Jump to content

Search the Community

Showing results for tags 'adware'.



More search options

  • Search By Tags

    Type tags separated by commas.
  • Search By Author

Content Type


Forums

  • Announcements
    • Malwarebytes News
    • Beta Testing Program
  • Malware Removal Help
    • Windows Malware Removal Help & Support
    • Mac Malware Removal Help & Support
    • Mobile Malware Removal Help & Support
    • Malware Removal Self-Help Guides
  • Malwarebytes for Home Support
    • Malwarebytes 3 Support Forum
    • Malwarebytes for Mac Support Forum
    • Malwarebytes for Android Support Forum
    • Malwarebytes for iOS Support
    • False Positives
    • Comments and Suggestions
  • Malwarebytes for Business Support
    • Malwarebytes Endpoint Protection
    • Malwarebytes Incident Response (includes Breach Remediation)
    • Malwarebytes Endpoint Security
    • Malwarebytes Business Products Comments and Suggestions
  • Malwarebytes Tools and Other Products
    • Malwarebytes AdwCleaner
    • Malwarebytes Junkware Removal Tool Support
    • Malwarebytes Anti-Rootkit BETA Support
    • Malwarebytes Techbench USB (Legacy)
    • Malwarebytes Secure Backup discontinued
    • Other Tools
    • Malwarebytes Tools Comments and Suggestions
  • General Computer Help and Security Updates
    • BSOD, Crashes, Kernel Debugging
    • General Windows PC Help
  • Research Center
    • Newest Rogue-Ransomware Threats
    • Newest Malware Threats
    • Newest Mobile Threats
    • Newest IP or URL Threats
    • Newest Mac Threats
    • Report Scam Phone Numbers
  • General
    • General Chat
    • Forums Announcements & Feedback

Find results in...

Find results that contain...


Date Created

  • Start

    End


Last Updated

  • Start

    End


Filter by number of...

