Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Infected Ads?


  • Please log in to reply
9 replies to this topic

#1 gisella

gisella

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:05:18 AM

Posted 27 May 2008 - 07:01 AM

Hello, thanks for allowing me to be a member.
Here's my problem.

I cannot access mos websites, not even do a search on google.
Whenever I visit a site that has for example Google ads, it changes them for
other ads, saying scanning, you are infected, amongst other ads.

Actions taken:

Hijackthis, AdAware, MCafee, reg.booster amongst others, none worked.
Please help!

BC AdBot (Login to Remove)

 


#2 enet101

enet101

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:05:18 AM

Posted 27 May 2008 - 10:04 AM

Did you post your hijackthis log for someone to look at for you? you can do that here http://www.bleepingcomputer.com/forums/f/22/virus-trojan-spyware-and-malware-removal-logs/
but even without that, I would try using Spybot SD http://www.safer-networking.org/en/download/index.html
(Spybot - Search & Destroy 1.5.2 as of now)

:thumbsup:

Edited by enet101, 27 May 2008 - 10:20 AM.


#3 ruby1

ruby1

    a forum member


  • Members
  • 2,375 posts
  • OFFLINE
  •  
  • Local time:09:18 AM

Posted 27 May 2008 - 10:19 AM

:thumbsup: we need to know which windows version you are running for us to suggest appropriate tools for you as some tools may NOT be compatible with your windows version

which version OF adaware have you run?

you say you have run a HJT tool; you will know this is a diagnostic tool used by the specialists ?

did you make ANY changes to your computer after running that tool and have you posted that log on ANY site?



(please do NOT post the log unless requested to do so; if you DO then , as per forum rules, THIS thread WILL be locked by the staff)



have you FULLY updated your macaffee antivirus program TODAY??


as a starter can you please run this tool and let us know the result?


Superantispyware; guide on how to install and run

If you have not already got a Downloads folder , I suggest you create a new folder in My Documents, and name it Downloads ;

Installing superantispywareSuperantispyware is found here


http://www.superantispyware.com/index.html

Download to the Downloads folder the free exe to superantispyware from here


http://www.superantispyware.com/downloadfi...ANTISPYWAREFREE

you install superantispyware by clicking on the icon in the downloads folder ;
it will launch the installation process;
follow the instructions and I suggest you ask for a default installation ;
ensure it creates a desktop icon for you ;
once the program has been installed it should ask you if you wish to update the program ; say YES

if it does not ask you , you need TO fully update the definitions by opening the program and find the ‘check for updates ‘tab in the bottom left of the menus you see; click on it and it will do the update for you ;
I suggest you ask it to check for updates again once the first update is complete just to be sure


please then reboot your computer ; it is preferable to run the scan in your computers safe mode;

please open this program from the desktop icon
please run the scan while you are OFF line and do not have the computer doing any other work while the scan runs

go to the preferences tab on the right
on the General tab I suggest you disable the scan on start up

on the Hijack protection tab I suggest you tick BOTH items; this enables the program to give you a Hijack home page alert if your home page gets changes ; if you DO get a home page hijack, when you boot up the computer superantispyware will open and tell you the home page has changed and will ask you if this is a legitimate change;

in statistics/logs- go to the bottom and you will see two boxes asking about keeping a log of scanning results and saving empty logs?

Tick both of them

Then go back to the main screen and see the tab that says scan your computer? Do you see that ?

