Northon Security

Associate
Joined
28 Dec 2018
Posts
9
Before 1 week I had no antivirus , then I open one website and my got trojan after trojan . Then just purchase Northon Security which I have it and the program clean everything . But now every time I start my pc it show me need restart to done trojan or security risk . After restart its show me again and again and again . I run last 2-3 days Full Scan and there is nothing .

https://imgur.com/a/DjWsSxv

What I have to do .
 
Oh dear look like build in Windows Security's anti-virus protection failed to blocked trojan from infected website you visited. People like you should buy Norton Security as extra layer of security to fully protected your PC, it did much better job than Windows Security which had very basic protection not always catch all viruses and trojans.

I used Norton Security on all devices, been used Norton anti-virus and firewall for 24 years.

I googled y2b.exe and found nothing.

If you still get Norton messages, please click View Detail to find out where files infected by Trojan.Gen.2 and y2b.exe viruses located on HDD/SSD and take screenshots.
 
Haha first you get a virus then you infect your pc with Norton .

New pc stats +3 to load times, -4 to memory -9 to cpu cycles

Get a local pc guy to pc guy to sort your pc out?
 
Maybe can think to give pc to someone to resolve it . From 2-3 days I didn't get this msg and anything at all . I try to do this way - https://support.norton.com/sp/en/us/home/current/solutions/v72380755_EndUserProfile_en_us

I make everything on this page and after trying to boot my pc with the usb bootable usb and Norton Bootable Recovery Tool first show me Norton removable tool will start in 8 sec , and after that it show me this - https://imgur.com/a/tXAKoaB
If I leave for more then 1-2 min this lack screen its show me the second picture and the only way to stop it is to restart pc and boot with normal way my windows from ssd . I didn't have Norton for 1 year and just happen this , that why I buy it . Even was rly hard to buy it b ecouse this trojan make my pc very slow , even when I click to purchase Norton is get my like 10-15 min to open internet explorer ...
 
Just do a refresh.

Start
Settings
Update and Security
Recovery
Then click "Get started" under refresh this PC. It will remove everything and keep your files but will restore windows to a working state.
 
I just contact them Norton via Chat and they explain me to try with Norton Power Erase . When I run it show me this - https://imgur.com/a/T52tJEe then I restart my pc and now didn't show me anything . I try to run again Power Erase and say there is no threat found hope will be everythin ok . Do I still have to do Recovery or if now is ok to not do anything ? Thanks
 
Maybe can think to give pc to someone to resolve it . From 2-3 days I didn't get this msg and anything at all . I try to do this way - https://support.norton.com/sp/en/us/home/current/solutions/v72380755_EndUserProfile_en_us

I make everything on this page and after trying to boot my pc with the usb bootable usb and Norton Bootable Recovery Tool first show me Norton removable tool will start in 8 sec , and after that it show me this - https://imgur.com/a/tXAKoaB
If I leave for more then 1-2 min this lack screen its show me the second picture and the only way to stop it is to restart pc and boot with normal way my windows from ssd . I didn't have Norton for 1 year and just happen this , that why I buy it . Even was rly hard to buy it b ecouse this trojan make my pc very slow , even when I click to purchase Norton is get my like 10-15 min to open internet explorer ...

Strange tool bug, I never saw or tried Norton Bootable Recovery Tool before but I used Norton Power Erase before. Downloaded NBRT was very slow took me about 45 mins to completed and mounted into VMWare, started a VM and it worked fine.

LjTdVXZ.png


Also tried created NBRT on USB stick and booted my desktop PC, worked fine on Intel 8700K CPU.

I just contact them Norton via Chat and they explain me to try with Norton Power Erase . When I run it show me this - https://imgur.com/a/T52tJEe then I restart my pc and now didn't show me anything . I try to run again Power Erase and say there is no threat found hope will be everythin ok . Do I still have to do Recovery or if now is ok to not do anything ? Thanks

That registry key do not looked good, it probably created and infected by a virus. Open regedit and navigate to that location and check if everything look correct like mine.

6Wyy52V.jpg


Is your PC now running normal now? If not, it still very slow as you said then your PC probably still has trojans.

Right click on Norton Security icon, go to View Recent History and go to Show box to scrolling down to Quarantine and SONAR Activity to find trojan files, click on Trojan.Gen.2 and y2b.exe, click on More Options at bottom right corner just above Close box and it will show you the location and will tell if threat was removed. Also you should check the locations to make sure the infected files are not at the locations.