Joined

  • Start

    End


Group


AIM


MSN


Website URL


ICQ


Yahoo


Jabber


Location


Interests

Found 126 results

  1. Hey guys, I need help removing what I think is an SvcHost virus. I recently started having adware tabs pop up on my PC and then after searching for solutions found that whenever I opened a Malwarebytes (or similar website) page, my browser would immediately crash. This happens in Chrome, IE, and Tor. I found this thread which seems to be a very similar virus and after reading a few others, I downloaded MalwareBytes, Rkill, adwcleaner, FRST64, tdsskiller, and aswMBR. (I'm typing this on my other PC btw. Downloaded the files on it and emailed them in a .RAR to my desktop.) This lead to me finding a few things: -I restarted my PC and immediately opened the Task manager to find an unnamed task using 50+% of my CPU. If I look at its properties, it says it's Svchost and is located in SysWOW64 where it takes up 44kb. -I can kill this process, but it doesn't stop the virus from opening apps or closing browsers. -I do not have permission to delete the application from SysWOW64. I need "TrustedInstaller" permission, which I know can be a legit Windows thing. -The MB3-setup exe will not run. -If I run Rkill then attempt to run the MB3 exe, it logs the following: -I deleted the INetCache folder which appeared to be empty. Nothing changed. -adwcleaner and FRST64 won't run. -tdsskiller doesn't find anything -I ran aswMBR and my PC blue-screened with the following support info This is where I am currently and I would appreciate any help anyone can give me.
  2. So a few days ago I got a new phone and downloaded an image off of Google images and ever since then adverts and pop-ups would cover up my entire screen, so I went and downloaded malwarebytes in hopes of getting rid of the problem and I've scanned my phone multiple times and it said that there was no malware found and so I decided to come here in search of an answere.
  3. Hi! After a stupid mistake my laptop is infected by some freaky pop-ups and other hijacking shite: I've tried to fix it by myself, but still have these issuues... Any idea how to resolve it? Hanx!
  4. Hello guys & Ladies, I don't know what happening, but in my Android device, there was virus, which spreading very fast. I did Factory reset [hard reset], still, when I turn on my WIFI, he automatically downloading and doesn't notice me, 'til Google play protector notice. Net auto-installing those apps: enginee xprotect Yeelight Citrix Secure Mail etc, etc, can't remember How do I remove them?
  5. hi guys i cant seen to remove this adware from my computer.I deleted both using malwarebyte and Manually but still it pop out each time is scan under memory section can anyone fix it ? i tried restarting still the same.Although i dont have and ad pop out of no where but still hate to see that thing any help will be great thx update: weirdly if i deleted the preference file by my self while chrome running the threat stop appearing however if i relaunch chrome again the problem persist
  6. Hello. I Am Having Some Trouble Getting Rid Of This No Good Adware Pokki Start Menu.When I Downloaded The Pokki Start Menu I Thought It Was SafeWhen I Looked Up Pokki The Google Results Showed How To Delete Pokki Virus I Took Action And Downloaded Adwcleaner It Found It I Scanned 4 Times Then adwcleaner dissappred right out of the blue with out permission I clicked the windows button and I saw Start Menu And I learned the virus was still there I went to task manager no results of pooki I went to files to open up adwcleaner than it closedthere is no more Pooki but the start menu is still there how do I uninstall EVERYTHING by the way pooki is not in the uninstall place. What softwares can I use to get rid of it or anything. P.S. I scanned and adwcleaner detected pooki then deleted than disappeared without consent I did not even notice
  7. BTW its my FIRST TIME here....... I'm having a problem with the proxy server being set to 127.0.0.1 7272 and adware on my browser. I have used malwarebytes adware and still its not fixed so i need help. Addition.txt FRST.txt
  8. Hi all, I noticed some ads opening in new tabs. Per usual when this happens, I ran MalwareBytes and AdwCleaner. This time though, they keep coming back. I've checked to make sure my Google Chrome doesn't have any wonky extensions installed anymore (it did initially, but after I removed it, it hasn't returned). Still, the ads are still there. What now?
  9. My Windows 10 computer was slowed to a crawl with disk usage at 99% to 100%. Removing cookies from adroll.com, adrol.com, s.adrol.com and other versions of (x).adrol.com my disk usage went to 2% and excursions to 80 and 90%. adroll.com is searchable in Google but adrol.com or any version of it is not. Can these sites be classified as malicious?
  10. Hello today i just got a website blocked for adware From: crossout.net IP 185.11.75.50 steamwebhelper.rar
