

---

Hi Stereophile11

Could you provide detail on what these Trojans are that are being found and where on your system. It would help also if you could provide screenshots of your Norton Log entries for these events.

Thanks

[Stereophile11]

I could not get any screen shots, but this is what I found in the "Quarantine Section" of Scan History. It's set up like this:

Severity                          Activity                                               Status                             Date & Time

Medium                   CoreGuardAntiVirus2009-                Quarantined                           --

                                  detected by Auto-Protect

---------------------------------------------------------------------------------------------------------------------------

High                        Packed.Mystic!Gen4 -detected         Quarantined                           --

                                 by Auto-Protect

---------------------------------------------------------------------------------------------------------------------------

  Medium                 CoreGuardAntiVirus2009-                Quarantined                           --

                                  detected by Auto-Protect

----------------------------------------------------------------------------------------------------------------------------

High                       Trojan. Fake AV detected by                Quarantined                         --

                                  Auto-Protect                                 

[mdturner]

Here are some Symantec documents to help deal with these infections

Trojan FakeAV

http://www.symantec.com/security_response/writeup.jsp?docid=2007-101013-3606-99

Packed.Mystic Gen 4

http://www.symantec.com/en/ca/security_response/writeup.jsp?docid=2010-030912-3805-99

CoreGuard Antivirus 2009

http://www.symantec.com/security_response/writeup.jsp?docid=2009-043009-2213-99

[Stereophile11]

 A few days ago, I read the documents(the links you sent) and followed the directions to remove the items. For example I turned off Windows system restore and then did a full-system scan. After that I turned everything back on. So now today, an "Idle Time Scan" ran and it found the same items. This bothers me b/c the "full system scan"  never found these items and my computer runs fine. Are these viruses on actually on my computer or are they gone??

[mdturner]

---

Stereophile11 wrote:

 A few days ago, I read the documents(the links you sent) and followed the directions to remove the items. For example I turned off Windows system restore and then did a full-system scan. After that I turned everything back on. So now today, an "Idle Time Scan" ran and it found the same items. This bothers me b/c the "full system scan"  never found these items and my computer runs fine. Are these viruses on actually on my computer or are they gone??

---

Hi Stereophile11

It would appear that they are.

Try running Malwarebytes free version to see what it finds (as a second opinion)

You can download it from www.malwarebytes.com - Install, update and run a full scan.

[floplot Norton Fighter]

Hello Stereophile11

If you had that many separate malware on your computer and they were cleaned and then showed up again, it is possible that you might have a rootkit on your system that is causing you to get these rogue programs. These types of malware are always changing also.so they may appear again if the root cause isn't broken first.

When you ran the full system scan, did you run live update first? The idle time scans run after the antivirus definitions have been updated. You might have got new versions of them or they weren't completely cleaned. If Malwarebytes finds any other malware, then I would suggest a visit to BleepingComputer.

[Stereophile11]

Would I have to uninstall Norton if I used Malwarebytes??