I suggest you to do run Norton Live Update to download latest anti-virus update and do full system scan to see if you got any further viruses and trojans.
 
Very strange , 2 days ago when google it someone say maybe you have to remove cpu hyper threading manuali from BIOS and maybe this will resolve the problem ( I didn't try ) . Maybe because my processor is no good or I don't know , Is G4560 in few days will change with brand new i7 6700k , but that's don't see like point lets say low cpu and cannot run the program . I have latest version in Norton , I have few minutes left for full scan . Also like you take me like 50 min to download this file . I check this direction and is like yours but the difference is your Policy is ALLSigned , mine is Restricted . ALso I check there is nothing on Quarantine or SONAR Activity . https://imgur.com/a/WMRz4r3

Few hours later I just play Assassin Creed and try to minim game but happen something . Also my internet explore was bugged , cannot open second page but is loaded but doesn't show on my task bar . I restart pc and show me there is Trojan - y2n.exe which is removed . I try to follow to the folder now and didn't find it in the folder . - https://imgur.com/a/hNDOnA6
 
Last edited:
Very strange , 2 days ago when google it someone say maybe you have to remove cpu hyper threading manuali from BIOS and maybe this will resolve the problem ( I didn't try ) . Maybe because my processor is no good or I don't know , Is G4560 in few days will change with brand new i7 6700k , but that's don't see like point lets say low cpu and cannot run the program . I have latest version in Norton , I have few minutes left for full scan . Also like you take me like 50 min to download this file . I check this direction and is like yours but the difference is your Policy is ALLSigned , mine is Restricted . ALso I check there is nothing on Quarantine or SONAR Activity . https://imgur.com/a/WMRz4r3

Hmmm Restricted? Sound like the virus created to add restricted so it probably will try to prevent you to take back control of your PC or maybe prevent to recover data.

I checked my other 5 devices, 2 laptops, 1 compute stick and 2 tablets all looked like below:

s4z4kf0.png


Only my desktop has ALLSigned, I was forget I now remembered months ago I enabled Developer Mode to run Microsoft signed apps which Microsoft DXR tech demos did not worked without Developer Mode, had Developer Mode enabled ran Microsoft DXR tech demos fine. Enabled Developer Mode will add ExecutionPolicy ALLSigned in registry.

So you can try delete ExecutionPolicy Restricted in registry, if the virus or trojan kept recreate ExecutionPolicy Restricted then your PC still has virus somewhere Norton Security unable to detect it, the virus, trojan or ransomware probably manipulated and switched off Windows Security and injected virus undetected in first place before you installed Norton Security. It probably also tried to manipulated Norton Security to avoided detected.

Few hours later I just play Assassin Creed and try to minim game but happen something . Also my internet explore was bugged , cannot open second page but is loaded but doesn't show on my task bar . I restart pc and show me there is Trojan - y2n.exe which is removed . I try to follow to the folder now and didn't find it in the folder . - https://imgur.com/a/hNDOnA6

It seemed your PC still have virus somewhere.

Download, install and run Spybot Search and Destroy 2.7. Make sure you repeat update Spybot signatures until it fully up to date before do full scan.

https://www.safer-networking.org/products/spybot-free-edition/

If virus still here after Spybot scan and cleaned up infected files, try download Malwarebytes free version and install it, check for updates then run scan.

https://www.malwarebytes.com/premium/

If Malwarebytes detected and removed viruses or did not detected any virus and virus still there. Been heard of reports from people on Malwarebytes failed to removed viruses, trojans and ransomwares. Try download Hitman Pro trial which people reported it successful removed all viruses, trojans and ransomwares which Malwarebytes failed to removed it.

https://www.hitmanpro.com/en-us/alert.aspx

If Hitman Pro did not removed it or not find virus then it probably better to format your PC and clean install Windows 10 rather than refresh PC cos system files probably already been infected by virus and still spread after refresh PC.
 
https://imgur.com/a/huc64Ya

I recently delete ExecutionPolicy Restricted in registry , restart already pc few times didn't show again . Download Spybot , updated and then run full scan and it show me this things on the pics . Now I do second scan with my antivirus . But now when I turn ON my pc didn't show me blocking registry or something like that from Norton . And pc work normaly , it was rly slow when I click the website first time and got infected , but when I purchase Norton then is seem like normal .

1hrs Later: After done Norton there is no threat found . Also check registry now and look like that : https://imgur.com/a/1sP9JQE
 
Last edited:
Back
Top Bottom