Popup malware from downloading adobe

[fireman5214]

I run windows 7 and when I get the run box up and before clicking anything after typing cmd.exe highlighted or not it doesnt give me a RUN as Administrator option though

[screen317]

What happens when you right-click it?

[fireman5214]

What happens when you right-click it?

I get options PASTE, Select All, right to left reading order, show unicode control characters, insert unicode control character, open IME (that is when the cmd.exe is NOT highlighted)

when it is highlighted i get the following options:

cut, copy, paste, delete, right to left reading order, show unicode control characters, insert unicode control character, open IME

also note our fire company carnival is this week, thats y the delayed responses, starting tomorrow through sat night is when the carnival actually operates, just alot of prep work and deliveries to take care of along with lighting etc...

[screen317]

Hi,

Don't worry take your time.

That behavior sounds strange. Can you post a screenshot of it please?

[fireman5214]

here are the screen shots, #1 is without the highlighted text and the #2 is with highled text

[screen317]

Ohhhh I see what you mean.

I never said to click on Run.

Click Start, then in the white box that's already there, type it in.

[fireman5214]

sorry I thought you meant click RUN under accessories when I saw "RUN" lol, here is the report

The type of the file system is NTFS.

Volume label is OS.

WARNING! F parameter not specified.

Running CHKDSK in read-only mode.

CHKDSK is verifying files (stage 1 of 3)...

0 percent complete. (0 of 496640 file records processed)

0 percent complete. (15866 of 496640 file records processed)

0 percent complete. (20652 of 496640 file records processed)

0 percent complete. (29697 of 496640 file records processed)

0 percent complete. (41707 of 496640 file records processed)

1 percent complete. (49664 of 496640 file records processed)

1 percent complete. (97793 of 496640 file records processed)

2 percent complete. (99328 of 496640 file records processed)

2 percent complete. (134783 of 496640 file records processed)

3 percent complete. (148992 of 496640 file records processed)

3 percent complete. (178482 of 496640 file records processed)

4 percent complete. (198656 of 496640 file records processed)

4 percent complete. (231425 of 496640 file records processed)

5 percent complete. (248320 of 496640 file records processed)

5 percent complete. (292363 of 496640 file records processed)

6 percent complete. (297984 of 496640 file records processed)

6 percent complete. (343553 of 496640 file records processed)

7 percent complete. (347648 of 496640 file records processed)

8 percent complete. (397312 of 496640 file records processed)

8 percent complete. (441089 of 496640 file records processed)

9 percent complete. (446976 of 496640 file records processed)

496640 file records processed.

File verification completed.

595 large file records processed.

0 bad file records processed.

6 EA records processed.

43 reparse records processed.

CHKDSK is verifying indexes (stage 2 of 3)...

11 percent complete. (14479 of 576396 index entries processed)

12 percent complete. (29172 of 576396 index entries processed)

13 percent complete. (43865 of 576396 index entries processed)

14 percent complete. (58558 of 576396 index entries processed)

15 percent complete. (73252 of 576396 index entries processed)

16 percent complete. (87945 of 576396 index entries processed)

17 percent complete. (102638 of 576396 index entries processed)

18 percent complete. (117331 of 576396 index entries processed)

19 percent complete. (132024 of 576396 index entries processed)

20 percent complete. (146717 of 576396 index entries processed)

21 percent complete. (161411 of 576396 index entries processed)

22 percent complete. (176104 of 576396 index entries processed)

23 percent complete. (190797 of 576396 index entries processed)

24 percent complete. (205490 of 576396 index entries processed)

25 percent complete. (220183 of 576396 index entries processed)

26 percent complete. (234876 of 576396 index entries processed)

27 percent complete. (249570 of 576396 index entries processed)

28 percent complete. (264263 of 576396 index entries processed)

29 percent complete. (278956 of 576396 index entries processed)

30 percent complete. (293649 of 576396 index entries processed)

31 percent complete. (308342 of 576396 index entries processed)

32 percent complete. (323035 of 576396 index entries processed)

33 percent complete. (337728 of 576396 index entries processed)

34 percent complete. (352422 of 576396 index entries processed)

35 percent complete. (367115 of 576396 index entries processed)

36 percent complete. (381808 of 576396 index entries processed)

37 percent complete. (396501 of 576396 index entries processed)