  11. Hi! I just did a scan with AdwCleaner 7,1,1and it found these two objects, what is it and what should i do? # ------------------------------- # Malwarebytes AdwCleaner 7.1.1.0 # ------------------------------- # Build: 04-27-2018 # Database: 2018-04-30.1 # Support: https://www.malwarebytes.com/support # # ------------------------------- # Mode: Scan # ------------------------------- # Start: 05-01-2018 # Duration: 00:00:07 # OS: Windows 7 Professional # Scanned: 40814 # Detected: 2 ***** [ Services ] ***** No malicious services found. ***** [ Folders ] ***** No malicious folders found. ***** [ Files ] ***** No malicious files found. ***** [ DLL ] ***** No malicious DLLs found. ***** [ WMI ] ***** No malicious WMI found. ***** [ Shortcuts ] ***** No malicious shortcuts found. ***** [ Tasks ] ***** PUP.Adware.Heuristic C:\Windows\System32\Tasks\{ECC531EE-A054-4B19-B6A1-1FBC9166C659} ***** [ Registry ] ***** PUP.Adware.Heuristic HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{ECC531EE-A054-4B19-B6A1-1FBC9166C659} ***** [ Chromium (and derivatives) ] ***** No malicious Chromium entries found. ***** [ Chromium URLs ] ***** No malicious Chromium URLs found. ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries found. ***** [ Firefox URLs ] ***** No malicious Firefox URLs found. ########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S03].txt ##########
  12. Hello, So ive been furiously researching and trying to get rid of some malware (Ad by Advertise) i noticed on my Mac and I can't get rid of it. I downloaded malwarebytes and got zero hits at all. downloaded another program Antivirus Zap from app store and it found 3 items, deleted them all, and adware still there. I then noticed that if I opened chrome on a different chrome user account i had no adware at all and i was fine. I tested this further and opened a fresh windows server and downloaded chrome and then signed into my chrome account and WALA got adware. So basically I know for a fact 10/10 that its associated to my google chrome account. I even deleted every none essential chrome extension. The only ones left are from the chrome webstore which I assume to be safe (please correct me if this is an incorrect assumption). Which the exception of weird extensions I don't even know how malware would go about linking to a chrome account like that, and further more I have no clue how to delete or address it. Please help. Any advice would be fantastic. Even as i type this, random words on the page have been turned into adware links.
  13. First off, some background- I started this topic as i have been running into issues over the last few days. It started when a virus embedded in the most recent version of Display Driver Uninstaller (DDU) was downloaded to my Computer (Windows 10 x64- running only Defender and free version of malwarebytes, at this point in time). I tried to move file to desktop- took a minute (hmm). Then decided to Place in my Extra Apps folder (w/ MWB, + couple others). Got locked on transfer screen (hmmmm), Tried to move to Recycle Bin, same thing. went to to file location, finally got it to move into recycle bin (i think that's how it went down?), ran CCleaner... A while later before bed, i opened windows security center, and noticed it said it had detected a threat. Ran scan.... Detected Win32/vigram.a (showing the transfer path i described above)... Removed... Ran multiple full, quick, offline scans immediately after. I then vigram.a i also scanned the desktop folder w/ MWB (no threats found), and then moved MWB out, MWB right then MWB displayed a message for new update available, which allowed me to start the 14 day trial over- which is great!! It's just weird that i never got the message before- honestly, might be nothing, given that i haven't used it in a while. Since then, I have noticed a couple of things (spurattically/randomly)-- Screen kinda will do a flicker/refresh thing when i open some applications (file viewer/MWB/Chrome/etc..) Not always though. It seems slightly slower?? more like random hiccups, and weird screen glitches with my background slides- randomly stuttering btw slides, and once, weird problems with icon images on taskbar glitching out when i hovered over them; etc... Just seems off. I have been hyper vigilant though- so that may be an attribute. ANYWAYS, I now have kaspersky w/ malwarebytes and uBlock origin, and nothing has been detected until today when i decided to try out AdwCleaner, and 17 things were detected... # ------------------------------- # Malwarebytes AdwCleaner 7.1.0.0 # ------------------------------- # Build: 04-12-2018 # Database: 2018-04-22.1 # Support: https://www.malwarebytes.com/support # # ------------------------------- # Mode: Clean # ------------------------------- # Start: 04-23-2018 # Duration: 00:00:03 # OS: Windows 10 Home # Cleaned: 17 # Failed: 0 ***** [ Services ] ***** No malicious services cleaned. ***** [ Folders ] ***** Deleted C:\Users\johnt\AppData\Local\Host App Service Deleted C:\Users\Public\Desktop\..\App Explorer ***** [ Files ] ***** Deleted C:\Windows\System32\Tasks_Migrated\App Explorer ***** [ DLL ] ***** No malicious DLLs cleaned. ***** [ WMI ] ***** No malicious WMI cleaned. ***** [ Shortcuts ] ***** No malicious shortcuts cleaned. ***** [ Tasks ] ***** Deleted C:\Windows\System32\Tasks\App Explorer ***** [ Registry ] ***** Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Host App Service Deleted HKCU\Software\Host App Service Deleted HKLM\Software\Wow6432Node\Classes\AppID\OverlayIcon.DLL Deleted HKLM\SOFTWARE\Classes\AppID\OverlayIcon.DLL Deleted HKLM\Software\Wow6432Node\Classes\TypeLib\{ADF1FA2A-6EAA-4A97-A55F-3C8B92843EF5} Deleted HKLM\Software\Classes\TypeLib\{ADF1FA2A-6EAA-4A97-A55F-3C8B92843EF5} Deleted HKLM\Software\Wow6432Node\Classes\Interface\{7BCA6879-A9F8-47DE-AE05-F5CE7EA3A474} Deleted HKLM\Software\Classes\Interface\{7BCA6879-A9F8-47DE-AE05-F5CE7EA3A474} Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\App Explorer ***** [ Chromium (and derivatives) ] ***** Deleted Amazon Assistant for Chrome ***** [ Chromium URLs ] ***** Deleted Ask Deleted AOL ***** [ Firefox (and derivatives) ] ***** Deleted Amazon Assistant for Firefox ***** [ Firefox URLs ] ***** No malicious Firefox URLs cleaned. ************************* [+] Delete Tracing Keys [+] Reset Winsock ************************* ########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ########## Followed by... # ------------------------------- # Malwarebytes AdwCleaner 7.1.0.0 # ------------------------------- # Build: 04-12-2018 # Database: 2018-04-22.1 # Support: https://www.malwarebytes.com/support # # ------------------------------- # Mode: Clean # ------------------------------- # Start: 04-23-2018 # Duration: 00:00:00 # OS: Windows 10 Home # Cleaned: 0 # Failed: 0 ***** [ Services ] ***** No malicious services cleaned. ***** [ Folders ] ***** No malicious folders cleaned. ***** [ Files ] ***** No malicious files cleaned. ***** [ DLL ] ***** No malicious DLLs cleaned. ***** [ WMI ] ***** No malicious WMI cleaned. ***** [ Shortcuts ] ***** No malicious shortcuts cleaned. ***** [ Tasks ] ***** No malicious tasks cleaned. ***** [ Registry ] ***** No malicious registry entries cleaned. ***** [ Chromium (and derivatives) ] ***** No malicious Chromium entries cleaned. ***** [ Chromium URLs ] ***** No malicious Chromium URLs cleaned. ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries cleaned. ***** [ Firefox URLs ] ***** No malicious Firefox URLs cleaned. ************************* [+] Delete Tracing Keys [+] Reset Winsock ************************* ########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C02].txt ########## Then after opening chrome, later, and came up with 3 more detections (have a feeling these are false positive??).... # ------------------------------- # Malwarebytes AdwCleaner 7.1.0.0 # ------------------------------- # Build: 04-12-2018 # Database: 2018-04-22.1 # Support: https://www.malwarebytes.com/support # # ------------------------------- # Mode: Scan # ------------------------------- # Start: 04-23-2018 # Duration: 00:00:13 # OS: Windows 10 Home # Scanned: 40705 # Detected: 3 ***** [ Services ] ***** No malicious services found. ***** [ Folders ] ***** No malicious folders found. ***** [ Files ] ***** No malicious files found. ***** [ DLL ] ***** No malicious DLLs found. ***** [ WMI ] ***** No malicious WMI found. ***** [ Shortcuts ] ***** No malicious shortcuts found. ***** [ Tasks ] ***** No malicious tasks found. ***** [ Registry ] ***** No malicious registry entries found. ***** [ Chromium (and derivatives) ] ***** PUP.Optional.AmazonBrowserBar Amazon Assistant for Chrome Idk, if my first problem, and this are related at all, but there it is... Resolution: Has this resolved my problems? Am i safe, or what else should i check or do, to make sure? Sorry, about the long post. Any help/input is welcome. Thank you for your time!
  14. My computer has been infected with something and I've tried every possible solution but still couldn't remove it. After downloading something off kickasstorrent, I opened an .exe file which immediately lead to a bunch of programs installing themselves onto my computer, as well as a bunch of internet shortcuts/redirects appearing on my desktop. The first thing I did was delete the internet shortcut from my desktop. Next I ran a scan with malwarebytes, then hitmanpro, then adwcleaner(in safe mode). This remove most of the stuff but obviously not all of it. This is where the tricky part comes in. Whenever I tried so search up the words adware or adwcleaner using any browser(I've tried Chrome, IE and Firefox), my browser would automatically shut itself down. If I managed to make my way onto the adwcleaner website, my browser would again close itself. I had no problems going onto malwarebytes or other sort of anti-malware/virus websites. https://www.bleepingcomputer.com/virus-removal/remove-s... Furthermore, I've followed every steps given by this website. I've managed to "remove" the malware, trojan etc by using the software they recommended. However, I'm still facing the same issue of whenever I search something with the word “adware” or “adwcleaner” my browser closes itself. Adwcleaner wouldn't work unless it's in safe mode. I tried to launch adwcleaner in normal mode but it closed itself every time almost instantly after opening. I scanned my PC with malwarebytes and hitman pro at least 5 times already. It also wouldn't let me use system restore. Any help would be greatly appreciated!
