Hi,
I use Norton 360 Premier Edition. I tried to install Winzip from their official webpage. Prior to installation I found that it showed the seal NORTON by Symantec with a checkmark besides the URL when conducting a search on Google.
Since it showed the Norton Seal I accessed the WinZip webpage. and downloaded the free winzip version. Norton 360 scanned it and suggested that it was safe to use.
It also indicated that the download was safe. Next , I right clicked on the file which was the WINZIP installer and Norton 360 mentioned that NO THREATS detected
When I installed it, it installed WSE_ASTROMENDA which hijacked my browser all browser (Firefox 32.0.1, Chrome version 37 and above, IE 9)
It points me to Astromenda.com
I removed the extensions, changed the home page settings and I observed that it installs the Astromenda.com as the search engine.
I remove all , and did a full scan withf Norton 360. Nothing showed up.
Then I scanned my system with Malwarebytes and it went crazy. If flagged Andromenda as potenital unwanted PUP and it found in the windows vista registry.
I accessed Regedit and cleared the entries. Did a full scan with malwarebytes and NO THREATS WERE FOUND.
Now I uninstalled Malwarebytes and then scanned system with Norton 360 and it scanned only 200K files. I did this on three occasions. Earlier it used to scan 400K files.
I reinstalled Chrome and there we go again, I get the extension Astromenda. which I disable.
Looks like it is still there on my system.
System Config : Windows Vista 32 bit
RAM :4GB
Norton 360 Premier edition
browsers: IE 9, Chrome 37 and above, Firefox 32.0.1
Please help . What is this Astromenda. and why did not Norton 360 catch it. Why does Malware bytes catch it
Do I need to do a clean install of Windows 7 since I think windows Vista may be corrupted ?
I only have an upgrade disk for Windows 7.
Thanks
Jay