PC Speed Test

Hello,

I am hoping someone can tell me how to remove this popup that appears in firefox. I have ran several scans and it is still not removing.

Here is a pic of the popup
http://tinypic.com/r/hs99ns/6

If i click the popup it takes me to this site.. appround.net/pcperformer/....

Cheers

Hello,,,
In FireFox it may be the Add ons/Plugins. try disabling them one at a time and see which one was at fault.

How to disable extensions and plugins

Keeping your third-party plugins up to date

In Chrome it may be the Add ons/Plugins. try disabling them one at a time and see which one was at fault.

OR Disable All Extensions ,see if that worked,then you need to go back to one by one to see which ps the culprit.


ADW Cleaner

Please download AdwCleaner by Xplode onto your desktop.

• Close all open programs and internet browsers.
• Double click on adwcleaner.exe to run the tool.
• Click on Delete.
• Confirm each time with Ok.
• You will be prompted to restart your computer. A text file will open after the restart.
• Please post the contents of that logfile with your next reply.
• You can find the logfile at C:\AdwCleaner[S1].txt as well.

Hi Boopme,

I know I should start my own thread, but this was my first result from my Google search and I saw that it was posted only 2 days ago. I was hoping to find an answer, so I'd like to post my ADWCleaner results. However, going through it, it says that the system is clean.

*****
# AdwCleaner v2.107 - Logfile created 01/23/2013 at 08:01:45
# Updated 21/01/2013 by Xplode
# Operating system : Windows 7 Enterprise Service Pack 1 (64 bits)
# User : DOUGH - DT232-PRECISION
# Boot Mode : Normal
# Running from : C:\Users\Owner\Desktop\AdwCleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

Folder Deleted : C:\ProgramData\boost_interprocess

***** [Registry] *****


***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16457

[OK] Registry is clean.

-\\ Google Chrome v24.0.1312.52

File : C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

File : C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

File : C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

File : C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

File : C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

File : C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [1372 octets] - [23/01/2013 07:58:43]
AdwCleaner[S1].txt - [1303 octets] - [23/01/2013 08:01:45]

########## EOF - C:\AdwCleaner[S1].txt - [1363 octets] ##########

*****


I've gotten the thing to not show up anymore in Chrome by using Adblock, but it still shows in IE. I know IE sucks, but my client can't break away from it .
I also don't feel that the machine is clean if it still shows up in one browser and not the other. I digress.

I'd also like to state that I've ran Rkil.exe and MBAM with no infections found.

Thank you in advance.

SOLVED

I ran Norton Power Eraser and it found a bad DNS entry in the HOSTS file and an executable epson10003.exe. A Google search for the epson10003.exe made it seem legit, but I know the client doesn't use an Epson printer so I selected that and the DNS entry for removal.

After restart, and second run of NPE. I opened IE, enabled the Shockwave add-on, and refreshed the page. The adware did not appear. I Refreshed the page many times, and it didn't show up once.