Annoying Pop Ups and Links within web pages using Internet Explorer

Discussion in 'Malware Help (A Specialist Will Reply)' started by stratman88uk, May 19, 2013.

  1. stratman88uk

    stratman88uk Private E-2

    Hi Geeks,

    I have annoying pop ups happening in Internet Explorer. Any website I visit such as eBay has highlighted text links on the page where they shouldn't be. If you hover over these links a further pop up appears.

    I don't think it is happening in Firefox and I have run CC Cleaner, cleared Java cache, deleted temporary internet files along with browsing history.

    Attached are the log files for your suggested programs.

    Please can you see if you can find anything,

    Thanks
     

    Attached Files:

  2. stratman88uk

    stratman88uk Private E-2

    Add:
    The pop ups are happening with Explorer and Firefox as well as the links on web pages.
     
  3. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Major Geeks!
    Many times these are normal advertisement popups from things like AdSense or IntelliTxt (aka Vibrant Media - see http://en.wikipedia.org/wiki/IntelliTXT ) which are a form by which websites recover some of the costs of operation. They underline keywords on webpages and when you hover over them, an advertisement will appear. Is this what you are referring too.

    I see a lot of services and process related to Splashtop Connect on your PC. Is this something you knowingly installed?

    Also I see a bunch of keygens and illegal software (like Adobe ). This is very common way to get infections.

    Uninstall the below and reboot:

    ContinueToSave 1.74
    cOntionuettosave



    Now please download Junkware Removal Tool to your desktop.
    • Shut down your protection software now to avoid potential conflicts.
    • Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.
    • The tool will open and start scanning your system.
    • Note: That JRT may reset your home page to a google default so you will need to restore your home page setting if this happens.
    • Please be patient as this can take a while to complete depending on your system's specifications.
    • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
    • Attach JRT.txt to your next message.

    Do you still have problems?
     
  4. stratman88uk

    stratman88uk Private E-2

    Hi Chaslang,

    Many thanks for answering my plea for help.
    In answer to your post :-
    1. I do not remember ever installing Splashtop so I took it upon myself to remove it.
    2. Apologies for the keygens etc... They are mainly music effects plugins that I like to try in full first as they cost an arm and a leg for a struggling musician.
    3. Uninstalled ContinueToSave and cOntionuettosave.
    4. Have run Junkware Removal Tool and log is attached.

    I restarted the computer and visited several pages I was having the problem of links on and all appears to be working fine now with no links in pages and no annoying pop ups.

    Thank you very much for your help, it is very much appreciated :)
     

    Attached Files:

    • JRT.txt
      File size:
      2.8 KB
      Views:
      2
  5. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome.
    Great news! But since you uninstalled Splashtop Connect, let's make sure all of it went away since it had a lot running.


    Now run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista or Win7, don't double click, use right click and select Run As Administrator).

    Then attach the below logs:
    • the C:\_OTM\MovedFiles log
    • C:\MGlogs.zip
     
  6. stratman88uk

    stratman88uk Private E-2

    Hi,

    I have run C:\MGtools\GetLogs.bat and have attached the requested C:\MGlogs.zip.

    I have looked everywhere for the other file you asked for, the C:\_OTM\MovedFiles log, but cannot find it.
     

    Attached Files:

  7. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Sorry that was a typo. That line was supposed to be removed. I did not have you run OTM. ;)

    Your logs are good now.



    If you are not having any other malware problems, it is time to do our final steps:
    1. We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware.
    2. Go back to step 4 oof the READ ME and renable your Disk Emulation software with Defogger if you had disabled it.
    3. Go to add/remove programs and uninstall HijackThis. If you don't see it or it will not uninstall, don't worry about it. Just move on to the next step.
    4. If running Vista or Win 7, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    5. Goto the C:\MGtools folder and find the MGclean.bat file. Double click ( if running Vista, Win7, or Win 8 Right Click and Run As Administrator ) on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.
    6. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    7. If you are running Win 7, Vista, Windows XP or Windows ME, do the below:
      • Refer to the cleaning procedures pointed to by step 6 of the READ ME
        for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.
      • Then reboot and Enable System Restore to create a new clean Restore Point.
    8. After doing the above, you should work thru the below link:
     
  8. stratman88uk

    stratman88uk Private E-2

    Hi Chaslang,

    I have completed the steps you have mentioned and finished with turning off system restore, rebooting and then turning system restore back on and creating a fresh restore point.

    Once again, huge thanks to you for the work you put in on these forums and for helping me to have a clean computer again.

    Have an extremely wonderful day, evening, week, year, etc... :) :wave
     
  9. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome and thanks. Surf safely!
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds