I picked up something dashbid

Please disable Spybot's TeaTimer.

How to disable Spybot's TeaTimer


Have Hitman remove all that it finds.

Then explain how things are running. Also explain which browser(s) you have pop ups in.

 

OK no problem.

 

Which browser(s) do the pop ups occur in?

 

Please run the below and then restart Firefox to see if you still have problems.

Reset Firefox to Defaults

 

Also, please do the below even if Firefox seems okay now.

Please download OTM by Old Timer and save it to your Desktop.

• Run OTM.exe by double clicking on it (Note: if using Vista, Win7 or Win8, don't double click, use right click and select Run As Administrator).
• Copy the lines from the below codebox to the clipboard by highlighting ALL of them and pressing CTRL + C
  (or, after highlighting, right-click and choose Copy): Do not include the word Code: which is just a title line of
  the code box

Code:

:Processes
explorer.exe

:Files
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SoftwareWatcher bundle
C:\Windows\TEMP\*.*
C:\Users\michele\AppData\Local\Temp\*.*

:Reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\{6791A2F3-FC80-475C-A002-C014AF797E9C}]
[-HKEY_USERS\S-1-5-21-3313234778-2164099331-1553974804-1001\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}]
[-HKEY_USERS\S-1-5-21-3313234778-2164099331-1553974804-1001\Software\Conduit]
[-HKEY_USERS\S-1-5-21-3313234778-2164099331-1553974804-1001\Software\Condut]
[-HKEY_USERS\S-1-5-21-3313234778-2164099331-1553974804-1001\Software\IM]
:Commands
[purity]
[EmptyTemp]
[start explorer]
[Reboot]

• Return to OTM, right click in the Paste List of Files/Folders to Move window (under the yellow bar
  ) and choose Paste.
• Now click the large button.
• If OTM asks to reboot your computer, allow it to do so. The report should appear in Notepad after the reboot.
• Close OTM.

Now navigate to the C:\_OTM\MovedFiles folder ( assuming your Windows drive is C). This is where your log will be
saved in the form of Date and Time mmddyyyy_hhmmss.log. Just look for the most recent .log file. Attach
this log file to your next message.

Now please download Junkware Removal Tool to your desktop.

• Shut down your protection software now to avoid potential conflicts.
• Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.
• The tool will open and start scanning your system.
• Note: That JRT may reset your home page to a google default so you will need to restore your home page setting if this happens.
• Please be patient as this can take a while to complete depending on your system's specifications.
• On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
• Attach JRT.txt to your next message.

Now run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista, Win7 or Win8, don't double click, use right click and select Run As Administrator).

Then attach the below logs:

• the C:\_OTM\MovedFiles log
• the JRT.TXT log
• C:\MGlogs.zip

Make sure you tell me how things are working now!

 

You're welcome. Reset Firefox again after completing these other instructions.

 

Okay then they are most likely justyrelated to the websites you are on. Most popups are! Your logs are clean and resetting Firefox would remove any unwanted addons. So the popups are probably just normal popups. Enable a popup blocker if you don't want them but be aware that having a popup blocker enable can stop you from using many websites properly and could even inhibit various software on your PC from working properly. Popups are used by many applications.

 

Can you attach a snapshot of the popup you are referring to?

Also run the below scan.

Please download OTL by OldTimer.

• Save it to your desktop.
• Double-click on the OTL icon on your desktopto run it. (Note: if using Vista, Win7 or Win8 use right-click and select Run as Administrator)
• Check the "Scan All Users" checkbox.
• Check the "Standard Output".
• Change the setting of "Drivers" and "Services" to "All"
• Copy the text in the code box below and paste it into the text-field.
  
  Code:

  activex
  netsvcs
  drives
  

• Now click the button.
• One report will be created:
  • OTL.txt <-- Will be opened
• Attach OTL.txt to your next message. (How to attach)

 

That could just be an advertisement on the web page and not a popup. Many webistes need to collect review to pay for the website like this. But let's see what OTL turns up.

 

Okay but you still need to run the last scan I requested with OTL and attach the log.

 

Still not seeing any real malware in your logs. Possibly it is due to something you have installed and are running. Or possibly within in a shortcut used to load your browser. Do you load your browser from a shortcut or quick lauch icon? What happens if you don't load from a shortcut? Like directly navigate to the C:\Program Files (x86)\Mozilla Firefox folder and double click on firefox.exe

Also let's run the below.



Please download AdwCleaner by Xplode and save to your Desktop.