38 percent complete. (411194 of 576396 index entries processed)

39 percent complete. (425887 of 576396 index entries processed)

40 percent complete. (440581 of 576396 index entries processed)

41 percent complete. (455274 of 576396 index entries processed)

42 percent complete. (469967 of 576396 index entries processed)

43 percent complete. (484660 of 576396 index entries processed)

43 percent complete. (496762 of 576396 index entries processed)

43 percent complete. (497053 of 576396 index entries processed)

43 percent complete. (497849 of 576396 index entries processed)

43 percent complete. (498088 of 576396 index entries processed)

43 percent complete. (498581 of 576396 index entries processed)

43 percent complete. (499325 of 576396 index entries processed)

44 percent complete. (499353 of 576396 index entries processed)

44 percent complete. (499755 of 576396 index entries processed)

44 percent complete. (500158 of 576396 index entries processed)

44 percent complete. (500512 of 576396 index entries processed)

44 percent complete. (500514 of 576396 index entries processed)

44 percent complete. (501492 of 576396 index entries processed)

44 percent complete. (502995 of 576396 index entries processed)

44 percent complete. (504671 of 576396 index entries processed)

44 percent complete. (505877 of 576396 index entries processed)

44 percent complete. (506122 of 576396 index entries processed)

44 percent complete. (508775 of 576396 index entries processed)

44 percent complete. (510127 of 576396 index entries processed)

44 percent complete. (510519 of 576396 index entries processed)

44 percent complete. (510751 of 576396 index entries processed)

44 percent complete. (511438 of 576396 index entries processed)

44 percent complete. (511811 of 576396 index entries processed)

44 percent complete. (512211 of 576396 index entries processed)

44 percent complete. (512680 of 576396 index entries processed)

45 percent complete. (514046 of 576396 index entries processed)

45 percent complete. (514919 of 576396 index entries processed)

45 percent complete. (515256 of 576396 index entries processed)

45 percent complete. (515556 of 576396 index entries processed)

45 percent complete. (516521 of 576396 index entries processed)

45 percent complete. (516914 of 576396 index entries processed)

45 percent complete. (517398 of 576396 index entries processed)

45 percent complete. (517431 of 576396 index entries processed)

45 percent complete. (517799 of 576396 index entries processed)

45 percent complete. (518402 of 576396 index entries processed)

45 percent complete. (518820 of 576396 index entries processed)

45 percent complete. (519121 of 576396 index entries processed)

45 percent complete. (519500 of 576396 index entries processed)

45 percent complete. (519715 of 576396 index entries processed)

45 percent complete. (520349 of 576396 index entries processed)

45 percent complete. (520767 of 576396 index entries processed)

45 percent complete. (521110 of 576396 index entries processed)

45 percent complete. (521370 of 576396 index entries processed)

45 percent complete. (521504 of 576396 index entries processed)

45 percent complete. (521923 of 576396 index entries processed)

45 percent complete. (522347 of 576396 index entries processed)

45 percent complete. (522490 of 576396 index entries processed)

45 percent complete. (523134 of 576396 index entries processed)

45 percent complete. (523637 of 576396 index entries processed)

45 percent complete. (524158 of 576396 index entries processed)

45 percent complete. (524608 of 576396 index entries processed)

45 percent complete. (524908 of 576396 index entries processed)

45 percent complete. (525153 of 576396 index entries processed)

45 percent complete. (525430 of 576396 index entries processed)

45 percent complete. (525935 of 576396 index entries processed)

45 percent complete. (526240 of 576396 index entries processed)

45 percent complete. (526413 of 576396 index entries processed)

45 percent complete. (526798 of 576396 index entries processed)

45 percent complete. (527540 of 576396 index entries processed)

45 percent complete. (528327 of 576396 index entries processed)

45 percent complete. (528550 of 576396 index entries processed)

46 percent complete. (528740 of 576396 index entries processed)

46 percent complete. (529303 of 576396 index entries processed)

46 percent complete. (529787 of 576396 index entries processed)

46 percent complete. (530000 of 576396 index entries processed)

46 percent complete. (530132 of 576396 index entries processed)

46 percent complete. (530249 of 576396 index entries processed)

46 percent complete. (530379 of 576396 index entries processed)

