Reply
Newbie
NYRColter
Posts: 2
Registered: ‎02-13-2012

insurancepuma.com virus- second one missed by NIS

I purchased NIS for two years six weeks ago, and have gotten two different viruses since then. The first I was able to eliminate using a third-party free removal program, but this one I am having no luck with.

 

I have spent days trying to eliminate this threat, to no avail. Will there be an update or anything to remove this from my computer, or does anyone know what I can do?

 

Please help!

dickevans
Posts: 9,267
Registered: ‎04-08-2008

Re: insurancepuma.com virus- second one missed by NIS


NYRColter wrote:

I purchased NIS for two years six weeks ago, and have gotten two different viruses since then. The first I was able to eliminate using a third-party free removal program, but this one I am having no luck with.

 

I have spent days trying to eliminate this threat, to no avail. Will there be an update or anything to remove this from my computer, or does anyone know what I can do?

 

Please help!


Hi,

Have you downloaded and used the Norton Power Eraser? It's here:  http://us.norton.com/support/DIY/index.jsp

Be careful it is an agressive tool.

Dick
Win7x64 SP1 current NIS V20
Bot Obliterator
Quads
Posts: 13,258
Registered: ‎07-21-2008

Re: insurancepuma.com virus- second one missed by NIS

This redirect page, appears to happen with the system being infected with a FakeAV (FakeHDD) in behind that is either zeroaccess or a newer TDL4.

 

---- Disk sectors - GMER 1.0.15 ----

Disk \Device\Harddisk0\DR0             TDL4@MBR code has been found <-- ROOTKIT !!!
Disk \Device\Harddisk0\DR0              sector 00: rootkit-like behavior

 

Quads

 

Bot Obliterator
Quads
Posts: 13,258
Registered: ‎07-21-2008

Re: insurancepuma.com virus- second one missed by NIS

this site redirection is a symptom of being infected with Boot.Pihar.*, a MBR infection.

 

Quads