Norton error message re clearnview

[Ms_Jane_Doe]

Note: Please do not post Personally Identifiable Information like email address, personal phone number, physical home address, product key etc.

Issue abstract: Receiving popup message re connection to clearnview.com/

Detailed description: I am receiving a popup purporting to be from Norton. This popup is a warning that “connection to this website is not secure: connection to https://sync.clearnview.com has been blocked because the SSL certificate is not trusted. The Certification Authority has revoked certificate validity. Your connection may be now spied upon or you may be redirected to a fake site.” Is anyone else experiencing this, and what actions should be taken? We encountered this message a couple of days ago and ran a full system Norton scan with no adverse results. We are going to install Power Eraser and try running that as well.

Product & version number: Norton 360 Premium. Unable to locate version number because can’t locate Settings/About in any portion of the Norton App on my PC.

OS details: Windows 11 for Home

What is the error message you are seeing? Please see screenshot as indicated below.

If you have any supporting screenshots, please add them:

Norton Error Clearnview.pdf (156.0 KB)

[bjm]

[bjm]

https://sync.clearnview.com
DNS resolves sync.clearnview.com to 88.214.193.140
The Certificate is not issued by DigiCert, GeoTrust, Thawte,
or RapidSSL

clearnview.com
Common Name =
Subject Alternative Names = point.clearnview.com,
clearnview.com, www.clearnview.com, sync.clearnview.com
Issuer = Go Daddy Secure Certificate Authority — G2
serial Number = 649B5B77490A7EC7
SHAI Thumbprint = 502187ED3B7C57D06D3BA86D338ACCB2EBB27BEE
Key Length = 2048
Signature algorithm = SHA256—RSA
Secure Renegotiation:
X TLS Certificate is revoked

The certificate has been revoked. You should replace it with a new certificate as
soon as possible.
OCSP Staple: Not Enabled
OCSP origin: Revoked
CRL Status: Revoked

https://www.digicert.com/help/

[Ms_Jane_Doe]

Are you a bot? Or are you a living human being?

Are you trying to tell me how to do something on my computer? Please reply with a list of what actions I am supposed to take on my computer.

A picture of a website and a list of computer messages means nothing to me. thank you.

[bjm]

@Ms_Jane_Doe

Are you a bot? Or are you a living human being?

living human…last time I checked

@Ms_Jane_Doe

Are you trying to tell me how to do something on my computer? Please reply with a list of what actions I am supposed to take on my computer.

A picture of a website and a list of computer messages means nothing to me. thank you.

A picture of a website and a list of computer messages may mean something to users that pass this way.
Norton Community is primarily user-to-user < working > product help.
We like confirming Norton notice for OP and for users that pass this way.

[bjm]

https://sync.clearnview.com/

Scan failed 400 Bad Request
Site is not Blacklisted 9 Blacklists checked
https://sync.clearnview.com/
IP address: 88.214.193.140
Hosting: Unknown
Running on: Unknown server
CMS: Unknown
Powered by: Unknown
Scan Failed Unable to scan your site. 400 Bad Request
Scan Failed
Unable to scan your site. Site empty (no content)]
https://sitecheck.sucuri.net/results/https/sync.clearnview.com

1/96 security vendor flagged this URL as malicious
https://sync.clearnview.com/
Status 400
Last Analysis Date a moment ago
VirusTotal report here

A few times tonight my norton anti virus popped up saying it had blocked ‘Sync clearnview’ because its SSL certificate is not trusted. I am on other sites and not anything with that name. I am wondering if this is something I should be worried about?
…[…]…
https://www.reddit.com/r/computerviruses/comments/1i6ccd8/clearnview/

Jan 25, 2025
Sync.clearnview.com is website related to browser hijacker activity. This kind of malware infects the browser to show people promoted pages under the guise of human verification. The hijacker itself may be present as a browser extension, or a stand-alone program somewhere in the system. In this video, I show how to delete the malware and remove Sync.clearnview.com redirect from the browser.
https://www.youtube.com/watch?v=AouiVs9PcgE
Note: YouTube author is promoting Gridinsoft Anti-Malware

@Ms_Jane_Doe

I am receiving a popup purporting to be from Norton. This popup is a warning that “connection to this website is not secure: connection to https://sync.clearnview.com has been blocked because the SSL certificate is not trusted. The Certification Authority has revoked certificate validity. Your connection may be now spied upon or you may be redirected to a fake site.” Is anyone else experiencing this, and what actions should be taken? We encountered this message a couple of days ago and ran a full system Norton scan with no adverse results.

