Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Advertising popups in multiple browsers


  • This topic is locked This topic is locked
2 replies to this topic

#1 KDC3

KDC3

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:07:46 AM

Posted 27 March 2016 - 03:40 PM

My daughter's Lenovo G50-45 running Windows 10 is experiencing multiple "Powered By" advertising popups, regardless of which browser is used. She primarily uses Chrome, but I have also tested Edge and Firefox. I have tried scanning with Windows Defender, Malwarebytes, AdAware, SpyBot, ADW Cleaner and Junk Removal Tool. Nothing has solved the problem. I appreciate any help you can provide.

 

ADW Cleaner log:

# AdwCleaner v5.106 - Logfile created 27/03/2016 at 15:18:18
# Updated 27/03/2016 by Xplode
# Database : 2016-03-27.2 [Server]
# Operating system : Windows 10 Home  (x64)
# Username : Sarah - SARAH-PC
# Running from : C:\Users\Sarah\Downloads\AntiMalware Tools\adwcleaner_5.106.exe
# Option : Clean
# Support : http://toolslib.net/forum

***** [ Services ] *****

***** [ Folders ] *****

***** [ Files ] *****

[-] File Deleted : C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_d19tqk5t6qcjac.cloudfront.net_0.localstorage
[-] File Deleted : C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal
[-] File Deleted : C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_nps.pastaleads.com_0.localstorage
[-] File Deleted : C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_nps.pastaleads.com_0.localstorage-journal
[-] File Deleted : C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_pstatic.eshopcomp.com_0.localstorage
[-] File Deleted : C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_pstatic.eshopcomp.com_0.localstorage-journal
[-] File Deleted : C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.re-markable00.re-markable.net_0.localstorage
[-] File Deleted : C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.re-markable00.re-markable.net_0.localstorage-journal
[-] File Deleted : C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_utop.it_0.localstorage
[-] File Deleted : C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_utop.it_0.localstorage-journal

***** [ DLLs ] *****

***** [ Shortcuts ] *****

***** [ Scheduled tasks ] *****

***** [ Registry ] *****

[-] Key Deleted : HKCU\Software\AppDataLow\Software\adawarebp
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\11598763487076930564
[-] Key Deleted : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\d19tqk5t6qcjac.cloudfront.net
[-] Key Deleted : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\utop.it
[-] Key Deleted : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\d19tqk5t6qcjac.cloudfront.net
[-] Key Deleted : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\utop.it

***** [ Web browsers ] *****

[-] [C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : aol.com
[-] [C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : homepage-web.com
[-] [C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : ask.com
[-] [C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : search.ask.com

*************************

:: "Tracing" keys deleted
:: Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [8210 bytes] - [26/03/2016 10:28:44]
C:\AdwCleaner\AdwCleaner[C2].txt - [1950 bytes] - [26/03/2016 18:57:12]
C:\AdwCleaner\AdwCleaner[C3].txt - [5641 bytes] - [26/03/2016 21:00:52]
C:\AdwCleaner\AdwCleaner[C4].txt - [3856 bytes] - [27/03/2016 15:18:18]
C:\AdwCleaner\AdwCleaner[S1].txt - [8082 bytes] - [26/03/2016 10:25:37]
C:\AdwCleaner\AdwCleaner[S2].txt - [896 bytes] - [26/03/2016 13:31:04]
C:\AdwCleaner\AdwCleaner[S3].txt - [1993 bytes] - [26/03/2016 16:06:51]
C:\AdwCleaner\AdwCleaner[S4].txt - [5432 bytes] - [26/03/2016 20:58:19]
C:\AdwCleaner\AdwCleaner[S5].txt - [4193 bytes] - [27/03/2016 15:14:46]

########## EOF - C:\AdwCleaner\AdwCleaner[C4].txt - [4293 bytes] ##########

 

 

 

 

Junk Removal Tool log:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.4 (03.14.2016)
Operating System: Windows 10 Home x64
Ran by Sarah (Administrator) on Sun 03/27/2016 at 15:32:38.72
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

File System: 2

Successfully deleted: C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.re-markable00.re-markable.net_0.localstorage-journal (File)
Successfully deleted: C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.re-markable00.re-markable.net_0.localstorage (File)

 

Registry: 0

 

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Sun 03/27/2016 at 15:36:44.78
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 



BC AdBot (Login to Remove)

 


#2 KDC3

KDC3
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:07:46 AM

Posted 27 March 2016 - 11:21 PM

I found your Powered By Advertisements Removal Guide and resolved this problem. Please close this topic. Thanks.



#3 Jo*

Jo*

  • Malware Response Team
  • 3,288 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Germany
  • Local time:02:46 PM

Posted 28 March 2016 - 02:56 AM

It appears that this issue is resolved, therefore I am closing the topic. If that is not the case and you need or wish to continue with this topic, please send me or any Moderator a Personal Message (PM) that you would like this topic re-opened.

Graduate of the WTT Classroom
Cheers,
Jo
If I have been helping you, and I have not replied to your latest post in 36 hours please send me a PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users