Click on it

A screen will open ;on the left hand side ensure your FIXED drive ( most probably the C drive) is ticked;
Also tick in there any other section that is used and attached .
On the right had side you see three scanning options?; please click the Complete scan option

OK; you are now set to scan

Please then click on the ‘next’ tab and let the scan run please run the scan while you are OFF line and do not have the computer doing any other work while the scan runs

From my experience running this program the complete full scan CAN take many hours to run depending on how much is on your computer so be patient and let it run; maybe go for a cuppa or watch a favourite program while this one runs

Once the scan IS complete you will be presented with a box telling you what the scan has found ( if anything); if harmful objects have been found click on the OK button ; on the next screen all the harmful objects should have a check mark beside them, ; click ‘next’


A notification should appear that

‘quarantine and removal is complete’

click ‘ok’
and then the Finish button to get returned to the main menu


If you have run the scan in computers safe mode you will need to reboot to computer normal mode

If you have run in computer’s normal mode I suggest you reboot to enable the ‘fix’ the program has performed to consolidate

You then need to retrieve the scan result

Open the program and return to the statistics /logs section ; locate the most recent log ; left mouse click on it to highlight it and click the ‘view log’ tab

The log should appear in maybe note pad ; you need to copy and paste that log for examination
Once you have posted the log please close the superantispyware program

Edited by ruby1, 27 May 2008 - 10:21 AM.


#4 kalpia

kalpia

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Location:Upper Midwest
  • Local time:04:18 AM

Posted 27 May 2008 - 11:06 AM

This is one very nasty virus/trojan/mal-ware/icky thing. I tried removing it with SpyBot, Ad-Aware, Defender, Symantec, and sereral others with no luck. I wond (sp) up reformating my partition, which I was going to do anyway, and that finally got rid of it. A buddy of mine who is a IT manager at a mid-sized company had the same problem with several of his co-workers computers and had to do the same thing, like me he finally got tired of trying this and that and bit the bullet.

Here's a little tip for the future; format a small, 20GB, partition for your HD for programs and keep all your data on a different partition. Then you can quickly and easily reload Windows when needed (Ghost is great for this). As a general rule I advise my co-workers to do this once a year or so just to keep everything tidy; it's really quite painless and easy once you do it a couple of times. (I know most people don't do this and hate doing it and if you're one of them then don't do it; this is just what I do.)

If superantispyware works, or anything else, please let me know, I didn't try it so I'm curious. Good luck.

Edited by kalpia, 27 May 2008 - 11:10 AM.

To error is human, to forgive is against company policy

#5 gisella

gisella
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:05:18 AM

Posted 30 May 2008 - 08:29 AM

Hey everyone thanks for all. But didnt work. Now when I turned computer back up, keyboard does not respond.
That means I cannot access my comp. now, given that it is password protected!
I re-installed windows xp svc pack 2, and didnt solve the problem.
Help :thumbsup:

#6 DaChew

DaChew

    Visiting Alien


  • Members
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:05:18 AM

Posted 30 May 2008 - 08:37 AM

did you run a clean install of windows or a repair disk

run a clean install, passwords and keyboard problems should disappear

you do a clean install by booting to the cd or a recovery partition, the C partitions is formated and malware is erased

Edited by DaChew, 30 May 2008 - 08:37 AM.

Chewy

No. Try not. Do... or do not. There is no try.

#7 gisella

gisella
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:05:18 AM

Posted 30 May 2008 - 08:40 AM

Clean re-install.

I Insert win XP CD and where do i see cleasn install?

Thanks

#8 DaChew

DaChew

    Visiting Alien


  • Members
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:05:18 AM

Posted 30 May 2008 - 08:52 AM

http://www.michaelstevenstech.com/cleanxpinstall.html

here's a good guide
Chewy

No. Try not. Do... or do not. There is no try.

#9 gisella

gisella
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:05:18 AM

Posted 30 May 2008 - 09:37 AM

http://www.michaelstevenstech.com/cleanxpinstall.html

here's a good guide



Thanks, but is there another way to fix my keyboard problem without loosing all my data?

#10 DaChew

DaChew

    Visiting Alien


  • Members
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:05:18 AM

Posted 30 May 2008 - 09:51 AM

http://www.michaelstevenstech.com/XPrepairinstall.htm

a real repair disk might work?

I would buy an external hard drive for backup
Chewy

No. Try not. Do... or do not. There is no try.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users