Lots of Ads

Discussion in 'Malware Help (A Specialist Will Reply)' started by mpizzo10, Sep 15, 2013.

  1. mpizzo10

    mpizzo10 Private E-2

    Hello,

    I am having an issue with my web browsing and advertisements. Every time I do google search, 5 or so ads pop up as links for the search result. Most websites I access have atypical ads on the top (which say "Ad not supported by the site). The Read and Run me did not fix the problem.

    Thank you for your help.
     

    Attached Files:

  2. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Are you deliberately set up to use a proxy? If not please include this line in the RogueKiller fix:
    (Fix is a little further down)




    http://img805.imageshack.us/img805/9659/rktigzy.gif Fix items using RogueKiller.

    Double-click RogueKiller.exe to run. (Vista/7 right-click and select Run as Administrator)
    When it opens, press the Scan button
    Now click the Registry tab and locate these 3 detections:

    • [PROXY IE] HKCU\[...]\Internet Settings : ProxyServer (hxxp=proxy.nycboe.org:80;hxxps=proxy.nycboe.org:80;ftp=proxy.nycboe.org:80) -> FOUND
    Place a checkmark next to this item, leave the others unchecked.

    Now press the Delete button.

    ...and the same for items on the file/folder tab:

    • [ZeroAccess][File] @ : C:\Windows\Installer\{dbcaa52c-e526-45d0-2df8-41b4d6fcb8cf}\@ [-] --> FOUND
    • [ZeroAccess][Folder] U : C:\Windows\Installer\{dbcaa52c-e526-45d0-2df8-41b4d6fcb8cf}\U [-] --> FOUND
    • [ZeroAccess][Folder] L : C:\Windows\Installer\{dbcaa52c-e526-45d0-2df8-41b4d6fcb8cf}\L [-] --> FOUND

    When it is finished, there will be a log on your desktop called: RKreport[2].txt
    Attach RKreport[2].txt to your next message. (How to attach)
    Reboot the machine.



    Please re run Hitman and have it delete Malware remnants and Potential unwanted programs.

    Re run RK again (just a scan) and attach log.

    How are things running now?
     
  3. mpizzo10

    mpizzo10 Private E-2

    Ok. I'm sorry, but I may have screwed up your directions. I did not intentionally do this.

    I should have asked, but I thought Rogue Killer would only delete (when i hit delete) entries in the specific tab I was in. I need to go through a proxy while at work, so I didn't intend to remove anything in the Registry tab.

    Again, I apologize for possibly making your job more difficult. I am still encountering the same ad problems.
     

    Attached Files:

  4. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Rescan with RK again (just a scan) and attach log.
     
  5. mpizzo10

    mpizzo10 Private E-2

    Here is the RK log
     

    Attached Files:

  6. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Which browser does this occur in please?

    http://imageshack.us/a/img841/7292/thisisujrt.gif Please download Junkware Removal Tool to your desktop.
    • Shut down your protection software now to avoid potential conflicts.
    • Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.
    • The tool will open and start scanning your system.
    • Please be patient as this can take a while to complete depending on your system's specifications.
    • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
    • Attach JRT.txt to your next message.
     
  7. mpizzo10

    mpizzo10 Private E-2

    I use Firefox.

    Here is a log. Thank you for all your help so far.
     

    Attached Files:

  8. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Any change after running JRT?
     
  9. mpizzo10

    mpizzo10 Private E-2

    No. Same issues.

    Sorry for the long turnover in responding. I am in the middle of getting acclimated to a new job and am swamped with work. Thank you again for your time.
     
  10. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    We are going to be uninstalling your old version of FireFox (except when we uninstall we will use Revo uninstaller) and installing the new version. So do the below to save bookmarks:

    • Run FireFox and click Bookmarks.
    • Then select Organize Bootmarks.
    • Then on the next window click File and then select Export. Save the bookmarks.html file to your Desktop for later use in importing.
    Now download and save the installer for the current version of FireFox but DO NOT install it yet. Get it here: Mozilla FireFox

    You will need exit FireFox now and use Internet Explorer to continue with the below until we reinstall FireFox.

    Start by uninstalling FireFox and then reboot. Do not skip the reboot.
    After reboot, delete the below folders:
    • C:\Program Files (x86)\Mozilla Firefox
    • C:\users\UserAccount\AppData\Roaming\Mozilla\Firefox

    where UserAccount is the actual user account name being used.

    Now reinstall FireFox from the file previously downloaded.
    Import your bookmarks file. (similar process to exporting).



    Any better?
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds