Idea Transcript
Norton.com
Home
All Community
Forums
Norton Products
Forums
Blogs
Log in
Advanced
Beta
Sign up
Help
English
Norton Internet Security | Norton 360 | Norton AntiVirus
Not what you are looking for? Ask the experts!
This forum thread needs a solution.
Zeus Virus Posted: 29-Dec-2016 | 3:23PM • Edited: 02-Jan-2017 | 2:01AM • 30 Replies •
0
wingspar Contributor
0
Kudos
0
Permalink
0
4
Reg: 12-Apr-2009 Posts: 56 Solutions: 1 Kudos: 3
Yesterday I got the following screen on my computer shown by a link to a screen shot at the bottom of this post. Nothing I did made it go away and neither did re-booting the computer. What I did was to reboot into Safe Mode, manually delete files under Mozilla, then reboot and things were normal, or at least the screen shot below is gone. I can not find any info in the Norton Internet Security history that even mentions this virus. Why does Norton not seem to see this virus? Using Firefox 50.1.0. Current version. Win 7.
Urgent Customer Issues If you are experiencing an issue that needs urgent assistance please visit our customer support area: Chat with Norton Support @NortonSupport on Twitter Gary...Will Fly for Food
Who's online
Labels: Threat Detection, Virus Me Too 0
There are currently 11 users online.
Last Comment
Replies Re: Zeus Virus
0
Kudos
Posted: 30-Dec-2016 | 2:06AM • Edited: 30-Dec-2016 | 2:28AM •
Permalink
You have 2 threads going on about the same issue. This not a virus. It is merely an ad in your browser. It was a scam designed to trick you into thinking you were infected. If you used an ad blocker then you would not have seen it. The screenshot you posted is a scam and you feel for it. Windows Defender would not give you a browser warning. Windows Defender is off cause you are using Norton. And even if it was on you would get an alert in your system tray like all antiviruses due. Add uBlock Origin to your Firefox extensions. You also want to reset your Firefox. Next download Zemana Antimalware Portable. https://www.zemana.com/en-US/Download
PatsSoxBruins Super Bot Obliterator 18 Reg: 01-Sep-2016 Posts: 1,291 Solutions: 22 Kudos: 82
Re: Zeus Virus
0
Kudos
Posted: 30-Dec-2016 | 2:10AM •
Ajedesign Fbgnarm naja Guillaume1024 SendOfJive hvgsel nyao SoulAsylum skiingj karen black 1
Permalink
The screen shot you posted was from your browser correct? That was not a screenshot of your desktop.
PatsSoxBruins Super Bot Obliterator 18 Reg: 01-Sep-2016 Posts: 1,291 Solutions: 22 Kudos: 82
Re: Zeus Virus Posted: 30-Dec-2016 | 11:17AM • wingspar Contributor
0
Kudos Permalink
Actually, I only posted one thread on this, but it never showed, so I posted it again. Neither one of them ever showed up at all yesterday. It’s been a while since I’ve logged into this forum, and it isn’t as user friendly as it used to be.