Hello @Ms_Jane_Doe
Are you still receiving Norton notice?

Did you clear browser cookies n cache?
Do you run browser sync?
Did you recently install any program / browser extension?
Did you recently allow push notifications?
Did you recently change site permissions?
Did you run Norton Full Scan?
Did you run Malwarebytes Scan?

How to install and run a scan with Malwarebytes [here]

Were my machine and I wanted reassurance.
I’d ask Malwarebytes Malware Removal Help Forums [here] to check my machine.

[Ms_Jane_Doe]

Glad to hear that.

I don’t care whether the SSL is fake, outdated, or active. I never wanted to connect in the first place. I don’t even know how I got “connected” to this phantom clearnview.com.

The Norton error message says several things: (a) the connection is not secure, (b)the connection has been blocked, (c) the Certificate is not valid, (d) “your connection may be now spied upon.”

1. Is my computer at risk or not?
2. I checked my browser and there is no such extension installed as clearnview.
3. Is my computer at risk or not?
4. Using Norton Power Eraser, I have run a Full System Scan including Rootkit. No threats were detected.
5. Is my computer at risk or not?

[bjm]

Hello @Ms_Jane_Doe
Are you still receiving Norton notice?

Did you run Malwarebytes Scan?

How to install and run a scan with Malwarebytes [here]

Were my machine and I wanted reassurance.
I’d ask Malwarebytes Malware Removal Help Forums [here] to check my machine.

@Ms_Jane_Doe

Norton 360 Premium. Unable to locate version number because can’t locate Settings/About in any portion of the Norton App on my PC.

[Ms_Jane_Doe]

So now I have to buy and install Malwarebytes in addition to paying for Norton? This is beyond my bandwidth for today. I have spent most of the afternoon on this problem and I have other chores to do besides getting stuck in the minutiae and hassle of more applications, more passwords, more time spent staring at computers.

As I mentioned in my earlier reply, I have run Norton Full Scan.

I don’t do browser sync’s because I run the PC and mobile devices separately and syncing is not a priority for me right now.
No push notifications.
No changes to site permissions.
Firefox and Edge browsers are set to clear cookies/cache etc upon exit.

[bjm]

@Ms_Jane_Doe

So now I have to buy and install Malwarebytes in addition to paying for Norton?

Are you still receiving Norton notice?

Malwarebytes install/scan is free.
Malwarebytes Malware Removal Help is free.

How to install and run a scan with Malwarebytes [here]

Were my machine and I wanted reassurance.
I’d ask Malwarebytes Malware Removal Help Forums [here] to check my machine.

[Ms_Jane_Doe]

I will check with my computer consultant company before I proceed with Malwarebytes.

The last time someone installed more than 1 antivirus software on our computer, it caused conflicts and a severe degradation of PC performance. We couldn’t touch a key without the PC running a virus scan, over and over and over.

[bjm]

@Ms_Jane_Doe

I will check with my computer consultant company before I proceed with Malwarebytes.

Are you still receiving Norton notice? → Norton Error Clearnview.pdf

Thanks for posting re sync.clearnview.com
seems it’s been around for a few days reddit.com & youtube.com [here]

Regards w Respect

[bjm]

AI
GoDaddy may revoke a certificate for a number of reasons, primarily when they suspect the private key associated with the certificate has been compromised, the domain owner no longer has control of the website, or if a technical error occurred during the certificate issuance process, leading to potential security vulnerabilities and requiring a precautionary revocation to protect users.
Key reasons for GoDaddy to revoke a certificate:

• Compromised private key: If there is evidence that the private key linked to the certificate has been exposed, GoDaddy will revoke it to prevent unauthorized use.
• Suspected fraudulent activity: If GoDaddy suspects fraudulent activity related to the certificate application, they may revoke it.
• Compliance issues: To comply with industry standards or legal requirements, GoDaddy may revoke certificates that do not meet certain criteria.

What happens when a certificate is revoked?

• Invalidation: Once revoked, the certificate becomes invalid and can no longer be used to establish a secure connection.
• CRL update: The certificate is added to a “Certificate Revocation List” (CRL) which is accessible to browsers and servers, allowing them to identify and reject revoked certificates.

[Laura_Wilkinson]

I too am experiencing the same pop up. What is the resolution or action that should be taken?

[bjm]

@Laura_Wilkinson

I too am experiencing the same pop up. What is the resolution or action that should be taken?

Hello @Laura_Wilkinson
one time or continuous pop up?

Are you still receiving same Norton pop up?

