Virus remover 2008

Norton Security | Norton Internet Security
1

Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Sed posuere consectetur est at lobortis. Vestibulum id ligula porta felis euismod semper. Donec ullamcorper nulla non metus auctor fringilla. Aenean lacinia bibendum nulla sed consectetur. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Cras mattis consectetur purus sit amet fermentum. Morbi leo risus, porta ac consectetur ac, vestibulum at eros. Sed posuere consectetur est at lobortis. Etiam porta sem malesuada magna mollis euismod. Cum sociis natoque penatibus et magnis dis parturient montes, nascetur ridiculus mus. Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Aenean eu leo quam. Pellentesque ornare sem lacinia quam venenatis vestibulum. Curabitur blandit tempus porttitor. Sed posuere consectetur est at lobortis.

2

 

A) How do you know that there is a virus on your computer called "Virus Remover 2008"? The Symantec support staff probably used Norton, which would have been of no help. Did you use another antivirus? Sometimes they interfere with each other.

B) Can you describe the symptoms?

  1. Are there annoying pop-ups when you logon to the computer, even when you disconnect the internet?
  2. Has your Internet homepage changed?
  3. Can you tell us what is under the startup tab when you type "msconfig" in the run dialogue? 
  4. Can you tell us or take a screenshot of the processes in Task Manager. Note, not applications running, but processes.
  5. Are there any suspicious files and folders in your C:\Windows directory, C:\Program Files, and the startup directory (Start>All Programs>Startup. 

C) Actions to Take

  1. Clear System Restore (Right Click on My Computer>Properties>System Restore>Turn System Restore Off) Leave System Restore off
  2. Backup all important files and documents to a flash drive. Be sure NOT to plug the drive into any other computer unless it has an antivirus. 
  3. Update Norton with LiveUpdate (Run>luall)
  4. Run a Comprehensive Scan. If nothing is found, run scans of C:\Windows, C:\Program Files, the start menu (Right Click>Norton 360>Scan Now
  5. If Norton finds nothing after performing those scans, go to Settings>Turn Eavesdropping Detection On. Also go to Virus Protection and Removal, and make sure that SONAR and scanning for low risk threats is turned on. Also make sure to take all files and folders and file extensions out of Exceptions
  6. Then Repeat Step 4
  7. If Nothing found, download Norton Antibot from: http://www.download.com/Norton-AntiBot/3000-8022_4-10698973.html
Norton 360 includes certain aspects of Norton Antibot, but sometimes the real thing is needed. Researching, I have found Virus Remover 2008 to be an widespread epidemic. Please tell me if you have Norton 360 version 1 or 2. Version 1 uses the 2007 engine, while 2 uses the 2008 engine. Version info. can be found under Support>About. You should preferably have 2.4.0.4
3

I will check this at home this evening for the version of the virus.  Yes, it does do the annoying popups, claiming that I am under siege and need to buy their product to rid of the virus.  I have an icon in the taskbar that is a shield or red circle with a black 'x' in the middle.  When I try to click on it, it disappears, then will reappear in a minute or so, claiming the same messge over again.  Yes my homepage did change.

 

Was this an email attachment to my computer?

 

Thanks.

 

Claire

 

 

4

Possibly, but highly unlikely. What email provider do you use? Yahoo, Hotmail, Gmail, etc.?

 

All major email clients prevent sending of executables and use a virus scanner to detect all outgoing and incoming infected files. A virus would need to sneak past the sender's email provider and past your email provider's antivirus. 

 

Just by connecting to the internet, you risk being exposed and infected by malware. You can try to visit legimate sites and download trusted files and keep your computer patched, but without an Antivirus, you are certain to be infected. 

 

The information you provided was extremely useful. Could you be more specfic. 

 

  1. Changed Homepage URL.
  2. What the popup's say
  3. The name of the rouge program (Antivirus 2008, Vista AV, Spyware KIller, etc.)
Also, can you please complete the previous steps and post the results as soon as possible. As for now, I suggest disconnecting from the internet unless absolutely necessary as you risk having your personal information and files being exposed.

 

 

5

Thank you Tech0utsider!!!

 

You saved the day!

 

I followed your suggestion and downloaded Norton AntiBot.  The AntiBot scanned my computer, said it found a spyware program and boom it was gone.

 

I will be keeping an eye open to make sure the malware is gone but for now, all is good.

 

Sincerely,

Claire

6
Claire wrote:

Thank you Tech0utsider!!!

 

You saved the day!

 

I followed your suggestion and downloaded Norton AntiBot.  The AntiBot scanned my computer, said it found a spyware program and boom it was gone.

 

I will be keeping an eye open to make sure the malware is gone but for now, all is good.

 

Sincerely,

Claire

Thank you Claire. I take pleasure in helping others. 

 

To check if all the malware was removed, please run a HiJackThis Scan and post the contents of the log file here.

 

A download mirror is provided below:

 

http://www.download.com/Trend-Micro-HijackThis/3000-8022_4-10227353.html 

7

Question: Should be the case, always? IOW, should I always keep the Exceptions cleared out?

 

Tnxs, in advance.

 

rws8258

 

Tech0utsider wrote:

 

Also make sure to take all files and folders and file extensions out of Exceptions.