4
Reg: 12-Apr-2009 Posts: 56 Solutions: 1 Kudos: 3
I do have Adblock Plus. Had it for years. This did not look like an ad to me, but I most certainly am not going to click on any links or call that phone number to get my computer unlocked without finding out what this thing was. Booting in safe mode as I mentioned in my original post seemed to fix it, but I thought it was strange that Norton never found it. I found a site that lists the files the Zeus Virus puts on your computer and I did not have any of those files on my computer, but I had to know more before I did anything more on the Internet. I downloaded Norton Power Eraser and it found nothing. Yes, this is a screen shot from Firefox. Only way I could get it was to take a photo with my camera cause no matter what I did, even rebooting FF, that page would just come back and not allow me to do anything. I could not close it. Gary...Will Fly for Food
Re: Zeus Virus Posted: 30-Dec-2016 | 1:48PM • Edited: 30-Dec-2016 | 1:49PM • PatsSoxBruins Super Bot Obliterator 18
0
Kudos Permalink
You did not have a virus. What you saw was a fake web page. If you press Alt + F4 that will close out your browser. Use CCleaner and remove the temp files and cookies. Norton Power Eraser did not find anything cause there wasn't anything to find. You weren't infected. You need to be careful what you Google. It can lead you to misinformation. Download the tool I mentioned and run a scan. Zemena is designed to check for browser abnormalities. Abliock Plus is not as good as uBlock Origin
Reg: 01-Sep-2016 Posts: 1,291 Solutions: 22 Kudos: 82
Re: Zeus Virus Posted: 30-Dec-2016 | 1:57PM •
Kudos
0
Kudos
0
Kudos
0
Permalink
Again what you saw was a web page scam. You were never infected.
PatsSoxBruins Super Bot Obliterator 18 Reg: 01-Sep-2016 Posts: 1,291 Solutions: 22 Kudos: 82
Re: Zeus Virus Posted: 30-Dec-2016 | 2:00PM •
Permalink
https://community.norton.com/en/comment/7293301#comment-7293301
PatsSoxBruins Super Bot Obliterator 18 Reg: 01-Sep-2016 Posts: 1,291 Solutions: 22 Kudos: 82
Re: Zeus Virus Posted: 30-Dec-2016 | 2:03PM •
Permalink
You fell for a scam that he led you to believe that Windows defender found a virus called Zeus. The reason Norton never found anything or popped up with an alert is because you're there was never any virus on your computer.
PatsSoxBruins Super Bot Obliterator 18 Reg: 01-Sep-2016 Posts: 1,291 Solutions: 22 Kudos: 82
Re: Zeus Virus Posted: 30-Dec-2016 | 3:09PM • floplot Norton Fighter
0
Kudos Permalink
Hello PSB
25
Reg: 11-Apr-2009 Posts: 25,360 Solutions: 561 Kudos: 3,896
3 posts in a row saying basically the same thing.? The hour hadn't yet expired, so you could have edited them to have just the one post instead of 4 !!. Thanks. Success always occurs in private and failure in full view. Windows 7 Pro 64 bit NS with BackUp 22.12.1.15 Core Firmware 229 I E 11
Re: Zeus Virus
0
Kudos
Posted: 30-Dec-2016 | 4:29PM •
Permalink
Floplot unless you have something to add to help the person out its not worth you posting
PatsSoxBruins Super Bot Obliterator 18 Reg: 01-Sep-2016 Posts: 1,291 Solutions: 22 Kudos: 82
Re: Zeus Virus Posted: 30-Dec-2016 | 5:33PM • F 4 E Norton Fighter
0
Kudos Permalink
Mind your manners. Concentrate on helping other users, and keep the smartass remarks to yourself.
25
Reg: 23-May-2009 Posts: 9,401 Solutions: 321 Kudos: 1,894
Windows 10 X64 Fall Creators Update 1709
Re: Zeus Virus Posted: 30-Dec-2016 | 6:59PM •
Kudos
0
Kudos
0
Permalink
I know your speaking to floplot. Or are you also adding nothing to this thread
PatsSoxBruins Super Bot Obliterator 18 Reg: 01-Sep-2016 Posts: 1,291 Solutions: 22 Kudos: 82
Re: Zeus Virus Posted: 30-Dec-2016 | 7:56PM • Edited: 30-Dec-2016 | 8:03PM • F 4 E Norton Fighter
Permalink
I'm speaking to you PSB as you well know, and it's you're, not your.............. Manners is obviously something you don't possess.
