Jump to content

Could somebody answer a computer virus question for me? UPDATED POST 22
Virus sitting in unresolved risks - Norton 360


  • Please log in to reply
23 replies to this topic

#1 GeminiSix

Posted 20 November 2012 - 08:16 AM

I received a call from my bank last night saying that they had information I had a virus on my computer and they had locked my internet banking.

I have done a full system scan using Symantec Norton 360 - which has come up clean, says my system is safe and protected etc.  However, when I go into "Security History" under "Unresolved Risks" there is a virus listed there "Trojan.zeroaccess!inf4"

I have downloaded the tools from the Symantec website (one specific to this virus, and Power Eraser) to delete this virus, however both keep saying no virus detected.  It is still sitting in the Unresolved Items.

So do I have a virus or not?

It also says if the virus is in a Windows file you may need to replace using Windows Installation CD - I don't have this as I bought the laptop with Windows preloaded. The infected file is C:\windows\system32\services.exe

BTW I am running Windows 7.

Any ideas about where I go to from here?   shrug.gif

Edited by GeminiSix, 21 November 2012 - 09:52 AM.


#2 qak

Posted 20 November 2012 - 08:41 AM

If you have Windows 7 I would install/update/run Windows Defender and see what it reports (&you may need to disable Norton to do that).

FWIW I would be checking with the bank - that sounds like some sort of scam to me, I don't think they could tell if you had a virus on your computer   unsure.gif

Edited by qak, 20 November 2012 - 08:41 AM.


#3 Therese

Posted 20 November 2012 - 08:45 AM

I don't think your bank would be ringing you to say you have a virus. I would ring your bank today as I think it sounds like a scam to me.

http://www.scamwatch.gov.au/content/index....l/itemId/834379

#4 Lissome

Posted 20 November 2012 - 08:47 AM

A quick google of the virus name provided throws up lots of links about it - it sounds like it is a virus that needs manual removal. It sounds like quite a nasty one also so it might be worth contacting an IT company.

#5 FeralZombieMum

Posted 20 November 2012 - 08:54 AM

QUOTE (Therese @ 20/11/2012, 09:45 AM) <{POST_SNAPBACK}>
I don't think your bank would be ringing you to say you have a virus. I would ring your bank today as I think it sounds like a scam to me.

http://www.scamwatch.gov.au/content/index....l/itemId/834379

yyes.gif


Did the caller direct you to a website to download anything?

#6 GeminiSix

Posted 20 November 2012 - 09:00 AM

Thanks ladies - it is definately legitimate, I checked the number before I called the bank back (ANZ).  Having a look at their website, they do have programs installed that can tell if a virus or other illegitimate source is trying to log into your internet banking - this is what has happened, hence them locking it straight away and calling me.  I am not going to get them to reactivate until I am sure the computer is virus free.  

FWIW I get calls ALL the time telling me I have a virus from those overseas people, say they are calling on behalf of Microsoft, etc  Sometimes they call twice a day, every day for a week etc, and then I don't hear from them for a month and then they start up again.  This was not one of those calls.      

Qak - thank you, I will give Windows Defender a go.

#7 GeminiSix

Posted 20 November 2012 - 09:04 AM

Zombiemum - no they didn't.  They suggested that I may have a virus on the computer I use for internet banking (as I only use one computer to do it), I should do my own full system scan and contact them once I had sorted out any issues.

#8 BabySmurf2012

Posted 20 November 2012 - 09:09 AM

You can try a online virus scanner.. See if it picks anything up?
http://housecall.trendmicro.com/

Edited by BabySmurf2012, 20 November 2012 - 09:10 AM.


#9 TVbaby

Posted 20 November 2012 - 09:13 AM

A couple of things for you to try;
Have you run a full virus scan in "safe mode"? Restart your computer and while it is rebooting hit the F8 key continually until a screen comes up then select "safe mode with networking". This will boot only the basic functions of windows and not automatically run any programs. Once booted - update your antivirus and run a full scan. May take a while.
Sometimes the virus software won't/can't pickup all the elements of a virus.
You could also try downloading some free malware removal tools like Malware Bytes. This will find malware that the anti-virus companies don't pick up.
Run all these in safe mode. Once you get the all clear restart normally and run all the anti-virus again.
Malware, trojans and viruses are a pain in the butt. To remove them properly takes time.
Good luck!

#10 Guest_~Songbird~_*

Posted 20 November 2012 - 09:19 AM

Step 1 - reformat your computer - get rid of everything, it's the only way to get rid of a virus for sure like this. Because windows is preloaded this is quite easy to do, you don't need the disk.

