Jump to content

Search the Community

Showing results for tags 'adware'.



More search options

  • Search By Tags

    Type tags separated by commas.
  • Search By Author

Content Type


Forums

  • Announcements
    • Malwarebytes News
    • Beta Testing Program
  • Malware Removal Help
    • Windows Malware Removal Help & Support
    • Mac Malware Removal Help & Support
    • Mobile Malware Removal Help & Support
    • Malware Removal Self-Help Guides
  • Malwarebytes for Home Support
    • Malwarebytes 3 Support Forum
    • Malwarebytes for Mac Support Forum
    • Malwarebytes for Android Support Forum
    • Malwarebytes for iOS Support
    • Malwarebytes Browser Guard
    • False Positives
    • Comments and Suggestions
  • Malwarebytes for Business Support
    • Malwarebytes Endpoint Protection
    • Malwarebytes Incident Response (includes Breach Remediation)
    • Malwarebytes Endpoint Security
    • Malwarebytes Business Products Comments and Suggestions
  • Malwarebytes Tools and Other Products
    • Malwarebytes AdwCleaner
    • Malwarebytes Junkware Removal Tool Support
    • Malwarebytes Anti-Rootkit BETA Support
    • Malwarebytes Techbench USB (Legacy)
    • Malwarebytes Secure Backup discontinued
    • Other Tools
    • Malwarebytes Tools Comments and Suggestions
  • General Computer Help and Security Updates
    • BSOD, Crashes, Kernel Debugging
    • General Windows PC Help
  • Research Center
    • Newest Rogue-Ransomware Threats
    • Newest Malware Threats
    • Newest Mobile Threats
    • Newest IP or URL Threats
    • Newest Mac Threats
    • Report Scam Phone Numbers
  • General
    • General Chat
    • Forums Announcements & Feedback

Find results in...

Find results that contain...


Date Created

  • Start

    End


Last Updated

  • Start

    End


Filter by number of...

