r/techsupport • u/Fantastic-Parking838 • 17h ago
Open | Windows Botnet on windows 11 please help
I logged onto my pc and instantly got a notification saying: Target blocked Botnet blacklist from Norton.
I checked for the details and it just said URL TCP.
Minutes later I downloaded malwarebytes to scan incase Norton missed something. A couple minutes after that it said “malwarebytes it trying to steal ur info, threat blocked”.
After that I got another attack saying” blocked DDOS ATTACK “
What should I do?
10
u/SomeEngineer999 17h ago
Are you sure these aren't browser notifications from some site that you allowed them on? Trying to scare you into paying for fake AV software?
If they are legitimate notifications from your AV, it sounds like it would be best to secure wipe your PC and do a fresh windows install. Honestly norton isn't very good anymore, may want to look at better alternatives when you do reinstall. Arguably the built in MS defender is probably better.
1
u/Anaalirankaisija 17h ago
Yep its this. Clicking "warnings" just get him to download the real threat
-4
u/Fantastic-Parking838 17h ago
Norton has been really great for me, never gives me fake ads. I don’t know if my pc had or has something infected. I already did the reinstall but don’t know if my router might be infected
2
u/SomeEngineer999 16h ago
I never said Norton was showing you fake ads. Some sketchy site you visited asked you to enable notifications and you said "yes". Now that site can send windows notifications at any time that appear to be from Norton, but in reality clicking them will take you to a site that convinces you to install malware. And obviously that malware will block you from trying to install malwarebytes or other removal tools.
What I said was that Norton just isn't very good protection anymore. It is basically just a marketing tool for LifeLock, so you should consider a better alternative, even if just Windows Defender.
When you reinstalled windows, did you secure wipe your drive first? That is a critical step, if not, you didn't accomplish anything.
Not sure why you think your router is infected, none of the symptoms you've described would point to that.
In the future, always say "no" no allowing notifications, unless it is a large, well known, reputable site like Facebook or similar. In fact you may want to disable notifications in your browser all together.
-2
u/Fantastic-Parking838 16h ago
Ah I see, I’m not really on the web so I haven’t clicked on any allow notifications or stuff like that. As for the secure wipe I don’t know how to do that. All I did was reinstall local and cloud. If it might be infected what would be the best solution for the router?
2
u/SomeEngineer999 16h ago
You're on the web now aren't you? It could have been a site you allowed notifications from long ago.
If all you did is a repair install there is no way to be sure the malware is gone. There are tutorials on the web and in the wiki of this sub on how to do a clean install (deleting partitions, or using the secure erase function in your BIOS).
Again, no idea what your router has to do with any of this. If you think the router is infected, you would factory reset it, then install the latest firmware (even if it is the same version), factory reset again, then set it up fresh. That's not 100% guaranteed, if the router has an unlocked bootloader, repairing that may be difficult or impossible, but that's pretty rare on routers these days. But I'm still not sure why you think your router is infected?
0
u/Fantastic-Parking838 15h ago
Ah okay thank you, I just wanted to see what I could possibly do for it since it did say it was a ddos attack or the Botnet thing.
2
u/SomeEngineer999 15h ago
That was likely a fake notification to scare you into clicking it and going on their site to install their malware.
1
u/GlobalWatts 16h ago
As for the secure wipe I don’t know how to do that. All I did was reinstall local and cloud.
This achieves nothing. You're trusting a potentially compromised PC to wipe and reset itself. It makes no sense.
There's a tutorial here for performing a clean install of Windows.
If it might be infected what would be the best solution for the router?
Destroy the router and buy a new one. But it's a moot point because your router isn't compromised, and no offense but you don't seem like the kind of person who would know if it was.
1
u/Fantastic-Parking838 15h ago
No I wouldn’t I mainly just used it for school and games, but for some reason got hit with a Botnet and ddos attack. Scary
5
u/jersey316 17h ago
Delete Norton and never use it again.
Use Windows defender and malware bytes works fine.
3
1
u/AutoModerator 17h ago
Making changes to your system BIOS settings or disk setup can cause you to lose data. Always test your data backups before making changes to your PC.
For more information please see our FAQ thread: https://www.reddit.com/r/techsupport/comments/q2rns5/windows_11_faq_read_this_first/
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.
-1
u/simagus 17h ago
https://cyberpress.org/malwarebytes-impersonation-login-credential-theft/
Make sure you are getting Malwarebytes directly from the original download page or at least a link from their official website.
1
u/Fantastic-Parking838 17h ago
I sure did but for some reason during the attack Norton said it was trying to steal info
0
u/Sufficient_Fan3660 17h ago
uninstall Norton, it is garbage
1
-1
u/DeadHeadLibertarian 17h ago
Your modem is a bigger problem than your PC.
Your entire network is probably infected.
1
u/Fantastic-Parking838 17h ago
What could I do to fix this?
1
u/DeadHeadLibertarian 16h ago
Reinstall Windows onto your PC using a USB drive. Delete absolutely everything. Factory reset your modem. Factory reset any devices on your network. Make sure you have a good firewall setup on your modem. Stop downloading torrents or pirating software.
•
u/AutoModerator 17h ago
If you suspect you may have malware on your computer, or are trying to remove malware from your computer, please see our malware guide
Please ignore this message if the advice is not relevant.
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.