Rogue software installed

My friend's new computer is running NIS, fully updated. She brought it over to me because of numerous popups. It turns out that 24 rogue programs were all installed yesterday, she does not know why. In Programs and Features I see 24 programs such as Search Protect, Conduit, Wajam, PCFIx, SaveSense, PC Health, Optimizer Pro, Sendori, etc. I've restored the computer to factory original, but my question is how do 24 programs such as these get installed when Norton is protecting the computer? I understand that she must have clicked on a malicious attachment or link, but isn't Norton supposed to prevent rogue software from being installed?

Thanks

They are not Rogues, but PUP's

 

They are easliy removed and don't do harm compared to Malware.   You will have to tell your friend you got it wrong and they are not rogues but PUP's

 

You did not need to do factory reset either as they were just PUP's

 

The more PUP's a system gets the system generally slows down.

 

Quads

Some Norton gives no warning against PUPs?

 

At least one of the programs, I think it may have been PC Optimizer, gave her a list of 866 problems, and wanted $75 in order to repair them. And it clearly said that it was Microsoft providing this info. It also said there was no firewall, offered one for $169. and said there was no antivirus, offered one for $40. Would you put this in the category of a PUP? 

Some PUP's are advertising and marketing tools.  PC optimizer is actually available as a download on CNET.com.  What you have isn't something you want, and it is annoying, but it isn't necessarily malware.

Hi Vincenzo:

Since Norton products are designed to protect your system against high-risk malware that have the potential to corrupt your operating system or steal your personal information, many users on this forum run the occasional on-demand scan with free scanners like Malwarebytes Anti-Malware (my personal choice) or SUPERAntiSpyware to detect lower-risk PUPs (potentially unwanted programs) and PUMs (potentially unwanted modifications) like ad-ware and browser re-directors.  I also have the Adblock Plus extension installed in my Firefox browser for added protection, and versions of this add-on are now available for other popular browsers like IE, Chrome, etc.

Quads posted a link in the Tech Outpost board to an Emsisoft blog here that describes the distinction between malware and  PUPs but I agree with your comments about PUPs.  If I'm about to accidently infect my system with a "nuisance" PUP that cannot be easily removed (e.g., that can't be uninstalled from the Control Panel or fixed by clearing my browser history or resetting my default home page) then I think that Norton should be doing a better job of keeping that software off my system. Here are three posts in the Product Suggestions board that you can kudo if you would like to vote for the users' suggestion that Norton improve their PUP detection:
http://community.norton.com/t5/Product-Suggestions/Scan-for-and-remove-PUPs/td-p/982325
http://community.norton.com/t5/Product-Suggestions/Feature-Request-Identify-PUPs/td-p/1055235
http://community.norton.com/t5/Product-Suggestions/A-PUP-category/m-p/847244/highlight/true#M2923

On a slightly different topic, Symantec has posted a support article here explaining why users should not run more than one security program in real-time protection mode.  If your friend's PC came with a trial version of antivirus software like McAfee, Kaspersky, etc. that was re-installed after restoring to original factory settings then this AV software should be uninstalled from the Windows Control Panel (Programs and Features) and then wiped with the removal tool provided by the manufacturer so that it doesn't conflict NIS.  ESET has provided links to removal tools for several popular AV software programs here.
------------
MS Windows Vista Home Premium 32-bit SP2 * Firefox 26.0 * IE 9.0 * NIS 2013 v. 20.4.0.40
HP Pavilion dv6835ca, Intel Core2Duo CPU T5550 @ 1.83 GHz, 3.0 GB RAM, NVIDIA GeForce 8400M GS

OK I've kudo'ed them.

 

Thanks

A timely reminder of the option to use Norton's DNS numbers, as posted recently in the link below.

 

It won't stop pups etc being downloaded if you click on the wrong thing, but they will help you avoid untrustworthy sites.

 

http://community.norton.com/t5/Other-Norton-Products/New-IPs-Available-for-Norton-ConnectSafe-Users/td-p/1066575