Jump to content

Search the Community

Showing results for tags 'Adware'.



More search options

  • Search By Tags

    Type tags separated by commas.
  • Search By Author

Content Type


Forums

  • Announcements
    • Malwarebytes News
    • Beta Testing Program
  • Malware Removal Help
    • Windows Malware Removal Help & Support
    • Mac Malware Removal Help & Support
    • Mobile Malware Removal Help & Support
    • Malware Removal Self-Help Guides
  • Malwarebytes for Home Support
    • Malwarebytes 3 Support Forum
    • Malwarebytes for Mac Support Forum
    • Malwarebytes for Android Support Forum
    • Malwarebytes for iOS Support
    • Malwarebytes Browser Guard
    • False Positives
    • Comments and Suggestions
  • Malwarebytes for Business Support
    • Malwarebytes Endpoint Protection
    • Malwarebytes Incident Response (includes Breach Remediation)
    • Malwarebytes Endpoint Security
    • Malwarebytes Business Products Comments and Suggestions
  • Malwarebytes Tools and Other Products
    • Malwarebytes AdwCleaner
    • Malwarebytes Junkware Removal Tool Support
    • Malwarebytes Anti-Rootkit BETA Support
    • Malwarebytes Techbench USB (Legacy)
    • Malwarebytes Secure Backup discontinued
    • Other Tools
    • Malwarebytes Tools Comments and Suggestions
  • General Computer Help and Security Updates
    • BSOD, Crashes, Kernel Debugging
    • General Windows PC Help
  • Research Center
    • Newest Rogue-Ransomware Threats
    • Newest Malware Threats
    • Newest Mobile Threats
    • Newest IP or URL Threats
    • Newest Mac Threats
    • Report Scam Phone Numbers
  • General
    • General Chat
    • Forums Announcements & Feedback

Find results in...

Find results that contain...


Date Created

  • Start

    End


Last Updated

  • Start

    End


Filter by number of...

