Last night my husband went online to update our Norton antivirus software subscription, which was about to expire. When he tried to update Norton, he received an update message from WinAntivirus 2004, which proceeded to delete the Norton antivirus software and then install WinAntivirus 2004 software. My husband used a credit card to pay for the WinAntivirus 2004.

I've gone on the web, and can't even find a web site for WinAntivirus 2004. When I google Norton Antivirus, I get an ad for WinAntivirus!

The only mention of this software I can find is ads. It's not in any of the comparison charts for antivirus software. I finally got to Symantec, which I THINK is the same thing as Norton, and WinAntivirus is not listed as one of their products.

Have we just given out our credit card number to a fly-by-night outfit?

My husband ran a virus check last night using this new software, and it detected a trojan horse, which it did not fully identify and couldn't fully delete. Files it could not delete were vm.installer and vm.exe under c:\x.cab folder.

Any advice?

The first thing I did after reading your message was to do several searches for WinAntiVirus 2004. The first thing that game up was ONE link. I clicked on that link and immediately was taken to a "login" screen and the questions/answers to FAQ. I have never seen this website before, and therefore did not proceed. Although it looks "official" and very similar to Symantec (which does make Norton), I'd highly recommend that your husband call your credit card company and ask if there have been any "unusual" Internet credit card charges. Ask that your credit card company phone you or your husband as soon as or if any suspicious Internet charges are trying to be posted to your account.

Although there ARE many free downloadable anti-virus protection software companies available, I prefer to use Norton, myself. I've tried several of the freebies, but there are too many other things running in the background most times, and that makes me uncomfortable. I've been scammed before by something on the Internet, and wound up having to have a new credit card because of Internet fraud.

I'm not implying that you and your husband have been scammed, just suggesting that you call your credit card company and have them verify the authenticity of the winantivirus software he paid for, and any other purchases in the next few days over the Internet.

Thanks Linda!

I did finally find their web site. There isn't a whole lot there. When I clicked on the link to their product descriptions, it said it was taking me to a secure area, which seemed a little strange just for seeing product descriptions.

Will call the credit card company.

I got through on the phone to Symantec Customer Service. Yes, it appears that I have been scammed. Can't say that Symantec is particularly worried about it. Weird.

I use Norton Antivirus, and I appreciate your warning us about this other company hijacking Norton's links.

Hey Katsmom. I guess this could be a warning to others, couldn't it? I've changed the topic title on this post to be more specific and to include Norton to make it a more precise warning.

Becky,
Thanks for posting this and I'm so sorry this has happened to Norton(of all things)and to you all.

Ingie

Yes that is weird.
If Norton is that unconcerned about the security of their links, I wouldn't be particularly worried about renewing with Norton. There are other antivirus companies out there.

Not only others but, others that are better as well. My 2 cents.

Rusty

Strange, isn't it?

As an analogy -- Cartier is rightfully concerned about cheap knock-offs of their watches. Well, what if somebody installed an entrance to the Cartier store that channeled people past the real store and sold fakes at the same price as the real thing? People would never even know they were buying a fake.

Wouldn't Cartier be concerned?

I just got back from CompUSA, where I was told that Norton is far superior to any other antivirus software out there, so I bought Norton again. Maybe Norton/Symantec is so powerful that they don't need to worry about a 2-bit operation stealing some of their customers. Especially if their customers just go out and buy Norton again.

Sheesh!!!

According to the fellow at CompUSA, WinAntivirus is a FREE virus program that somebody has packaged and is selling to unsuspecting customers on the web. He says that WinAntivirus must have somehow used spyware to redirect my computer to their site, fooling my husband into thinking it was Norton. And this while I was using Spybot to control the spyware!

It's just discouraging. I feel like there are threats out there online in a way I never did before. I don't feel like downloading anything ever again.

So your computer's browser got hijacked?
You'd better find out if it's been hijacked to do other things as well.

Which browser do you use?

This may be a related event, or just a coincidence, BUT...

I'm suddenly unable to start my Task Scheduler, which includes (only) Norton Anti-virus LiveUpdate. I can start LiveUpdate manually, but it will no longer automatically check for anti-virus updates every 2 hours.

I wasted hours today, trying to find out what's wrong. It tells me I don't have enough 'resources' to start the Task Scheduler service. Well, I closed several (safe) processes and no applications were open -- but I still couldn't get automatic Norton LiveUpdate to enable. I also tried restarting Windows.

I'm wondering if this is related to a recent Windows HotFix, that had to do with Internet Explorer and downloads. (?)

Anyone have any thoughts on THIS one?

Jenny-- I use Internet Explorer.

I asked because I wondered if your browser being "redirected" had anything to do with the security hole the new Windows hotfix (867801) is trying to fix. It seemed to be to do with IE rather than other browsers.

http://www.microsoft.com/security/bulletins/200407_windows.mspx

This is the update Demosthenes had trouble with on one computer. But he said the update worked when he downloaded the entire update before installing (as opposed to installing while being connected to MS).

Katsmom, I don't know if your problem is related to the security hole or not. It does seem suspicious though.

