Jump to content

Search the Community

Showing results for tags 'adware'.



More search options

  • Search By Tags

    Type tags separated by commas.
  • Search By Author

Content Type


Forums

  • Announcements
    • Malwarebytes News
    • Beta Testing Program
  • Malware Removal Help
    • Windows Malware Removal Help & Support
    • Mac Malware Removal Help & Support
    • Mobile Malware Removal Help & Support
    • Malware Removal Self-Help Guides
  • Malwarebytes for Home Support
    • Malwarebytes 3 Support Forum
    • Malwarebytes for Mac Support Forum
    • Malwarebytes for Android Support Forum
    • Malwarebytes for iOS Support
    • False Positives
    • Comments and Suggestions
  • Malwarebytes for Business Support
    • Malwarebytes Endpoint Protection
    • Malwarebytes Incident Response (includes Breach Remediation)
    • Malwarebytes Endpoint Security
    • Malwarebytes Business Products Comments and Suggestions
  • Malwarebytes Tools and Other Products
    • Malwarebytes AdwCleaner
    • Malwarebytes Junkware Removal Tool Support
    • Malwarebytes Anti-Rootkit BETA Support
    • Malwarebytes Techbench USB (Legacy)
    • Malwarebytes Secure Backup discontinued
    • Other Tools
    • Malwarebytes Tools Comments and Suggestions
  • General Computer Help and Security Updates
    • BSOD, Crashes, Kernel Debugging
    • General Windows PC Help
  • Research Center
    • Newest Rogue-Ransomware Threats
    • Newest Malware Threats
    • Newest Mobile Threats
    • Newest IP or URL Threats
    • Newest Mac Threats
    • Report Scam Phone Numbers
  • General
    • General Chat
    • Forums Announcements & Feedback

Find results in...

Find results that contain...


Date Created

  • Start

    End


Last Updated

  • Start

    End


Filter by number of...