Joined

  • Start

    End


Group


AIM


MSN


Website URL


ICQ


Yahoo


Jabber


Location


Interests

Found 113 results

  1. I had a topic on this subject that ran from May, 2018 to November, 2018; then it was closed because I was not going to be available for several weeks. The problem is still there: AdwCleaner finds adware, cleans & repairs, restarts; then when Windows 10 Home comes back up, the adware is still there. I have Malwarebytes Premium running every day, but it apparently is not finding it. Today, I also ran Avast boot-time scan, and it did not help. The only thing that seemed to make a difference today was running in safe mode. I ran AdwCleaner a couple of times in safe mode, and it found no threats on the 2nd run. Here is a link to the original topic, and the actions taken then: Here are the registry items that Adware found on one of the occasions today: Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{733EFF95-917E-40F7-949C-7A22DE5D0A86} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{3F74161B-3139-44C1-978F-09A0CCD51C56} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{AF3B9589-F5B3-42C9-8589-5A345219119F} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{CF181CEC-C873-4FF5-BCE9-08CD3BF79811} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{5B5CD0A4-C058-4668-B0C1-0CF10855CBD7} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{348A715D-A143-4D6B-A289-C8756D753C53} I have attached several AdwCleaner logs from today. AdwCleaner[S101].txt AdwCleaner[S100].txt AdwCleaner[S99].txt AdwCleaner[C98].txt AdwCleaner[S98].txt
  2. Hello, I recently downloaded an application from an unreliable source and now I have some kind of malware/adware application on my PC. Filename: 37m7u9aww51.exe [Displays as "promptbooks (32 bit) in Task Manager] File location: C:\ProgramData\Task Protect 2.3\37m7u9aww51.exe Keeps re-opening and duplicating itself secretly, and tries to redirect me to sites such as shoptowin.ru, popandshop.ru etc. Hyper scan with Malwarebytes didn't resolve the issue, neither did a custom scan on the directory shown above. It has also been added to the startup list, but I've disabled it. File location from startup tab in Task Manager: File location from the background tasks in Task Manager:
  3. So a few days ago I got a virus on my computer, but I was able to get rid off most of it with CCleaner and Malwarebytes. I deleted as much of it as I could, but I was unable to get rid of some files (two or three) I could not get rid of these because I was getting the "Access Denied" error every time I attempted to view them. I was reading some other topics on this forum about the "Windows Process Manager" BTC miner (or whatever it is), and I followed the instructions listed in those topics, but I'm unable to proceed. I have done the following so far. Scanned with MBAR. Scanned with FRST. Scanned with AdwCleaner Compiled the logs of said scans into .txt files. Put FRST and the .txt files onto a USB drive. But, I'm stuck/confused at this point. In the post that I was reading, it said to boot into Advanced Recovery Mode which I have never done before; I followed the instructions to boot into the recovery mode, but nothing worked. I tried the Windows Key + X method, and it didn't work, and I tried doing it from PC Settings and it didn't work. It just said "Please wait..." and then restarted my computer into its normal state. This could be my own incompetence or it could be my computer itself, hell, I could be in the recovery mode right now for all I know. Anyways, if anyone wants to help here are the .txt files and some nessicary computer specifications. Windows 8.1 Pro FRST.txt Fixlog.txt system.log mbar-log-2018-12-27 (01-58-39).txt
  4. Hi Team, Hope this finds you well. I am struggling with a virus: ”PUP.Optional.Legacy”. Initially, this virus was showing up in my malware scan. I ran through a few procedures, and now it doesn't. However, it is still showing up in my adware scan. I keep going through "clean & repair," but it does not remove the PUP. I've attached my scan logs for your review. Can you please assist with the next steps?? Kindest, Maurice AdwCleaner[S02].txt Malware scan report.txt FRST.txt Addition.txt
  5. I have ADS X malware installed, and unable to delete it. Each time I search for anything I get several extra responses at the top of the result lists, and a small almost imperceprtible "ADS X" text at the right where I can close that irrelevant results, but still the listing has several bad responses. MALWAREBYTES was unable to remove that ADS X , Malwarebytes is not aware of it existence. REIMAGE CLEANER detects the malware but I don't want to pay them for the removal. Why Malwarebytes is not detecting it but others do? ....
  6. So, repeated scans with Malwarebyte always return adware.ghokswa. Chrome browser indicates its out of date and will not update. Following the trails, Registry entries for Ghokswa, many. So heeding the warnings not to follow instructions in other threads posting here for assistance. Standing by for instructions to proceed. Best Regards NLS100
  7. Hello, My pc apparently has been infected with annoying adware. When I start up my PC, a CMD window flashes, then chrome starts up with an ad page called www.dipladoks.org I ran Malwarebytes, Windows Defender, even in safe mode. I cleaned up my chrome settings, and checked my PC using chrome, yet nothing seems to work
