Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

lopcloudsvr302.com pop up virus


  • This topic is locked This topic is locked
4 replies to this topic

#1 Jarod1

Jarod1

  • Members
  • 47 posts
  • OFFLINE
  •  
  • Local time:06:51 PM

Posted 23 January 2014 - 10:58 AM

I don't know how I got this pop up virus but on 1/21, but on that day while surfing the web a tab opened up prompting me to download a video player update for firefox. I read it and looked at the web address and things didn't add up. So I googled it and found out it was a pop up virus. Then not long afterwards it started spamming me to upgrade my video player, so I knew right then and there that this was not legit. I never downloaded it.

 

I ran AdwCleaner, Junkware Removal Tool, SUPERAntiSpyware (full scan), Malware Bytes (full scan), and McAfee (full scan). Only AdwCleaner, JRT, and AntiSpyware found anything.

 

I'm sorry for running the tools before coming here first.

 

edit: typo in the title: its lpcloudsvr302.com

Attached Files


Edited by Jarod1, 23 January 2014 - 12:32 PM.


BC AdBot (Login to Remove)

 


#2 Jarod1

Jarod1
  • Topic Starter

  • Members
  • 47 posts
  • OFFLINE
  •  
  • Local time:06:51 PM

Posted 23 January 2014 - 11:05 AM

# AdwCleaner v3.017 - Report created 21/01/2014 at 21:33:07
# Updated 12/01/2014 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : Jay - DESKTOP
# Running from : C:\Documents and Settings\Jay\Desktop\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702


-\\ Mozilla Firefox v26.0 (en-US)

[ File : C:\Documents and Settings\Jay\Application Data\Mozilla\Firefox\Profiles\cdk3l3rt.default\prefs.js ]


[ File : C:\Documents and Settings\Diane\Application Data\Mozilla\Firefox\Profiles\x3s1hi18.default\prefs.js ]


-\\ Google Chrome v32.0.1700.76

[ File : C:\Documents and Settings\Jay\Local Settings\Application Data\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R1].txt - [1335 octets] - [21/01/2014 21:29:49]
AdwCleaner[S1].txt - [1260 octets] - [21/01/2014 21:33:07]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1320 octets] ##########
 

 

----

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.0 (01.07.2014:1)
OS: Microsoft Windows XP x86
Ran by Jay on Tue 01/21/2014 at 21:48:46.92
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ FireFox

Emptied folder: C:\Documents and Settings\Jay\Application Data\mozilla\firefox\profiles\cdk3l3rt.default\minidumps [6 files]





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Tue 01/21/2014 at 22:05:40.85
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 

----

 

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 01/22/2014 at 11:06 PM

Application Version : 5.7.1018

Core Rules Database Version : 10992
Trace Rules Database Version: 8804

Scan type       : Complete Scan
Total Scan Time : 04:55:57

Operating System Information
Windows XP Home Edition 32-bit, Service Pack 3 (Build 5.01.2600)
Administrator

Memory items scanned      : 693
Memory threats detected   : 0
Registry items scanned    : 41627
Registry threats detected : 0
File items scanned        : 134662
File threats detected     : 3

Adware.Tracking Cookie
    C:\Documents and Settings\Jay\Cookies\TXT7611M.txt [ /interclick.com ]
    C:\Documents and Settings\Jay\Cookies\PLRMOWG9.txt [ /serving-sys.com ]
    C:\Documents and Settings\Jay\Cookies\5WYM0XLD.txt [ /doubleclick.net ]
 

----



#3 jntkwx

jntkwx

  • Malware Response Team
  • 4,339 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New England, U.S.A.
  • Local time:07:51 PM

Posted 27 January 2014 - 05:39 PM

Jarod1,
 
:welcome: back to Bleeping Computer.
 
My name is Jason and I'll be helping you with your computer problems. You can call me by my screename jntkwx or Jason is fine.
 
Some things to remember while we are working together.

  • Do not run any other tool untill instructed to do so!
  • Please do not attach logs or put logs in code or quote boxes (unless explicitly asked to)
  • Tell me about any problems that have occurred during the fix.
  • Tell me of any other symptoms you may be having as these can also help.
  • Do not run anything while running a fix.
  • If you don't understand a step, please ask for clarification before continuing with any future steps.

In the upper right hand corner of the topic you will see the Follow This Topic button. Click on this then choose Receive Notification Immediately and then click Follow This Topic and you will be sent an email once I have posted a response and make the cleaning process faster.
 
Note to others: The instructions here are intended for the person who began this topic. If you need help, please create your own topic in the appropriate forum.
 
 
FRST
Please download Farbar Recovery Scan Tool and save it to your Desktop.
 
Note: You need to run the version compatible with your system. If you are not sure which version applies to your system, download both of them and try to run them. Only one of them will run on your system, that will be the right version.

  • Right-click FRST then click "Run as administrator"
  • When the tool opens, click Yes to disclaimer.
  • Press the Scan button.
  • When finished, it will produce a log called FRST.txt in the same directory the tool was run from.
  • Please copy and paste the log in your next reply.

Note 2: The first time the tool is run it generates another log (Addition.txt - also located in the same directory the tool was run from). Please also paste that, along with the FRST.txt into your next reply.


Regards,
Jason

 

Simple and easy ways to keep your computer safe and secure on the Internet

If I am helping you and have not returned in 48 hours, please feel free to send me a PM with a link to the topic.
My help is free... however, if you wish to show appreciation and support me personally fighting against malware, please consider a donation: btn_donate_SM.gif


#4 jntkwx

jntkwx

  • Malware Response Team
  • 4,339 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New England, U.S.A.
  • Local time:07:51 PM

Posted 01 February 2014 - 07:07 PM

Jarod1,
 
It has been five days since my last post. Do you still need help?

If you do, please follow my previous instructions. 
:thumbup2:


Regards,
Jason

 

Simple and easy ways to keep your computer safe and secure on the Internet

If I am helping you and have not returned in 48 hours, please feel free to send me a PM with a link to the topic.
My help is free... however, if you wish to show appreciation and support me personally fighting against malware, please consider a donation: btn_donate_SM.gif


#5 jntkwx

jntkwx

  • Malware Response Team
  • 4,339 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New England, U.S.A.
  • Local time:07:51 PM

Posted 08 February 2014 - 09:30 AM

Due to the lack of feedback, this topic is now closed.

In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days.

Please include a link to your topic in the Private Message. Thank you.
Regards,
Jason

 

Simple and easy ways to keep your computer safe and secure on the Internet

If I am helping you and have not returned in 48 hours, please feel free to send me a PM with a link to the topic.
My help is free... however, if you wish to show appreciation and support me personally fighting against malware, please consider a donation: btn_donate_SM.gif





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users