Step 2 - after reformatting, install avast internet security virus protection. It is the best virus protection on the market and picks up viruses norton never does, it's also very fast and only around $30 a year. Norton is a dreadful virus scanner and will continue to allow threats onto your computer. http://www.avast.com

This is a trojan that will steal all of your credit card numbers etc. Don't mess around with trying to get it off, just reformat and it will be gone.

Edited by ~Songbird~, 20 November 2012 - 09:38 AM.


#11 Lulubin

Posted 20 November 2012 - 09:24 AM

The banks will contact you if they detect a virus or malware on the computer used for internet banking (I work in that area for one of the big 4). We SMS our customers.

Make sure that you have run a malware scan as the majority of the issues are being caused by malware which is essentialy hijacking people's browsers. I personally use Malware Bytes.

We see a lot of people who keep reinfecting their computers by not following the correct steps, as well as a lot of Mac people who are convinced that Mac's dont get viruses, so don't protect themselves!





#12 MrsLexiK

Posted 20 November 2012 - 09:25 AM

GeminiSix I had this from both the ANZ bank (they sent me a text message letting me know my internet banking had be blocked and to call X number) Commonwealth bank also did this, but it was on the home screen when I logged in.  I just figured it was my app playing up.  I rang the ANZ and said I was afraid it was a scam they said they understood but the number was in fact the normal internet banking number which I did double check on the web.

They told me that they detect something which may or may not be dangerous and this shuts it down so your accounts are safe.  I think it is wonderful technology.  I ran a scan on my computer and there was a trojen living there (but had not infected my computer if that makes sense) got the scan software to deal with it (fix button) and then redid the scan and let both the ANZ and Commonwealth know my computer was safe.  They reset the passwords for both as well, with a temp password that I then had to change.  I haven't done the ANZ one as I mostly use my app and when I was speaking to them I was on the phone.  They were able to reset my ANZ banking app (which is what I use 99% of the time) straight away.  Commonwealth sent me a text with the password which I had 30 days to login to change (and I could do this either on netbank online or with the web)

HTH

#13 erypmaV

Posted 20 November 2012 - 09:42 AM

QUOTE (~Songbird~ @ 20/11/2012, 10:19 AM) <{POST_SNAPBACK}>
Step 1 - reformat your computer - get rid of everything, it's the only way to get rid of a virus for sure like this

That's massive overkill and a time consuming pain to reinstall everything. There are plenty of ways to remove viruses and malware that don't involve a full reformatting. Instructions for your particular virus are here You've got Norton's so you'll be able to download and use the tool at the link.

QUOTE
Step 2 - after reformatting, install avast internet security virus protection.

Avast is fine, and I agree that Nortons is horrible, bloated and more trouble than it is worth.
Other options - Comodo, AVG, Microsoft Security Essentials (which is free)
Some good reviews here: http://anti-virus-software-review.toptenreviews.com/

#14 WYSIWYG

Posted 20 November 2012 - 09:50 AM

I personally would just reformat. It's the only way I'd have peace of mind.

#15 Guest_~Songbird~_*

Posted 20 November 2012 - 09:51 AM

QUOTE (erypmaV @ 20/11/2012, 10:42 AM) <{POST_SNAPBACK}>
That's massive overkill and a time consuming pain to reinstall everything. There are plenty of ways to remove viruses and malware that don't involve a full reformatting. Instructions for your particular virus are here You've got Norton's so you'll be able to download and use the tool at the link.


I don't agree, I know my tech stuff well. Nasty trojans like this one, once on your computer are hard to get rid of. The OP is only going to be clogging up her system with more crap to try to get rid of it, meanwhile it continues to run in the background and ruin her computer, steal credit card details and other personal info.

#16 erypmaV

Posted 20 November 2012 - 10:15 AM

QUOTE (~Songbird~ @ 20/11/2012, 10:51 AM) <{POST_SNAPBACK}>
I know my tech stuff well.

I only know of one tech support team that had to reformat a PC due to a stubborn virus, and that was about 10 years ago. If everyone reformatted every time a virus got through, tech support would never get anything else done.

QUOTE
Nasty trojans like this one, once on your computer are hard to get rid of.

From Symantec:
Trojan.Zeroaccess!inf4
Risk Level 1: Very Low
Removal: Easy


#17 Guest_~Songbird~_*

Posted 20 November 2012 - 10:45 AM

QUOTE (erypmaV @ 20/11/2012, 11:15 AM) <{POST_SNAPBACK}>
I only know of one tech support team that had to reformat a PC due to a stubborn virus, and that was about 10 years ago. If everyone reformatted every time a virus got through, tech support would never get anything else done.


From Symantec:
Trojan.Zeroaccess!inf4
Risk Level 1: Very Low
Removal: Easy


Possibly because it was too hard for the 'techs'?  wink.gif

You also seem to have missed the OP where she says the following (therefore NOT easy - the trojan is hiding). A reformat is needed in THIS situation.

" I have downloaded the tools from the Symantec website (one specific to this virus, and Power Eraser) to delete this virus, however both keep saying no virus detected. It is still sitting in the Unresolved Items.

So do I have a virus or not?

It also says if the virus is in a Windows file you may need to replace using Windows Installation CD - I don't have this as I bought the laptop with Windows preloaded. The infected file is C:\windows\system32\services.exe"



#18 erypmaV

Posted 20 November 2012 - 10:53 AM

QUOTE (~Songbird~ @ 20/11/2012, 11:45 AM) <{POST_SNAPBACK}>
Possibly because it was too hard for the 'techs'?  wink.gif

They weren't great techs actually... It was easier for them to reimage the PC than fix the problem, but most people don't have a PC image handy.

QUOTE
A reformat is needed in THIS situation.
It also says if the virus is in a Windows file you may need to replace using Windows Installation CD - I don't have this as I bought the laptop with Windows preloaded. The infected file is C:\windows\system32\services.exe"

If OP doesn't have a Windows disk and they reformat, what are they going to reinstall from? They'll just have a PC with no operating System.

QUOTE
So do I have a virus or not?

That's always a good question. It could be a false positive, although I doubt it in this case.
The link I sent has other instructions that will fix it, but you will most likely still need the wndows disk.
Preloaded windows machines typically come with an OEM disk for just this type of problem.


#19 Guest_~Songbird~_*

Posted 20 November 2012 - 11:11 AM

QUOTE (erypmaV @ 20/11/2012, 11:53 AM) <{POST_SNAPBACK}>
If OP doesn't have a Windows disk and they reformat, what are they going to reinstall from? They'll just have a PC with no operating System.


She can but it's the pre installed version of 'reformatting' and it's very easy to do and will wipe all her data including the trojan and take it back to how it was when she bought it. All the windows data is on the hard drive, you just select the option you want in the menu and it does the rest. Windows will be there once the data has been deleted. I have done it myself.

Edited by ~Songbird~, 20 November 2012 - 11:20 AM.


#20 Let_it_Rain

Posted 20 November 2012 - 11:22 AM

Just also confirming that banks do call to alert customers about viruses detected on computers.

It was one of my roles previously. At the bank I worked for it was done after disabling internet access.

But if there is any doubt that a call is legit, call the bank.

As for formatting it is the safest way to ensure the virus is gone, but not all PC's have the install stored locally as the PP is advising, so make sure before you format.

#21 Guest_~Songbird~_*

Posted 20 November 2012 - 12:06 PM

QUOTE (WinterDancesHere @ 20/11/2012, 12:22 PM) <{POST_SNAPBACK}>
As for formatting it is the safest way to ensure the virus is gone, but not all PC's have the install stored locally as the PP is advising, so make sure before you format.


The option to do it won't exist in the menu if she can't do it, therefore making it impossible to delete everything and not have windows afterwards...

#22 GeminiSix

Posted 21 November 2012 - 09:52 AM

Thanks for all the responses.  Over the past 24 hours I have tried a couple of these suggestions, and a few more that I found online.  Malwarebytes didn't find the virus, but it kept on appearing in my Unresolved Risks on Norton.

Even though Symantec listed the risk as "low" many more google searches I did yesterday advised that the virus could possible lead to catastrophe, credit card numbers being stolen, internet banking access, slow computer etc.  I also found that many many people have found the virus very difficult to delete as it (sorry don't know the technical lingo) puts different parts in different places of your computer.

So based on all of this, the fact that the bank alerted us in the first place, and that I do all our banking online from this computer only, I have just backed up our files to USB, done a complete system restore to factory settings and a full scan, and it seems the virus is gone.  Better to be safe than sorry in this instance.

Once again, thank you for your input.






#23 Guest_~Songbird~_*

Posted 21 November 2012 - 01:03 PM

Good to hear!. And install avast full service version as it will stop these types of viruses getting onto your computer in the first place. Norton is really bad for trojans like this as you have found out. There are really really bad trojans out there that norton does not puck up and the first you will know of them is your c drive will start to vanish and all your data, then the computer won't start...i'm speaking from personal experience.