  8. Hi, i need help and i hope that someone here can help me, im currently infested by a virus or malware that keeps on coming back, it never stop it always install itself and it has the capability to 1. read phone status and identity 2. location 3. modify/delete contents 4. find accounts on device 5. download files WITHOUT notification 6.retrieve running app and run at startup 7. draw over other apps 8. read sync settings it looks very dangerous it could steal info from my phone, based on my research those who are infected by this app also receives msgs with links and it seems that the phone itself created that message and sends to itself right now i have no idea on how to remove this problem, also rooting is impossible currently because my phone is not supported on any rooting services and i yes i tried everything, emailed them if they supports rooting my phone and they all say no. i was able to grab a copy of the enginee app in apk format maybe someone is interested on simulating it on an emulator (im doing it right now actually)
  9. My mother recently informed me of invasive pop-ups on her computer, and having had previous experience with Conduit malware, my heart sank :( Sure enough, she somehow downloaded malware, showing up as "Microsoft Office 365 - en-us" from "Microsoft Corporation", "version 16.0.10730.20102". I've run Malwarebytes, HItmanpro, and have Revo uninstaller at the ready, but have not found a site that can tell me how to remove it all, and it's been years since I had Conduit, so my memory's a little fuzzy. The Malwarebytes report is attached below- Please HELP!! malware1.txt
  10. I have a Big Fish game, Mind Snares-Alice's Journey & AdwCleaner states it contains a pup - adware heuristic, I think this is a false positive. Can you double check it? I have excluded it for now. Thanks,
  11. Dear Malwarebytes Forum, I have found a few topics of discussion in this forum which share my same problem. However, it seems the fix needs to be dealt on an individual basis, so I opened this new Topic. In synthesis, I got infected by the PUP.Optional.Legacy adWare. The only program able to detect it seems to be AdwCleaner. However, even after deleting it, it eventually comes back. I downloaded FRST but it is never able to detect the adware. I attach log files for AdwCleaner and FRST. I currently just finished using AdwCleaner to delete the adware. Now both Adwcleaner and FRST cannot detect anything. However, the adware will come up again in a few hours (as it happened many times before) or after a computer restart. May I please ask for your assistance in dealing with this problem? Thank you very much for your assistance. AdwCleaner[S21].txt AdwCleaner[S22].txt FRST.txt Addition.txt
  12. Hey guys, I need help removing what I think is an SvcHost virus. I recently started having adware tabs pop up on my PC and then after searching for solutions found that whenever I opened a Malwarebytes (or similar website) page, my browser would immediately crash. This happens in Chrome, IE, and Tor. I found this thread which seems to be a very similar virus and after reading a few others, I downloaded MalwareBytes, Rkill, adwcleaner, FRST64, tdsskiller, and aswMBR. (I'm typing this on my other PC btw. Downloaded the files on it and emailed them in a .RAR to my desktop.) This lead to me finding a few things: -I restarted my PC and immediately opened the Task manager to find an unnamed task using 50+% of my CPU. If I look at its properties, it says it's Svchost and is located in SysWOW64 where it takes up 44kb. -I can kill this process, but it doesn't stop the virus from opening apps or closing browsers. -I do not have permission to delete the application from SysWOW64. I need "TrustedInstaller" permission, which I know can be a legit Windows thing. -The MB3-setup exe will not run. -If I run Rkill then attempt to run the MB3 exe, it logs the following: -I deleted the INetCache folder which appeared to be empty. Nothing changed. -adwcleaner and FRST64 won't run. -tdsskiller doesn't find anything -I ran aswMBR and my PC blue-screened with the following support info This is where I am currently and I would appreciate any help anyone can give me.
  13. So a few days ago I got a new phone and downloaded an image off of Google images and ever since then adverts and pop-ups would cover up my entire screen, so I went and downloaded malwarebytes in hopes of getting rid of the problem and I've scanned my phone multiple times and it said that there was no malware found and so I decided to come here in search of an answere.
  14. Hi! After a stupid mistake my laptop is infected by some freaky pop-ups and other hijacking shite: I've tried to fix it by myself, but still have these issuues... Any idea how to resolve it? Hanx!
  15. Hello guys & Ladies, I don't know what happening, but in my Android device, there was virus, which spreading very fast. I did Factory reset [hard reset], still, when I turn on my WIFI, he automatically downloading and doesn't notice me, 'til Google play protector notice. Net auto-installing those apps: enginee xprotect Yeelight Citrix Secure Mail etc, etc, can't remember How do I remove them?
  16. hi guys i cant seen to remove this adware from my computer.I deleted both using malwarebyte and Manually but still it pop out each time is scan under memory section can anyone fix it ? i tried restarting still the same.Although i dont have and ad pop out of no where but still hate to see that thing any help will be great thx update: weirdly if i deleted the preference file by my self while chrome running the threat stop appearing however if i relaunch chrome again the problem persist
