Adware.Norassie

Short bio

Adware.Norassie is Malwarebytes’ detection name for a family of adware targeting Windows systems.

Type and source of infection

The files associated with Adware.Norassie are signed by Norassie LTD. The installers were often offered as fake Java updates.

Protection

Malwarebytes protected users from Adware.Norassie when they were active, but we haven’t seen them in the wild for quite some time.

Remediation

Malwarebytes can detect and remove Adware.Norassie without further user interaction.

1. Please download Malwarebytes to your desktop.
2. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program.
3. Then click Finish.
4. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu.
5. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure.
6. When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
7. Restart your computer when prompted to do so.

Traces/IOCs

Registry key:

HKEY_CURRENT_USER\Software\Norassie