25
Reg: 23-May-2009 Posts: 9,401 Solutions: 321 Kudos: 1,894
Tending to your hundreds of computers is no doubt not allowing you to observe common courtesies, or the forum rules. I'm done responding to you. There will always be self appointed experts in these forums. We've seen them come and go. Windows 10 X64 Fall Creators Update 1709
Re: Zeus Virus Posted: 31-Dec-2016 | 6:44AM • Edited: 31-Dec-2016 | 7:13AM • lmacri Norton Fighter
2
Kudos
Stats
Permalink
wingspar:
25
Yesterday I got the following screen on my computer shown by a link to a screen shot at the bottom of
Reg: 05-May-2009 Posts: 3,515 Solutions: 92 Kudos: 1,803
this post. Nothing I did made it go away and neither did re-booting the computer. What I did was to reboot into Safe Mode, manually delete files under Mozilla, then reboot and things were normal, or at least the screen shot below is gone. I can not find any info in the Norton Internet Security history that even mentions this virus. Why does Norton not seem to see this virus?
Hi wingspar: Back to your problem. As you already surmised, the pop-up you saw is a tech support scam and it's unlikely that you're infected with the Zeus (Trojan Zbot). It does, however, sound like your browser was infected with adware/scamware/scareware since you were able to stop the pop-up by manually deleting some files in your Mozilla folder while you were in Safe Mode. It can be very difficult to remove the last traces of these types of infections off your computer, and it's even possible that this scamware delivered other malware or PUPs (potentially unwanted programs) that have gone undetected. I rely on my Norton antivirus to protect me from high-risk malware like viruses, trojans, etc. but like many other users in this forum I also run the occasional Malwarebytes Anti-Malware (MBAM) scan to look for lower risks PUPs or other threats that Norton might have missed. See the post Supplementing your Anti-Virus Program with AntiMalware Tools by malware removal specialist quietman7 in the bleepingcomputer forum, which is part of his excellent "Common Security Question - Best Practices" series. If you have any concerns that you still have hidden remnants of this infection on your computer, you can work one-on-one with a trained malware removal specialist and have them run a thorough check of your system. Several reputable free malware removal forums are reviewed in delphinium's thread Malware Removal Forum Recommendations - my personal preferences are bleepingcomputer and WhatTheTech. Pick one removal forum, follow the guidelines posted at the top of their forum board so you know what information they require in your first post, and do not attempt to run any further diagnostics or fix the problem yourself while you're waiting for a specialist to be assigned to your case. If you don't want to post in one of the free malware removal forums and would like to try a Malwarebytes Anti-Malware scan, I'd suggest installing the free version of MBAM v2.2.1 (the latest free MBAM v3.0.5 can be downloaded if you prefer but v3 was just released a few weeks ago and still has a large number of known issues). Then run a full system scan as follows: 1. Download and run the MBAM v2.2.1 installer (available from https://downloads.malwarebytes.com/file/mbam_2x) 2. Decline the 14-day trial of the Premium version in the last step of the installation (i.e., disable the "Enable free trial of Malwarebytes Anti-Malware Premium" check box before clicking the Finish button in the installation wizard). 3. From the main dashboard go to Settings | Update Settings | Update Options and disable "Check for program updates when checking for database updates" (this will prevent an automatic upgrade to the new v3.0 and this setting can be re-enabled when you're ready to upgrade). 4. Click the Update link in the main dashboard to ensure you have the latest virus definitions and then go to Scan | Custom Scan | Configure Scan and create a custom scan for all drives on your hard drive. Leave Scan for Rootkits disabled but change notifications for PUPs and PUM from "Treat detections as malware" (i.e. automatic removal) to "Warn user about detections" as shown below. 5. Click Scan Now to start the scan. A full system scan usually takes about 2 hours 30 min on my old Vista SP2 machine (a typical Threat Scan, which is analogous to a Norton Quick Scan, usually runs in about 15 to 20 min), but scans should run faster on your Win 7 SP1 machine.
