Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Pop Ups All Of A Sudden


  • Please log in to reply
18 replies to this topic

#1 eric0668

eric0668

  • Members
  • 36 posts
  • OFFLINE
  •  
  • Local time:05:04 PM

Posted 24 December 2013 - 05:43 PM

am getting a terrible amount of pop ups.   I had something which I am sorry but I can't remember (useless I know)  mar???_ ???
 
I reset the browser   IE11.....I ran spybot and malewarebytes, and got only cookies etc on Spybot, and nothing on Malewarebytes
 
PLEASE FORGIVE ME...I just saw I posted in the wrong section.  Mod if you can move I would be thankful, if not you can delete I will repost.  Sorry
 
Pop ups include, I have to Update Adobe Flash, IE Explorer indicates my Media Player is out of date, etc   I am on a Windows 8.1 touchscreen running
I have the pop up blocker turned off because I am using the one on the Google Toolbar
 
 
Any help would be greatly appreciated.   I will do what you suggest...   Hijack this?  Combo fix?   I don't know much about this
 
Merry Xmas
Eric

Edit: Moved topic from Virus, Trojan, Spyware, and Malware Removal Logs to the more appropriate forum, due to the absence of any malware logs included in the topic. ~ Animal

BC AdBot (Login to Remove)

 


#2 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:10:04 PM

Posted 24 December 2013 - 06:25 PM

Please download AdwCleaner by Xplode onto your desktop.
  • Close all open programs and internet browsers.
  • Double click on adwcleaner.exe to run the tool.
  • Click on Clean.
  • Confirm each time with Ok.
  • You will be prompted to restart your computer. A text file will open after the restart.
  • Please post the contents of that logfile with your next reply.
  • You can find the logfile at C:\AdwCleaner[S1].txt as well.
Please download Junkware Removal Tool to your desktop.
  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.
Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.
  • Make sure the following options are checked:
    • Internet Services
    • Windows Firewall
    • System Restore
    • Security Center/Action Center
    • Windows Update
    • Windows Defender
    • Other Services
  • Press "Scan".
  • It will create a log (FSS.txt) in the same directory the tool is run.
  • Please copy and paste the log to your reply.


#3 eric0668

eric0668
  • Topic Starter

  • Members
  • 36 posts
  • OFFLINE
  •  
  • Local time:05:04 PM

Posted 24 December 2013 - 06:28 PM

Thanks so much Crypto... I will do when I get home and re-post

 

Eric



#4 eric0668

eric0668
  • Topic Starter

  • Members
  • 36 posts
  • OFFLINE
  •  
  • Local time:05:04 PM

Posted 25 December 2013 - 11:22 AM

Merry Christmas

Here are my logs:

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 8.1 x64
Ran by Eric H on Wed 12/25/2013 at 11:07:13.39
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

~~~ Services

 

~~~ Registry Values

 

~~~ Registry Keys

 

~~~ Files

 

~~~ Folders

 

~~~ Event Viewer Logs were cleared

 

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Wed 12/25/2013 at 11:09:50.02
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

 

 

# AdwCleaner v3.016 - Report created 25/12/2013 at 10:53:08
# Updated 23/12/2013 by Xplode
# Operating System : Windows 8.1  (64 bits)
# Username : Eric H - ERIC
# Running from : C:\Users\Eric H\Desktop\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

File Deleted : C:\WINDOWS\System32\Tasks\NCH Software

***** [ Shortcuts ] *****

***** [ Registry ] *****

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16384

-\\ Google Chrome v32.0.1700.41

[ File : C:\Users\Eric H\AppData\Local\Google\Chrome\User Data\Default\preferences ]

*************************

AdwCleaner[R1].txt - [787 octets] - [25/12/2013 10:52:36]
AdwCleaner[S1].txt - [711 octets] - [25/12/2013 10:53:08]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [770 octets] ##########

 

 

 

Farbar Service Scanner Version: 05-12-2013
Ran by Eric H (administrator) on 25-12-2013 at 11:19:52
Running from "C:\Users\Eric H\Desktop"
Microsoft Windows 8.1  (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.

Windows Firewall:
=============

Firewall Disabled Policy:
==================

System Restore:
============

System Restore Disabled Policy:
========================

Action Center:
============

Windows Update:
============

Windows Autoupdate Disabled Policy:
============================

Windows Defender:
==============

Other Services:
==============

File Check:
========
C:\Windows\System32\nsisvc.dll
[2013-08-22 08:25] - [2013-08-22 08:25] - 0029184 ____A (Microsoft Corporation) 6E2271ED0C3E95B8E29F3752B91B9E84

C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys
[2013-12-08 00:49] - [2013-12-08 00:49] - 2551640 ____A (Microsoft Corporation) 6617F44D2432C529B2249A0498B6B40A

C:\Windows\System32\dnsrslvr.dll
[2013-12-08 00:49] - [2013-12-08 00:49] - 0255488 ____A (Microsoft Corporation) 5BAF7714E68F93515A937A3FA8587EF9