46 percent complete. (530496 of 576396 index entries processed)

46 percent complete. (530592 of 576396 index entries processed)

46 percent complete. (530698 of 576396 index entries processed)

46 percent complete. (530806 of 576396 index entries processed)

46 percent complete. (530903 of 576396 index entries processed)

46 percent complete. (531066 of 576396 index entries processed)

46 percent complete. (531171 of 576396 index entries processed)

46 percent complete. (531249 of 576396 index entries processed)

46 percent complete. (531358 of 576396 index entries processed)

46 percent complete. (531470 of 576396 index entries processed)

46 percent complete. (531595 of 576396 index entries processed)

46 percent complete. (531705 of 576396 index entries processed)

46 percent complete. (531808 of 576396 index entries processed)

46 percent complete. (531924 of 576396 index entries processed)

46 percent complete. (532051 of 576396 index entries processed)

46 percent complete. (532195 of 576396 index entries processed)

46 percent complete. (532345 of 576396 index entries processed)

46 percent complete. (532479 of 576396 index entries processed)

46 percent complete. (532600 of 576396 index entries processed)

46 percent complete. (532735 of 576396 index entries processed)

46 percent complete. (532867 of 576396 index entries processed)

46 percent complete. (533004 of 576396 index entries processed)

46 percent complete. (533120 of 576396 index entries processed)

46 percent complete. (533252 of 576396 index entries processed)

46 percent complete. (533309 of 576396 index entries processed)

46 percent complete. (533436 of 576396 index entries processed)

46 percent complete. (533563 of 576396 index entries processed)

46 percent complete. (533682 of 576396 index entries processed)

46 percent complete. (533817 of 576396 index entries processed)

46 percent complete. (533961 of 576396 index entries processed)

46 percent complete. (534127 of 576396 index entries processed)

46 percent complete. (534278 of 576396 index entries processed)

46 percent complete. (534433 of 576396 index entries processed)

46 percent complete. (534598 of 576396 index entries processed)

46 percent complete. (534757 of 576396 index entries processed)

46 percent complete. (534911 of 576396 index entries processed)

46 percent complete. (535049 of 576396 index entries processed)

46 percent complete. (535185 of 576396 index entries processed)

46 percent complete. (535320 of 576396 index entries processed)

46 percent complete. (535454 of 576396 index entries processed)

46 percent complete. (535598 of 576396 index entries processed)

46 percent complete. (535724 of 576396 index entries processed)

46 percent complete. (535846 of 576396 index entries processed)

46 percent complete. (535947 of 576396 index entries processed)

46 percent complete. (536011 of 576396 index entries processed)

46 percent complete. (536084 of 576396 index entries processed)

46 percent complete. (536154 of 576396 index entries processed)

46 percent complete. (536288 of 576396 index entries processed)

46 percent complete. (536418 of 576396 index entries processed)

576396 index entries processed.

Index verification completed.

49 percent complete. (1 of 0 unindexed files scanned)

0 unindexed files scanned.

0 unindexed files recovered.

CHKDSK is verifying security descriptors (stage 3 of 3)...

49 percent complete. (19713 of 496640 file SDs/SIDs processed)

50 percent complete. (33348 of 496640 file SDs/SIDs processed)

51 percent complete. (77427 of 496640 file SDs/SIDs processed)

52 percent complete. (121507 of 496640 file SDs/SIDs processed)

53 percent complete. (165586 of 496640 file SDs/SIDs processed)

54 percent complete. (209666 of 496640 file SDs/SIDs processed)

55 percent complete. (253745 of 496640 file SDs/SIDs processed)

56 percent complete. (297824 of 496640 file SDs/SIDs processed)

57 percent complete. (341904 of 496640 file SDs/SIDs processed)

58 percent complete. (385983 of 496640 file SDs/SIDs processed)

59 percent complete. (430063 of 496640 file SDs/SIDs processed)

60 percent complete. (474142 of 496640 file SDs/SIDs processed)

496640 file SDs/SIDs processed.

Security descriptor verification completed.

39879 data files processed.

CHKDSK is verifying Usn Journal...

99 percent complete. (0 of 37507392 USN bytes processed)

100 percent complete. (37502976 of 37507392 USN bytes processed)

37507392 USN bytes processed.

Usn Journal verification completed.