-----------32-bit Vista Home Premium SP2 * Firefox v50.1.0 * NIS v22.8.1.14 * MBAM Premium v2.2.1
Re: Zeus Virus
0
Kudos
Posted: 31-Dec-2016 | 3:59PM • Edited: 31-Dec-2016 | 4:04PM •
Permalink
@wingspar:
20750065 Super Bot Obliterator 18
I'm curious... or just to clarify, was the URL started w/ data:text/html or sth like that?
Reg: 16-Mar-2013 Posts: 1,288 Solutions: 16 Kudos: 161
Anyway: That's yet another advanced scareware-like fakealert and, never call that number, report that instead. For related case studies, you may read this post. thx PUP Hunter PRO: Just TRYING to save the world (U) from cyber threats, A single blog post, at a time, and ONCE & FOR ALL. (A fan of Nadia_Kovacs)
Re: Zeus Virus Posted: 31-Dec-2016 | 5:04PM • wingspar Contributor
0
Kudos Permalink
lmacri... That’s a lot of info. Thank you. I downloaded V3 of Malwarebytes and ran it. It only took 2:21 for a full system scan and it found nothing. I just downloaded V2.2.1 and may remove V3 and run V2.2.1 if anyone feels I would benefit from it. I had two previous versions of Malwarebytes from previous years. I’ve used the program many times in years past and can’t remember it ever finding anything.
4
Reg: 12-Apr-2009 Posts: 56 Solutions: 1 Kudos: 3
Gary...Will Fly for Food
Re: Zeus Virus Posted: 31-Dec-2016 | 5:09PM • wingspar Contributor
0
Kudos Permalink
20750065... The URL for this page was 2348957892478942376.tech/win/
4
Reg: 12-Apr-2009 Posts: 56 Solutions: 1 Kudos: 3
I never considered calling that phone number. Firefox was locked till I deleted files in Safe Mode, but my computer still worked. Gary...Will Fly for Food
Re: Zeus Virus Posted: 31-Dec-2016 | 5:25PM • floplot Norton Fighter
0
Kudos Permalink
Hello wingspar
25
Reg: 11-Apr-2009 Posts: 25,360 Solutions: 561 Kudos: 3,896
Since your Firefox was locked, you may want to try one of the free malware removal sites and get their opinion if your computer is clean or infected. Imacri mentioned the link in her thread. Since it was a very long post, I will repeat the link here so it will be easier to find. Please see this link for an up to date description of these sites plus the addition of a newly listed site formed by one of our successful malware remover users who unfortunately has passed away. That site is still being run by a good expert who happens to be one of the other Gurus. The new site is listed first in this link. https://community.norton.com/en/forums/malware-removal-forum-recommendations Sorry about the distractions in the posts above. Thanks.
Success always occurs in private and failure in full view. Windows 7 Pro 64 bit NS with BackUp 22.12.1.15 Core Firmware 229 I E 11
Re: Zeus Virus
0
Kudos
Posted: 31-Dec-2016 | 5:41PM • Edited: 31-Dec-2016 | 5:43PM •
Permalink
@wingspar: the site has run off w/ the bad author...
20750065 Super Bot Obliterator 18 Reg: 16-Mar-2013 Posts: 1,288 Solutions: 16 Kudos: 161
yet, the site is still green to visit? PUP Hunter PRO: Just TRYING to save the world (U) from cyber threats, A single blog post, at a time, and ONCE & FOR ALL. (A fan of Nadia_Kovacs)
Re: Zeus Virus Posted: 31-Dec-2016 | 5:59PM • lmacri Norton Fighter
0
Kudos Permalink
wingspar:
25
I downloaded V3 of Malwarebytes and ran it. It only took 2:21 for a full system scan and it found
Reg: 05-May-2009 Posts: 3,515 Solutions: 92 Kudos: 1,803
nothing. I just downloaded V2.2.1 and may remove V3 and run V2.2.1 if anyone feels I would benefit from it.
