Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Ads playing on start-up cannot remove


  • Please log in to reply
21 replies to this topic

#1 unr000

unr000

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:11:59 PM

Posted 18 July 2013 - 10:42 PM

 have an ad playing that I cant get rid of, can somebody help me



BC AdBot (Login to Remove)

 


#2 noknojon

noknojon

    Almost Retired


  • Members
  • 9,754 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Victoria Australia
  • Local time:03:59 PM

Posted 19 July 2013 - 02:06 AM

Hello and Welcome -

Could you please run this small progran to help us diagnose any problems >

 

Download Security Check by Screen317 from HERE
* Save it to your Desktop.
* Double-click SecurityCheck.exe
* Follow the onscreen instructions inside of the black box.
* A Notepad document should open automatically called checkup.txt; please post the contents of that document.
Note: If a security program requests permission to access the Internet, allow it to do so.

 

Thank You -

 



#3 garrett122491

garrett122491

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NW Indiana
  • Local time:12:59 AM

Posted 19 July 2013 - 09:33 AM

Have you tried booting in safe mode and running MalwareBytes? That usually finds and can remove Adware.



#4 unr000

unr000
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:11:59 PM

Posted 19 July 2013 - 05:11 PM

Results of screen317's Security Check version 0.99.70  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 10  
``````````````Antivirus/Firewall Check:``````````````
 Windows Firewall Enabled!  
AVG AntiVirus Free Edition 2013   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:`````````
 Spyware Terminator 2012   
 Spybot - Search & Destroy
 Malwarebytes Anti-Malware version 1.75.0.1300  
 Java™ 6 Update 39  
 Java version out of Date!
 Adobe Flash Player 11.7.700.224  
 Adobe Reader 10.1.7 Adobe Reader out of Date!  
 Mozilla Firefox (22.0)
````````Process Check: objlist.exe by Laurent````````  
 AVG avgwdsvc.exe
 Malwarebytes' Anti-Malware mbamscheduler.exe   
 Symantec Norton Online Backup NOBuAgent.exe  
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
 



#5 unr000

unr000
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:11:59 PM

Posted 19 July 2013 - 05:12 PM

yes, i have run malware, also, spybot search and destroy, as well as spyware terminator, when I try to run my AVG I get a total system shutdown



#6 noknojon

noknojon

    Almost Retired


  • Members
  • 9,754 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Victoria Australia
  • Local time:03:59 PM

Posted 19 July 2013 - 06:14 PM

A quick update for you -

 

Java™ 6 Update 39   Java version out of Date! < Current is now Version7 Update25
 Adobe Reader 10.1.7 Adobe Reader out of Date!  < Current is now over Version 11
Be sure to remove all older versions and do not agree to any Add-ons or Toolbars with either download.

I would remove your older Spyware Terminator 2012 as it is outdated and includes a second Antivirus
Spyware Terminator is not just a spyware scanner. It also includes an antivirus scanner powered by the ClamAV engine. The developers have also seen fit to include a "Web Security Guard" which carries out the the job that most anti-phishing and pop up blockers in Internet Explorer and Firefox already carry out.

 

 

If you have any of these programs below installed, be sure to fully update them prior to any scan - All scans should be done in Normal Mode unless the computer is not capable of doing this - Then use Safe Mode with Networking -

 

 

:step1: Download Malwarebytes' Anti-Malware Free (aka MBAM)
* Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform quick scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When completed, a log will open in Notepad.
* Post the log back here.
Be sure to reboot the computer after you post the log.

 

 

:step2: Download SUPERAntiSpyware Free (aka SAS)
* Double-click SAS -setup.exe and follow the prompts to install the program.
* At the end, be sure to Check for Updates to be sure it is current
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform quick scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When completed, a log will open in Notepad.
* Post the log back here.

Be sure to reboot the computer after you post the log.

 

 

 

:step3: Please download AdwCleaner by Xplode onto your desktop.

