MajorGeeks Support Forums

Go Back   MajorGeeks Support Forums > ----------= PC, Desktop and Laptop Support =---------- > Malware Removal
Register FAQ Members List Calendar Casino Mark Forums Read

Malware Removal Malware removal forum. Please see the READ ME FIRST thread before you post. Forum is staffed by a small number of volunteers, please be patient.


Reply
 
Thread Tools Display Modes
  #1  
Old 01-05-13, 15:29
epelser epelser is offline
Private E-2
 
Join Date: Feb 2007
Posts: 3
Thanks: 0
Thanked 0 Times in 0 Posts
Default Cannot Remove ""Click to Continue > by Browse to Save"

It seems that on websites random words are being highlighted to appear as links. But I am going to sites now that do not do this. When I hover over link it shows some type of ad and in another popup always says "Click to Continue > by Browse to Save". I have tried everything and cant get rid of this. Here are my logs and will do a second post of screen shot of what I am encountering.
Attached Files
File Type: txt RKreport[1]_S_01052013_02d1145.txt (2.5 KB, 2 views)
File Type: log HitmanPro_20130105_1159.log (1.4 KB, 2 views)
File Type: zip MGlogs.zip (157.2 KB, 5 views)
File Type: txt TDSSKiller.2.8.15.0_05.01.2013_11.48.01_log.txt (144.4 KB, 3 views)
File Type: txt mbam-log-2013-01-04 (18-25-29).txt (1.9 KB, 3 views)
Reply With Quote
Sponsored links
  #2  
Old 01-05-13, 15:32
epelser epelser is offline
Private E-2
 
Join Date: Feb 2007
Posts: 3
Thanks: 0
Thanked 0 Times in 0 Posts
Default Re: Cannot Remove ""Click to Continue > by Browse to Save"

(Part 2) Screen Shot Attachments.
Attached Files
File Type: zip ScreenShots.zip (602.5 KB, 4 views)
Reply With Quote
  #3  
Old 01-05-13, 21:35
chaslang's Avatar
chaslang chaslang is offline
MajorGeeks Admin - Master Malware Expert
 
Join Date: Feb 2004
Location: Northern New Jersey USA
Posts: 80,612
Thanks: 62
Thanked 7,753 Times in 4,193 Posts
Default Re: Cannot Remove ""Click to Continue > by Browse to Save"

Welcome to Major Geeks!
Quote:
Originally Posted by epelser View Post
It seems that on websites random words are being highlighted to appear as links.
This is may not be malware and it may not a problem. It is referred by several names. One is http://en.wikipedia.org/wiki/Contextual_advertising

This is a way in which many websites make some money inorder to afford to run the website. Many websites do this. One of the earlier companies that started this idea was Vibrant Media. By now, there are many of them.

However after to checking your snapshot, I don't see these contectual advertising words being highlighted on that sight. So let's check some more.

What is the below that I see in your logs?
C:\Windows\agent_x64.exe

What browser are you using when this happens? I assume you used Chrome based on your logs. Please shutdown Chrome completely and try Internet Explorer. Does it happen with Internet Explorer?

Did you have a problem running MGtools? Your logs are very incomplete. Did you make the MGlogs.zip file yourself or did you really attach the one from C:\MGlogs.zip or from your Desktop?
__________________
"There are 10 types of people in this world. Those who understand binary and those who don't."


Support Majorgeeks on Facebook:

Majorgeeks Newsletter

Last edited by chaslang; 01-05-13 at 21:49..
Reply With Quote
  #4  
Old 01-06-13, 20:39
epelser epelser is offline
Private E-2
 
Join Date: Feb 2007
Posts: 3
Thanks: 0
Thanked 0 Times in 0 Posts
Default Re: Cannot Remove ""Click to Continue > by Browse to Save"

I do not know what the C:\Windows\agent_x64.exe is. Based on the date stamps that has been on the computer since I bought it. I had no issues with the MGtools those were the files fro. C:\MGlogs.zip.

Seems that this was only happening in Chrome, which is what I was using, but not in IE or Firefox. Decided to go back and went through the Chrome Extensions and the culprit for these contextual ads was an extension called Zoomex that I have no idea what it was for. Removed it and all is well now. Thank you very much for your assistance.
Reply With Quote
  #5  
Old 01-06-13, 23:21
chaslang's Avatar
chaslang chaslang is offline
MajorGeeks Admin - Master Malware Expert
 
Join Date: Feb 2004
Location: Northern New Jersey USA
Posts: 80,612
Thanks: 62
Thanked 7,753 Times in 4,193 Posts
Default Re: Cannot Remove ""Click to Continue > by Browse to Save"

You're welcome. Glad to hear you found the problem.


If you are not having any other malware problems, it is time to do our final steps:
  1. We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware.
  2. Go back to step 4 oof the READ ME and renable your Disk Emulation software with Defogger if you had disabled it.
  3. Go to add/remove programs and uninstall HijackThis. If you don't see it or it will not uninstall, don't worry about it. Just move on to the next step.
  4. If running Vista or Win 7, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
  5. Goto the C:\MGtools folder and find the MGclean.bat file. Double click ( if running Vista, Win7, or Win 8 Right Click and Run As Administrator ) on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.
  6. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
  7. After doing the above, you should work thru the below link:
__________________
"There are 10 types of people in this world. Those who understand binary and those who don't."


Support Majorgeeks on Facebook:

Majorgeeks Newsletter
Reply With Quote
Sponsored links
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
No "Buttons" to "Save" or "Cancel" in Dialog Boxes WIN7 grc123 Software 5 04-26-13 21:12
VBS: Make IE7 "Run" An Exe Automatically Instead of Asking for "Run" or "Save". Heaney Software 2 09-29-11 02:52
Remove Items From "Open With" > "Recommend Programs" List rayzur Software 5 06-27-09 02:25
"My Computer", "send to:", "save in:" Functions slow or freeze computer TonyR825 Software 6 07-19-08 12:05


All times are GMT -5. The time now is 01:39.

MajorGeeks.Com Menu

MajorGeeks.Com \ All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ NEW! PC Games \ System Tools \ Macintosh \ Demonews.Com \ Top Downloads

MajorGeeks.Com \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds


All content Copyright MajorGeeks.com source code Powered by vBulletin® Version 3.8.4
Copyright © 2009 vBulletin Solutions, Inc. All rights reserved.
Ad Management by RedTyger