#24 solongsuckers

Posted 21 November 2012 - 01:08 PM

QUOTE (GeminiSix @ 21/11/2012, 10:52 AM) <{POST_SNAPBACK}>
Thanks for all the responses.  Over the past 24 hours I have tried a couple of these suggestions, and a few more that I found online.  Malwarebytes didn't find the virus, but it kept on appearing in my Unresolved Risks on Norton.

Even though Symantec listed the risk as "low" many more google searches I did yesterday advised that the virus could possible lead to catastrophe, credit card numbers being stolen, internet banking access, slow computer etc.  I also found that many many people have found the virus very difficult to delete as it (sorry don't know the technical lingo) puts different parts in different places of your computer.

So based on all of this, the fact that the bank alerted us in the first place, and that I do all our banking online from this computer only, I have just backed up our files to USB, done a complete system restore to factory settings and a full scan, and it seems the virus is gone.  Better to be safe than sorry in this instance.

Once again, thank you for your input.


I'd probably go a step further than that and completely reformat and reinstal




1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users

 

Teaching our son to say no to violence against women

Today, on White Ribbon Day - and every other day - we're teaching our son to say no to violence against women.

Mothers told to breastfeed in 'spacious' toilet

If there is one thing the owners of Tillings Cafe can be certain of, it is that the eatery won't win the award for Britain's best baby-friendly coffee shop any time soon.

Mother gives name to son dumped down drain

A woman who admitted to dumping her newborn baby down a Sydney drain has reportedly been allowed to give him a name.

Taking small steps to reduce stress

Are you feeling used up by life's stress, family problems and a demanding job you can't turn off? Many people are way beyond work-life exhaustion. They are functioning as robots.

Bad news: we're running out of chocolate

The world's biggest chocolate-maker says we're running out of chocolate.

Born at 23 weeks, 'Chopstick Baby' survives first week

A baby who was born at 23 weeks has survived her first week of life outside the womb.

Manic stations: the nesting instinct in pregnancy

It might sound like temporary insanity, but almost obsessive nesting as you near your due date isn’t uncommon – even if you’re not usually a particularly clean person.

How a baby can survive alone for days on end

The baby found abandoned in a Sydney drain may have been alone for up to six days without being fed, leaving many asking how he could have survived.

When it begins to look a lot like Christmas

A child's excitement at Christmas time is a beautiful thing, but one dad ponders whether his toddler daughter is getting into the festive mood a bit too soon.

Hospital lets dads the experience some of the pain of childbirth

A new experience is radically altering men's views of childbirth.

Italian doctors questioned over formula bribes

Italian police have placed 12 doctors under house arrest on suspicion of promoting baby milk formula over breastfeeding.

Heartwarming prank gives single mum the house she was hired to clean

Cara Simmons arrived at work to clean a large and beautiful house in time for a party planned for that evening. It was soon hers.

Those special moments of sibling bonding

Every now and then your child does or says something that is truly memorable.

Why we should stop telling new parents to 'enjoy every moment'

A few weeks ago, some dear friends of mine had their first baby. As the proud dad texted me a picture I had to fight the natural instinct to say “Enjoy every moment!”

Baby monitor footage posted online

Footage of Australian babies and children sleeping in their bedrooms are among the images on a Russian site showing live feeds from thousands of homes and businesses around the world.

Did this new dad really hit on his wife's midwife?

Was there really a man who was actually there by his wife’s side as she laboured and gave birth to his child, all while he was making what he perceived to be meaningful eye contact with a midwife?

Keep calm and ignore the Tantrum Trolls

Tantrum Trolls are a small but growing species of predatory bottom-feeders who delight in picking on parents at their most vulnerable.

It's okay to never 'get over' the death of a loved one

The death of children, siblings, and parents has long term impacts on the rest of our lives.

What Mark Latham needs to know about depression and motherhood

Love has nothing to do with mental illness. But love may drive a mother to do something about it.

'We're just trying to keep our child alive': life with FPIES

We have a beautiful seven-month-old son, and his allergy rules our life.

Transgender dad breastfeeds his babies

A transgender man who breastfed his first baby - despite having his breasts removed as part of his transformation from female to male - has now had a second child.

Couple face $1 million medical bill and bankruptcy after babymoon birth

A Canadian couple were slammed with a million dollar medical bill after their daughter was prematurely during their babymoon.

