Help Please.. Keep getting attacks & Pop-up Ads

Hello,  :smileyhappy:
I need help asap please. 
I have Norton 360 Version 4.2.0.12.
I've been getting multiple attacks on my computer but I guess Norton is not catching all of them. I have been running scans many times during the day and every time I run a scan it finds over 15 threats and it says it has fixed them. The most it had found and fixed is 93 threats. I have never seen this before and I've had Norton for over 10 years now and never seen something like this. Norton keeps telling me my computer is being attacked. And I also keep getting tons of pop-up ads but can not see them. I can hear all them at the same time but can't see them. They start as soon as I open IE. And when I close IE they don't stop right away, they keep going for a few minutes. Another thing I have noticed that keeps appearing on my desktop is a notepad file but I keep deleting it. I forgot the name, I think it started with hhr or ehhr something like that. I don't know if that has to do with it. I'll write the file name down next time it comes up.
Please help. :smileysad: 
Thank you.
Sue

Hello SueNYY2

 

Welcome to the Norton Users Discussion Forum

 

Can you please tell us what operating system you are using and what service pack level? Also please which version of IE.? Do you have any other real time security programs running?

 

Can you please run a HiJackThis scan for us and post the log here after you have saved it to your desktop.

 

Please download HiJackThis from http://free.antivirus.com/hijackthis/ Choose the executable and save it on your desktop. Run the file and select the first option on the main menu "Do a system scan and save a log file". When this is finished, Notepad will open with the log file in it. Save the log file and attach it to a post here via the Add Attachments Please don't attempt to fix anything that it shows until someone checks out the log. Thanks.

Hi,

Thanks for replying. I have Windows Vista Service Pack 1. IE Version 8. And I only have Norton 360.

Also, just now I had to restart the computer because an ad opened and on top it said RON Ad. And Norton said I was being attack by a Trojan and I needed to restart to fix the problem. This is nuts. I don't know how my computer got this.

I'm gonna try what you said and see what happens. Thanks... Will post when I'm done.

Sue

Hi,

I just did the hijackthis thing... here's the notepad log attached.. thanks..  

One word; rootkit.  Go to www.bleepingcomputer.com and ask for help.  Thank you.

I would recommend that you download and install Malwarebytes free edition- http://www.malwarebytes.org/ , update the definitions, and run a quick scan in Windows safe mode. It should get rid of the rootkit.


kzahid06 wrote:

I would recommend that you download and install Malwarebytes free edition- http://www.malwarebytes.org/ , update the definitions, and run a quick scan in Windows safe mode. It should get rid of the rootkit.


It will not do so.

Hi,

I have not been able to try to fix this yet. I've been really busy.

Will that software be able to get rid of the problem or not? Someone said yes and one said no.

I also found these applications running/processes on task manager that I have not seen before or noticed before.

Are they viruses?

services.exe

searchindexer.exe

searchfilterhost.exe

Thanks for the help.

Sue

SueNYY2:

 

As noted by the guru dbrisendine, you are infected with a rootkit.  Malwarebytes will NOT identify or remediate a rootkit.  The files you have located are legitimate files.

 

Rootkits require a complicated manual removal.  Bleeping Computer is a free malware removal site that has the experience and tools to help you.