C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll
[2013-12-08 00:48] - [2013-12-08 00:48] - 0828416 ____A (Microsoft Corporation) 6468B696C65775D51A06615830E0E79D

C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll
[2013-12-08 00:49] - [2013-12-08 00:49] - 3532288 ____A (Microsoft Corporation) 86D0BF4F792053A50D6EE43DFA5837A5

C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MsMpEng.exe => MD5 is legit
C:\Windows\System32\ipnathlp.dll
[2013-12-08 00:49] - [2013-12-08 00:49] - 0433664 ____A (Microsoft Corporation) F4414F57DF2CECB8FC969AA43A6B0D50

C:\Windows\System32\iphlpsvc.dll
[2013-12-08 00:49] - [2013-12-08 00:49] - 0903168 ____A (Microsoft Corporation) DFC4050D58565ADBEE793A8D4AEBDAE6

C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit

**** End of log ****

 

 

 

 

THANK YOU



#5 eric0668

eric0668
  • Topic Starter

  • Members
  • 36 posts
  • OFFLINE
  •  
  • Local time:05:04 PM

Posted 25 December 2013 - 12:19 PM

Crypto I am afraid I messed things up more.   More work for  me definitely, if it can even be fixed.  And if you are even able and willing to help more for you.   I thought I would see if another program I used in the past would find anything   I turned off the firewall and Defender, downloaded Ad-aware and ran it.   I uninstalled it but now can't get defender started.   I looked for an uninstall tool, as I found some people had a problem with Norton when going back to Defender...

 

(I also forget...I know both are important, but is it the Firewall or the Anti-virus that is most important and if not working you shouldn't go online or download anything)



#6 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:10:04 PM

Posted 25 December 2013 - 06:53 PM

Follow the instructions here on how to uninstall Ad-Aware: http://www.lavasoft.com/support/supportcenter/manuals/ad_aware/Ad-Aware%2011%20Manual.pdf

#7 eric0668

eric0668
  • Topic Starter

  • Members
  • 36 posts
  • OFFLINE
  •  
  • Local time:05:04 PM

Posted 25 December 2013 - 07:35 PM

Thanks Crypto   I did that originally.  Not a total newb, but nowhere near ad educated with this stuff as you and others

 

I reinstalled and was going to uninstall...first with Revo, which does not even find it.   Then I went to the control panel and did it again,  restarted, it is not running or in the programs list, I have the firewall on, but I goto the Defender and it says Service is not running or not able to run.  I goto services, it says Manual, I hit  Run and it attempts to  and it says that some other program has changed its permissions it cannot open

 

Any help is really appreciated.  I hope you can persist thru this with me

 

Eric



#8 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:10:04 PM

Posted 25 December 2013 - 07:40 PM

In all honesty, I would download Microsoft Security Essentials now, as Defender is only for spyware and not viruses.

#9 eric0668

eric0668
  • Topic Starter

  • Members
  • 36 posts
  • OFFLINE
  •  
  • Local time:05:04 PM

Posted 25 December 2013 - 07:45 PM

I will LOL I used to use AVG as people said it was the least resource hogging around.  I stopped using Spysweeper and Ad-aware for those reasons so I don't know why I tried

 

I am so OCD, you can't imagine  Can we fix this first?   And I am still getting all of those pop ups   Did you see anything

 

Should I do a reinstall of Windows 8.1?   Not that hard espec since all my data is backed up on a external hd



#10 eric0668

eric0668
  • Topic Starter

  • Members
  • 36 posts
  • OFFLINE
  •  
  • Local time:05:04 PM

Posted 25 December 2013 - 07:54 PM

this is a pic from my dropbox of one of many pop ups, most when I click a link, a good link like reply in Yahoo,  home in facebook....

 

https://www.dropbox.com/s/kp33h09og7yikm8/New%20Bitmap%20Image.bmp



#11 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:10:04 PM

Posted 25 December 2013 - 08:04 PM

I would try using a different browser like Firefox or Chrome, they are much better at dealing with popups and that one in your screen is not malicious until you download the software. Its part of one of the advertisements on the site baltimoresun.com.

#12 eric0668

eric0668
  • Topic Starter

  • Members
  • 36 posts
  • OFFLINE
  •  
  • Local time:05:04 PM

Posted 25 December 2013 - 08:38 PM

Thank You. I appreciate it. I will do a factory reset. They come up on every site. Not just the Sun. :(

#13 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:10:04 PM

Posted 25 December 2013 - 09:14 PM

Every site, has the ability to make ads popup. Chrome and Firefox have the ability to hide them. I hardly see popups, but they are there just blocked.

#14 eric0668

eric0668
  • Topic Starter

  • Members
  • 36 posts
  • OFFLINE
  •  
  • Local time:05:04 PM

Posted 25 December 2013 - 10:16 PM

I did a reset. Should I use Microsoft security essentials as a antivirus. Or is AVg still good?

Whichever I use should I turn off Windows Defender.

#15 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:10:04 PM

Posted 25 December 2013 - 10:16 PM

I would recommend MSE over any other due to its ease of use and lack of being system intensive.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users