Help!!!!!!!! Wave on vol keeps turning off; invisible pop up ads; weird sounds& music

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by tytk2, Jul 18, 2010.

  1. tytk2

    tytk2 Private E-2

    Hello,

    I'm new to this site. I have been surfing so long to see for something helpful. I was recommended by a friend that this site would work wonders and do their best to help. I appreciate your efforts. Let me get straight to the point. It started about a week ago. I was listening to music when suddenly out of nowhere my volume muted, i checked my volume and it was on to the highest that it can be. I thought it was some problem with the song itself, so i tried another and it was playing by no sounds. finally i opened up my volume meter control and saw that my wave was turned off. It was weird cause i never turned it off. I turned it back on and just some time after it shuts off again and this kept on repeating. I didn't really think anything was wrong at that point, so i ignored it. But then one day i was just browsing checking my emails and everything when suddenly i hear something like " Congratulations You Won" I checked everywhere and i only had one web page opened at that time; i use firefox. I only had my email open and i didn't see such an ad. It started to annoy me and i started to get scared like what if it is a virus or something. I personally use Avast anti virus so i did a full scan but nothing came up. I tried searching everything on what i can do, but i'm no computer tech nor am i good with computers at all. I also keep noticing on my task manager a program that no matter how many times i end the process it keeps popping back; iexplore.exe. What should i do? I have so much important things on my laptop; i use windows xp by the way. Please i beg you, please help me!!!! I thank you so so much for reading this!!

    sincerely,
    Chloe
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Re: Help!!!!!!!! Wave on vol keeps turning off; invisible pop up ads; weird sounds& m

    Welcome to Major Geeks!


    Please also download MBRCheck to your desktop
    • Double click MBRCheck.exe to run (vista and Win 7 right click and select Run as Administrator)
    • It will show a Black screen with some information that will contain either the below line if no problem is found:
      • Done! Press ENTER to exit...
    • Or you will see more information like below if a problem is found:
      • Found non-standard or infected MBR.
      • Enter 'Y' and hit ENTER for more options, or 'N' to exit:
    • Either way, just choose to exit the program at this point since we want to see only the scan results to begin with.
    • MBRCheck will create a log named similar to MBRCheck_07.16.10_00.32.33.txt which is random based on date and time.
    • Attach this log to your next message. (See: HOW TO: Attach Items To Your Post )
    Now run MGtools per the below instructions and attach the requested MGlogs.zip file

    Do you have all important data backed up? You really should do this before continuing since based on what you described, we may need to rewrite your MBR to fix this and while most times this can be done without any problem, these infections can react badly and that could result in a PC not being bootable. You really don't have much choice though since these infections are too dangerous to your security to leave on a PC.

    Also note if you have a Dell PC which uses a non-standard MBR ( or another manufacturer's who does similar to Dell) , fixing the mbr may prevent access the the Dell Restore Utility, which allows you to press a key on startup and revert your computer to a factory delivered state. There are a couple of known fixes for said condition, though the methods are somewhat advanced. If you are unwilling to take such a risk, you should not continue but you risk serious problems leaving this infection in place and thus your only other option would be to try using the Dell Restore Utility to return a factory ship state which will remove everything you additional you have put onto the PC.
     
  3. tytk2

    tytk2 Private E-2

    Re: Help!!!!!!!! Wave on vol keeps turning off; invisible pop up ads; weird sounds& m

    I have follow the instructions. I have attached my logs. What should i do next? THank you so much for your help!
     

    Attached Files:

  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Re: Help!!!!!!!! Wave on vol keeps turning off; invisible pop up ads; weird sounds& m

    You have multiple antivirus programs installed ( Avast and McAfee ). You need to uninstall one immediately.

    You did not address my previous questions and comments.