Joined

  • Start

    End


Group


AIM


MSN


Website URL


ICQ


Yahoo


Jabber


Location


Interests

Found 108 results

  1. A few days ago I restarted my computer before a long time without re-starting it (like 1 week with the pc on) and I noticed that "Explorer.exe" was requesting to initialize, but the real explorer.exe task was already running... I said no but then I checked the directory of the file and the system said that the file was on %windir%/resources/themes, well going into folder to check if the file exists I noticed that theres nothing more than aero themes in this folder. So did a scan in the folder using malwarebytes and it recognized svchost.exe malware and explorer.exe, before adding they do quarentine I wanted to check why the files didnt apeared, so I enabled "show hidden folders" in explorer (the real one, from microsoft) and it changed nothing, well, so I tried to open the archive by going with %windir%/resources/themes/explorer.exe in the explorer path, it worked, but I still uncapable of seeing this file... So I started CMD as admin and did " cd " to %windir%/resources/themes and did " dir " inside the folder, as I expected the dir shows the same as explorer, but appeared 2 new items that the was named as " . " and " .. " I deleted both sucessfully. Searching for this in internet I found that there's an other way to hide files in windows, that was adding them to" important system files or protected system files" list, and following the instructions to disable this privilege, I finally could see the archives, well, I added them to the quarentine list and continued using my computer since yesterday that I realized that everytime malwarebytes send two addwares to quarentine (I left the results of scan in the post as "Annoying addware.txt") they come back right after I finish the task... When trying to solve these issues I realized many things... 1- I cant use commands as DISM, sfc /scannow, windows update, windows defender( I will let write happens when i try to use them bellow this part) , net start/stop wuauserv (the wuauserv service doesnt even exists in registry, I didnt checked windows defender one...) 2- there was a folder called QEMU hidden with the "important system files" method, I deleted all content Inside and then deleted the folder after taking out the folder privilegies 3- Theres two "program" files in "Inicialize" section of task manager wich I cant go to proprieties ( I dropped the print down on anexed files named as "Program" unknow files) When I try to use with /checkhealth everything go fine, but when I try to use dism with /restorehealth it stops at 87,5% and gives an error 1060 messages saying " the specified service does not exist as an installed service " ( I left the DISM log file right bellow named as DISM.txt ) When I try to use sfc /scannow it says that cannot fix all issues When i try to use windows update it says that my organizations disable windows updates ( ? ) When I try windows defender it just goes black screen on the window Well, it would be great if someone could help me, I dont really want to re-install windows... I would take a month to setup my pc again Also, I run Windows 10 Pro 64bits, version 1809... dism.log Annoying Adware.txt Rkill.txt FRST.txt Addition.txt
  2. Hey there, on my Android phone, I've been having weird redirects to unsafe looking ("Congratulations!") sites in it's browser recently (since at the very least August 2nd). They seem to happen very infrequently, which caused me to be kind of lazy in trying to fix it. I usually browsed what I'm assuming are safe websites (can provide examples of them and the unsafe sites, not sure if I can just post those links) as the redirects occur. I tried running some anti virus scanners (including Malwarebytes, see "Screenshot_20190827-155852-edited.png" e.g.). Only Trend Micro's "Mobile Security & Antivirus" actually found something, a .crdownload file, which I removed from the phone, but am keeping on my main PC. A virustotal scan of that file. Since removing it though, the redirects still happened. I cleared my Chrome's history and cache a few minutes ago, and can report back if that changed anything (as I said, the redirects are rather infrequent). Aside from this, I have also had strange calendar entries in my Google account, similar to this. Examples of what this looks like on my end are in the attachments. The Google support post recommends setting "Automatically add invitations" to No. Doing this stops them from showing up, however I have been unable to find any emails in my inboxes that could have caused them. I searched my mails by those event titles, email address "gserviceaccount" and "(filename:ics OR filename:vcs)" for example. I'm unsure whether these two issues are related or not. Some version numbers on my phone, in case they're helpful: Android: 7.0 (I have a Huawei Honor 6X, so afaik this is the most recent Android version for it) EMUI: 5.0.3 Chrome: 76.0.3809.111 Calendar: 6.0.44-261313226-release If I could get any help with this, I'd appreciate it.
  3. I have unwanted pups and pums, and I want to remove them without damaging anything. How? I came here first before doing anything a.txt
  4. Long story, bear with me. I had 4 pieces of adware on this machine when I had finished the first scan with 7.0.1.0 . I kept getting 'hung' during the cleaning process. After 45 minutes of waiting I decided to kill the program and try again. And again, and again, and again no no avail. Before each scan before detection I would receive this message, (which I am still receiving). I downloaded the new build only to run into the exact same error as before. I thought the issue was fixed when i was prompted to restart my machine, (with version 7.0.1.0) when the scan had finished. However, there were no detections upon the reboot. It did find some of the adware and destroy it, as there are only two entries now, it just feels a bit weird. Again, I am still hanging on 'cleaning' right before the unhandled popup and I am running the latest build of adwcleaner. Attaching the txt file below. (Current.) AdwCleaner[S58].txt
  5. Hi all - I keep getting the following notification that Chrome is accessing "onlinekey.biz". Happens rather frequently, each time a new page is loaded. Any thoughts? I've had no luck so far uninstalling Chrome extensions & recent programs. How do I get rid of this thing? Thank you for any help! Michael
  6. Hello, recently I noticed I started getting popups whenever chrome was open so I ran MWB and Adwcleaner and neither found anything. But I researched it and it's the www1.ecleneue.com pop up virus. Could someone help me get this off my computer? Thank you!
  7. Hi Chris and Maurice! As you may have noticed I am in fact not the original post-er (Chris), but I have a similar if not exact same problem I've got Malwarebytes blocking saltjs.01bd.ru and it seems to have attached itself to Chrome and a gaming program I use called "Parsec" It also appears that I've got something called Mail.ru, I'm not sure if this thing is related but I have tried multiple times to remove it with Malwarebytes As you may have sees, and as I have mentioned before, I believe this is a very similar problem to Chris's, therefor I followed the steps you (Maurice) have posted, so here is the attached log file. -Dezza mbst-grab-results.zip
  8. I used MalwareBytes to remove the viruses that windows defender couldn't for some reason but the website blocked is still popping up.
  9. I'm having the same issue. I've attached my log files.mbst-grab-results.zip
  10. Hi, I have identical problems as darkgoogol and MBAR anti-rootkit tool didn't helped at all. When I'm going to any browser I get same notification about saltjs.01bd.ru and I can't log in to google account, go to malware forums and then I go to facebook my account starts to like random korean pages and posts.
  11. I've run MalwareByte countless times but my problem hasn't solved. AdwCleaner keeps detecting 2 threats but can't remove them. I've also tried reinstalling chrome many times. Please Help.
  12. My problem is that some program is adding ads onto webpages that shouldn't have ads... It also attempt to block this website but can't seem to do it. Addition.txt FRST.txt
  13. Sorry for my bad Ebglish but is not my first lenguage i get a lot of this tipes of messages -Dettagli log- Data evento di protezione: 08/07/19 Ora evento di protezione: 18:06 File di log: 5877a1b2-a19a-11e9-88ff-88d7f631dce7.json -Informazioni software- Versione: 3.7.1.2839 Versione componenti: 1.0.586 Aggiorna versione pacchetto: 1.0.11454 Licenza: Trial -Informazioni sistema- SO: Windows 10 (Build 17134.829) CPU: x64 File system: NTFS Utente: System -Dettagli siti web bloccati- Sito web nocivo: 1 , , Bloccato, [-1], [-1],0.0.0 -Dati sito web- Categoria: Adware Dominio: saltjs.01bd.ru Indirizzo IP: 104.27.139.14 Porta: [53193] Tipo: In uscita File: C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe Also i can't access antivirus sites and my google account from my browsers(Chrome, Edge, Internet explorer) i'm writing from another PC Bocause i can't connect to these forums from the infected PC mbst-grab-results.zip
  14. I have tried HitmanPro and other scanners i cant think off of the top of my head, I have an antivirus called Webroot which removes some of it but i still get ads promoting sketchy antiviruses and fake norton and macafee popups. This all started when i tried to get a version of Sony Vegas Pro for free. It was a stupid move and now i have new tabs open when i click with an ad. Im hoping someone will help me resolve this im tired of it. I even tried a system restore which didint work. Happens on IE, Crome and Edge and makes my homepage for edge and IE MSN. :(
  15. Hello, I am trying to remove the adware.mailru.batbit and PUP.Optional.linkury. I have run several scans but the virus is still there. How do I permanently remove it. Malwarebytes scan doesn't remove it. How do I do it.
  16. Malwarebytes keeps blocking an outbound connection to domclickext.xyz, but can't find where the file is coming from after multiple scans. I've uninstalled Chrome and started with a clean install and it's still coming back. I've attached a text log of the protection event. If there is anything else I can provide, please let me know. Thank you in advance. domclick.txt
  17. Hello, Recently while using Chrome I've started getting ads in new tabs on website where there shouldn't be any ads. They appear when I double click somewhere on the site or when I click download file from site. I can't really recall why or when this has started to appear but I believe it is when I downloaded some files from a site called "https://dat-games.com/". I might be wrong but the damage has already been done and now I'm receiving ads in new tabs. I've tried almost everything: Malwarebytes 3.7.1, Malwarebytes AdwCleaner 7.3.0, Zemana AntiMalware, CCleaner and HitmanPro 3.8.11 but they didn't do anything after deleting the infected/malicious files to fix the problem I still keep getting random ads in new tabs (I go to the same supposedly ad free website where there shouldn't be any ads and test by double clicking or downloading some .docx files) and the same files keep appearing in malware scan results. I'm open to suggestion of what should I do to fix this occurring problem. (I've also uploaded some result of recent scans from above mentioned programs.) Addition.txt FRST.txt
  18. I can not delete the adware in an key under folder of Chrome in the regestration editor, if I try to delete it is my access denied, if I want to change the owner the access is denied, and if I try it with the help of the registrar registry Manager to delete it, I get the error message ACCESS DENIED I want to delete the key permanently to eliminate the adware finally. The Adware cleaner is scanning the Adware but it can't remove it. I tried many programms but no one helped me, the Adware is still there. the Key Path is named: Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.microsoft.browsercore
  19. I got a virus from supposedly installshield in the syswow64 folder and it suspends antivirus programs and web browsers when trying to search for antivirus also pops up with ads
  20. It seems like i caught a very nasty adware virus that always reinstalls itself after some time. Adwcleaner, RKill and Malwarebytes didnt help so far and im out of options, ill attach a screenshot of the Scan from Malwarebytes.
  21. it added a lot of random files and a fake Ea app (which is the virus) i cant delete them cause it says that its a system file it also deleted some of my system32 files . please help me!
  22. ✌️✌️😋Hey guys, im new in the forum and with Malwarebytes.👋👋 😞Just finished a scan and i got a few threats,😤 im looking to know the best course of action, and if i have to worry about the results. 😅In the TXT you will find my first scan, i already put them in quarentine, i should delete them? 🤔 Thanks in advance! 1.txt
  23. Some time ago my Firefox browser was infected by anonymous adware extension without name (as shown in the provided pictures), It even doesnt have a remove button, this extension put advertisment in the search results under the prtener name: "ads by adpartener.asia", I used Adwcleaner but it didnt find the root, I ran Malwarebytes and it found it's source as a registery value as shown in the pictures, I delete it by Malwarebytes but it still comes back after sometime, I don't have any suspicious program to think that this is the installer, so how can I remove it ?
  24. Hello, I was told to post here if my problem still persists. My previous thread is here: My "temporary fix" is always to use "RD /S /Q "%WinDir%\System32\GroupPolicy" " and then "gpupdate /force". The Folder "GroupPolicyUsers" doesnt exist for me. Thats why i´ll upload a zipped copy of this folder while it currently is active. I hope to find a way to get MBAM to remove it completly. Thank you for your time GroupPolicy.rar
  25. I got the Mail.ru adware virus recently, and Malwarebytes free removed 166 files related to it. However, it failed to remove the Mail.ru updater, which ran every time I started my computer. It was in the local appdata folder, and I deleted it manually and it hasn't run since. How can I be sure that the virus isn't also hiding other places and that Malwarebytes actually removed it completely?
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.