Adware pop ups with Norton 360

Ok somehow a virus came into my computer (I have the N360 v 3.0.0.135) Its more like an adware (what do you call when you’re on the internet (e.g. youtube.com) and somehow a random website appears without u clicking on anything and the website is not even 1% linked to youtube.com . i think u call it Ad-ware) Ok so I was on YouTube first when that happened but I thought it must have been something else but then on this site it happened again And surely Norton could allow any pop-ups on its site So I need help removing it I have done a Quick scan and a Full system scan but nothing has come upAny help from anybody to how to remove this virus from my computer please help.

 

[edit: Clarified subject.]

Message Edited by shannons on 11-15-2009 04:53 AM

ok sorry i wrote the wrong N360 Version my N360 Version is v3.5.2.11

Hi shubby,

 

It sounds like you experienced what is known as scareware, about which you can read more over here in this great thread:

http://community.norton.com/norton/board/message?board.id=nis_feedback&message.id=70586#M70586

 

As long as you didn't click on the ad/did not interact with it directly, you should be okay. However, if you are still afraid that you were infected, in spite of clean scans from Norton 360, please do the following:

 

Please go to www.malwarebytes.org

1. Download Malwarebytes’ Anti-Malware (mbam-setup.exe) free version and save it to your desktop.
2. After downloading, double-click on mbam-setup.exe to install the application.
3. Follow the prompts and install as “default” only
4. Before the installation completes, check on the following prompts:
- Update Malwarebytes’ Anti-Malware
- Launch Malwarebytes’ Anti-Malware
5.Click “Finish.”  The programme will run automatically and you will be prompted to update the program before doing a scan. Please update.
6. Scan your computer thoroughly choosing a "full scan".
7. When scanning is finished click on “Show Results”
8. Make sure that all detected threats are marked with a check mark, click on "Remove Selected".
9. Restart your computer.

Please post the logs back to this thread using "add attachments" below the orange "post" button.

Note: Some malware may prevent mbam-setup.exe from downloading and/or running. You can download and rename this program from a different computer before running it on an infected system.

 

ok did both scans (quick scan and full system scan with malwarebytes' Anti-malware.)

But there were no infected files in both of the scans

 i have attached 2 files the first one(mbam-log-2009-11-16 (01-32-01)) is the quick scan file

and the sceond one(mbam-log-2009-11-16 (06-38-13)) is the full system scan file.

 

oh and this ad-ware or what ever it is can it bring more virus it self to my computer if it can i think it already did

because when ever i go to check any of my mails and after logging in its says: "Internet Explorer Cannot Display the page"

so now i baddly ned help and i sent this mail from safe mode.

Hi shubby,

 

Thanks for the logs. Can you please specify your operating system and service pack version as well?

Also, since when you have been having the problem with Internet Explorer not working? Is your computer displaying any other symptoms?

ok my operating system is Window vista Home Baisc and service pack 1 (i think because when u go into control panel>system: its only says window Vista home Basic and doesnt say anything about service pack)

 oh and does take long to open anything at all

You can find precise information about your operating system by going to Start, then to Control Panel, and then to System. The Service Pack, if you have one (strongly recommended!) will be indicated in there.

ok if thats way to how to find that i have a service pack then i dont have a service pack

I recommend that you install the service packs which you should have been offered via Windows Update. I hope you have not deactivated Windows Update.

Does Internet Explorer refuse to function each to time you open it/browse with it, or only when you visit specific sites? 

 

To judge from your clean logs, your computer seems to be malware-free, and you got a bad scare when you encountered that pop-up. Have you got the pop-up blocker in Internet Explorer turned on? 

ok i do have the pop up blocker turned on and the internet doesnt display some sites

and when i did check my bank and my norton acc and enter log in a pop-up appeared say somethingh about travel on my bank acc site

and on norton when i signed in a pop-up appeared saying buy a ticket to amierca for free

it did it to other site as well while i was visting them

 

 

Hi shubby

 

When you log in to Norton does the travel pop-up appear every time you log in? When you log in to your bank does it show the travel pop-up each time you log in. Or did it only do this one time on each site?

it does it randomly and when i logged in norton it only did it once

and  the pop-up is always different.

 


shubby wrote:

it does it randomly and when i logged in norton it only did it once

and  the pop-up is always different.

 


 

Hi shubby

 

Could you download, install update and run the free version of Adaware from here.

 

www.lavasoft.com

 

Thanks

 

 

the ad-aware didnt find anything but here is something weird when i ran the Ad-Aware scan on normal windows mode the

scan wouldnt work it will look like its working but just doesnt do anything at all but when i ran it in safe mode the scane work and finished

the scan and as well my norton doesnt appear on normal mode.

can anyone tell me whats wrong with my computer

cause i dont get anyhting

first random pop-ups come in.

then no infected file detected by all the anti-virus program i tried

then on normal mode the scan doesnt work my anti-virus doesnt appear on taskbar and slows down my computer on

normal mode big time

 

anybody with clues what is happening with my computer.

 

help help help!!!

Please run a SysProt log for us, from the link below, so that we can check your system for rootkit activity. You will need to disable Norton auto-protect while you run the scan.

Go to http://sites.google.com/site/sysprotantirootkit/
Scroll down page and click on “download”. Choose “Open” in the dialog box. Double click on Sys Prot.exe and choose “extract all” then “extract” in the dialog box. Browse to the Sys Prot Folder and right click on Sys Prot.exe choose “Run as Administrator” if using Vista or “Run As” and then choose “Administrator” from the list if using XP.
Click on the “Log” tab and check all boxes except “Hidden” then click on “Create Log” to run the scan. Once it has run and created the log click on “OK” browse back to the Sys Prot folder and attach the sysprotlog.txt file to this thread by using the “add attachments” below the orange “post” button.

ok here is the file

Hi shubby

 

The log does not show any obvious signs of rootkit infection but I will ask a Forum Guru to review it to confirm this is the case.

 

Your first involvement in the forums was when you were having difficulty with the Norton Add-on pack and then issues with restoring files from on-line backup. Did the issues you are having now exist on your system prior to those other issues?

well the add-on pack work but in the restoring problem it still runs really slow so i didnt restore anything took toooo long

just too let you know that when i run my computer on normal mode the computer runs so slow that it doesnt look like i have 2.5 gb of RAM so i choose safe mode cause in that the computer wotks fine and fast.


shubby wrote:

well the add-on pack work but in the restoring problem it still runs really slow so i didnt restore anything took toooo long

just too let you know that when i run my computer on normal mode the computer runs so slow that it doesnt look like i have 2.5 gb of RAM so i choose safe mode cause in that the computer wotks fine and fast.


 

Hi shubby

 

Thank you for the reply but you seem to have missed part of my question.

 

Did you have the issues with browser pop-ups and a slow system prior to the first time you contacted the forum regarding the add-on pack. When exactly did these problems begin?