    So if have read the warnings and have backed up your date and you wish to continue and fix the malware - please do the following:
    • Run MBRCheck.exe
    • Wait until you see the following lines:
      • Enter 'Y' and hit ENTER for more options, or 'N' to exit:
      • Options:
        [1] Dump the MBR of a physical disk to file.
        [2] Restore the MBR of a physical disk with a standard boot code.
        [3] Exit.
        Enter your choice:
    • Please push the 'Y' key and then press Enter
    • When the program asks you to Enter your choice: enter 2 to Rstore the MBR and press the Enter key
    • Now the program will ask you to "Enter the physical disk number to fix (0-99, -1 to cancel):"
      • Enter 0 and press the Enter key.
    • The program will show Available MBR codes as below
    • You need to select your version of Windows frrom the list. For example, enter 0 or 1 for XP or enter 3 for Vista.....etc. and then press Enter.
    • The program will prompt for confirmation. Type 'YES' and hit Enter.
    • Left click on the title bar (where program name and path is written). From menu chose Edit -> Select All
    • You will see all the text in the window get highlighted.
    • Hit the Enter key on your keyboard to copy all of the text into the clipboard.
    • Paste that text into Notepad, save it to your desktop as MBRfix.txt
    • Restart your PC.
    • Attach the MBRfix.txt file to your next message..
     
  5. tytk2

    tytk2 Private E-2

    Re: Help!!!!!!!! Wave on vol keeps turning off; invisible pop up ads; weird sounds& m

    Hi,

    I have already uninstalled one of the antivirus programs, and ran the MBRcheck. what should i do next? Thank you for your time!
     

    Attached Files:

  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Re: Help!!!!!!!! Wave on vol keeps turning off; invisible pop up ads; weird sounds& m

    Uninstall the below old versions of software:
    J2SE Development Kit 5.0 Update 11
    J2SE Runtime Environment 5.0 Update 11
    Java(TM) 6 Update 12

    Now install the current version of Sun Java from: Sun Java Runtime Environment

    Also delete all files and subfolders in the below folders except ones from the current date (Windows will not let you delete the files from the current day).
    C:\WINDOWS\Temp
    C:\Documents and Settings\student\Local Settings\Temp

    Now empty your Recycle Bin

    Now run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista or Win7, don't double click, use right click and select Run As Administrator).

    Then attach the below logs:
    • C:\MGlogs.zip
    Make sure you tell me how things are working now!
     
  7. tytk2

    tytk2 Private E-2

    Re: Help!!!!!!!! Wave on vol keeps turning off; invisible pop up ads; weird sounds& m

    Hello,

    I have done as instructed. I uninstalled
    J2SE Development Kit 5.0 Update 11
    J2SE Runtime Environment 5.0 Update 11
    Java(TM) 6 Update 12
    and i also deleted the files and folders in
    C:\WINDOWS\Temp
    C:\Documents and Settings\student\Local Settings\Temp.
    I ran the C:\MGtools\GetLogs.bat. and i have attached the files. what should i do next? also while i was deleting the files and folders only, this file remained undeleted: Perflib_Perfdata_12f0.dat and _avast5_. Thanks for your time.
     

    Attached Files:

  8. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Re: Help!!!!!!!! Wave on vol keeps turning off; invisible pop up ads; weird sounds& m

    You're welcome. Looks good now.

    If you are not having any other malware problems, it is time to do our final steps:
    1. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    2. If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    3. Go to add/remove programs and uninstall HijackThis.
    4. Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders
      related to MGtools and some other items from our cleaning procedures.
    5. If you are running Win 7, Vista, Windows XP or Windows ME, do the below:
      • Refer to the cleaning procedures pointed to by step 7 of the READ ME
        for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.
      • Then reboot and Enable System Restore to create a new clean Restore Point.
    6. After doing the above, you should work thru the below link:
     
  9. tytk2

    tytk2 Private E-2

    Re: Help!!!!!!!! Wave on vol keeps turning off; invisible pop up ads; weird sounds& m

    Hi,

    Thank you so much for your help. My computer is functioning now, without the wave on volume turning off or those weird internet explorer invisible ads. Thank you so much for your help. I have one more little problem that keeps happening, every-time i connect to the internet, i use a modem, everything is connected, but once i open my browser(Mozilla Firefox), and i type in a website, it will automatically go to THE CONNECTION HAS BEEN RESET. I have checked my connections but it is connect. However, once i sign onto AIM messenger or MSN messenger, and then i go back and type a website into Firefox, it will work. What seems to be the problem? And how can i fix this? Thank you so much for your time again!!
     
  10. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Re: Help!!!!!!!! Wave on vol keeps turning off; invisible pop up ads; weird sounds& m

    You're welcome.

    This is something you should post about in the Software Forum; however I just noticed that you have violated the first golden rule of protection and that is NEVER have more than one antivirus program installed. You currently have Avast and McAfee installed. You MUST immediately uninstall one of these and then reboot.


    Also if you keep McAfee, I recommend that you disable Spybot's Teatimer.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds