My computer has had Norton 2010 on it for at least a month or two. This morning, it started acting funny and the desktop wallpaper changed to a warning about a virus. I fully updated my definition, which was already updated, and scanned the computer, finding nothing.
I then restarted in safe mode and scanned with Malwarebytes and it found three virus'. I restarted the computer and now its locked with logging in and out. WHY and HOW did my computer become INFECTED, when I know im fully updated AND auto-protect is enabled??.
WHY didnt norton protect my computer? If I am using it wrong, please someone tell me. I do not surf the web randomly, I do not visit bad sites, I visit news sites like CNN, 1010win, and MSN. WHY?!?
Sorry to hear about your problem. Unfortunately, no security program is 100 % effective. Which Norton 2010 product do you have installed now and which version of that product. Can you recall what the virii were? The first warning you saw was probably not from your Norton product, but from one of these fake antivirus programs going around. Unfortunately, sometimes all it takes to get infected is to surf around and then you get infected with some fly by virus without really having to do anything. Malware changes so quickly.
It could help others as well as possibly clarifying to you what happened if you would say what the infections that Mallwarebytes discovered.
It should keep a log which is a text file that you can copy/paste into a message here.
Just for reference what version of Windows are you using, including Service Packs and whether 32 bit or 64 bit; and what is the version of "Norton"? Is it Norton AntiViurs or Norton Internet Security? Please also look in its Help / About and give the Version ID which is in the format of nn.nn.nn.nnn That will tell us how uptodate you are.
How do you connect to the Internet? Dial upo, cable modem, DSL .... ? and do you have a router in the internet connection?
All useful information to help us try to help you in what must be disturbing.
My office computer today got taken over by an "antivirus" program that starts out as a pop up that repeatedly offers a free trial virus scan. My co-worker called me at home to ask me if this was OK. I didn't know this was NOT a Norton 2009 virus scan, so I said don't worry. When I logged on via GoToMyPc a short time later the program was displaying a "Personal Security" window with a Windows Security logo with a long list of viruses discovered and another window asking you to register. I tried to shut all this off but it refused. The Norton program did put up a window at about the same time saying it had repelled an attack. I had my coworker shut down the computer and reboot, but now the virus/trojan is installed. It blocks access to Norton support as a "dangerous web site" and the real kicker is that it blocks access to the Windows Control Panel/System button. So you can't even System Restore the machine. Now it's firewall now blocks my GoToMyPC access as well. This occurred on a Windows XP system with DSL. If there is any way to reverse all this stuff without major custom repair, please advise...also, hopefully these specifics will help get a security patch developed ASAP, as this is a dangerous, destructive piece of malware.
My computer has had Norton 2010 on it for at least a month or two. This morning, it started acting funny and the desktop wallpaper changed to a warning about a virus. I fully updated my definition, which was already updated, and scanned the computer, finding nothing.
I then restarted in safe mode and scanned with Malwarebytes and it found three virus'. I restarted the computer and now its locked with logging in and out. WHY and HOW did my computer become INFECTED, when I know im fully updated AND auto-protect is enabled??.
WHY didnt norton protect my computer? If I am using it wrong, please someone tell me. I do not surf the web randomly, I do not visit bad sites, I visit news sites like CNN, 1010win, and MSN. WHY?!?
Thank You.
Hi sarapicone,
Do you recall running any unknown programs or opening any PDF files recently ? Also, can you comment on which browser you use ?
It sounds like you have a rogue antivirus infection. Can you try and see if you can run a full scan with the free version of malwarebytes. The fake antivirus program may not know this site, so you may be able to download and install this program. I don't know if you will be able to get to it or not. You may have to go to a site like bleepingcomputers to get it cleaned up.
Download the free version, install and update then run a FULL scan. After the scan completes you should post the logs back to this thread.
It is a safer location to get the program from than malwarebytes themselves because the malware writers some times block the security programs' websites.
