adclicker detected

tm711 · Sep 26, 2008

My computer seems fine, but there have been a few strange occurences lately. 1) A few weeks ago the yellow shield "downloading updates" began to be permanently in the start up bar....it always reads 0%......this was after I ran Combofix so I asumed it was glitch leftover from Combofix. 2) My firewall says192.0.0.10 is asking to access my computer many times. Why is my computer asking for permission to talk to itself? 3) CA anti-virus detected adclicker. It deleted somethings but not all............the strange thing is it said that mbam setup.exe and iso-buster_all_lang.exe were infected. This seems odd as they are innocent programs. I figured it was false positive. But thinking it over I decided that I should go through all the steps in Read Me First. I have done so and the logs are attached. Incidentally, I downloaded and used a new version of Mbam. I am curently detecting no odd behaviour from my computer.

tm711 · Sep 26, 2008

Here is the MGTools logs.

TimW · Sep 27, 2008

You did not attach the logs from ComboFix, SAS or MWB's.....but going on your MGLogs... your system is clean.

The other issues should be addressed in the software section.

As to the 192.0.0.10 ---> this would probably be something you need to check by doing an ipconfig and tracking down what this is. Your local ip should be some thing like 192.168.x.x

If you are not having any other malware problems, it is time to do our final steps:

We recommed you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no protection. They do not use any significan amount of resources ( except a little disk space ) until you run a scan.

If we used Pocket Killbox during your cleanup, do the below

* Run Pocket Killbox and select File, Cleanup, Delete All Backups

If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)

Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required

"%userprofile%\Desktop\combofix" /u

Notes: The space between the combofix" and the /u, it must be there.

This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.

Delete the C:\combo-fix folder from combofix.

If we had you run Avenger, you can delete all files related to Avenger now.

If we had you run RenV.exe, you can delete it and the Log.txt file on your Desktop.

Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.

If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.

If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.

Go to add/remove programs and uninstall HijackThis.

You can delete the C:\MGtools folder and the C:\MGtools.exe file. You can also delete the C:\MGlogs.zip

If you are running Vista, Windows XP or Windows ME, do the below:

Refer to the cleaning steps in the READ ME for your Window version and see the steps to Disable System Restore which will flush your Restore Points.

Then reboot and Enable System Restore to create a new clean Restore Point.

After doing the above, you should work thru the below link:

How to Protect yourself from malware!

Click to expand...

tm711 · Sep 27, 2008

Tim: thanks.

tm711 · Sep 27, 2008

Sorry, I hit the post button too quickly before. Here are my other logs. I don't know why they did not post before.

TimW · Sep 27, 2008

Not a problem...they are clean .....

Log in or Sign up

adclicker detected

tm711 Corporal

tm711 Corporal

Attached Files:

MGlogs.zip

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

tm711 Corporal

tm711 Corporal

Attached Files:

log.txt

mbam-log-2008-09-26 (17-50-29).txt

SUPERAntiSpyware Scan Log - 09-26-2008 - 14-22-14.log

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member