Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

A2 "Free Version" Keeps Sending "media6degrees.com" Blocked Cookie Message???


  • Please log in to reply
9 replies to this topic

#1 Davexx1

Davexx1

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Winter Springs, Florida
  • Local time:09:14 AM

Posted 01 April 2009 - 06:27 PM

I have a 1.2 year old Dell XPS M1530 lap top with Vista and have the free version of A2. Yesterday, Tuesday 3/30/09, A2 began sending a pop up message indicating it had blocked a cookie from "media6degrees.com". A2 has sent that "media6degrees.com" blocked cookie message very frequently and sometimes one message right after another since then. Very annoying to say the least.

Have I picked up a problem?

Are any of the other free "anti" programs better than A2?

Thanks, Dave

BC AdBot (Login to Remove)

 


#2 DaChew

DaChew

    Visiting Alien


  • BC Advisor
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:09:14 AM

Posted 01 April 2009 - 07:30 PM

Cookies can be bad or good, mostly harmless intrusions into our privacy when they are for marketing

Forum logins are good

they have an optout link,

http://www.media6degrees.com/privacy/index.html

I just run ATFCleaner from time to time, cookies can get corrupt

Please download ATF Cleaner by Atribune & save it to your desktop.
  • Double-click ATF-Cleaner.exe to run the program.
  • Under Main "Select Files to Delete" choose: Select All.
  • Click the Empty Selected button.
  • If you use Firefox browser click Firefox at the top and choose: Select All
  • Click the Empty Selected button.
    If you would like to keep your saved passwords, please click No at the prompt.
  • If you use Opera browser click Opera at the top and choose: Select All
  • Click the Empty Selected button.
    If you would like to keep your saved passwords, please click No at the prompt.
  • Click Exit on the Main menu to close the program.
Note: On Vista, "Windows Temp" is disabled. To empty "Windows Temp" ATF-Cleaner must be "Run as an Administrator".
Chewy

No. Try not. Do... or do not. There is no try.

#3 Davexx1

Davexx1
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Winter Springs, Florida
  • Local time:09:14 AM

Posted 02 April 2009 - 05:38 AM

DC

Thanks for your quick reply and info. What exactly is ATF-Cleaner.exe and what does it do? Is it a similar program to Spybot, CCleaner, etc?

Would it be safe to use the "Opt Out" option from the media6degrees web site to stop the A2 pop up messages saying it blocked the media6 cookie? I have never had this problem before.

Thanks, Dave

#4 DaChew

DaChew

    Visiting Alien


  • BC Advisor
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:09:14 AM

Posted 02 April 2009 - 05:46 AM

ATFCleaner is similar to CCleaner, but safer as it stays out of the registry, give it a try first and report if it works.
Chewy

No. Try not. Do... or do not. There is no try.

#5 Davexx1

Davexx1
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Winter Springs, Florida
  • Local time:09:14 AM

Posted 02 April 2009 - 05:46 AM

BTW, I did download and run ATF Cleaner and still get the A2 pop message over and over again saying it blocked the media6degrees.com cookie. Any suggestions?

Thanks, Dave

#6 DaChew

DaChew

    Visiting Alien


  • BC Advisor
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:09:14 AM

Posted 02 April 2009 - 05:49 AM

Please download Malwarebytes Anti-Malware (v1.34) and save it to your desktop.
alternate download link 1
alternate download link 2
If you have a previous version of MBAM, remove it via Add/Remove Programs and download a fresh copy.
  • Make sure you are connected to the Internet.
  • Double-click on mbam-setup.exe to install the application.
  • When the installation begins, follow the prompts and do not make any changes to default settings.
  • When installation has finished, make sure you leave both of these checked:
    • Update Malwarebytes' Anti-Malware
    • Launch Malwarebytes' Anti-Malware
  • Then click Finish.
MBAM will automatically start and you will be asked to update the program before performing a scan.
  • If an update is found, the program will automatically update itself.
  • Press the OK button to close that box and continue.
  • If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install. Alternatively, you can update through MBAM's interface from a clean computer, copy the definitions (rules.ref) located in C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware from that system to a usb stick or CD and then copy it to the infected machine.
On the Scanner tab:
  • Make sure the "Perform Quick Scan" option is selected.
  • Then click on the Scan button.
  • If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
  • The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
  • When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
  • Click OK to close the message box and continue with the removal process.
Back at the main Scanner screen:
  • Click on the Show Results button to see a list of any malware that was found.
  • Make sure that everything is checked, and click Remove Selected.
  • When removal is completed, a log report will open in Notepad.
  • The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
  • Copy and paste the contents of that report in your next reply and exit MBAM.
Note: If MBAM encounters a file that is difficult to remove, you may be asked to reboot your computer so it can proceed with the disinfection process. Regardless if prompted to restart the computer or not, please do so immediately. Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware. MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you after scanning with MBAM. Please temporarily disable such programs or permit them to allow the changes.