Joined

  • Start

    End


Group


AIM


MSN


Website URL


ICQ


Yahoo


Jabber


Location


Interests

Found 112 results

  1. Hi all - I keep getting the following notification that Chrome is accessing "onlinekey.biz". Happens rather frequently, each time a new page is loaded. Any thoughts? I've had no luck so far uninstalling Chrome extensions & recent programs. How do I get rid of this thing? Thank you for any help! Michael
  2. Hello, recently I noticed I started getting popups whenever chrome was open so I ran MWB and Adwcleaner and neither found anything. But I researched it and it's the www1.ecleneue.com pop up virus. Could someone help me get this off my computer? Thank you!
  3. My problem is that some program is adding ads onto webpages that shouldn't have ads... It also attempt to block this website but can't seem to do it. Addition.txt FRST.txt
  4. Hi, I have identical problems as darkgoogol and MBAR anti-rootkit tool didn't helped at all. When I'm going to any browser I get same notification about saltjs.01bd.ru and I can't log in to google account, go to malware forums and then I go to facebook my account starts to like random korean pages and posts.
  5. I'm having the same issue. I've attached my log files.mbst-grab-results.zip
  6. Sorry for my bad Ebglish but is not my first lenguage i get a lot of this tipes of messages -Dettagli log- Data evento di protezione: 08/07/19 Ora evento di protezione: 18:06 File di log: 5877a1b2-a19a-11e9-88ff-88d7f631dce7.json -Informazioni software- Versione: 3.7.1.2839 Versione componenti: 1.0.586 Aggiorna versione pacchetto: 1.0.11454 Licenza: Trial -Informazioni sistema- SO: Windows 10 (Build 17134.829) CPU: x64 File system: NTFS Utente: System -Dettagli siti web bloccati- Sito web nocivo: 1 , , Bloccato, [-1], [-1],0.0.0 -Dati sito web- Categoria: Adware Dominio: saltjs.01bd.ru Indirizzo IP: 104.27.139.14 Porta: [53193] Tipo: In uscita File: C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe Also i can't access antivirus sites and my google account from my browsers(Chrome, Edge, Internet explorer) i'm writing from another PC Bocause i can't connect to these forums from the infected PC mbst-grab-results.zip
  7. Hi Chris and Maurice! As you may have noticed I am in fact not the original post-er (Chris), but I have a similar if not exact same problem I've got Malwarebytes blocking saltjs.01bd.ru and it seems to have attached itself to Chrome and a gaming program I use called "Parsec" It also appears that I've got something called Mail.ru, I'm not sure if this thing is related but I have tried multiple times to remove it with Malwarebytes As you may have sees, and as I have mentioned before, I believe this is a very similar problem to Chris's, therefor I followed the steps you (Maurice) have posted, so here is the attached log file. -Dezza mbst-grab-results.zip
  8. I used MalwareBytes to remove the viruses that windows defender couldn't for some reason but the website blocked is still popping up.
  9. I've run MalwareByte countless times but my problem hasn't solved. AdwCleaner keeps detecting 2 threats but can't remove them. I've also tried reinstalling chrome many times. Please Help.
  10. I have tried HitmanPro and other scanners i cant think off of the top of my head, I have an antivirus called Webroot which removes some of it but i still get ads promoting sketchy antiviruses and fake norton and macafee popups. This all started when i tried to get a version of Sony Vegas Pro for free. It was a stupid move and now i have new tabs open when i click with an ad. Im hoping someone will help me resolve this im tired of it. I even tried a system restore which didint work. Happens on IE, Crome and Edge and makes my homepage for edge and IE MSN. :(
  11. Malwarebytes keeps blocking an outbound connection to domclickext.xyz, but can't find where the file is coming from after multiple scans. I've uninstalled Chrome and started with a clean install and it's still coming back. I've attached a text log of the protection event. If there is anything else I can provide, please let me know. Thank you in advance. domclick.txt
  12. Hello, I am trying to remove the adware.mailru.batbit and PUP.Optional.linkury. I have run several scans but the virus is still there. How do I permanently remove it. Malwarebytes scan doesn't remove it. How do I do it.
  13. Hello, Recently while using Chrome I've started getting ads in new tabs on website where there shouldn't be any ads. They appear when I double click somewhere on the site or when I click download file from site. I can't really recall why or when this has started to appear but I believe it is when I downloaded some files from a site called "https://dat-games.com/". I might be wrong but the damage has already been done and now I'm receiving ads in new tabs. I've tried almost everything: Malwarebytes 3.7.1, Malwarebytes AdwCleaner 7.3.0, Zemana AntiMalware, CCleaner and HitmanPro 3.8.11 but they didn't do anything after deleting the infected/malicious files to fix the problem I still keep getting random ads in new tabs (I go to the same supposedly ad free website where there shouldn't be any ads and test by double clicking or downloading some .docx files) and the same files keep appearing in malware scan results. I'm open to suggestion of what should I do to fix this occurring problem. (I've also uploaded some result of recent scans from above mentioned programs.) Addition.txt FRST.txt
  14. I can not delete the adware in an key under folder of Chrome in the regestration editor, if I try to delete it is my access denied, if I want to change the owner the access is denied, and if I try it with the help of the registrar registry Manager to delete it, I get the error message ACCESS DENIED I want to delete the key permanently to eliminate the adware finally. The Adware cleaner is scanning the Adware but it can't remove it. I tried many programms but no one helped me, the Adware is still there. the Key Path is named: Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.microsoft.browsercore
  15. I got a virus from supposedly installshield in the syswow64 folder and it suspends antivirus programs and web browsers when trying to search for antivirus also pops up with ads
  16. it added a lot of random files and a fake Ea app (which is the virus) i cant delete them cause it says that its a system file it also deleted some of my system32 files . please help me!
  17. Hello, I was told to post here if my problem still persists. My previous thread is here: My "temporary fix" is always to use "RD /S /Q "%WinDir%\System32\GroupPolicy" " and then "gpupdate /force". The Folder "GroupPolicyUsers" doesnt exist for me. Thats why i´ll upload a zipped copy of this folder while it currently is active. I hope to find a way to get MBAM to remove it completly. Thank you for your time GroupPolicy.rar
  18. ✌️✌️😋Hey guys, im new in the forum and with Malwarebytes.👋👋 😞Just finished a scan and i got a few threats,😤 im looking to know the best course of action, and if i have to worry about the results. 😅In the TXT you will find my first scan, i already put them in quarentine, i should delete them? 🤔 Thanks in advance! 1.txt
  19. Some time ago my Firefox browser was infected by anonymous adware extension without name (as shown in the provided pictures), It even doesnt have a remove button, this extension put advertisment in the search results under the prtener name: "ads by adpartener.asia", I used Adwcleaner but it didnt find the root, I ran Malwarebytes and it found it's source as a registery value as shown in the pictures, I delete it by Malwarebytes but it still comes back after sometime, I don't have any suspicious program to think that this is the installer, so how can I remove it ?
  20. It seems like i caught a very nasty adware virus that always reinstalls itself after some time. Adwcleaner, RKill and Malwarebytes didnt help so far and im out of options, ill attach a screenshot of the Scan from Malwarebytes.
  21. Hello, I recently downloaded an application from an unreliable source and now I have some kind of malware/adware application on my PC. Filename: 37m7u9aww51.exe [Displays as "promptbooks (32 bit) in Task Manager] File location: C:\ProgramData\Task Protect 2.3\37m7u9aww51.exe Keeps re-opening and duplicating itself secretly, and tries to redirect me to sites such as shoptowin.ru, popandshop.ru etc. Hyper scan with Malwarebytes didn't resolve the issue, neither did a custom scan on the directory shown above. It has also been added to the startup list, but I've disabled it. File location from startup tab in Task Manager: File location from the background tasks in Task Manager:
  22. I got the Mail.ru adware virus recently, and Malwarebytes free removed 166 files related to it. However, it failed to remove the Mail.ru updater, which ran every time I started my computer. It was in the local appdata folder, and I deleted it manually and it hasn't run since. How can I be sure that the virus isn't also hiding other places and that Malwarebytes actually removed it completely?
  23. I had a topic on this subject that ran from May, 2018 to November, 2018; then it was closed because I was not going to be available for several weeks. The problem is still there: AdwCleaner finds adware, cleans & repairs, restarts; then when Windows 10 Home comes back up, the adware is still there. I have Malwarebytes Premium running every day, but it apparently is not finding it. Today, I also ran Avast boot-time scan, and it did not help. The only thing that seemed to make a difference today was running in safe mode. I ran AdwCleaner a couple of times in safe mode, and it found no threats on the 2nd run. Here is a link to the original topic, and the actions taken then: Here are the registry items that Adware found on one of the occasions today: Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{733EFF95-917E-40F7-949C-7A22DE5D0A86} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{3F74161B-3139-44C1-978F-09A0CCD51C56} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{AF3B9589-F5B3-42C9-8589-5A345219119F} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{CF181CEC-C873-4FF5-BCE9-08CD3BF79811} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{5B5CD0A4-C058-4668-B0C1-0CF10855CBD7} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{348A715D-A143-4D6B-A289-C8756D753C53} I have attached several AdwCleaner logs from today. AdwCleaner[S101].txt AdwCleaner[S100].txt AdwCleaner[S99].txt AdwCleaner[C98].txt AdwCleaner[S98].txt
  24. So a few days ago I got a virus on my computer, but I was able to get rid off most of it with CCleaner and Malwarebytes. I deleted as much of it as I could, but I was unable to get rid of some files (two or three) I could not get rid of these because I was getting the "Access Denied" error every time I attempted to view them. I was reading some other topics on this forum about the "Windows Process Manager" BTC miner (or whatever it is), and I followed the instructions listed in those topics, but I'm unable to proceed. I have done the following so far. Scanned with MBAR. Scanned with FRST. Scanned with AdwCleaner Compiled the logs of said scans into .txt files. Put FRST and the .txt files onto a USB drive. But, I'm stuck/confused at this point. In the post that I was reading, it said to boot into Advanced Recovery Mode which I have never done before; I followed the instructions to boot into the recovery mode, but nothing worked. I tried the Windows Key + X method, and it didn't work, and I tried doing it from PC Settings and it didn't work. It just said "Please wait..." and then restarted my computer into its normal state. This could be my own incompetence or it could be my computer itself, hell, I could be in the recovery mode right now for all I know. Anyways, if anyone wants to help here are the .txt files and some nessicary computer specifications. Windows 8.1 Pro FRST.txt Fixlog.txt system.log mbar-log-2018-12-27 (01-58-39).txt
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.