  17. Hello. I Am Having Some Trouble Getting Rid Of This No Good Adware Pokki Start Menu.When I Downloaded The Pokki Start Menu I Thought It Was SafeWhen I Looked Up Pokki The Google Results Showed How To Delete Pokki Virus I Took Action And Downloaded Adwcleaner It Found It I Scanned 4 Times Then adwcleaner dissappred right out of the blue with out permission I clicked the windows button and I saw Start Menu And I learned the virus was still there I went to task manager no results of pooki I went to files to open up adwcleaner than it closedthere is no more Pooki but the start menu is still there how do I uninstall EVERYTHING by the way pooki is not in the uninstall place. What softwares can I use to get rid of it or anything. P.S. I scanned and adwcleaner detected pooki then deleted than disappeared without consent I did not even notice
  18. BTW its my FIRST TIME here....... I'm having a problem with the proxy server being set to 127.0.0.1 7272 and adware on my browser. I have used malwarebytes adware and still its not fixed so i need help. Addition.txt FRST.txt
  19. Hi all, I noticed some ads opening in new tabs. Per usual when this happens, I ran MalwareBytes and AdwCleaner. This time though, they keep coming back. I've checked to make sure my Google Chrome doesn't have any wonky extensions installed anymore (it did initially, but after I removed it, it hasn't returned). Still, the ads are still there. What now?
  20. My Windows 10 computer was slowed to a crawl with disk usage at 99% to 100%. Removing cookies from adroll.com, adrol.com, s.adrol.com and other versions of (x).adrol.com my disk usage went to 2% and excursions to 80 and 90%. adroll.com is searchable in Google but adrol.com or any version of it is not. Can these sites be classified as malicious?
  21. Hello today i just got a website blocked for adware From: crossout.net IP 185.11.75.50 steamwebhelper.rar
  22. Hi! I just did a scan with AdwCleaner 7,1,1and it found these two objects, what is it and what should i do? # ------------------------------- # Malwarebytes AdwCleaner 7.1.1.0 # ------------------------------- # Build: 04-27-2018 # Database: 2018-04-30.1 # Support: https://www.malwarebytes.com/support # # ------------------------------- # Mode: Scan # ------------------------------- # Start: 05-01-2018 # Duration: 00:00:07 # OS: Windows 7 Professional # Scanned: 40814 # Detected: 2 ***** [ Services ] ***** No malicious services found. ***** [ Folders ] ***** No malicious folders found. ***** [ Files ] ***** No malicious files found. ***** [ DLL ] ***** No malicious DLLs found. ***** [ WMI ] ***** No malicious WMI found. ***** [ Shortcuts ] ***** No malicious shortcuts found. ***** [ Tasks ] ***** PUP.Adware.Heuristic C:\Windows\System32\Tasks\{ECC531EE-A054-4B19-B6A1-1FBC9166C659} ***** [ Registry ] ***** PUP.Adware.Heuristic HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{ECC531EE-A054-4B19-B6A1-1FBC9166C659} ***** [ Chromium (and derivatives) ] ***** No malicious Chromium entries found. ***** [ Chromium URLs ] ***** No malicious Chromium URLs found. ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries found. ***** [ Firefox URLs ] ***** No malicious Firefox URLs found. ########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S03].txt ##########
  23. Hello, So ive been furiously researching and trying to get rid of some malware (Ad by Advertise) i noticed on my Mac and I can't get rid of it. I downloaded malwarebytes and got zero hits at all. downloaded another program Antivirus Zap from app store and it found 3 items, deleted them all, and adware still there. I then noticed that if I opened chrome on a different chrome user account i had no adware at all and i was fine. I tested this further and opened a fresh windows server and downloaded chrome and then signed into my chrome account and WALA got adware. So basically I know for a fact 10/10 that its associated to my google chrome account. I even deleted every none essential chrome extension. The only ones left are from the chrome webstore which I assume to be safe (please correct me if this is an incorrect assumption). Which the exception of weird extensions I don't even know how malware would go about linking to a chrome account like that, and further more I have no clue how to delete or address it. Please help. Any advice would be fantastic. Even as i type this, random words on the page have been turned into adware links.
  24. First off, some background- I started this topic as i have been running into issues over the last few days. It started when a virus embedded in the most recent version of Display Driver Uninstaller (DDU) was downloaded to my Computer (Windows 10 x64- running only Defender and free version of malwarebytes, at this point in time). I tried to move file to desktop- took a minute (hmm). Then decided to Place in my Extra Apps folder (w/ MWB, + couple others). Got locked on transfer screen (hmmmm), Tried to move to Recycle Bin, same thing. went to to file location, finally got it to move into recycle bin (i think that's how it went down?), ran CCleaner... A while later before bed, i opened windows security center, and noticed it said it had detected a threat. Ran scan.... Detected Win32/vigram.a (showing the transfer path i described above)... Removed... Ran multiple full, quick, offline scans immediately after. I then vigram.a i also scanned the desktop