Hi wingspar: That's good news. If MBAM v3.0.5 is running on your computer without any obvious glitches then there's no benefit to downgrading to v2.2.1 and running another scan. All versions of MBAM use the same virus definition set for scanning so I doubt a full system scan with v2.2.1 would detect any new threats. It still might be wise, though, to post in one of the free malware removal sites recommended in delphinium's thread Malware Removal Forum Recommendations and have a trained specialist check your system just to ensure you've removed all the remnants of this scamware. -----------32-bit Vista Home Premium SP2 * Firefox v50.1.0 * NIS v22.8.1.14 * MBAM Premium v2.2.1
Re: Zeus Virus Posted: 01-Jan-2017 | 4:30AM • Edited: 01-Jan-2017 | 4:31AM • PatsSoxBruins Super Bot Obliterator 18
0
Kudos Permalink
Please don't not use MalwareBytes 3.0 in real time alongside any other security. 3.0 was designed as an antivirus replacement. Not to compliment your antivirus. If you are using MalwareBytes 3.0 trial then you need to remove Norton. It's the same as running 2 antiviruses. Use a portable second opinion scanner instead such as Zemana, Hitman Pro, Emsisoft Emergency Kit. Again I cannot stress that what you saw was never an infection. It was merely a fake web page designed into making you think you were infected. And it worked. You feel for it. If you used Alt + F4 that would have closed out your browser window.
Reg: 01-Sep-2016 Posts: 1,291 Solutions: 22 Kudos: 82
Imacri.......Your Vista will expire soon Re: Zeus Virus Posted: 01-Jan-2017 | 3:36PM • Edited: 01-Jan-2017 | 4:22PM • 20750065 Super Bot Obliterator 18
0
Kudos Permalink
@wingspar: There IS NOT such a thing as a legitimate portable version of Hitman Pro from the vendor, SurfRight. THX.
Reg: 16-Mar-2013 Posts: 1,288 Solutions: 16 Kudos: 161
UPDATE: 1-TIME SCAN vs. PORTABLE.
and to scan yr system only, deselect the default
option and enable the 2nd one. OP met that page-based fakealert instead. The URL for this page was 2348957892478942376.tech/win/
Using that so-called remover is totally optional. PUP Hunter PRO: Just TRYING to save the world (U) from cyber threats, A single blog post, at a time, and ONCE & FOR ALL. (A fan of Nadia_Kovacs)
Re: Zeus Virus
0
Kudos
Posted: 01-Jan-2017 | 3:55PM • Edited: 01-Jan-2017 | 3:57PM •
Permalink
Hitman Pro is fully portable. Have you ever used it? Obviously not. When you download the 12MB file you get 2 options. To install it or use it as a portable scanner. Please get your facts straight there 20750065. Selecting no gives you a portable version. No installation needed. I use Hitman Pro along with hundreds of other tools that are ALL fully portable.
PatsSoxBruins Super Bot Obliterator 18 Reg: 01-Sep-2016 Posts: 1,291 Solutions: 22 Kudos: 82
Re: Zeus Virus Posted: 01-Jan-2017 | 3:56PM • PatsSoxBruins Super Bot Obliterator 18
Kudos
0
Kudos
0
Permalink
Great free portable scanner http://www.novirusthanks.org/products/zeus-trojan-remover/
Reg: 01-Sep-2016 Posts: 1,291 Solutions: 22 Kudos: 82
Re: Zeus Virus Posted: 01-Jan-2017 | 4:16PM • Edited: 01-Jan-2017 | 4:16PM • PatsSoxBruins Super Bot Obliterator 18
Permalink
HitmanPro is designed to work alongside existing security programs without any conflicts. It scans the computer quickly (less than 5 minutes) and does not slow down the computer (except for the few
Reg: 01-Sep-2016 Posts: 1,291 Solutions: 22 Kudos: 82
minutes it is scanning). HitmanPro does not need to be installed. It can be run straight from a USB flash drive, a CD/DVD, local or network attached hard drive.
