Need help with Nortel Anitvirus Virus

[jworthgar]

A corrupt security program has installed itself on my computer. It reports nonexistent infections in order to try to scare me into purchasing a license for Nortel Antivirus--much like Antivirus 2010. Win32.Monster.fx is one of those fake threats. It shows up in my system tray and gives me popups every few seconds telling me of the threats. I have updated and run Malwarebytes, Spybot, and Avira but none work (ran them in safe mode). My normal protection is Norton Internet Security 2009. Norton won't help me except for a price, which I refuse to pay.

[Michael York]

A corrupt security program has installed itself on my computer. It reports nonexistent infections in order to try to scare me into purchasing a license for Nortel Antivirus--much like Antivirus 2010. Win32.Monster.fx is one of those fake threats. It shows up in my system tray and gives me popups every few seconds telling me of the threats. I have updated and run Malwarebytes, Spybot, and Avira but none work (ran them in safe mode). My normal protection is Norton Internet Security 2009. Norton won't help me except for a price, which I refuse to pay.

Hi jworthgar,

This is Mike from the Norton Authorized Support Team.

One of the problems you could be experiencing is a software conflict if you have any other real-time security software, such as Avira, installed and running at the same time as Norton Internet Security 2009. You should remove Avira and also make sure that both the Tea Timer and SD Helper functions in Spybot are disabled, as they too can cause conflicts and leave your system vulnerable to infection.

Next, open Norton Internet Security and manually run LiveUpdate to make sure you have the latest patches and definition files applied. Restart after the updates are installed and then run LiveUpdate again and restart if any more updates are installed. Next, perform a "Full System Scan" with Norton Internet Security and then let me know which infections were found so I can assist you further.

Thank you,
Mike

Michael York
Norton Authorized Support Team
Symantec Corporation
Symantec

[jworthgar]

Thanks for replying Mike. Someone told me to download and try SUPERAntispyware. I did and it appears to have solved the problem. No more Nortel popups or warnings in the systems tray. Here is what it found and fixed.

Adware.Tracking Cookie
C:\Documents and Settings\Jane Garner\Cookies\jane_garner@collective-media[2].txt
C:\Documents and Settings\Jane Garner\Cookies\jane_garner@www.tracklead[1].txt
C:\Documents and Settings\Jane Garner\Cookies\jane_garner@www.googleadservices[1].txt
C:\Documents and Settings\Jane Garner\Cookies\jane_garner@specificmedia[1].txt
C:\Documents and Settings\Jane Garner\Cookies\jane_garner@coolsavings[1].txt
C:\Documents and Settings\Jane Garner\Cookies\jane_garner@www.pixitrack[1].txt
C:\Documents and Settings\Jane Garner\Cookies\jane_garner@ad3.clickhype[1].txt
C:\Documents and Settings\Jane Garner\Cookies\jane_garner@interclick[1].txt
C:\Documents and Settings\Jane Garner\Cookies\jane_garner@eyewonder[1].txt
C:\Documents and Settings\Jane Garner\Cookies\jane_garner@www.socialtrack[1].txt
C:\Documents and Settings\Jane Garner\Cookies\jane_garner@atdmt[2].txt
C:\Documents and Settings\Jane Garner\Cookies\jane_garner@ads.adap[1].txt

Rogue.Internet Antivirus
C:\Program Files\IA


When I saw your post, I did as you suggested. It found and fixed the following:

2 occurrences of High Risk Trojan Fakeavalert resolved.

I do not have any other spyware/adware/virus software running. Just downloaded them to try to get rid of my problem, then turned them off.

I really appreciate your help. I had gone on Chat and told the guy the problem. He just told me that he would transfer me to the fee based virus help. I declined as I feel if I bought the software, the help should not cost me if I already know the problem. Your showing up restores my faith in NIS.

