Misleading Pop-ups Abound on the Antivirusarmorhub.xyz Website

Computer users have reported an alarming issue involving sudden pop-ups to a site called Antivirus Armor Hub (antivirusarmorhub.xyz) in Google Chrome and other Chromium-based browsers. These pop-ups falsely claim an association with Norton antivirus, a trusted security vendor, raising suspicion about their legitimacy. The aggressive nature of these redirects suggests the involvement of malicious software.

The Source of the Problem: Browser Hijacker Malware

The Antivirus Armor Hub redirects are likely triggered by browser hijacker malware. This malware attaches itself to the browser and promotes the dubious website. Attempts to visit the site manually result in a privacy warning from Chrome and a subsequent 404 error, indicating that the site is not only illegitimate but also poorly maintained.

Persistence of Modern Browser Hijackers

Modern browser hijackers infect systems on multiple levels to ensure persistence and complicate removal. They often accompany other malicious software, making the Antivirus Armor Hub pop-ups potentially just one symptom of a broader infection. Thorough cleaning steps are necessary to remove all traces of the hijacker and associated malware.

Removing “Managed by Your Organization” Policies

Browser hijackers frequently introduce unauthorized third-party policies to Chrome and other Chromium browsers. These policies "lock in" the unwanted settings changes. If you notice a “Managed by your organization” message at the bottom of the Chrome menu or the top of the Extensions Manager page, your browser is likely under such a policy. Here’s how to remove it:

1. Identify and Remove Rogue Policies:
   • Access the policy management page by typing chrome://policy/ in the address bar.
   • Look for suspicious policies that you do not recognize or did not set yourself.
   • Remove or disable these policies.
2. Reset Browser Settings:
   • Go to Chrome Settings > Advanced > Reset and clean up > Restore settings to their original defaults.
   • Confirm the reset to remove all unwanted changes made by the hijacker.
3. Use Trusted Anti-Malware Tools:
   • Run a comprehensive scan using a reputable anti-malware program to identify and remove any remaining malware on your system.
4. Update and Secure Your Browser:
   • Ensure your browser is up-to-date with the latest security patches.
   • Consider using browser extensions that enhance security and privacy.