https://www.bleepingcomputer.com/download/hitmanpro/ Need I say more
Re: Zeus Virus Posted: 02-Jan-2017 | 1:52AM •
Kudos
0
Kudos
0
Permalink
https://www.bleepingcomputer.com/download/hitmanpro/
PatsSoxBruins Super Bot Obliterator 18 Reg: 01-Sep-2016 Posts: 1,291 Solutions: 22 Kudos: 82
Re: Zeus Virus Posted: 16-Jun-2017 | 6:15PM • Timothy O'Neil Visitor 2
Permalink
Today my roommate got the screen described above on her Win 7 HP Desktop. I was able to AltTab to desktop, encouraged, I Cntl-Alt-Delete and killed Firefox, upon restarting Firefox an AVG (her free anti-virus) popped up first, requested a Quarantine, I said yes, then allowed me to choose a replacement for the bad extension, I choose Google and that made it go away.
Reg: 04-Mar-2017 Posts: 3 Solutions: 0 Kudos: 0
It had a phone number to call and played an audio message threatening that the computer would be severely damaged if we didn't call a number, they claimed they were Microsoft, the middle syllable "ro" was odd, like crow, indicating a non native English speaker.
Re: Zeus Virus Posted: 16-Jun-2017 | 6:25PM • Timothy O'Neil Visitor 2
Permalink
I meant the "Windows Defender Alert : Zeus Virus Detected in Your Computer, Blue Screen, back up there in Wingspar's post.
Reg: 04-Mar-2017 Posts: 3 Solutions: 0 Kudos: 0
Re: Zeus Virus
0
Kudos
Posted: 17-Jun-2017 | 6:01AM • Edited: 17-Jun-2017 | 6:04AM • lmacri Norton Fighter
0
Kudos
Permalink
Timothy O'Neil:
25
Today my roommate got the screen described above on her Win 7 HP Desktop. I was able to Alt-Tab
Reg: 05-May-2009 Posts: 3,515 Solutions: 92 Kudos: 1,803
to desktop, encouraged, I Cntl-Alt-Delete and killed Firefox, upon restarting Firefox an AVG (her free anti-virus) popped up first, requested a Quarantine, I said yes, then allowed me to choose a replacement for the bad extension, I choose Google and that made it go away...
Hi Timothy O'Neil: I'm relatively certain this was a tech support scam and that your friend was never infected with Zeus, so please don't call the support number again or provide any information to these scammers. There are multiple thread in the AVG support community about these fake pop-ups see Scott Behrends' Zeus virus and Lionel Henderson's Zeus Virus for recent examples. I'm not sure what you mean when you said that AVG "allowed me to choose a replacement for the bad extension" but it sounds like you were prompted to change your default browser from Firefox to Chrome. Open AVG, go to Options | Virus Vault, highlight the file that was quarantined by AVG and then click Details to see if you can find any additional information about the removed file. Knowing the type of detection (e.g., Adware.Generic8) might help us determine if this was low-risk PUP (potentially unwanted program) or some other type of malware. Have you tried the free Malwarebytes suggested to run a second-opinion scan to see if it can detect anything missed by AVG? The Malwarebytes Anti-Malware v2.x mentioned in that post has now reached it's end-of-life and has been replaced by the newer Malwarebytes v3.x. Deactivate the 14-day trial period of the real-time protection features and use Malwarebytes as a free on-demand scanner by going to Settings | My Account | Deactivate Premium Trial as shown in the support article How to deactivate Trial version with Malwarebytes 3.0. -----------32-bit Vista Home Premium SP2 * Firefox v52.2.0 * NS v22.9.4.8 * MB Premium v3.1.2
Re: Zeus Virus
0
Kudos
Posted: 17-Jun-2017 | 9:08PM •
Permalink
Imaci: I saw it was obviously Ransomware and didn't plan to call the number. When the attack first occurred my roommate had dismissed the AVG dialog which suggested she disable the extension to Firefox that was causing the problem. The web page with the audio voice mispronouncing Microsoft and the screen claiming the computer was infected by the Zeus virus "froze the screen" (as some describe it because the X boxes both to dismiss the screen and to dismiss Firefox did not respond).
