Last night my husband went online to update our Norton antivirus software subscription, which was about to expire. When he tried to update Norton, he received an update message from WinAntivirus 2004, which proceeded to delete the Norton antivirus software and then install WinAntivirus 2004 software. My husband used a credit card to pay for the WinAntivirus 2004.

I've gone on the web, and can't even find a web site for WinAntivirus 2004. When I google Norton Antivirus, I get an ad for WinAntivirus!

The only mention of this software I can find is ads. It's not in any of the comparison charts for antivirus software. I finally got to Symantec, which I THINK is the same thing as Norton, and WinAntivirus is not listed as one of their products.

Have we just given out our credit card number to a fly-by-night outfit?

My husband ran a virus check last night using this new software, and it detected a trojan horse, which it did not fully identify and couldn't fully delete. Files it could not delete were vm.installer and vm.exe under c:\x.cab folder.

Any advice?

The first thing I did after reading your message was to do several searches for WinAntiVirus 2004. The first thing that game up was ONE link. I clicked on that link and immediately was taken to a "login" screen and the questions/answers to FAQ. I have never seen this website before, and therefore did not proceed. Although it looks "official" and very similar to Symantec (which does make Norton), I'd highly recommend that your husband call your credit card company and ask if there have been any "unusual" Internet credit card charges. Ask that your credit card company phone you or your husband as soon as or if any suspicious Internet charges are trying to be posted to your account.

Although there ARE many free downloadable anti-virus protection software companies available, I prefer to use Norton, myself. I've tried several of the freebies, but there are too many other things running in the background most times, and that makes me uncomfortable. I've been scammed before by something on the Internet, and wound up having to have a new credit card because of Internet fraud.

I'm not implying that you and your husband have been scammed, just suggesting that you call your credit card company and have them verify the authenticity of the winantivirus software he paid for, and any other purchases in the next few days over the Internet.

Thanks Linda!

I did finally find their web site. There isn't a whole lot there. When I clicked on the link to their product descriptions, it said it was taking me to a secure area, which seemed a little strange just for seeing product descriptions.

Will call the credit card company.

I got through on the phone to Symantec Customer Service. Yes, it appears that I have been scammed. Can't say that Symantec is particularly worried about it. Weird.

I use Norton Antivirus, and I appreciate your warning us about this other company hijacking Norton's links.

Hey Katsmom. I guess this could be a warning to others, couldn't it? I've changed the topic title on this post to be more specific and to include Norton to make it a more precise warning.

Becky,
Thanks for posting this and I'm so sorry this has happened to Norton(of all things)and to you all.

Ingie

Yes that is weird.
If Norton is that unconcerned about the security of their links, I wouldn't be particularly worried about renewing with Norton. There are other antivirus companies out there.

Not only others but, others that are better as well. My 2 cents.

Rusty

Strange, isn't it?

As an analogy -- Cartier is rightfully concerned about cheap knock-offs of their watches. Well, what if somebody installed an entrance to the Cartier store that channeled people past the real store and sold fakes at the same price as the real thing? People would never even know they were buying a fake.

Wouldn't Cartier be concerned?

I just got back from CompUSA, where I was told that Norton is far superior to any other antivirus software out there, so I bought Norton again. Maybe Norton/Symantec is so powerful that they don't need to worry about a 2-bit operation stealing some of their customers. Especially if their customers just go out and buy Norton again.

Sheesh!!!

According to the fellow at CompUSA, WinAntivirus is a FREE virus program that somebody has packaged and is selling to unsuspecting customers on the web. He says that WinAntivirus must have somehow used spyware to redirect my computer to their site, fooling my husband into thinking it was Norton. And this while I was using Spybot to control the spyware!

It's just discouraging. I feel like there are threats out there online in a way I never did before. I don't feel like downloading anything ever again.

So your computer's browser got hijacked?
You'd better find out if it's been hijacked to do other things as well.

Which browser do you use?

This may be a related event, or just a coincidence, BUT...

I'm suddenly unable to start my Task Scheduler, which includes (only) Norton Anti-virus LiveUpdate. I can start LiveUpdate manually, but it will no longer automatically check for anti-virus updates every 2 hours.

I wasted hours today, trying to find out what's wrong. It tells me I don't have enough 'resources' to start the Task Scheduler service. Well, I closed several (safe) processes and no applications were open -- but I still couldn't get automatic Norton LiveUpdate to enable. I also tried restarting Windows.

I'm wondering if this is related to a recent Windows HotFix, that had to do with Internet Explorer and downloads. (?)

Anyone have any thoughts on THIS one?

Jenny-- I use Internet Explorer.

I asked because I wondered if your browser being "redirected" had anything to do with the security hole the new Windows hotfix (867801) is trying to fix. It seemed to be to do with IE rather than other browsers.

http://www.microsoft.com/security/bulletins/200407_windows.mspx

This is the update Demosthenes had trouble with on one computer. But he said the update worked when he downloaded the entire update before installing (as opposed to installing while being connected to MS).

Katsmom, I don't know if your problem is related to the security hole or not. It does seem suspicious though.

I use Internet Explorer almost exclusively, even though I have the MSN browser available to use. I've given up trying to fix the Task Scheduler for now. I'm just grateful that my computer and OS survived the update process!

I'm really losing faith in Microsoft lately. MSN told me to seek online help elsewhere, with my suddenly 'buggy' and unreliable Lucent modem connections... so I DID, and found an unsigned driver update that FIXED the problem... after which, Microsoft sent me a "Critical" Windows Update -- a 'Microsoft' (signed) Modem Driver update from 2003... which I failed to recognize as the SAME driver I'd been having problems with! So I downloaded the modem driver from WU -- and promptly had to RE-INSTALL the newer, more successful, and unsigned "Agere" modem driver update!

Apparently, Lucent went out of business; and Agere isn't having their driver updates digitally signed.

So to get back on topic -- it seems that Norton Anti-virus is going downhill lately; and I no longer trust "critical" updates that Microsoft tells me to download and install.