|
|
Post by etchman on Jul 3, 2017 4:43:55 GMT -8
Oops, that should read "Trovi"
|
|
dbrisen
Malware Removalists
Posts: 3,688 
|
Post by dbrisen on Jul 3, 2017 20:12:00 GMT -8
.... The Norton pop-up "845c90655eb860c3_0 is not safe and has been removed" keeps appearing. Is that a file or BHO (browser helper object) or  What does Norton say exactly? |
|
|
|
Post by etchman on Jul 4, 2017 4:37:30 GMT -8
|
|
dbrisen
Malware Removalists
Posts: 3,688
|
Post by dbrisen on Jul 4, 2017 6:24:47 GMT -8
Ahh... Thank you for the pictures as they explain the situation much better now. Your system is fine and protected; Norton is just informing you of what it is finding and why.
A IPS detection / warning is an Intrusion Prevention Service notification that Norton has blocked a malicious attempt to Intrude into your system. If the Source / Attacking system is outside of your system, Norton has blocked it and you are safe. The reason for the notification is so the user can take note of what they were surfing to (what web sites they were visiting) and if this happens every time the same web site is loaded, then the user can choose to not go there.
The McAfee symbol in the picture (I believe) is for the web page you were visiting / loaded and is supposed to mean that that web page / site is secured by McAfee. It does not mean that McAfee was loaded on your system so do not worry about that.
Basically, Norton has protected and is protecting you very well; it just has a less than stellar way of informing the user of what is just background information and what needs their attention.
|
|
|
|
Post by etchman on Jul 4, 2017 7:32:34 GMT -8
As I mentioned in my post of 9:36am yesterday, the problem is there. My Chrome is still hijacked because when I do a Google search and then click on a link, an unwanted page will open up instead of the one I want. I can't use Google search any more, it's so bad. Even when I use Bing, spurious pages appear, although it's not quite so bad.
|
|
|
|
Post by etchman on Jul 4, 2017 9:18:44 GMT -8
To give you some examples of what I mean by hijacked Chrome - I launched Chrome and opened a new tab to get this Google search page: wikisend.com/download/461638/S1.jpgI then tried to click in the search box, but as soon as I did that a new window opened up: wikisend.com/download/842588/S2.jpgI repeated the process but this time this window opened up: wikisend.com/download/448056/S3.jpgI then managed to type "boots" (the name of a well-know pharmacy in the UK) in the search box and got a list of links. I scrolled down to find "boots.com", but when I clicked on the link, I got this Norton warning message: wikisend.com/download/814038/S4.jpgWhen I type in "boots.com" in Firefox, it takes me to the genuine site. |
|
|
|
Post by etchman on Jul 4, 2017 9:22:48 GMT -8
I forgot to say that while I am getting all these spurious pages, Norton is giving me frequent messages which seem to indicate that it is blocking various attacks and removing dangerous files. But the fact is that something nasty has got control of Chrome and it's not me!  |
|
dbrisen
Malware Removalists
Posts: 3,688
|
Post by dbrisen on Jul 4, 2017 19:50:40 GMT -8
Please download and run the Chrome Cleanup Tool from here. Does the problem still happen? Have you tried resetting your router (this will clear any bad DNS records)? |
|
|
|
Post by etchman on Jul 5, 2017 0:27:20 GMT -8
Chrome Cleanup Tool did the trick! It was so easy to use and quick - next time (if there is one) I think we should start with this.
Thanks for your help.
|
|
dbrisen
Malware Removalists
Posts: 3,688
|
Post by dbrisen on Jul 5, 2017 6:12:46 GMT -8
Is there a log or any information on what the tool did exactly?
|
|
What does Norton say exactly?
