Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

Question

Dangerous predicament!!

Sep 21, 2017 8:53PM PDT

Hi! Omitting all unnecessary details, I was trying to quickly uninstall some Norton trial software that had managed to get on my computer, and I thought to expedite the process I'd go directly to Norton and have them perform the uninstall. Unfortunately in calling the contact number I googled for Norton, I got a sham company-- someone from the company named Zaid was pretending to be Norton tech support-- and I let him take over my computer to uninstall the Norton software. When I was eventually informed by Zaid that there'd be a $120 charge to uninstall the Norton software, I immediately realized he'd been an impostor, and I tried to sever the connection by turning my computer off. But when I restarted it, Zaid was still there. I used Task Manager to try to close the program, but it didn't work-- he popped right back up again.

This happened about seven hours ago. I've been afraid to turn on my computer since then-- I'm using a different computer to write and post this. So my first question is: will the mere passage of time break the connection between our computers, or do I have to do something specific to rid my computer of Zaid?

Discussion is locked

- Collapse -
Answer
Got 10? Windows 10?
Sep 21, 2017 9:18PM PDT

You have quite a few options from Windows 10 reset and save your files to a full factory reset and wipe out but have a good PC.

Then again removing Norton is not at all hard. There are numerous web pages at Norton so I'll share my method. The Symantec Norton removal tool. An overview is given at: https://www.bleepingcomputer.com/forums/t/650947/cant-uninstall-norton-antivirus-in-windows-10/

The removal tools are at https://www.bitdefender.com/support/removal-tools-(uninstall-tools)-for-common-antivirus-software-1107.html?irgwc=1&clickid=zTLT8rUJxRFoUnFRNgROSzv4UkmwODUYeXP-2Q0&cid=aff|c|IR which is described in the Bleeping link.

Due to Norton Symantec changes I think moderators may dis Norton from now on.

- Collapse -
Answer to R Proffitt
Sep 21, 2017 9:50PM PDT

Actually, the computer that's affected has Windows 8.1. After the incident (by the way, the sham tech company pretending to be Norton Tech support was GuruAid) I went to the real Norton website and they uninstalled the trial software for me.

But R Proffitt, my immediate concern is breaking the link that GuruAid established to remotely control my computer to supposedly uninstall the Norton-- what do I have to do, if anything, when I turn on that computer to break any remaining link with GuruAid? Or do links established that way automatically expire after a certain length of time, so that when I turn that computer on tomorrow there won't be any link with GuruAid?

- Collapse -
Then here's MY CHOICE OF WHAT TO DO.
Sep 21, 2017 9:56PM PDT

1. Use the tool to remove Norton as noted in the first and second links.

2. No, I can't assure you about any remote control apps. I don't see enough detail to assure you or not.

3. That said, if this was mine I'd complete step 1 then immediately upgrade to W10 since I no longer have to keep restore media specific to the PC. (digital entitlement!) I just did this last week using this method. -> http://www.makeuseof.com/tag/missed-free-windows-10-upgrade-psst-heres-backdoor/

That way we can use W10's reset methods and get clean.

- Collapse -
Answer
First I would look under programs and features
Sep 22, 2017 5:05AM PDT

to see if there was anything install on an after the day this happened. If anything wasn't install purposely by you uninstall it. Was the link https://support.norton.com. That link is really symantec/ Norton.

- Collapse -
Answer
Absolute First Thing
Sep 22, 2017 6:14AM PDT

DISCONNECT THAT COMPUTER FROM THE INTERNET!

Only then can you proceed with getting rid of them. Check in the Add/Remove Programs section, see if there's anything there you can uninstall. Immediately after booting, and closing any programs you have open automatically, open Task Manager and see what processes are running. Check to make sure each one is a valid windows process. Only when you feel confident you've eradicated it should you add it back to internet connection.