Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

White Smoke toolbar? Help!?


  • Please log in to reply
3 replies to this topic

#1 Cauthon

Cauthon

  • Members
  • 28 posts
  • OFFLINE
  •  
  • Local time:05:08 PM

Posted 08 March 2013 - 08:15 PM

I don't have to ask if I am infected, I can see the bleeping toolbar. I am running a Dell XPS with an I7 processor, and Windows 7.

 

I have looked over the extensive list of work that the

mag00

member did, which was apparently successful in the end. Do you recommend I start in the same place, or based on those results could I skip some of the steps? I have tried the Windows uninstall function and it seemed to think it had the job done, but the toolbar is still right there, and some strange popup ads are popping up. Somebody elsewhere recommended Revo Uninstaller Freeware, but I don't know anything about that so I hesitate to jump into it.

 

Search found this

 

http_whitesmokenew.ourtoolbar.com_0.localstorage-journal

 

in C:|Users\[name of this computer] \Appdata\Local\Google\Chrome\User Data\Default

 

but just looking there with Windows Explorer does not show it. So I told Windows Explorer to delete it and it seems to be gone ("No items match your search"), but the toolbar is still here.

 

I already have Avast installed; I like Avast, because a few years ago I had a close encounter with something that said it was Windows security or some such and promised to fix all my problems for $58, and I downloaded Avast and installed it even though the problem was already there, and it swept it clean. Two of my friends said they had to hire a professional cleaner to get rid of that. Avast is running as usual, and I told it to scan, and it says it scanned about 305k files and didn't find anything. It says real time shields (shields! shields!) is on, but it says there is a 2013 update, so I will get that. I also run CrapCleaner at least once most days, and that generally helps, but I do not expect it to fix stuff like this. OTOH, for a while, whenever I used a USB memory and asked for permission to remove it, the demon in the machine said it was in use, no matter how closed all the programs were; since I have been using Ccleaner, I do not have that problem.

 

Thanks for helping me worry about the #!??#!! problem.

 

Still looking forward



BC AdBot (Login to Remove)

 


#2 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:04:08 PM

Posted 08 March 2013 - 08:32 PM

Do not run any other tools when you are being assisted

 

  • Please download TDSSKiller from here and save it to your Desktop
  • Doubleclick on TDSSKiller.exe to run the application, then click on Change parameters


    tds2.jpg

  • Check Loaded Modules  and Detect TDLFS file systemDo not check Verify file digital signatures (even though it is checked in the example)
  • If you are asked to reboot because an "Extended Monitoring Driver is required" please click Reboot now


    2012081514h0118.png

  • Click Start Scan and allow the scan process to run

  • If threats are detected select Skip for all of them unless I instruct you otherwise
  • Click Continue


    tds6.jpg

  • Click Reboot computer
  • Please post the contents of  TDSSKiller.[Version]_[Date]_[Time]_log.txt found in your root directory (typically c:\)in your reply


===================================================


aswMBR

--------------------

  • Download aswMBR and save it to your desktop.
  • Please disable your real time protection of any Antivirus, Antispyware or Antimalware programs temporarily. They will interfere and may cause unexpected results.
  • If you need help to disable your protection programs see here and here.
  • Double click the aswMBR.exe file to run it. Please allow when you are asked to download AVAST antivirus engine defs.
  • Wait until the AV update is done, then click on the Scan button to start. The program will launch a scan.


    aswMBR1.png
  • When done, you will see Scan finished successfully. Please click on Save log and save the file to your desktop.


    aswMBR2.png
  • Please post the contents of the log in your next reply.

NOTE:  aswMBR will create MBR.dat file on your desktop. This is a copy of your MBR. Do NOT delete it.


===================================================


ESET Online Scanner

--------------------

I'd like us to scan your machine with ESET OnlineScan  This process may may take several hours, that is normal

  • Hold down Control and click on this link to open ESET OnlineScan in a new window.
  • Click the esetonlinebtn.png  button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)

    • Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop.
    • Double click on the icon on your desktop.

    esetsmartinstaller_enu.png

  • Check "YES, I accept the Terms of Use."
  • Click the Start button.
  • Accept any security warnings from your browser.
  • Under scan settings, check "Scan Archives" and "Remove found threats"
  • Click Advanced settings and select the following:

    • Scan potentially unwanted applications
    • Scan for potentially unsafe applications
    • Enable Anti-Stealth technology
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • When the scan completes, click List Threats
  • Copy and paste the information in your next reply.   Note:  If no malware was found you will not get a log.
  • Click the Back button.
  • Click the Finish button.


===================================================


Things I would like to see in your next reply. Please be sure to copy and paste the information rather than send an attachment. :thumbsup2:

  • TDSSKiller log
  • aswMBR log
  • ESET results

 



#3 Gorny85

Gorny85

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:09:08 PM

Posted 09 March 2013 - 07:50 AM

Hi, I have somehow managed to download white smoke, I have been trying for hours to get rid of it, I tried the walk through you posted for windows 8 to delete it but it still pops up when I open google chrome after I restart my laptop. Please help me, nightmare!!



#4 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:04:08 PM

Posted 09 March 2013 - 09:04 AM

Gorny85

 

Create a new topic and we will help you

 

Thanks






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users