  15. Over the last seven years, AdwCleaner has grown to become one of the de facto standards for adware and PUP remediation. Thank you for helping us making that happen! With adware and PUPs becoming increasingly annoying and aggressive, we wanted to make sure you had a version of AdwCleaner that keeps up. Over the last few months, we've been working side-by-side with many of our users and, with their input, reviewed every aspect. Since day one, the core of what makes up AdwCleaner is being fast, efficient and easy to use. With these as our guiding principles, we set out to modernize the codebase and deliver the next generation of AdwCleaner. Today, we're ready to share our hard work with you. With AdwCleaner 7.1, you'll enjoy these benefits: Speed and Detection: catches more and is 3.5 times faster New UI: easier, faster and more accessible Settings: fine-tune your experience Let's now take a closer look at AdwCleaner 7.1 and each of the enhancements! Speed and Detection: catches more and is 3.5 times faster With the release of 7.1, you can now detect and eradicate up to 3.5 times faster! We've strengthened our detection to better handle browser add-ons (even while synchronized) as well as settings (homepages, search engines, etc). You'll notice our generic detections have been enhanced as well as threats located on the filesystem and in the registry. New UI: easier, faster and more accessible Within our fresh and modern UI, you can still start scanning with just a single click! In addition to starting your scan quickly, you can get to other important features within one click. Don't forget to check out your usage stats while on the dashboard. We support 26 languages as well as the application is fully scalable. It adds more support for screen readers which is an area we'll keep improving upon in future builds. And of course, if you're in need of proactive protection, we've added a one-click option to grab a free trial of Malwarebytes for Windows. Settings: fine-tune your experience You can now more easily get to your settings and dial them in as you see fit. We've added the ability to manage exclusions if you want to avoid removing certain elements. Resources: get help and level up your knowledge If you're looking to get some additional assistance or read up on the latest research from Malwarebytes, we've added a few great resources to get you connected with us. You'll be able to connect with our Lab, share samples, or even get some help in our community. Thanks again for making AdwCleaner one of your go-to-tools for eradicating adware and PUPs. We're really excited to share this with you and to hear your feedback. As always, give it a try and feel free to stop back and share your thoughts with us (here). Download AdwCleaner 7.1 here: https://malwarebytes.com/adwcleaner/
  16. Hi, After installing uTorrent, I noticed a new Login Item alongside uTorrent itself called "runchmm" (which is in ~/Library/Application Support/runchmm). I have no idea what this actually does, but I have managed to narrow it down to a step in the Installer I missed that offers to install something called "Search Offer". I noticed that Chromium Browser has been installed and also when I start Google Chrome, it warns me that a new Search Engine has been installed. Safari seems unaffected. So, I have lots of questions: How worried should I be? Do I need to reformat my hard drive and reinstall MacOS? Malwarebytes doesn't flag this as AdWare... should it? Can I just remove runchmm from Login Items and from the filesystem (along with Chromium) and be ok? How can I find out whether or not the presence of this item is dangerous (rather than just suspicious)? Here's the installer screen that describes "Search Offer":
  17. I always see kuwodata please help to remove this from scanning, because i scanned 30 times and i always see kuwo data quarantined
  18. Hello, I am having an issue with my computer. Yontoo, identified as adware, continues to infect my pc. I use malwarebytes to scan and quarantine my pc multiple times a day to keep it running smoothly. I was wondering if there was a way to stop it from coming back. I have linked Farbar FRST and Addition in this message. Thank you for your time, FRST.txt Addition.txt