Thanks again,

Jane

[Michael York]

Thanks for replying Mike. Someone told me to download and try SuperAntiSpyware.com/SuperAntiSpyware.com/SuperAntiSpyware.html?rid=4348" target="_blank">SuperAntiSpyware.html?rid=4348" target="_blank">SuperAntiSpyware.com/SuperAntiSpyware.html?rid=4348" target="_blank">SuperAntiSpyware.com/SuperAntiSpyware.com/SuperAntiSpyware.html?rid=4348" target="_blank">SuperAntiSpyware.com/SuperAntiSpyware.com/SuperAntiSpyware.com/SuperAntiSpyware.html?rid=4348" target="_blank">SuperAntiSpyware.html?rid=4348" target="_blank">SuperAntiSpyware.com/SuperAntiSpyware.html?rid=4348" target="_blank">SuperAntiSpyware.html?rid=4348" target="_blank">SuperAntiSpyware.com/SuperAntiSpyware.com/SuperAntiSpyware.html?rid=4348" target="_blank">SuperAntiSpyware.html?rid=4348" target="_blank">SuperAntiSpyware.com/SuperAntiSpyware.html?rid=4348" target="_blank">SuperAntiSpyware.html?rid=4348" target="_blank">SuperAntiSpyware.com/SuperAntiSpyware.html?rid=4348" target="_blank">SuperAntiSpyware.com/SuperAntiSpyware.com/SuperAntiSpyware.com/SuperAntiSpyware.html?rid=4348" target="_blank">SuperAntiSpyware.html?rid=4348" target="_blank">SuperAntiSpyware.com/SuperAntiSpyware.html?rid=4348" target="_blank">SuperAntiSpyware.html?rid=4348" target="_blank">SuperAntiSpyware.com/SuperAntiSpyware.com/SuperAntiSpyware.html?rid=4348" target="_blank">SuperAntiSpyware.html?rid=4348" target="_blank">SuperAntiSpyware.com/SuperAntiSpyware.html?rid=4348" target="_blank">SuperAntiSpyware. I did and it appears to have solved the problem. No more Nortel popups or warnings in the systems tray. Here is what it found and fixed.

Adware.Tracking Cookie
C:\Documents and Settings\Jane Garner\Cookies\jane_garner@collective-media[2].txt
C:\Documents and Settings\Jane Garner\Cookies\jane_garner@www.tracklead[1].txt
C:\Documents and Settings\Jane Garner\Cookies\jane_garner@www.googleadservices[1].txt
C:\Documents and Settings\Jane Garner\Cookies\jane_garner@specificmedia[1].txt
C:\Documents and Settings\Jane Garner\Cookies\jane_garner@coolsavings[1].txt
C:\Documents and Settings\Jane Garner\Cookies\jane_garner@www.pixitrack[1].txt
C:\Documents and Settings\Jane Garner\Cookies\jane_garner@ad3.clickhype[1].txt
C:\Documents and Settings\Jane Garner\Cookies\jane_garner@interclick[1].txt
C:\Documents and Settings\Jane Garner\Cookies\jane_garner@eyewonder[1].txt
C:\Documents and Settings\Jane Garner\Cookies\jane_garner@www.socialtrack[1].txt
C:\Documents and Settings\Jane Garner\Cookies\jane_garner@atdmt[2].txt
C:\Documents and Settings\Jane Garner\Cookies\jane_garner@ads.adap[1].txt

Rogue.Internet Antivirus
C:\Program Files\IA


When I saw your post, I did as you suggested. It found and fixed the following:

2 occurrences of High Risk Trojan Fakeavalert resolved.

I do not have any other spyware/adware/virus software running. Just downloaded them to try to get rid of my problem, then turned them off.

I really appreciate your help. I had gone on Chat and told the guy the problem. He just told me that he would transfer me to the fee based virus help. I declined as I feel if I bought the software, the help should not cost me if I already know the problem. Your showing up restores my faith in NIS.

Thanks again,

Jane

Hi Jane,

I'm happy to hear that you are back up and running.

Just make sure that the "Automatic LiveUpdate" and "Automatic Pulse Updates" features are enabled in Norton Internet Security 2009 and that "Auto-Protect" is enabled as well. These settings will provide you with the best protection against threats. To make sure that you do not have other software installed that may cause conflicts, I would recommend that you remove and not just disable SuperAntiSpyware and any other security applications you may have installed.

Thanks,
Mike

Michael York
Norton Authorized Support Team
Symantec Corporation
Symantec