I just wanted to update you on the curious experience I had with my rogue "antivirus program" situation later in the day. I had left my office computer on in order to check back later via GoToMyPc and see what changes might have occurred in the functionality of my computer. To my surprise, the computer now functioned normally again. I did still see a "Personal Security" icon on my desktop, so I thought maybe I could uninstall it now. When I opened up the Add/Remove Programs function, and checked on "Personal Security" it reported it as having already been uninstalled, and asked whether I wanted to delete the listing, which I agreed to. I had to reboot to get my desktop icons to show, and that was it. I then deleted the desktop icon too. I plan to download your recommended Malwarebytes free program from Filehippo next time I get to the office.
I did still see a "Personal Security" icon on my desktop, so I thought maybe I could uninstall it now. When I opened up the Add/Remove Programs function, and checked on "Personal Security" it reported it as having already been uninstalled, and asked whether I wanted to delete the listing, which I agreed to. I had to reboot to get my desktop icons to show, and that was it. I then deleted the desktop icon too. I plan to download your recommended Malwarebytes free program from Filehippo next time I get to the office.
I think you are probably OK by clicking where you did but one thing to be wary of with malware is that they are devious enough to try to fool you by clicking on something like "Do you want to remove this?" after you have run an uninstaller and that action promptly reinstalls it either from a hidden file or from a website!
So it is a good idea to run the free Malwarebytes program -- after you install it make sure you use the Update tab and get the latest definitions since the update very frequently.
Hey Shane...I also have just gotten this 'Personal Security' virus on my work computer. I really don't know how it happened , it happened when a co-worker was on my pc and i was out of the office. I assumed that Norton would help me resolve the situation, and they said they would do so, but for a fee. A fee? What am I paying for now? And then just a few lines up in this thread there is a guy posting a link to a piece of free software that will remove the malware...
I have always been pleased with my Norton service...and have been using it for a loooong time...but this new pay service (which starts at $100(?!?)) is crazy...in my mind, Norton should have blocked this to begin with...and certainly a Norton scan should be able to identify and resolve this issue.
Unfortunately, no antivirus program is 100 % effective all the time. This is why we recommend a full scan with 2 particular free programs which do not interfere with your Norton product. They are the free version of Malwarebytes and the free version of SuperAntiSpyware. Both of these programs are on demand scanners and they are good in checking the registry and cleaning out any remnants even of old infections from the registry. I would say it's a good habit to try and use one of these products like once a week along with keeping your programs up to date and practicing safe computer habits and surfing.
Hey Shane...I also have just gotten this 'Personal Security' virus on my work computer. I really don't know how it happened , it happened when a co-worker was on my pc and i was out of the office.
[ ... ]
I think that explains it since the majority of this kind of malware gets onto a computer because of something we ourselves do, albeit unwittingly! When you get a popup like that it is easy to think it comes from your security application and to click on it to go ahead, and get infected. But the Catch 22 is that the malware writers set it up so that if you click on the [X] or anywhere in the popup that is a Yes also and it goes ahead with its attack.
And since the user, so far as your computer is concerned, invited it in then it is possible that it gets by the first line of defence since you would be upset if everytime you told the computer to do something it asked if you knew what you were doing! Oh I forgot .... VISTA and to some degree Windows 7 does do that and everyone hates it!
Luckily the good security programs have multiple lines of defence and recognize suspicious activity or positively dangerous activity and do something about it even for attacks that are not yet in the "definitions" lists. So you may well still be OK. However those special tools like Malwarebytes or SuperAntiSpyware, in the free versions, do a good job of cleaning up and are not likely to do any harm if you are not compromised. I stress the free versions not because the purchased ones are not good but because they run all the time and can interfere with Norton or other security software.
If you want a laugh, remember:
The greatest danger to your computer is between the left ear and the right ear of the user ....
The above written before your question:
What I wrote is part of the answer to your question -- the rest is that it is much more difficult to stop one of millions of attacks than it is to clean up afterwards. The programs like Malwarebytes and SAS can recognize what is "not right" about the operating system and so clean out specific "rogue" files or registry entries.
Please put Malwarebytes and SuperAntiSpyware into the Search pane above and look at what comes up. This is a user to user help Forum. Symantec employees sometimes post in the Forums when there is a problem. Take a look around the Forum and see how many times it is recommended to use Malwarebytes to clean up or supplement the Norton products.
Could you please post the log from Malwarebytes here so we can see what was cleaned up? You can post it by using the add attachment line below the box you type your reply to message in. I'm glad you liked the program.Thanks