I use Internet Explorer almost exclusively, even though I have the MSN browser available to use. I've given up trying to fix the Task Scheduler for now. I'm just grateful that my computer and OS survived the update process!

I'm really losing faith in Microsoft lately. MSN told me to seek online help elsewhere, with my suddenly 'buggy' and unreliable Lucent modem connections... so I DID, and found an unsigned driver update that FIXED the problem... after which, Microsoft sent me a "Critical" Windows Update -- a 'Microsoft' (signed) Modem Driver update from 2003... which I failed to recognize as the SAME driver I'd been having problems with! So I downloaded the modem driver from WU -- and promptly had to RE-INSTALL the newer, more successful, and unsigned "Agere" modem driver update!

Apparently, Lucent went out of business; and Agere isn't having their driver updates digitally signed.

So to get back on topic -- it seems that Norton Anti-virus is going downhill lately; and I no longer trust "critical" updates that Microsoft tells me to download and install.

Thanks Jenny100 -- I'm checking out the patch (and Demosthenes's experience with it) now.

Becky,

Go to Trend PC-Cillin's site and download housecall & scan your computer. You can also download the free 30 day version.

This anti-virus program is far superior to Norton in my opinion. I've used it for years, after trying Norton, Mcaffee and others. It's the best.

It automatically updates at least once a week & I have never had a virus attack that it did not catch & clean or quarantine, if it didn't clean it.

You should also have a spyware program. I use Pest Patrol & I Hate Spam. They're great programs & well worth the money. Also have automatic updates. I'd be willing to bet that you have a bunch of spyware/adware files on your computer.

Melanie

Actually, Becky, you can download free trials of the Pest Patrol also.

Melanie

Hey Melanie -- thanks!

In addition to Norton, I bought Spy Sweep while at CompUSA. It's running right now, and yes it is finding lots of ad ware.

This new version of Norton found two adware programs that have files that must be manually deleted in the registry. I'll do that later today.

Just curious -- what didn't you like about Norton and McAfee?

I installed the Microsoft Critical Update patch with no problems.

So I now have a new antivirus program, a new firewall and new spyware on the computer. Shields are up. Hope they work.

Hi Becky,

There are several things I didn't like about the big 2 anti-virus programs.

They're not as user friendly. They charge for updates by making you take a subscription & they have let viruses slip by that they could not remove. Your registry that has to be manually changed is just one example of that.

Both PC-Cillin & Pest Patrol remove all traces or quarantine them in almost every case. There is no subscription or charge for updates, including new versions. They give you a year for free & will extend that with a grace period. They also constantly update their products (much more often then the other 2).

I'm glad you got rid of that bug & the adware and hope all goes smoothly now.

Melanie

One other important thing I didn't mention, Becky, is that Trend's customer support is very good! You would never get a reply like you did with Norton.

Melanie

Hmmm. Almost you persuade me to try yet another antivirus program, even after just laying out bucks for Norton.

Manually removing items from the registry is a BIG PAIN, especially since at the moment the computer won't let me back up the registry -- just freezes whenever I try to do it.

I have a message in to Microsoft. I seem to be out of the frying pan and onto the hot stove.

Just a thought, Becky. Have you tried restoring to an earlier point before downloading the anti-virus that caused the problem?

You would have to reinstall any & all new programs you just installed, like Norton & your adware program, but it might bring you to a point before you caught the virus & allow you to back up the registry. I've done that in the past when a program caused havoc on my computer.

Btw, PC-Cillin is also cheaper.

Melanie

Becky, I don't want to make you feel worse - - but I have to warn you about the Webroot SpySweeper program. I have it also, and have NOT been happy with it at all! It misses a LOT of adware/spyware. I've sent the company messages TWICE now about pests I found on my own, that their program didn't catch. I'm paying THEM for this??? I don't plan to renew, when my subscription ends.

BTW -- make sure you click on the button for "Update Program" -- because you get one free program update when you buy it. Then you have to keep checking the "Update Definitions" button when you're online, because the automatic update checker has never worked for me. Their updates are infrequent, and take FOREVER to complete! (on dial-up, anyway)

I found the website for PEST PATROL, and they impressed me with their online (fast!) adware/spyware scanner. THEY found the adware and stubborn registry entries that SpySweeper kept missing, and couldn't seem to get rid of. I haven't downloaded their trial version yet, but I plan to do that. Mjartisian -- can you buy Pest Patrol in local stores, or must you order it from them online?

I still like Norton Anti-virus, though; as well as their SystemWorks utilities. I disliked McAfee AV, and only tried it because I was offered a free trial period.

Katsmom, you have to buy it online. I bought a combo special they had: I Hate Spam & Pest Patrol both for $50 & they automatically update or I can manually update at any time. I'm very pleased with them! Pest Patrol automatically scans every time I boot & cookie patrol grabs all cookies from my email. It also warns me when my computer tries to dial out.

They painlessly remove all spyware/adware/cookies & most spam. Occasionally a spam will sneak through but you can enable learning in the programs & when you mark something as spam, it won't get through again.

I recommend them both highly.

Melanie

Edited:
Pest Patrol is now $20!