Can you give me details? like a link, Seems like it should be tried again. So after all this testing there is this gigantic bug, but by program or your friend? Not much download and installs itself unless Windows, browser including plugins are year old. Having an AV which recognize infection dont really help, heh. But often how accidents are explained
MSE do have channels for complaints, forum too so give them hell. If you send me link, and it turns out your friend have not misunderstood something, I will gladly post on their forum. This is MS but they should be extra alert these days.
Reminds of one of the weak points. History cant be saved or exported, 1 click on "Delete history" and it is all gone. Can see some problems in a removal situation. Info and details kind of important. They have said it will be improved in future version.
Try Google Mywebtattoos, SearchGuardPlus, Faster Browser Search - install and you get all products. Typical procedure. You say yes to 1 item, then much more is sneaked in, for "free". Not detected by MSE, browser or Malwarebytes. Really annoying to remove. Another one, Registryvictor.net not detected by any AV according to Virustotal. Download not by Malwarebytes either - I would think domain is blacklisted though. Is from a list supplying Malwarebytes with IPs. Registryvictor more a scam/rouge than anything else. Scanners cant figure that out, humans better with this
http://www.mywot.com...d/registryvictor.net You can easily find 100% reproducible slips without reading emails
Can go on and on. Especially easy in the gray area - stuff Malwarebytes and others are good at but in realilty only taken care of by human blocking. You can find Google ads making Malwarebytes go crazy and anyone with a min. of knowhow warn against "do not install". Tragic but how it is. No news but one of the reasons I dont mind MSE taking market shares. The others have had the chance for years. I found pcrunsfast or "errorfix" from Google ad on a malware removal forum of all places. Spells problem out. Malwarebytes know that one, 100% rouge/scam and yet there is no help from any popular AVs. They all will say this is covered, even Windows Defender did.
EDIT: just had to add that if you install Tattoo stuff in IE it is still installed in Firefox. Useragent, search, homepage changed. Toolbar is not on your hd but online. A hidden Firefox extension from IE install!, does not appear in add-ons - cant be removed in other words. Is there but only 1 line in a fbstoolbar.txt file "{7B759CB6-4353-E772-CA81-4DC69D2492D9}". That ID is apparently picked up by entries in prefs.js made during IE installation. So to remove you have to clean up about:config or prefs.js All content in toolbar is online. Crap is targeted young people through spam, Facebook app and Myspace - this company will have a whole range of products. Not many will be able to remove, will instead get used to redirection and fixed sponsored results.