Virus....http fakescan

  cas5090 18:00 31 Aug 2008

My pal is running a desktop with Vista on it. It also has Norton anti virus installed.
She has started getting lots of pop-ups from the google homepage that are opening up new IE pages saying "the page cannot be displayed" and she cannot properly load up any websites she tries to go on (she is panicking as she has a lot of ebay listings due to go through at 9pm tonight).

Norton says it has blocked an intrusion attempt "http misleading application detenction", the attacking computer says "owner-pc" and the risk name is "http fakescan"

She has turned off system restore and run a full Norton scan but it is not finding anything.

Any advice greatly appreciated.

My thoughts are to download AVG free onto a disc and install it for her, along with spybot and adaware and see if they pick it up.

She believes the virus may have come in a song that her son downloaded from Napster and emailed to her.

  User-1229748 18:03 31 Aug 2008

i would try click here

  skidzy 18:13 31 Aug 2008 not install AVG while Norton is on the system.

More than one AV will cause you problems.

click here

As ive mentioned many times,System Restore should NOT be turned off untill the computer is clean.
The benefit of having an infected Restore point gives you something to turn back if things go wrong...and they can.

First step is to enable system restore.
Then run the Avast portable AV click here

  cas5090 18:19 31 Aug 2008

Thanks for the advice so far, I am going round there now to try and help with various downloads, will report back.

  GANDALF <|:-)> 19:28 31 Aug 2008

It is not a virus but is a Trojan. It is unlikely that any AV would stop it.


  cas5090 19:28 31 Aug 2008

The spersyware thing didn't find the problem but this did

click here

  cas5090 21:25 31 Aug 2008

Thanks for the swift advice. She now has AVG running instead of Norton and the malwarebytes thing sorted her out

  skidzy 22:51 31 Aug 2008

Hope the Norton removal tool was used ?
And a manual cleanup of Norton as well as running ccleaner after removal.

Best of luck.

This thread is now locked and can not be replied to.

Elsewhere on IDG sites

Fujitsu Lifebook P727 laptop review

Converse draws on iconic heritage for a fresh brand identity

Mac power user tips and hidden tricks

Comment lancer Windows 10 en mode sans ├ęchec ?