Need help removing adssite

Discussion in 'Malware Help (A Specialist Will Reply)' started by siobhan78, Dec 9, 2007.

  1. siobhan78

    siobhan78 Private E-2

    The other day I downloaded something and got adssite and something called rightonadz. Both create IE popups even when I'm on firefox. I use adaware and spybot for spyware problems. Spybot can find the adssite stuff but when I select fix selected problems, it deletes it but two seconds later it's back on my computer. I've tried booting my computer in safemode and trying that but spybot can't find it in safemode. Not sure what else I can do :(

    I downloaded the hijackthis program on this site and here is the log file:

    • Edit by bjgarrick: Inline HJT log removed. READ & RUN ME sticky not followed.
     
    Last edited by a moderator: Dec 9, 2007
  2. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

  3. siobhan78

    siobhan78 Private E-2

    Sorry about that. I went and downloaded the recommended programs. Combofix and MGtools don't work on my system. MGtools because I have a 64bit proc and I don't know why combofix doesn't work.
     
  4. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

  5. siobhan78

    siobhan78 Private E-2

    Show New wouldn't work, but RunKey did. I attached the log.

    Thanks for your help :)
     

    Attached Files:

  6. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    What does ShowNew do when you try to run it? Any errors?
     
  7. siobhan78

    siobhan78 Private E-2

    Yes. I'm at work now so I'm going by memory but it was the 64-bit error. I believe it said that it was incompatible with my 64-bit copy of Windows.
     
  8. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    For now, can you run AVG AntiSpyware and attach a log? Also, I need a HJT log. I am not familiar with x64 bit systems so I'm not 100% sure what is compat. and what is not.
     
  9. siobhan78

    siobhan78 Private E-2

    Attached are the two logs.
     

    Attached Files:

  10. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    If possible, let's relocate and rename HJT. Relocate it to C:\Program Files\HJT and rename it to "analyzethis.exe" and then attach a fresh log.
     
  11. siobhan78

    siobhan78 Private E-2

    Sorry I'm not very computer savvy :( Do you want me to reinstall the program to my c drive instead of my f drive?
     
  12. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Yes! If "F" is your primary partition where Windows is installed to.

    Also, see this thread: SUPERAntiSpyware - running & getting a log
     
  13. siobhan78

    siobhan78 Private E-2

    Sorry haven't had a chance to reply yet. I'm having problems with Firefox now and the browser keeps closing. Anyway, attached is the log for Super Anti-Spy.

    Thanks again for all your help!
     

    Attached Files:

  14. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    I am not 100% sure about the compatability of Killbox and x64 systems. Try the below steps, if Killbox will NOT run then manually locate and delete the files I request be removed by Killbox.

    Download Pocket KillBox
    • Save it to your desktop or a place easy to find.
    • Do not run it yet
    Now have HJT fix the below entries...

    Next, manually locate and delete the folder below...

    C:\PROGRAM FILES (X86)\ADSSITE ADVANCED TOOLBAR

    Next, you will be entering items into Pocket KillBox. Please select the “Delete on Reboot” Option. Copy&Paste each of the file names listed below into the box one by one, making sure Delete on Reboot is Checked for each entry. Click the Red X for each entry, but DO NOT Allow your machine to be rebooted until the last item has been entered:

    ** Note: For any of the .dll files, check the Unregister .dll Before Deleting box as well. If this option is not enabled, don't worry about it.

    • If you get an error message about Pending Operations, just reboot your computer manually.
    Finally, run CCleaner to clean up cookies and temp files.

    Once you complete this post, reboot once more and attach a fresh HJT log.
     
  15. siobhan78

    siobhan78 Private E-2

    Killbox did work on my system. Attached is the new HJT log
     

    Attached Files:

  16. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Have HJT fix the below entry....

    Are you having any current problems?
     
  17. siobhan78

    siobhan78 Private E-2

    I deleted the file you listed. The random popups have stopped but I'm having another problem now. Certain sites cause firefox to shutdown. It's completely random as well. One of the sites is actually this one. I can access the forums but if I try and reply, firefox crashes. Also, on some occasions when a site is loading it will stop in the middle of the page load and freeze. I can close the window, but everytime this happens and I try to restart firefox I get an error message saying that firefox is already running even though I don't have a browser open.

    Should I try just reinstalling firefox?
     
  18. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    I would uninstall and reinstall the most current version. If that does not fix your issue then I recommend the Software Forum.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds