I'm infected but Norton or others not finding problem

Archive
1

Bear with me; this might be a lengthly problem (I'm very computer savy though)

 

Okay so I'm using a Samsung Galaxy S4 device, I use the built in 'Internet' Browser as my default browser. I visit www.nbcnews.com regularly to view world-ly news.  However within the past couple weeks I've noticed that as I'm browsing nbcnews that Google Play launches and asks me to download Candy Crush Saga (the game)

 

I continue with what I'm doing and its all good.  However I can replicate it by rebooting device and especially getting rid of previous tabs and starting a new tab with nbcnews.com

 

At first I thought it was the fact it was set to that homepage; however even setting homepage to something else and using nbcnews as  bookmark problem still persists.

 

I decided to reformat device, left SD card out and tested out the browser.  I had no issues then.  So I thought ok problem solved (reformat). I stuck SD card back in and went from there.  Nearly 48hrs after a reformat and of visiting nbcnews.com I still had no problems; I think I had 2 more programs to set up one of them being Norton Halt.


Oh yeah, sorry LOL I forgot to mention I ran a full Virus scan using Norton Mobile Antivirus thing (Norton Security), I've tried downloading other malware, spyware programs too before I did a reformat.

 

Anyways after setting up Norton Halt, I visited nbcnews.com and my problem is back.  So I thought it was Norton Halt.  However after un installing after clearing cache/data, problem still persisted.

 

I un installed a game on my cell phone.  Matching with Friends by Zynga; I cleared cache, data....problem still persisted.  And keep in mind I could just launch nbcnews.com let it sit idle and then Android Google Play Market loads and goes immediately to the  "Download Candy Crush Saga" page

 

I decided to fire up an old device....Motorola Droid Razr.  Now I just use it for Motocast but its always connected to WiFi and no I do not take SD card out and put into Droid Razr. I tested the browser and it did the same thing.  And I'm pretty sure the Android Version is different; ya know like 4.2.2 vs 4.1.2 or something

 

So I decided to test it further and try it out on my old old HTC Droid Incredible; and I'm sure the android version is even older than 4.1.2.........problem persisted as well.

 

So now I've basically found out that 3 devices straight...on nbcnews.com had an issue. I tried it out on my Galaxy Note 10.1 Tablet; however it could never replicate; maybe cause its not a true mobile device I dont know.

 

So I sent nbcnews.com an email

 

And I decided to try other browsers as well. I tried checking Google Chrome on my Galaxy S4 and surprisingly enough problem didnt happen; so i'm free!!! Meaning no issues with Google Chrome

 

I downloaded Dolphin Browser, problem happened here.  So now i'm stumped.  3 Phones using 'Internet Browser' and 1 Galaxy S4 using Dolphin Browser and problem still lies within nbcnews.com.......eventually I'll just download the app and hopefully bypass the website but..........

 


OMGosh whats this????  Yep I used a ask.com widget to search for "csi files melina" and I got a couple hits....I dont use Google search for my searches; I use ask.com  Anyways after clicking a relevant article CSIFiles.com loaded up and guess what? Yep it launched Google Play Android Market and wants me to download Candy Crush Saga again.

 

So now I'm thinking.....Okay how can 3 cell phones that dont share the same operating system that uses "Browser/Internet" keep making it launch Play Store?

 

A-Ha???? My Google Account? I just checked my Droid Razr and I did notice that my Google Account are in fact the same; now normally they should be the same however I actually did have an old Google Account that had issues too.

 

And under settings I have the "Backup/Restore Google Account checked"

 

My theory??????? I downloaded a file I shouldnt have....the file might be stored on my SD card........The file wont launch until a certain action is met aka Malware or Spyware....and having the phone keeping my account backed up..it backs up to the server and when I used my other phones it probably downloaded the file there in which when I launched the web and visited either spot it would then launch Play Store...therefore my other two phones are problably infected.

 

I honestly dont know what to do now?

 

Backup my Pictures and Music?

 

Format my SD Card?

 

Create a new Google Account? Start from scratch?

 

Pay a Gazillion dollars that I dont have to have someone do a deep cleaning on my cell phone and find this so called Spyware? Oh but wait, what about my other cell phones that I use just for WiFi? Well I cant guarantee just yet but what if my Droid Incredible is using my old Google Account? What then? How come problem persists there too

 

Can I clear my account history but keep my email address and just basically wipe everything clean?

 

Or am I gonna have to deal with the annoying pop up forever?  Nope I cant; like I said; now its even popping up off CSIFiles.com; whos to say that all sites wont soon be infected.

 

OMGosh I just dont know what to do :(

2

So I just called a Verizon agent and she was able to replicate it on her device as well.

 

So it isnt just my Google Acct

It isnt related to my Cell Phone Number

Nor is it related to my Account Number

 

The Verizon agent thinks that website may have an agreement about advertising Candy Crush Saga; though I'm not sure about it automatically launching Play Store.

3

Hi itolman.

 

Sorry for the delay in responding but I have been a bit distracted for the last couple of days.  :-(

 

Thanks for the feedback about your contact with Verizon.

 

I had wondered if the app had been factory installed on your device (even if you do not use it) and the message was actually about an update but even that seems unlikely.

 

As far as I can see the app appears to be legit.  As it also seems to be free maybe you could download it (when it would be scanned by Norton) and then just forget about it....

 

Have you thought about contacting nbcnews.com and seeing what they say?

 

Without a better idea of what it happening I'm not sure what if anything Norton might do about it.

 

Do let us know what you decide and how it turns out.

4

Okay well after a couple weeks I've been using Google Chrome just to visit that website. I use Internet Browser for all my other searches and page openings and such and havent really had an issue.

 

NBCNews didnt email me back (surprise surprise lol) but also I've used the Internet Browser a few times now visiting nbcnews.com and so far havent had Play Store launch.

 

I do have the URL code though that makes it launch the Play Store; not sure if someone can decipher it but if not no biggie.  Like I say I may just forever use Google Chrome for that main website. I havent downloaded the NBCnews app to my cell phone yet but that option is available.

 

All I know is thankfully this last week straight i havent had any issues :)

5

Hi ltolman.

 

Glad to hear that things seem to have settled down.  Thanks for the feedback.

 

If you want to safely check out any web address you can always do so by entering it in the Norton Safe Web Website.

 

Good luck for the future.