Norton Internet Security / Norton AntiVirus

[kseither]

I am running Win 7 x64 and get redirected to happili.com.  It happens both through searches and links via other websites.  I have read the threads but am confused as to where to start.  Don't want to screw anything up and am semi computer ignorant.  Please help me.

[kseither]

Also, I am running Norton Anti Virus 2012 and have tried full scan and Power Eraser scan with no success on finding virus.

[Quads]

Don't run Norton Power Eraser.

Quads

[kseither]

I already did.  Did that ruin my chances of fixing this thing? 

[Davec33]

Question for Quads ( or anyone from Norton ): I am somewhat concerned about all the reports I see about Happili redirect. Is NIS able to detect and block this yet ?

[cgoldman]

---

Davec33 wrote:
Question for Quads ( or anyone from Norton ): I am somewhat concerned about all the reports I see about Happili redirect. Is NIS able to detect and block this yet ?

---

I am neither Quads or Norton, but am advised by Norton that Happili is now being detected although it is included in the detection under the title "trojan.tracur."

[Davec33]

The OP states that he is running Windows 7.

The write up for "trojan.tracur" by Norton shows:

Systems Affected: Windows 98, Windows 95, Windows XP, Windows Me, Windows Vista, Windows NT, Windows Server 2003, Windows 2000

Does not mention Windows 7 ??

Also states: Wild Level: Low , Number of Infections: 0 - 49 ,  Removal: Easy

From what I have been reading here the removal of Happipi is anything but easy ! So I am still not reassured that NIS is blocking this.

[Quads]

It depends on what is causing the redirects for that or other sites.    New variants are continually appearing, so that one for last week or even yesterday is different enough to get past AV software at times.

The Redirect can be caused by a group of different Malware, but the users see the same Redirect,  So one user actually has Zeroaccess where another has Pihar, then another has Tracur, and other has Mebroot, and another jusr has a Java infection.

Same Redirect but different cause,  This is where people are screwing there systems as they are not knowing what they are trying to target.   

Quads

[Davec33]

Thanks for that explanation Quads.

Hopfully Symantec will keep on top of these malware.

[Quads]

---

kseither wrote:

I already did.  Did that ruin my chances of fixing this thing? 

---

 Did it detect any object at all, and did NPE unload (close) correctly??

Quads