Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

New advertisement popups (rectangular box - bottom on screen) can't be stopped


  • Please log in to reply
6 replies to this topic

#1 spotman2013

spotman2013

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:07:07 PM

Posted 10 March 2013 - 01:19 PM

I am having problems with my home desktop, laptop, Android tablet and wife's iPad and have been searching for a solutions off and on for almost three weeks - almost ready to give up and declare acceptance.

 

I'm using Windows 7 with IE9 and the pop-up blocker is on.

 

The popup advertisements (long retangular boxes) on our machines float in from the bottom of the screen, sets there for 5-6 seconds then floats away/disolves.

 

I get a prompt along with them that "Internet Explorer has blocked (i.e.) ad-emea.doubleclick.net."

 

I've used the malware removal tool (Malwarebytes) but it doesn't find anything.

 

I've went into the hosts file (C:\Windows\System32\drivers\etc) and added the address (ad.doubleclick.net) to it and it appears that when that sites hits my browser the page content is blocked but the box still appears with an error - page couldn't load etc.  Other web address advertisements continue to pop open.

 

Important (seems to be)...when I'm on my work network, I don't seem to get the ad popups - it's only on my home network. I've reset both the modem and the router - doesn't fix.

 

The only software that I've added as of late is tax preparation software but my grandson does have his gaming box connected to the network and does his social networking on our desktop machine.

 

Any help would be greatly appreciated! As i mentioned above, I'm almost ready to give up on this issue.


 



BC AdBot (Login to Remove)

 


#2 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:07:07 PM

Posted 10 March 2013 - 01:43 PM

  • Please download TDSSKiller from here and save it to your Desktop
  • Doubleclick on TDSSKiller.exe to run the application, then click on Change parameters


    tds2.jpg

  • Check Loaded Modules  and Detect TDLFS file systemDo not check Verify file digital signatures (even though it is checked in the example)
  • If you are asked to reboot because an "Extended Monitoring Driver is required" please click Reboot now


    2012081514h0118.png

  • Click Start Scan and allow the scan process to run

  • If threats are detected select Skip for all of them unless I instruct you otherwise
  • Click Continue


    tds6.jpg

  • Click Reboot computer
  • Please post the contents of  TDSSKiller.[Version]_[Date]_[Time]_log.txt found in your root directory (typically c:\)in your reply


===================================================


aswMBR

--------------------

  • Download aswMBR and save it to your desktop.
  • Please disable your real time protection of any Antivirus, Antispyware or Antimalware programs temporarily. They will interfere and may cause unexpected results.
  • If you need help to disable your protection programs see here and here.
  • Double click the aswMBR.exe file to run it. Please allow when you are asked to download AVAST antivirus engine defs.
  • Wait until the AV update is done, then click on the Scan button to start. The program will launch a scan.


    aswMBR1.png
  • When done, you will see Scan finished successfully. Please click on Save log and save the file to your desktop.


    aswMBR2.png
  • Please post the contents of the log in your next reply.

NOTE:  aswMBR will create MBR.dat file on your desktop. This is a copy of your MBR. Do NOT delete it.


===================================================


ESET Online Scanner

--------------------

I'd like us to scan your machine with ESET OnlineScan  This process may may take several hours, that is normal

  • Hold down Control and click on this link to open ESET OnlineScan in a new window.
  • Click the esetonlinebtn.png  button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)

    • Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop.
    • Double click on the icon on your desktop.

    esetsmartinstaller_enu.png

  • Check "YES, I accept the Terms of Use."
  • Click the Start button.
  • Accept any security warnings from your browser.
  • Under scan settings, check "Scan Archives" and "Remove found threats"
  • Click Advanced settings and select the following:

    • Scan potentially unwanted applications
    • Scan for potentially unsafe applications
    • Enable Anti-Stealth technology
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • When the scan completes, click List Threats
  • Copy and paste the information in your next reply.   Note:  If no malware was found you will not get a log.
  • Click the Back button.
  • Click the Finish button.


===================================================


Things I would like to see in your next reply. Please be sure to copy and paste the information rather than send an attachment. :thumbsup2:

  • TDSSKiller log
  • aswMBR log
  • ESET results

 



#3 spotman2013

spotman2013
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:07:07 PM

Posted 13 March 2013 - 12:47 PM

BC Advisor - thanks for the quick reply.

 

I'll try to download and follow your instructions above this week.

 

Note...I need to point out that I've connected both my laptop and Android table to 4-5 different Wi-Fi networks since the original post and the advertisement boxes that rise in/develop at the bottom of the screen while on my home network do not appear on other networks.

 

My home network is a simple Motorola cable modem and Belkin router.  There isn't a computer in the network connected to the modem/router by an RJ 45 network cable - the modem/router are a stand alone Wi-Fi system - no computer acting as a server/host.

 

Thanks again and I'll do an update post once I gather the information you requested in the earlier post.



#4 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:07:07 PM

Posted 13 March 2013 - 01:28 PM

:thumbup2:



#5 spotman2013

spotman2013
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:07:07 PM

Posted 23 March 2013 - 06:07 AM

BC Advisor - thanks for all your help so far but my issue may turn out to be a provider issue (see explanation at bottom).

 

I ran the TDSSKiller and it came back with no threats found but I did run into a problem.  After the restart, I couldn't get the Wi-Fi or wired network connection to work.  It would show as connected but with limited access (bars with yellow shield icon).

 

I worked on the problem for approx. 1-1/2 hours and tried all the things that I knew and/or could remember how/what to do (checked setttings, reset both adapters by enabling/disabling them, hard reset the modem/router, etc.).

 

The main issue seemed to be that I couldn't get the advanced network settings to hold in place (i.e. Turn on Network Discovery, Turn on file and printer sharing", etc.).  I could go in and select them but once I clicked on the Save button and went back, the "Turn off..." would be selected.  I was prompted by the Windows 7 trouble-shooter to check to see if "Turn on Network Discovery" was selected when I tried to map a drive and it wouldn't connect.

 

Anyway, I went ahead and re-imaged the drive so that I could get my connection back up and running.  No big deal but I wish that I could have found a solution (note...one of the network specialist that I work with stated that I should have done a DNS flush - this was one of the things I didn't remember to do).

 

Now for the provider explanation...I did some checking around and it seems that others that use the same cable provider that I use are having the same popup issue!  The network specialist that I mentioned above (DNS flush) stated that he was having the same problem and after doing some research and/or contact with the provider support, found out that it is some type of advertisement system that the provider agreed to use (he mentioned R66T advertisement by Enterasys???).  He said that it took numerous calls to the provider support number but finally (after approx. 3 weeks), they finally got it stopped.  Also, after getting this information and doing some Internet searching, I found several complaints and/or websites mentioning this problem with the name of my provider.  Another network specialist (same Internet provider) suggested that I use a secured (https) address when starting the browser - he was having the same advertisement pop-up issue.

 

Take care and thanks again for your help!

spotman2013



#6 spotman2013

spotman2013
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:07:07 PM

Posted 23 March 2013 - 06:14 AM

BC Advisor - forgot to mention one important thing.

 

While visiting relatives out-of-state, I connected to 4-5 different home/business networks and never had any of the pop-ups to appear.  This also reinforces the possibility (along with input/feedback from fellow provider users) that it's on the end of my service and not anything with my computers/tablet/iPad or network.

 

spotman2013



#7 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:07:07 PM

Posted 23 March 2013 - 10:33 AM

ok :)






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users