Tweet
The Fake Norton Security Scan tech support scam is a Trojan from the Rogue.Tech-Support-Scam family that displays a fake scan window called Norton Security Scan. This window pretends to be a scan by a Norton product that states that high risk threats were detected and that you should call the listed tech support number. It is important to note that this is not a scan from a Norton product and Symantec or Norton are not involved in any way with this alert.
Remove the Fake Norton Security Scan Tech Support Scam
The Fake Norton Security Scan tech support scam is a Trojan from the Rogue.Tech-Support-Scam family that displays a fake scan window called Norton Security Scan. This window pretends to be a scan by a Norton product that states that high risk threats were detected and that you should call the listed tech support number. It is important to note that this is not a scan from a Norton product and Symantec or Norton are not involved in any way with this alert.
When you call 1-888-262-9519 number, you will be told that your computer is infected or has a serious problem and that you should purchase remote support services. They will then attempt to scare you into purchasing services or software that you do not need. It goes without saying that you should not purchase services from this remote support company.
The text of the Fake Norton Security Scan alert is:
WARNING
Your computer is at risk! The last scan found high risk threats on your computer. A comprehensive Norton security product can tbe used to remove these threats. We strongly recommend fixing these threats immediately, before data loss or identity theft, or other damage occurs.
Call Support: 1-888-262-9519
FIX NOW
How did the Fake Norton Security Scan Scam Scam get on my computer?
It is important to note that this program is installed by other programs that did not adequately disclose that other software would be installed along with it. Therefore, it is important that you pay attention to the license agreements and installation screens when installing anything off of the Internet. If an installation screen offers you Custom or Advanced installation options, it is a good idea to select these as they will typically disclose what other 3rd party software will also be installed. Furthermore, If the license agreement or installation screens state that they are going to install a toolbar or other unwanted adware, it is advised that you cancel the install and not use the free software.
As you can see, this program was created solely to scare you into purchasing unnecessary remote support services. For no reason should you call this number, and if you have already purchased services from them, I advise you to dispute the charges with your credit card company. To remove this Trojan and any related software, please use the removal guide below.
Array
View Associated Fake Norton Security Scan Tech Support Scam Files C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ChromieoBrowser.lnkC:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\MusicPlayer.lnkC:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WindowsProblem.lnk%UserProfile%\AppData\Roaming\ChromeBrowser.exe%UserProfile% \AppData\Roaming\Interop.WMPLib.dll%UserProfile%\AppData\Roaming\MusicDrawer.exe%UserProfile%\AppDat a\Roaming\Resouce_Monitor.exe%UserProfile%\AppData\Roaming\Resouce_Monitor.InstallState%UserProfile% \AppData\Roaming\WindowsProblem.exeFile Location Notes:
%UserProfile% refers to the current user's profile folder. By default, this is C:\Documents and Settings\ for Windows 2000/XP, C:\Users\ for Windows Vista/7/8, and c:\winnt\profiles\ for Windows NT.
View Associated Fake Norton Security Scan Tech Support Scam Registry Information HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{8E999199-4711-4CA1-8040-ACAEE9C33CD6}HKLM\SOFTWARE\Wow6432Node\MusicPlayerHKLM\SOFTWARE\Wow6432Node\MusicPlayer\MusicPlayer
Click here to view the article.
Remove the Fake Norton Security Scan Tech Support Scam
- Tue, 19 Jul 2016 15:03:11 EDT
- Read 961 times
The Fake Norton Security Scan tech support scam is a Trojan from the Rogue.Tech-Support-Scam family that displays a fake scan window called Norton Security Scan. This window pretends to be a scan by a Norton product that states that high risk threats were detected and that you should call the listed tech support number. It is important to note that this is not a scan from a Norton product and Symantec or Norton are not involved in any way with this alert.
When you call 1-888-262-9519 number, you will be told that your computer is infected or has a serious problem and that you should purchase remote support services. They will then attempt to scare you into purchasing services or software that you do not need. It goes without saying that you should not purchase services from this remote support company.
The text of the Fake Norton Security Scan alert is:
WARNING
Your computer is at risk! The last scan found high risk threats on your computer. A comprehensive Norton security product can tbe used to remove these threats. We strongly recommend fixing these threats immediately, before data loss or identity theft, or other damage occurs.
Call Support: 1-888-262-9519
FIX NOW
How did the Fake Norton Security Scan Scam Scam get on my computer?
It is important to note that this program is installed by other programs that did not adequately disclose that other software would be installed along with it. Therefore, it is important that you pay attention to the license agreements and installation screens when installing anything off of the Internet. If an installation screen offers you Custom or Advanced installation options, it is a good idea to select these as they will typically disclose what other 3rd party software will also be installed. Furthermore, If the license agreement or installation screens state that they are going to install a toolbar or other unwanted adware, it is advised that you cancel the install and not use the free software.
As you can see, this program was created solely to scare you into purchasing unnecessary remote support services. For no reason should you call this number, and if you have already purchased services from them, I advise you to dispute the charges with your credit card company. To remove this Trojan and any related software, please use the removal guide below.
Array
View Associated Fake Norton Security Scan Tech Support Scam Files C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ChromieoBrowser.lnkC:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\MusicPlayer.lnkC:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WindowsProblem.lnk%UserProfile%\AppData\Roaming\ChromeBrowser.exe%UserProfile% \AppData\Roaming\Interop.WMPLib.dll%UserProfile%\AppData\Roaming\MusicDrawer.exe%UserProfile%\AppDat a\Roaming\Resouce_Monitor.exe%UserProfile%\AppData\Roaming\Resouce_Monitor.InstallState%UserProfile% \AppData\Roaming\WindowsProblem.exeFile Location Notes:
%UserProfile% refers to the current user's profile folder. By default, this is C:\Documents and Settings\ for Windows 2000/XP, C:\Users\ for Windows Vista/7/8, and c:\winnt\profiles\ for Windows NT.
View Associated Fake Norton Security Scan Tech Support Scam Registry Information HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{8E999199-4711-4CA1-8040-ACAEE9C33CD6}HKLM\SOFTWARE\Wow6432Node\MusicPlayerHKLM\SOFTWARE\Wow6432Node\MusicPlayer\MusicPlayer
Click here to view the article.