• Double click on AdwCleaner.exe to run the tool.
  Vista/Windows 7/8 users right-click and select Run As Administrator
• Click on the Scan button.
• AdwCleaner will begin...be patient as the scan may take some time to complete.
• After the scan has finished, click on the Report button...a logfile (AdwCleaner[R#].txt) will open in Notepad for review (where the largest value of # represents the most recent report).
• The contents of the log file may be confusing. Unless you see a program name that you know should not be removed, don't worry about it. If you see an entry you want to keep, let me know about it.
• Attach the logfile to your next next reply.
• A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.

Now shut down your protection software (antivirus, antispyware...etc) to avoid possible conflicts.

• Double-click OTL.exe to run. (Note: if using Vista, Win7 or Win8 use right-click and select Run as Administrator)
• Copy the text in the code box below and paste it into the text-field.

Code:

:Files
C:\Users\michele\AppData\Local\Temp\_MEI121962
C:\Program Files (x86)\Social Privacy
C:\Users\michele\MGtools.exe
:Commands
[PURITY]
[EMPTYTEMP] 
[EMPTYFLASH]

[REBOOT]

• Now click the button.
• If the fix needed a reboot please do it.
• Click the OK button (upon reboot).
• When OTL is finished, Notepad will open. Close Notepad.
• A log file will be located at C:\_OTL\MovedFiles\mmddyyyy_hhmmss.log, where mmddyyyy_hhmmss is the date of the tool run.
• Attach this log to your next message. (See: How to attach)

Now run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista or Win7, don't double click, use right click and select Run As Administrator).


Then attach the below logs:

• the AdwCleaner log
• the log from OTL
• C:\MGlogs.zip

Make sure you tell me how things are working now!

 

Backup and bookmarks you want from Firefox because we will be uninstalling it and we will also be deleting all folders for it. So not backup into the Firefox folders. DO NOT reinstall Firefox until requested. I want you to run with just Internet Explorer for now.

So uninstall Firefox now and then run Internet Explore to continue.

• Run OTM.exe by double clicking on it (Note: if using Vista, Win7 or Win8, don't double click, use right click and select Run As Administrator).
• Copy the lines from the below codebox to the clipboard by highlighting ALL of them and pressing CTRL + C
  (or, after highlighting, right-click and choose Copy): Do not include the word Code: which is just a title line of
  the code box

Code:

:Processes
explorer.exe

:Files
C:\Program Files (x86)\Social Privacy
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk
C:\Program Files (x86)\Mozilla Firefox
C:\Program Files (x86)\Mozilla Maintenance Service
C:\Users\michele\AppData\Roaming\Mozilla
C:\Users\michele\AppData\Local\Temp\*.*

:Reg
[-HKEY_CURRENT_USER\Software\AnyProtect]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\NewPlayer_RASAPI32]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\NewPlayer_RASMANCS]
[-HKEY_CURRENT_USER\Software\Mozilla\Firefox]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins]
:Commands
[purity]
[EmptyTemp]
[start explorer]
[Reboot]

• Return to OTM, right click in the Paste List of Files/Folders to Move window (under the yellow bar
  ) and choose Paste.
• Now click the large button.
• If OTM asks to reboot your computer, allow it to do so. The report should appear in Notepad after the reboot.
• Close OTM.

Now navigate to the C:\_OTM\MovedFiles folder ( assuming your Windows drive is C). This is where your log will be
saved in the form of Date and Time mmddyyyy_hhmmss.log. Just look for the most recent .log file. Attach
this log file to your next message.

Now please download Junkware Removal Tool to your desktop.

• Shut down your protection software now to avoid potential conflicts.
• Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.
• The tool will open and start scanning your system.
• Note: That JRT may reset your home page to a google default so you will need to restore your home page setting if this happens.
• Please be patient as this can take a while to complete depending on your system's specifications.
• On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
• Attach JRT.txt to your next message.

Now run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista, Win7 or Win8, don't double click, use right click and select Run As Administrator).

Then attach the below logs:

• the C:\_OTM\MovedFiles log
• C:\MGlogs.zip

 

You're welcome. Hope your treatment went well. Just complete things when you can.

 

Please run the instructions in post #25 and make sure that Firefox was uninstalled first and that it is still not installed.

 

Delete the below folder:

C:\Users\michele\AppData\Roaming\Mozilla

Then download and install Firefox from the below link:

http://www.majorgeeks.com/files/details/mozilla_firefox_31.html


Is it working okay now?

 

Okay then just continue on now.

 

You're welcome.

FOr the most part we already have but let's try the below.

Reset Internet Explorer 9, 10, and 11 to Defaults