  19. Hello, Couple of days ago this particular PUP has been appearing on daily scans and I can't seem to get rid of it with Malwarebytes. There's not much else to say, it seems to be the only item that appears in the logs and doesn't seem to be doing any harm, nonetheless I'd like advice on how to remove it. I've attached the three recommended files. Thank's in advance! Threat Scan Results.txt FRST.txt Addition.txt
  20. Hi, I am having a bit of an issue removing that ware from Chrome. I've tried everything - reinstalling Chrome, clearing cache, clearing up my entire my profile, reseting synchronisation. AdwCleaner detects it as startup pages (report included) but I also deleted every possible startup pages as well. Thanks for help. Addition.txt AdwCleaner[S8].txt FRST.txt
  21. Hello there, After following a link on youtube I got a nice virus infestation on my PC. Malware Bytes allowed me to clean the majority of malware (PC cleanup utilities and such) but there is still a process that keeps on reinstalling itself that tries to open blocked websites even when the browser is closed. It's most definitely a virus (clostridium.exe) and I can't get rid of it. There also appear to be random redirections from google search to yahoo search. i uploaded all the txt logs requested. Please let me know if I am missing something. Thanks in advance MWB threat scan log.txt Addition.txt FRST.txt
  22. So I've been using my Dell Microsoft Windows 7 Professional for around 4 years, recently when I logged into my laptop, the screen froze after 2 minutes. I can still move the cursor but can not do anything else, after some research I found out I might've gotten a Adware. I also read that most Anti-Virus won't remove AdWare. I would just like to get some help in removing this Adware, currently running scan and have gotten 4 Adware threats. I also ran DDS, after seeing the result of "Installed Programs", I found out that some programs mentioned in the .txt file were not in the control panel for me to delete it, I would need more help, please reply to me ASAP.
  23. I had this issue 2 or 3 weeks ago. Malwarebytes constantly popups blocking a few different (what appears to be) adware issues, such as drivethelife and onclickads. There's a 3rd one that shows up sometimes but much more rarely. My Avast antivirus couldn't find any issues, and running a scan on my lifetime license MWB gives a message that there are no threats found. I have a temporary license on HitManPro and it seems to find tracking cookies but nothing to do with adware (from what I can tell). I uninstalled Malwarebytes and reinstalled it but lost my license key for about 10 days. During this time, I had no popups about these infections. I restored the key yesterday and started getting these constant annoying popups. I verified my installed programs and see nothing that seems related. All installed programs are normal Microsoft and other regular updates to my apps. I see nothing that seems related in my running processes, either. So how do I get rid of these popups? If there really is an infection (despite Malwarebytes telling me there isn't one), how do I get rid of it? Please help ASAP. I can't focus on my work with these popups annoying me constantly.
  24. Hello, I have a problem everytime i start my pc ad.fly popup shows on my default browser I've ran a full scan on malwerbytes,kaspersky,uninnstalled cracked games and utorrent,unninstalled suspicious programs,disabled suspicious startup programs,tried other browsers,set other default browser. I've tried almost everything. Could you help me somehow.
  25. So I was messing with my laptop about a week ago and found out that some extensions of Russian origin were installed to my chrome browser and some random websites were opening randomly. "Well, no big deal", thought I installing adw cleaner and deleting the extensions. When It seemed like everything was cleaned, I have continued using the laptop until the same websites have started to open and the same extensions appeared. This became worrisome. I installed malwarebytes, hitmanpro and ccleaned, deleted chrome and cleaned the cache files. Scanning, removing, rebooting... I have done everything that I could imagine to root out the source of the virus. The only result was that the virus didn't affect my computer, but this is only because Malwarebytes was putting it to the quarantine. For a week every day I was scanning and cleaning my system, but the virus still keeps coming back. And today I found something odd: this appeared for a couple of seconds but I managed to screenshot it. So now I wonder: is there any file in the system that makes this window appear and download the virus again and again? Can you guys help me with this? Is there any way to make the virus stop coming back? Thanks in advance!
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.