Pop ups

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by RHT447, Apr 15, 2005.

  1. RHT447

    RHT447 Private E-2

    I need some help from the experts to stop getting pop up adds. This just started recently when one of my kids was online. I don't know what site they visited that may have started this. I have had Adaware and Spybot running and updated before the problem started. I went through the proceedures in the 'read me first' thread, and this really cut down on the pop ups, but I'm still getting some. Everything else seems to be working fine. I'm just not convinced that my system is completely clean yet. Right clicking on one of the annoying pop ups then going to properties brings up this address:

    http://ads.bidclix.com/adserve.php?placement_id=57725&page_url=http://www.paypopup

    Don't know if this tells you anything or not. I would like to download Highjack This and post (attatch) a log file.

    RHT447
     
  2. jarcher

    jarcher I can't handle a title

    check your add/remove programs
    and see if there is anything there that looks like it might be related
    if you find nothing
    and run through this before attaching a log
    NO HIJACK THIS LOG FILES BEFORE READING THIS: HJT Tutorial & LOG File Posting:
    *Note that your HijackThis should be up-to-date (v1.99.1) and MUST be extracted to its own safe folder - C:\Program Files\HijackThis! Please do this!!!*
     
  3. RHT447

    RHT447 Private E-2

    jarcher,

    OK, I check add/remove programs and did not see anything that looked out of place. I ran hijack this and have attached log file. Man, I hope I'm doing this right.
     
  4. RHT447

    RHT447 Private E-2

    Well, it looks like I can't get the file attacment to upload. What do I try next, coach?
     
  5. jarcher

    jarcher I can't handle a title

  6. RHT447

    RHT447 Private E-2

    Yes, I found and tried to use the manage attachments button, but kept getting an upload error messeage at the top of the attatchement screen. Just tried it again, and it seems to be working now. Perhaps the planets are properly aligned now.
     

    Attached Files:

  7. jarcher

    jarcher I can't handle a title

    this is what I think you should do. .

    end process in task manager
    C:\Program Files\Media Access\MediaAccK.exe
    C:\Program Files\Webshots\webshots.scr
    see if they are in add/remove programs


    run hjt and check
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = about:blank
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O4 - HKLM\..\Run: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\Bin\REGIST~1.EXE
    O4 - HKLM\..\RunServices: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\Bin\REGIST~1.EXE
    O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    close all programs and windows(including this one)
    click fix

    and I have no idea what C:\WINDOWS\system32\pkul\lmfv.exe is. .
     
  8. RHT447

    RHT447 Private E-2

    Found Media Access in add/remove programs and un-installed it.

    Found Webshots there also and left it alone as I want to keep it. It was installed long before I started having a problem with popups.

    Ran HJT and checked all recommended except:
    O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe
    as I want to keep webshots. I don't run their program, but I do use some of their wallpaper photos.

    Closed all windows and hit fix. So far, so good. Will wait a day or two and see if popups have gone away, and then post back.

    Thanks for the help.
    RHT447
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds