Antivirus 2008 +Norton Security

axelbrora · Sep 21, 2009

Hi,

My neighbour's computer, running Xp was infected by the Antivirus 2008 Virus. I have managed to remove most of the threat by following the instructions on a web site, however there remains part of it in the form of two icons in the system tray for Norton Security. One of the icons brings up the correct Norton page and the other one brings up a bubble at start up which when clicked bring up the fake page stating that there is no virus protection. She can simply close the page and all is well or avoid clicking the bubble, but this is still very annoying.

I have run Hijackthis and been advised that there are two entries for Norton Security. Both are identical as follows:

C:\Program Files\Norton Internet Security\Engine\16.7.2.11\ccSvcHst.exe

Should I delete one of these and will this remove the offending icon, or is there another way to remove the icon and the remaining annoyance?

Axel

chaslang · Sep 21, 2009

axelbrora said: ↑

My neighbour's computer, running Xp was infected by the Antivirus 2008 Virus. I have managed to remove most of the threat by following the instructions on a web site,
Click to expand...

What website are you referring to? If you were using a procedure documented on another website, why aren't you posting your questions there.

To get our support, you need to follow our procedures so we can determine if the infections are actually removed. Our procedures are below.

Please read ALL of this message including the notes before doing anything.

Please follow the instructions in the below link:

READ & RUN ME FIRST. Malware Removal Guide

and attach the requested logs when you finish these instructions.

**** If something does not run, write down the info to explain to us later but keep on going. ****

Do not assume that because one step does not work that they all will not. MGtools will frequently run even when all other tools will not.

After completing the READ & RUN ME and attaching your logs, make sure that you tell us what problems still remain ( if any still do )!

Helpful Notes:

If you run into problems trying to run the READ & RUN ME or any of the scans in normal boot mode, you can run the steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:

Starting your computer in Safe mode

If you have problems downloading on the problem PC, download the tools and the manual updates for SUPERAntiSpyware and Malwarebytes ( links are given in the READ & RUN ME) onto another PC and then burn to a CD. Then copy them to the problem PC. You will have to skip getting updates if (and only if) your internet connection does not work. Yes you could use a flash drive too but flash drives are writeable and infections can spread to them.

If you cannot seem to login to an infected user account, try using a different user account (if you have one) in either normal or safe boot mode and running only SUPERAntiSpyware and Malwarebytes while logged into this other user account. Then reboot and see if you can log into the problem user account. If you can then run SUPERAntiSpyware, Malwarebytes, ComboFix and MGtools on the infected account as requested in the instructions.

To avoid additional delay in getting a response, it is strongly advised that after completing the READ & RUN ME you also read this sticky:

Don't Bump! It Only Hurts You!!!

Any additional post is a bump which will add more delay. Once you attach the logs, your thread will be in the work queue and as stated our system works the oldest threads FIRST.

Log in or Sign up

Antivirus 2008 +Norton Security

axelbrora Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member