http://www.bleepingcomputer.com/forums/t/114351/how-to-temporarily-disable-your-anti-virus-firewall-and-anti-malware-programs/
Chewy

No. Try not. Do... or do not. There is no try.

#7 Davexx1

Davexx1
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Winter Springs, Florida
  • Local time:09:14 AM

Posted 02 April 2009 - 06:18 AM

I downloaded and ran the MB program with no problems, the scam completed in 4+ minutes. There were 10 trojan.BHO issues found. What is a trojan.BHO? I copied the log and pasted it below. I did restart the computer as instructed.

Unfortunately, as soon as the computer restarted and I logged back on to AOL, the A2 pop up message saying it blocked a media6degrees.com cookie began again. What else might be the problem?

Thanks, Dave

Malwarebytes' Anti-Malware 1.35
Database version: 1932
Windows 6.0.6001 Service Pack 1

4/2/2009 7:03:01 AM
mbam-log-2009-04-02 (07-03-01).txt

Scan type: Quick Scan
Objects scanned: 62234
Time elapsed: 4 minute(s), 14 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 5
Registry Values Infected: 5
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CLASSES_ROOT\CLSID\{08165ea0-e946-11cf-9c87-00aa005127ed} (Trojan.BHO) -> Delete on reboot.
HKEY_CLASSES_ROOT\CLSID\{7d559c10-9fe9-11d0-93f7-00aa0059ce02} (Trojan.BHO) -> Delete on reboot.
HKEY_CLASSES_ROOT\CLSID\{7fc0b86e-5fa7-11d1-bc7c-00c04fd929db} (Trojan.BHO) -> Delete on reboot.
HKEY_CLASSES_ROOT\CLSID\{abbe31d0-6dae-11d0-beca-00c04fd940be} (Trojan.BHO) -> Delete on reboot.
HKEY_CLASSES_ROOT\CLSID\{f5175861-2688-11d0-9c5e-00aa00a45957} (Trojan.BHO) -> Delete on reboot.

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{08165ea0-e946-11cf-9c87-00aa005127ed} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{7d559c10-9fe9-11d0-93f7-00aa0059ce02} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{7fc0b86e-5fa7-11d1-bc7c-00c04fd929db} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{abbe31d0-6dae-11d0-beca-00c04fd940be} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{f5175861-2688-11d0-9c5e-00aa00a45957} (Trojan.BHO) -> Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

#8 Davexx1

Davexx1
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Winter Springs, Florida
  • Local time:09:14 AM

Posted 02 April 2009 - 06:26 AM

I just noticed in the MB program "Quarantine" log, those 10 trojan.BHO files are listed there. It appears the MB program did not remove them, only quarantined them. Should I go to the quarantine file and remove them permanently?

Dave

#9 DaChew

DaChew

    Visiting Alien


  • BC Advisor
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:09:14 AM

Posted 02 April 2009 - 06:37 AM

Those registry values are removed and cannot be restored so that's not the issue, these BHO's might show back up right away if there's a semi-legit program/addon installed. BHO browser helper object

Try the optout
Chewy

No. Try not. Do... or do not. There is no try.

#10 Davexx1

Davexx1
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Winter Springs, Florida
  • Local time:09:14 AM

Posted 02 April 2009 - 04:12 PM

I have followed similar troubles of other users of Malwarebytes today regarding the 10 then 5 unremovable trojan.BHO's. I did update my MB program to version 1.35 this afternoon, ran the scan, and all looks well. :thumbsup:

Thanks for your help.

Dave




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users