*Close all open programs and internet browsers.
*Double click on adwcleaner.exe to run the tool.
*Click on Delete.
*Confirm each time with Ok.
*Your computer will be rebooted automatically. A text file will open after the restart.

*Please post the contents of that logfile with your next reply.
*You can find the logfile at C:\AdwCleaner[S1].txt as well.

 

 

:step4: Scan your machine with ESET OnlineScan

This is best done with Internet Explorer, but directions are left for other browers

1.Hold down Control and click HERE to open ESET OnlineScan in a new window.
2.Click the ESET Online Scanner button.
3.NOTE :.For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)

 

- 1.Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop.
- 2.Double click on the ESET Online Scanner icon on your desktop.

 

 4.Check "YES, I accept the Terms of Use."
 5.Click the Start button.
 6.Accept any security warnings from your browser.
 7.Under scan settings, check "Scan Archives" and "Remove found threats"
8.Click Advanced settings and select the following:
Scan potentially unwanted applications
Scan for potentially unsafe applications
Enable Anti-Stealth technology

 9.ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this will take some time to download the program for a first time, and then download updated data base (1 to 2  hours is not unusual)
10.When the scan completes, click List Threats
11.Click Export, and save the file to your desktop using a unique name, such as ESETScan.
- Include the contents of this report in your next reply.
12.Click the Back button.
13.Click the Finish button

 

The scan results can be posted one at a time if this suits you better -

 

Thank You -



#7 unr000

unr000
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:11:59 PM

Posted 19 July 2013 - 07:28 PM

Malwarebytes Anti-Malware (Trial) 1.75.0.1300
www.malwarebytes.org

Database version: v2013.04.04.07

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16635
John :: JOHN-PC [administrator]

Protection: Disabled

7/19/2013 6:19:10 PM
mbam-log-2013-07-19 (18-19-10).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 213470
Time elapsed: 3 minute(s), 49 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)
 



#8 unr000

unr000
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:11:59 PM

Posted 19 July 2013 - 07:41 PM

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 07/19/2013 at 06:40 PM

Application Version : 5.6.1020

Core Rules Database Version : 10623
Trace Rules Database Version: 8435

Scan type       : Quick Scan
Total Scan Time : 00:00:28

Operating System Information
Windows 7 Home Premium 64-bit, Service Pack 1 (Build 6.01.7601)
UAC On - Limited User

Memory items scanned      : 1
Memory threats detected   : 0
Registry items scanned    : 14595
Registry threats detected : 0
File items scanned        : 0
File threats detected     : 0
 



#9 unr000

unr000
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:11:59 PM

Posted 19 July 2013 - 08:01 PM

# AdwCleaner v2.306 - Logfile created 07/19/2013 at 18:53:13
# Updated 19/07/2013 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : John - JOHN-PC
# Boot Mode : Normal
# Running from : C:\Users\John\Downloads\adwcleaner(1).exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

Deleted on reboot : C:\Program Files (x86)\Common Files\AVG Secure Search
Folder Deleted : C:\Users\John\AppData\Local\AVG Secure Search

***** [Registry] *****


***** [Internet Browsers] *****

-\\ Internet Explorer v10.0.9200.16635

[OK] Registry is clean.

-\\ Mozilla Firefox v22.0 (en-US)

File : C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\dt57jjc3.default\prefs.js

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [38133 octets] - [18/07/2013 21:12:15]
AdwCleaner[R2].txt - [1050 octets] - [19/07/2013 18:51:52]
AdwCleaner[S1].txt - [38789 octets] - [18/07/2013 21:13:13]
AdwCleaner[S2].txt - [990 octets] - [19/07/2013 18:53:13]

########## EOF - C:\AdwCleaner[S2].txt - [1049 octets] ##########



#10 noknojon

noknojon

    Almost Retired


  • Members
  • 9,754 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Victoria Australia
  • Local time:03:59 PM

Posted 19 July 2013 - 08:16 PM

Please Update SUPRAntispyware re-scan as that looks wrong. (Total Scan Time :00:00:28) 28 seconds is ??
Or try for a Full Scan (wait for it to load fully) and post that log -

 

Thank You -

EDIT - The output should look a lot more like this Quick Scan that I have just done,

Memory items scanned : 715

Memory threats detected   : 0
Registry items scanned    : 30724
Registry threats detected : 0
File items scanned        : 7142
File threats detected     : 0

 

Thanks -


Edited by noknojon, 19 July 2013 - 08:39 PM.


