Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Infected with adware


  • This topic is locked This topic is locked
5 replies to this topic

#1 TwilightRonin

TwilightRonin

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:04:00 PM

Posted 01 May 2018 - 03:28 PM

Warning: The links I'm posting here may be unsafe
 
I use Adblock Plus and yet I started noticing ads on youtube. The link location of this recurring one is hxxps://approp.pro/click?zoneId=2917510-2917689&adId=212490 I searched the domain name, no relevant results. The image location is hxxps://10-81.s.cdn15.com/cr/5341/87601/212490_0871b.jpg Searched that domain name as well, nothing except being included on some malwares.com and virustotal.com lists. Scanning with Malwarebytes and AdwCleaner didn't find whatever's responsible, what else should I try?

Attached Files


Edited by Aura, 02 May 2018 - 07:34 AM.
Disabled potentially malicious link


BC AdBot (Login to Remove)

 


#2 nasdaq

nasdaq

  • Malware Response Team
  • 40,254 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:09:00 AM

Posted 02 May 2018 - 08:24 AM

Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Download the version of this tool for your operating system.
Farbar Recovery Scan Tool (64 bit)
Farbar Recovery Scan Tool (32 bit)
and save it to a folder on your computer's Desktop.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

How to attach a file to your reply:
In the Reply section in the bottom of the topic Click the "more reply Options" button.
attachlogs.png

Attach the file.
Select the "Choose a File" navigate to the location of the File.
Click the file you wish to Attach.
Click Attach this file.
Click the Add reply button.
===

Please post the logs for my review.

Wait for further instructions.

#3 TwilightRonin

TwilightRonin
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:04:00 PM

Posted 02 May 2018 - 03:58 PM

I'm sorry, I got a bigger problem in the meantime: https://www.bleepingcomputer.com/forums/t/676786/
I could still do this procedure by using USB or Google drive to get the installation file in and addition.txt out if you think it would help.

#4 TwilightRonin

TwilightRonin
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:04:00 PM

Posted 02 May 2018 - 03:58 PM

Dublicate, delete please.

Edited by TwilightRonin, 02 May 2018 - 04:00 PM.


#5 nasdaq

nasdaq

  • Malware Response Team
  • 40,254 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:09:00 AM

Posted 03 May 2018 - 06:54 AM

Hi,

OK, your IP config was reset, run the Farbar program as I suggested and post the logs.

I will review you system.

#6 nasdaq

nasdaq

  • Malware Response Team
  • 40,254 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:09:00 AM

Posted 09 May 2018 - 06:49 AM

Are you still with me?




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users