folder w/ MWB (no threats found), and then moved MWB out, MWB right then MWB displayed a message for new update available, which allowed me to start the 14 day trial over- which is great!! It's just weird that i never got the message before- honestly, might be nothing, given that i haven't used it in a while. Since then, I have noticed a couple of things (spurattically/randomly)-- Screen kinda will do a flicker/refresh thing when i open some applications (file viewer/MWB/Chrome/etc..) Not always though. It seems slightly slower?? more like random hiccups, and weird screen glitches with my background slides- randomly stuttering btw slides, and once, weird problems with icon images on taskbar glitching out when i hovered over them; etc... Just seems off. I have been hyper vigilant though- so that may be an attribute. ANYWAYS, I now have kaspersky w/ malwarebytes and uBlock origin, and nothing has been detected until today when i decided to try out AdwCleaner, and 17 things were detected... # ------------------------------- # Malwarebytes AdwCleaner 7.1.0.0 # ------------------------------- # Build: 04-12-2018 # Database: 2018-04-22.1 # Support: https://www.malwarebytes.com/support # # ------------------------------- # Mode: Clean # ------------------------------- # Start: 04-23-2018 # Duration: 00:00:03 # OS: Windows 10 Home # Cleaned: 17 # Failed: 0 ***** [ Services ] ***** No malicious services cleaned. ***** [ Folders ] ***** Deleted C:\Users\johnt\AppData\Local\Host App Service Deleted C:\Users\Public\Desktop\..\App Explorer ***** [ Files ] ***** Deleted C:\Windows\System32\Tasks_Migrated\App Explorer ***** [ DLL ] ***** No malicious DLLs cleaned. ***** [ WMI ] ***** No malicious WMI cleaned. ***** [ Shortcuts ] ***** No malicious shortcuts cleaned. ***** [ Tasks ] ***** Deleted C:\Windows\System32\Tasks\App Explorer ***** [ Registry ] ***** Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Host App Service Deleted HKCU\Software\Host App Service Deleted HKLM\Software\Wow6432Node\Classes\AppID\OverlayIcon.DLL Deleted HKLM\SOFTWARE\Classes\AppID\OverlayIcon.DLL Deleted HKLM\Software\Wow6432Node\Classes\TypeLib\{ADF1FA2A-6EAA-4A97-A55F-3C8B92843EF5} Deleted HKLM\Software\Classes\TypeLib\{ADF1FA2A-6EAA-4A97-A55F-3C8B92843EF5} Deleted HKLM\Software\Wow6432Node\Classes\Interface\{7BCA6879-A9F8-47DE-AE05-F5CE7EA3A474} Deleted HKLM\Software\Classes\Interface\{7BCA6879-A9F8-47DE-AE05-F5CE7EA3A474} Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\App Explorer ***** [ Chromium (and derivatives) ] ***** Deleted Amazon Assistant for Chrome ***** [ Chromium URLs ] ***** Deleted Ask Deleted AOL ***** [ Firefox (and derivatives) ] ***** Deleted Amazon Assistant for Firefox ***** [ Firefox URLs ] ***** No malicious Firefox URLs cleaned. ************************* [+] Delete Tracing Keys [+] Reset Winsock ************************* ########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ########## Followed by... # ------------------------------- # Malwarebytes AdwCleaner 7.1.0.0 # ------------------------------- # Build: 04-12-2018 # Database: 2018-04-22.1 # Support: https://www.malwarebytes.com/support # # ------------------------------- # Mode: Clean # ------------------------------- # Start: 04-23-2018 # Duration: 00:00:00 # OS: Windows 10 Home # Cleaned: 0 # Failed: 0 ***** [ Services ] ***** No malicious services cleaned. ***** [ Folders ] ***** No malicious folders cleaned. ***** [ Files ] ***** No malicious files cleaned. ***** [ DLL ] ***** No malicious DLLs cleaned. ***** [ WMI ] ***** No malicious WMI cleaned. ***** [ Shortcuts ] ***** No malicious shortcuts cleaned. ***** [ Tasks ] ***** No malicious tasks cleaned. ***** [ Registry ] ***** No malicious registry entries cleaned. ***** [ Chromium (and derivatives) ] ***** No malicious Chromium entries cleaned. ***** [ Chromium URLs ] ***** No malicious Chromium URLs cleaned. ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries cleaned. ***** [ Firefox URLs ] ***** No malicious Firefox URLs cleaned. ************************* [+] Delete Tracing Keys [+] Reset Winsock ************************* ########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C02].txt ########## Then after opening chrome, later, and came up with 3 more detections (have a feeling these are false positive??).... # ------------------------------- # Malwarebytes AdwCleaner 7.1.0.0 # ------------------------------- # Build: 04-12-2018 # Database: 2018-04-22.1 # Support: https://www.malwarebytes.com/support # # ------------------------------- # Mode: Scan # ------------------------------- # Start: 04-23-2018 # Duration: 00:00:13 # OS: Windows 10 Home # Scanned: 40705 # Detected: 3 ***** [ Services ] ***** No malicious services found. ***** [ Folders ] ***** No malicious folders found. ***** [ Files ] ***** No malicious files found. ***** [ DLL ] ***** No malicious DLLs found. ***** [ WMI ] ***** No malicious WMI found. ***** [ Shortcuts ] ***** No malicious shortcuts found. ***** [ Tasks ] ***** No malicious tasks found. ***** [ Registry ] ***** No malicious registry entries found. ***** [ Chromium (and derivatives) ] ***** PUP.Optional.AmazonBrowserBar Amazon Assistant for Chrome Idk, if my first problem, and this are related at all, but there it is... Resolution: Has this resolved my problems? Am i safe, or what else should i check or do, to make sure? Sorry, about the long post. Any help/input is welcome. Thank you for your time!
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.