#11 unr000

unr000
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:11:59 PM

Posted 19 July 2013 - 09:44 PM

just had a crash 1hr and 30min into the last scan have rebooted into safe mode with networking and running full scan of super antispyware, after that i will restart eset, the last program



#12 noknojon

noknojon

    Almost Retired


  • Members
  • 9,754 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Victoria Australia
  • Local time:03:59 PM

Posted 19 July 2013 - 10:06 PM

Thank you for the update.

Take your time, as the worst thing is to rush into this and make a mistake.

 

Did you have a quick look at the results of my SAS quick scan ?

From yours, you can note that it onlt scanned 1 Memory item and 0 File items. This was my reason for asking you to rescan.

My Win7 scanned 715 Memory items, 30724 Registry items, and 7142 File items (which is about normal).

Also it found not even one Tracking cookie, or anything else.

 

Thanks -



#13 unr000

unr000
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:11:59 PM

Posted 19 July 2013 - 10:34 PM

ok, so I am in safe mode with networking, ran full scan of anti spy, and crashed at about the 15min mark twice with no threats displayed. I logged back on and the 3rd time im running the program i switch to quick scan, get about 6:30 into the scan with 245 threats and it shuts down again, any suggestions?

 

yes i saw yours


Edited by unr000, 19 July 2013 - 10:35 PM.


#14 noknojon

noknojon

    Almost Retired


  • Members
  • 9,754 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Victoria Australia
  • Local time:03:59 PM

Posted 19 July 2013 - 11:02 PM

Try this -

Go to Programs and Features to see if the program is listed there. If it is, please remove it as it may be a corrupted install.

We can try a reinstall only after you run this program that should only take 30 seconds to 2 minutes at most.

 

Please download Rkill (courtesy of BleepingComputer.com) to your desktop.
There are 2 different versions. If one of them won't run then download and try to run the other one.
You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.

rKill.exe: http://www.bleepingcomputer.com/download/rkill/dl/10/
iExplore.exe (renamed rKill.exe): http://www.bleepingcomputer.com/download/rkill/dl/11/

  • Double-click on the Rkill desktop icon to run the tool.
  • A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
  • If not, delete the file, then download and use the one provided in Link 2.
  • Do not reboot until instructed.
  • If the tool does not run from any of the links provided, please let me know.

 

If normal mode still doesn't work, run the tool from safe mode.
When the scan is done Notepad will open with rKill log.
Post it in your next reply.

NOTE. rKill.txt log will also be present on your desktop.



#15 unr000

unr000
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:11:59 PM

Posted 20 July 2013 - 12:30 PM

Rkill 2.5.7 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2013 BleepingComputer.com
More Information about Rkill can be found at this link:
 http://www.bleepingcomputer.com/forums/topic308364.html

Program started at: 07/20/2013 11:25:48 AM in x64 mode. (Safe Mode)
Windows Version: Windows 7 Home Premium Service Pack 1

Checking for Windows services to stop:

 * No malware services found to stop.

Checking for processes to terminate:

 * No malware processes found to kill.

Checking Registry for malware related settings:

 * Explorer Policy Removed:  NoActiveDesktopChanges [HKLM]

Backup Registry file created at:
 C:\Users\John\Desktop\rkill\rkill-07-20-2013-11-25-57.reg

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

Performing miscellaneous checks:

 * Windows Defender Disabled

   [HKLM\SOFTWARE\Microsoft\Windows Defender]
   "DisableAntiSpyware" = dword:00000001
 



i did it in safe mode, didnt try normal






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users