Trojan-help please

casey972

Hi

I have paid for Norton on my laptop and this was my only security but I am careful about what I do on the laptop. Recently i noticed I was getting lots of security pop-up (not from norton). I looked on here and downloaded Spyware Doctor and it identified several issues but wanted £40 to resolve them. Instead following comments here, I downloaded Ad Aware and paid £17 for this. It has quarantined 2 trojans but Spyware Doctor is still showing adware Plugin.ie as a problem. Throughout the various stages I have run full Norton scans and thwy have never come back with anything more than Cookies so I contacted them today and (:() they want £114 to solve this issue.

I am furious as their software has not once identified any issues and now that I have a problem they want additional cash. Their support line is not there to help but only to generate sales when the product they have already sold fails to do it's job!!

Anyway, have any wise people here got any idea what I need to do next to remove this computer threat?

Also has anyone had this issue with Norton before and what is going on, they seem to be suggesting that the trojan has compromised their software but I have googled it and it has been around since 2003, how long does it take them to update their software and what are their customers paying for?

Thanks for your help

Kay

enigma52

download and run "Remove Fake Antivirus" from http://download.cnet.com/Remove-Fake-Antivirus/3000-2239_4-10915342.html and that should sort it out as it looks like you have a fake antivirus programme on your pc. Post outcome on here as the pc may need more cleaning.

dogmaryxx

Download MALWAREBYTES (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_ma..._anti_malware/
Open malwarebytes and goto UPDATE and click 'check for updates'. After its updated goto SCANNER and click PERFORM FULL SCAN then click SCAN
Post the COMPLETE log here AFTER youve deleted everything it finds


reboot

Download HIJACK THIS (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_hijackthis/
Click MAIN MENU then DO A SYSTEM SCAN AND SAVE A LOGFILE(Takes seconds) then post the log so we can see whats running
(do NOT do anything else with Hijack but scan and post the FULL log)

casey972

dogmaryxx wrote: »

Download MALWAREBYTES (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_ma..._anti_malware/
Open malwarebytes and goto UPDATE and click 'check for updates'. After its updated goto SCANNER and click PERFORM FULL SCAN then click SCAN
Post the COMPLETE log here AFTER youve deleted everything it finds

Dogmary, I have used the link and it takes me to Spyware Doctor (the one I am already using, is this correct?) I am running scan now and will reply when its all done.

Enigma, I have save the file you linked but it says publisher unknown and I am getting an IE warning so will not run it yet

aliEnRIK

No

(Make sure you click 'DOWNLOAD LATEST VERSION')

enigma52

strange, I get no warnings but it is your choice!! also the link from Dogmaryxx takes me to the mbam download, as I said in post#2 you have a fake antivirus programme redirecting you.

fiddiwebb

Casey

Are you being redirected by the rogue antivirus you downloaded?

You need Malwarebytes as per dogmaryxxx link

dogmaryxx

Click this icon on download page

casey972

thank's all, I did clicked the download latest version (the arrow in dogmary's post) and it still takes me to Pc tools spyware doctor to download, I did this and checked for updates also. I am running the scan at present but I suspect that it will want me to pay for removal as before.

Is the issue that I have a rogue copy from pctools and that I need to uninstall that and then follow dogmary's instructions?

fiddiwebb

Don't pay anything casey.

Try disabling spyware doctor and try the download link again for malwarebytes

Browntoa

try this link

http://dw.com.com/redir?edId=3&siteId=4&oId=3000-8022_4-10804572&ontId=8022_4&spi=a3796efe9935a7dfc381c876caa49857&lop=link&!!!!!tdw_dltext&ltype=dl_dlnow&pid=11164457&mfgId=6290020&merId=6290020&pguid=UmokPwoPjAEAAAce-0MAAADM&destUrl=http%3A%2F%2Fdownload.cnet.com%2F3001-8022_4-10804572.html%3Fspi%3Da3796efe9935a7dfc381c876caa49857


ignore the spyware doctor link at the top of the page (think that is where you are going wrong) and look at the top of your internet explorer page where a yellow strip will appear

like on this one from the itunes site




just click on the yellow bar and allow the download