Cigarettes, junk food dominate supermarket sales growth

One in every five dollars spent at supermarkets goes on cigarettes or junk food, according to industry data.

Teacher under fire for breastfeeding in class

There is no doubt mums have a right to continue breastfeeding after they have returned to work, but one teacher in the US has taken it to the extreme.

Win a family pass to Disney Live!

We have 4 family passes to give away to see Disney Live! presents Three Classic Fairy Tales, touring Australia this December/January.

Download now: Essential Kids Activity Finder app

Got bored kids? Quickly find the best activities for kids wherever you are in Australia with the Essential Kids app.

 
Advertisement
 
Advertisement
 
 
 

What's hot on EB

Join PADDINGTON on the red carpet!

To celebrate the release of PADDINGTON, we are giving five lucky winners the chance to win a family pass to the exclusive Australian Premiere in Sydney on December 7!

The tragedy of losing a favourite teddy bear

We were green and uninitiated, perhaps a little naïve when it came to the favourite toy responsibility.

Video: Baby sniffs beardless dad to make sure it's him

She looks him up and down and then touches his chin, but baby Lindsey still isn't sure this clean-shaven man is her dad.

It's possible to workout while pregnant

Medical experts say intense fitness routines can be done safely during pregnancy - if the mums-to-be follow some guidelines.

What parents really want for their kids

Are our hopes, dreams and expectations for our children what they really need?

'I had a feeling something was seriously wrong'

Before even giving birth, Katie Myers' maternal instincts warned her something was wrong with her baby.

When your pregnancy causes a relationship rift

Some dads-to-be don't miss a beat when their partner is pregnant; others struggle with a range of issues and can become withdrawn, right when their support is needed most.

Couple uses group photo trick to announce pregnancy to loved ones

Katharine and Kris Camilli devised a clever trick to immortalise their family and friends' reactions to their exciting pregnancy news.

Why Tracey Spicer has given up make-up

"After 30 years on television, I had become what I despised: a painted doll who spent an hour a day and close to $200 a week putting on a mask."

Knowing you are one of the lucky ones

I am secure, confident and strong, but the responsibility of protecting my children can almost bring me undone.

Why I am so emotional now I have kids?

There are so many ways in which parenthood changes us as women, but one of the most noticeable, for me, has been the changing state of my emotions.

Baby survives despite sharing womb with 'foreign body'

Baby Maia was conceived against the odds, only to find she was sharing a womb with an ominous "foreign body".

Video: Baby shows dog how to jump - or vice versa

They say dog is man's best friend, but this playful pooch seems to have chosen a jumping baby as her number one buddy.

10 ways to soothe a crying baby

New paernts can get frustrated when their newborn gets fussy and can't settle down. When you're feeling overwhelmed, try some of these simple tips to help soothe your baby.

20 baby names that are becoming more popular every year

The data-lovers at nameberry.com have been at it again – this time, they’ve discovered the names that are continually rising up the ranks, ready to take out some top spots in the next few years.

10 great meals to make for new parents

Ideally, you want to give food that isn’t expensive to make, isn't too difficult to create, and freezes well; stews, bakes, soups and pasta sauces are perfect.

Weird pregnancy products

Some pregnancy products come to market and are just awesome. Others just leave you scratching your head.

Carers admit to force-feeding children

Twin brothers have become dads on the same day ? with their partners giving birth in the same hospital, and even the same birthing pool.

 

How many weeks til Christmas?

On your To-Do list

Get the "Santa" shopping done without the kids in tow.

 
Advertisement
 
 
Essential Baby and Essential Kids is the place to find parenting information and parenting support relating to conception, pregnancy, birth, babies, toddlers, kids, maternity, family budgeting, family travel, nutrition and wellbeing, family entertainment, kids entertainment, tips for the family home, child-friendly recipes and parenting. Try our pregnancy due date calculator to determine your due date, or our ovulation calculator to predict ovulation and your fertile period. Our pregnancy week by week guide shows your baby's stages of development. Access our very active mum's discussion groups in the Essential Baby forums or the Essential Kids forums to talk to mums about conception, pregnancy, birth, babies, toddlers, kids and parenting lifestyle. Essential Baby also offers a baby names database of more than 22,000 baby names, popular baby names, boys' names, girls' names and baby names advice in our baby names forum. Essential Kids features a range of free printable worksheets for kids from preschool years through to primary school years. For the latest baby clothes, maternity clothes, maternity accessories, toddler products, kids toys and kids clothing, breastfeeding and other parenting resources, check out Essential Baby and Essential Kids.