Timothy O'Neil Visitor 2 Reg: 04-Mar-2017 Posts: 3 Solutions: 0 Kudos: 0
There was also a dialog box in the middle of the screen requesting a user name and password for the system, an obvious tip off that this was malicious and the computer wasn't infected with the Zeus virus but with RansomWare. After I killed Firefox with Windows Task Manager, then restarted Firefox, saw the AVG dialog, and responded to it to fix the errant extension, there was a second dialog saying that the malware had changed the configuration and suggested I reset the configuration, one of my choices was Google, I took that to mean the Google search engine as opposed to the default Firefox, or the AVG search engine, Not Chrome vs Firefox Browser. The AVG version I suppose would look like the Norton Safe Search that I use on my Windows 7 machine, but my roommate was used to seeing a startup/new tab screen that said Google (running as the Firefox initial page), configured that way, not Firefox or AVG as a page running under Firefox. BTW, she had an icon to launch Google Chrome but it failed (I fixed it just for grins), but she wants to continue to use the Firefox Icon. Anyway, problem was solved, and I followed up, and couldn't resist sharing because I saw the exact screen I saw in a post from Dec 2016 Rock and Roll!
Re: Zeus Virus
Kudos
Posted: 18-Jun-2017 | 6:16AM • Edited: 18-Jun-2017 | 6:18AM • lmacri Norton Fighter
2 Stats
Permalink
Timothy O'Neil:
25
There was also a dialog box in the middle of the screen requesting a user name and password for the
Reg: 05-May-2009 Posts: 3,515 Solutions: 92 Kudos: 1,803
system, an obvious tip off that this was malicious and the computer wasn't infected with the Zeus virus but with RansomWare.... ...Anyway, problem was solved, and I followed up, and couldn't resist sharing because I saw the exact screen I saw in a post from Dec 2016
Hi Timothy O'Neil: Technically speaking, real ransomware encrypts files on the hard drive and prevents you from accessing those files unless you pay a ransom for the decryption key, so this pop-up is really a type of phishing scam that tries to scare you into revealing your Windows login username and password so the hackers have a back door into your system. A reputable ad blocker like Adblock Plus might help prevent future problems with similar adware / scareware. At a minimum I'd still recommend a second opinion scan with the free Malwarebytes just in case this adware has dropped files on the hard drive or made registry changes that aren't detected by an AVG full system. If your friend continues to see any unusual activity on their computer I'd also recommend they visit one of the free malware removal forums mentioned so they can work one-on-one with a trained malware removal expert to ensure their system is clean. -----------32-bit Vista Home Premium SP2 * Firefox v52.2.0 * NS v22.9.4.8 * MB Premium v3.1.2
This thread is closed from further comment. Please visit the forum to start a new thread.
Forums
Norton Products
Norton Internet Security | Norton 360 | Norton AntiVirus
Products
Services
Support
Downloads
Norton On Social
Norton Security Standard
Free Virus Scan
Norton Support
Free Antivirus
Norton on Facebook
Norton Security Deluxe
Norton Safe Web
Norton Update Center
Malware Removal
Norton on Twitter
Norton Security Premium
Password Manager
Virus Removal
Norton Cybercrime Report
Norton on YouTube
Norton Family Premier
Password Generator
Virus Definitions & Security
Norton Mobile Security
Parental Control Software
Updates
Norton Online Backup
Spyware
Norton Utilities Norton Ultimate Help Desk Norton Small Businesses ©1995 - 2018 Symantec Corporation Legal Notice
Privacy Policy
License Agreement
Cookies
Norton on Google+