[gretchblair]

Hello, I am brand new to to Geeks to Go. I was going to go through the malware suggestions, but thought it might not be a good idea because I don't know if what I have is malware yet. In December I contacted Norton Anti-virus and paid them $99 to remove spyware or a virus. I think I had Trojan Vundo at that time but there were a lot of popups which I'm not experiencing yet this time. Today I all of a sudden am not able to run Norton Antivirus, and it doesn't show up as protecting my computer. However, there is another red x icon on my system tray and when I click it, it brings up a Windows Security Center dialog box, and to me, looks like a fake security center.

FIREWALL is ON
AUTOMATIC UPDATES is ON
VIRUS PROTECTION is OFF and in red, and there is a button at the bottom for Recommendations.

I don't trust this at all, as it looks fake, like they created a Microsoft colored logo to try to fool people into thinking it's a legitimate Windows/Microsft product.

Can anyone confirm if this is fake and how I can remove it so that I'm able to run Norton Antivirus again? When I click on the Norton logo on my desktop, it doesn't do anything.

Please help! Sorry if I'm not providing enough information. I'm not sure what is needed to further determine what I have.

gretchen

[Advertisements]

Hello gretchblair

Welcome to G2Go.
=====================

Please download DDS and save it to your desktop.

• Disable any script blocking protection
• Double click dds.scr to run the tool.
• When done, DDS.txt will open.
• Click Yes at the next prompt for Optional Scan.
• Save both reports to your desktop.

---------------------------------------------------

Please include the contents of the following in your next reply:

DDS.txt
Attach.txt.
================
Download the GMER Rootkit Scanner. Unzip it to your Desktop.

Before scanning, make sure all other running programs are closed and no other actions like a scheduled antivirus scan will occur while the scan is being performed. Do not use your computer for anything else during the scan.

Double-click gmer.exe. The program will begin to run.

**Caution**
These types of scans can produce false positives. Do NOT take any action on any "<--- ROOKIT" entries unless advised!

If possible rootkit activity is found, you will be asked if you would like to perform a full scan.

• Click NO
• In the right panel, you will see a bunch of boxes that have been checked ... leave everything checked and ensure the Show all box is un-checked.
• Now click the Scan button.
  Once the scan is complete, you may receive another notice about rootkit activity.
• Click OK.
• GMER will produce a log. Click on the [Save..] button, and in the File name area, type in "GMER.txt"
• Save it where you can easily find it, such as your desktop.

Post the contents of GMER.txt in your next reply.

[kahdah]

Hello gretchblair

Welcome to G2Go.
=====================

Please download DDS and save it to your desktop.

• Disable any script blocking protection
• Double click dds.scr to run the tool.
• When done, DDS.txt will open.
• Click Yes at the next prompt for Optional Scan.
• Save both reports to your desktop.

---------------------------------------------------

Please include the contents of the following in your next reply:

DDS.txt
Attach.txt.
================
Download the GMER Rootkit Scanner. Unzip it to your Desktop.

Before scanning, make sure all other running programs are closed and no other actions like a scheduled antivirus scan will occur while the scan is being performed. Do not use your computer for anything else during the scan.

Double-click gmer.exe. The program will begin to run.

**Caution**
These types of scans can produce false positives. Do NOT take any action on any "<--- ROOKIT" entries unless advised!

If possible rootkit activity is found, you will be asked if you would like to perform a full scan.

• Click NO
• In the right panel, you will see a bunch of boxes that have been checked ... leave everything checked and ensure the Show all box is un-checked.
• Now click the Scan button.
  Once the scan is complete, you may receive another notice about rootkit activity.
• Click OK.
• GMER will produce a log. Click on the [Save..] button, and in the File name area, type in "GMER.txt"
• Save it where you can easily find it, such as your desktop.

Post the contents of GMER.txt in your next reply.

[gretchblair]

Hello Kahdah, thank you so much for your reply. So last night I did some more research and found somewhere that it looked like this Windows Security Center might be legitimate. Actually, it might have been the microsoft.com site itself that showed a screen shot that looked exactly like what I was seeing that I thought was fake or a virus.

After a good night's rest, I decided to try to run the Norton Antivirus 2009 Install again from my desktop, and it uninstalled my current version, then reinstalled it. Once I did, the red shield in my system tray disappeared, and the Norton logo with a green check next to it is now on. I ran a full scan and when I came back to the computer, it had restarted the computer. It now still shows that Norton is on, and the red shield (Windows Security Center) is still gone. So maybe this was a legitimate warning because somehow the Norton got turned off? I have been paranoid since the last time I got a virus, but this time I didn't get any weird pop ups or anything, I just got nervous because my Norton wouldn't run when I clicked the logo from my desktop, and the Windows Security Center shield just looked like a fake play on the Microsoft logo. Also, when I would click log off or shut down, the options it gave me looked different than they normally did, and had the Windows Security Center shield on one of the options (can't remember which)

So, having said all that, I don't think I am seeing any problems. Should I go ahead and implement your suggestions anyway or do you think I'm ok?

thank you so much again for your help!

[kahdah]

Nope that sounds good to me that is the legitimate security center so you are good to go.
If you need any further assistance you know where to come

[gretchblair]

Kahdah, that is great news, thank you so much again!

[kahdah]

You are welcome


Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If your the topic starter, and need this topic reopened, please contact me via pm with the address of the thread.

Everyone else please begin a New Topic.