Did you clear browser cookies n cache?
Do you run browser sync?
Did you recently install any program / browser extension?
Did you recently allow push notifications?
Did you recently change site permissions?
Did you run Norton Full Scan?
Did you run Malwarebytes Scan?

How to install and run a scan with Malwarebytes [here]

Were my machine and I wanted reassurance.
I’d ask Malwarebytes Malware Removal Help Forums [here] to check my machine.

Thanks for posting re sync.clearnview.com
seems it’s been around for a few days reddit.com & youtube.com [here]

Remove Browser Hijacker & Redirect Virus [Full Guide] [here]
How to Remove ALL Viruses From Windows PC [Full Guide] [here]
Windows Malware Removal Help & Support [here]

Virus Protection Promise is a virus removal service provided by Norton experts. If they are unable to remove the virus from your Windows, MacOS, Android or iOS device, you will be entitled to a refund even if no other refund right applies.

Virus Protection Promise is a feature offered only with automatically renewing subscriptions and only applies to device security subscriptions with antivirus features.

For more information, see Terms & Conditions.
What is Norton Virus Protection Promise?

We resolved the domain sync.clearnview.com to IP address 88.214.193.140
88.214.193.140 was not found in our database
ISP Overoptic Systems Ltd
Usage Type Data Center/Web Hosting/Transit
ASN Unknown
Domain Name hqhost.net
Country United States of America
City New York City, New York
https://www.abuseipdb.com/check/88.214.193.140

2 detected files communicating with this IP address
88.214.193.140 (88.214.192.0/22)
AS 46636 ( NATCOWEB ) US
Last Analysis Date 1 minute ago
https://www.virustotal.com/gui/ip-address/88.214.193.140/relations

1/94 security vendor flagged this domain as malicious
sync.clearnview.com
Registrar GoDaddy.com, LLC
Creation Date 2 years ago
Last Analysis Date 3 minutes ago
https://www.virustotal.com/gui/domain/sync.clearnview.com/relations

Cloudflare has sync.clearnview.com classified as malicious [here]

[bjm]

fwiw ~
posted 29-Jan-2025
https://gridinsoft.com/blogs/sync-clearnview-com-virus/
posted 30-Jan-2025
https://gridinsoft.com/online-virus-scanner/url/sync-clearnview-com

Note: gridinsoft.com has ads
Caveat: I’m not familiar with Gridinsoft Anti-Malware

================================

may be related
https://community.norton.com/t/clearnview-com-false-positive/368044

[David_Rind]

I’ve been trying to figure out how to get rid of clearnview, and based on this I installed Gridinsoft. I could not get Gridinsoft to allow the free 6-day trial, so I paid the fee (like $40). It was easy to use following the directions on the links above, and as far as I can tell, clearnview is gone. YMMV.

[bjm]

@David_Rind

I’ve been trying to figure out how to get rid of clearnview, and based on this I installed Gridinsoft. I could not get Gridinsoft to allow the free 6-day trial, so I paid the fee (like $40). It was easy to use following the directions on the links above, and as far as I can tell, clearnview is gone. YMMV.

Were my machine and I wanted reassurance.
I’d ask Malwarebytes Malware Removal Help Forums [here] to check my machine.

[Susan_Senese]

I’ve been getting this as well, it’s why I came to the “ask the community” site to find out info. I’ve done everything - scans, removing cookies. Nothing works! It started about a week or so ago.

[bjm]

@Susan_Senese

I’ve been getting this as well, it’s why I came to the “ask the community” site to find out info. I’ve done everything - scans, removing cookies. Nothing works! It started about a week or so ago.

Did you run Malwarebytes scan?

Did you run Malwarebytes scan in Safe Mode?

you can run a scan in Safe mode. But then later, follow up with a new scan in Normal mode. In order for definitions to be updated, Windows needs to be in Normal mode or in Safe Mode with NETWORKING.
https://forums.malwarebytes.com/topic/295999-is-it-okay-if-malwarebytes-full-scan-is-run-in-safe-mode/?do=findComment&comment=1559148

Did you clear browser cookies n cache?
Do you run browser sync?
Did you recently install any program / browser extension?
Did you recently allow push notifications?
Did you recently change site permissions?
Did you run Norton Full Scan?
Did you run Malwarebytes Scan?

How to install and run a scan with Malwarebytes [here]

Were my machine and I wanted reassurance.
I’d ask Malwarebytes Malware Removal Help Forums [here] to check my machine.

==========================================

Clearnview Blocked notification 6 days ago
https://www.reddit.com/r/computerviruses/comments/1ibchg9/clearnview_blocked_notification/?rdt=56671