Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Firstadsolution


  • Please log in to reply
4 replies to this topic

#1 freddyw

freddyw

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:03:47 AM

Posted 24 November 2006 - 03:53 PM

I have tried everything -
read 1000000++++ forums,
scanned using:

McAfee,
AVG (Ewido),
S&D,
5 online scanners

they all found tracker cookies, which were deleted,
but firstadsolution KEEPS POPPING UP!

I did a hijackthis scan and found nothing suspicious.
I'm pretty sure I got it from BitRoll.

help?

BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,047 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:02:47 AM

Posted 25 November 2006 - 08:47 AM

What OS (Win XP/2000, etc) are you using? Have you tried doing your scans in "SAFE MODE"? If so and no success, then try this:

Download and scan with SUPERAntiSypware Free for Home Users
If you encounter any problems while downloading the updates, manually download and unzip them from here.

Download, install and scan with the 15-day free trial of Sunbelt's Counterspy.
CounterSpy User Guide.
1. When Counterspy completes its scan, the "Scan Results" box will appear.
2. Click on "View Results".
3.Under (Recommended Action), using the drop down menu arrows at the side of each entry found, set EVERYTHING to "Remove".
4. Click on "Take Action".
5. Once everything has been removed, click on "View Details".
6. Copy and Paste the details into a text document and save it to your desktop.
7. Exit Counterspy.

I did a hijackthis scan and found nothing suspicious.

Are you trained in the use and investigation of the entries listed in the log this program generates? Most of the log entries are required to run a computer and removing essential ones can potentially cause serious damage to your system. HijackThis relies on experts to interpret the log entries and determine what needs to be fixed.

If the above does not help then I suggest you let an expert take a look at your hijackthis log so let me know and I will direct you on how to post it.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 freddyw

freddyw
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:03:47 AM

Posted 26 November 2006 - 09:31 PM

ok.
I am running Windows XP Media Center SP2
I will do the above and then post the results later.
thanks!

#4 freddyw

freddyw
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:03:47 AM

Posted 29 November 2006 - 01:59 PM

Ok, so far there have been NO firstadsolution popups!
After I ran CounterSpy under SafeMode the following were detected:


Detected spyware

PointRoll.com Cookie more information...
Status: Deleted

Infected cookies detected
c:\documents and settings\owner\cookies\owner@ads.pointroll[2].txt


Overture.com Cookie more information...
Status: Deleted

Infected cookies detected
c:\documents and settings\owner\cookies\owner@overture[2].txt


QuestionMarket.com Cookie more information...
Status: Deleted

Infected cookies detected
c:\documents and settings\owner\cookies\owner@questionmarket[1].txt


Trafficmp.com Cookie more information...
Status: Deleted

Infected cookies detected
c:\documents and settings\owner\cookies\owner@trafficmp[1].txt


firstadsolution was NOT removed. Then I searched the web and came across a "firstadsolution" remover (under a different name, can't remember what) and now all ads are gone!

Edited by freddyw, 29 November 2006 - 02:00 PM.


#5 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,047 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:02:47 AM

Posted 29 November 2006 - 02:30 PM

You have to be careful as to what you download and use that claims to be a removal tool. As the say goes "Sometimes the cure can be worst than the disease".

If your sure your clean, SET A NEW RESTORE POINT to prevent reinfection from an old restore point. Any malware you picked up could have been saved in System Restore. Since System Restore is a protected directory, your tools can not access it to delete these bad files which can reinfect your system. Setting a new restore point AFTER cleaning your system will help prevent this and enable your computer to "roll-back" to a clean working state.

The easiest and safest way to set a new RESTORE POINT:
1. Go to Start > Programs > Accessories > System Tools and click "System Restore".
2. Choose the radio button marked "Create a Restore Point" on the first screen then click "Next". Give the R.P. a name then click "Create". The new point will be stamped with the current date and time. Keep a log of this so you can find it easily should you need to use System Restore.
3. Then go to Start > Run and type: Cleanmgr
4. Click "OK".
5. Click the "More Options" Tab.
6. Click "Clean Up" in the System Restore section to remove all previous restore points except the newly created one.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users