Windows has checked the file system and found no problems.

609666417 KB total disk space.

64392764 KB in 318415 files.

195840 KB in 39880 indexes.

0 KB in bad sectors.

620009 KB in use by the system.

65536 KB occupied by the log file.

544457804 KB available on disk.

4096 bytes in each allocation unit.

152416604 total allocation units on disk.

136114451 allocation units available on disk.

[screen317]

Hi,

Looks like your hard drive is okay. Are you still experiencing any issues?

[fireman5214]

Hi,

Looks like your hard drive is okay. Are you still experiencing any issues?

it actually did a BLUE SCREEN ERROR sometime while I was gone from 930am-12pm it goes into automatic standby/energy save mode when its left alone for 10 mins which I have it set for. The error was the same as above. that was the first in over a week it did one lol

[screen317]

Hi,

Run BlueScreenView again and post its log please.

[fireman5214]

Hi,

Run BlueScreenView again and post its log please.

I will do that overnight today and post the log tomorrow

[fireman5214]

==================================================

Dump File : 080812-27721-01.dmp

Crash Time : 8/8/2012 11:36:20 AM

Bug Check String : DRIVER_POWER_STATE_FAILURE

Bug Check Code : 0x0000009f

Parameter 1 : 00000000`00000003

Parameter 2 : fffffa80`048e0060

Parameter 3 : fffff800`049be518

Parameter 4 : fffffa80`0bd30910

Caused By Driver : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+7f1c0

File Description : NT Kernel & System

Product Name : Microsoft® Windows® Operating System

Company : Microsoft Corporation

File Version : 6.1.7601.17835 (win7sp1_gdr.120503-2030)

Processor : x64

Crash Address : ntoskrnl.exe+7f1c0

Stack Address 1 :

Stack Address 2 :

Stack Address 3 :

Computer Name :

Full Path : C:\Windows\Minidump\080812-27721-01.dmp

Processors Count : 4

Major Version : 15

Minor Version : 7601

Dump File Size : 914,896

==================================================

[screen317]

The only thing is showing is that there is a problem with a driver. The problem is that it's not saying what in particular needs to be addressed. With the corruption here, at this point I suggest backing up your data, formatting your hard drive, and reinstalling Windows. That way, you get a clean slate, and whatever corruption there is will be gone..

[fireman5214]

The only thing is showing is that there is a problem with a driver. The problem is that it's not saying what in particular needs to be addressed. With the corruption here, at this point I suggest backing up your data, formatting your hard drive, and reinstalling Windows. That way, you get a clean slate, and whatever corruption there is will be gone..

ok ill try that sometime when i get more free time, I am not sure when that will be. have you seen my previous thread with MrCharlie? would that have any info in it?

[screen317]

Hi,

It has a lot of the same info. Unfortunately it looks like the outage did some damage.

[fireman5214]

Hi,

It has a lot of the same info. Unfortunately it looks like the outage did some damage.

the outage of what? just curious do you know if the corrupt file could do anything with flash player? I have the newest updated, but all of a sudden once in a great while ill be watching a weather loop or 1 youtube and the next thing i know i get a blank white screen with an ! in the middle of it, so I go to look inmy programs and it shows flash player installed that date and says i need 10 or higher. Its like it erases my newest flash player and puts in another? Also some youtube vids I can watch some come up as a loading black screen and get stuf, i took a screenshot, it looks like the round dots should be spinning but they never do, ONLY on some videos, but if that video is posted on facebook or some other hyperlink I can watch it, just not youtube.com. I asked for help and tried all the trouble shooting in youtube and I have nothing. Also vimeo works fine as well.

[screen317]

Whoops. I misread "hello I didnt lose power" as "hello I did lose power." My mistake.

Hmmm how strange.

Try uninstalling flash. Then use the flash removal tool from here:

http://helpx.adobe.com/flash-player/kb/uninstall-flash-player-windows.html#main_Download_the_Adobe_Flash_Player_uninstaller

Reboot. Download the latest version (11.4.402) from here:

http://get.adobe.com/flashplayer/

Reboot.

See if the issue persists. If so, perhaps it's browser specific. If you're in Firefox, try Internet Explorer. If IE, try Firefox.

[fireman5214]

Whoops. I misread "hello I didnt lose power" as "hello I did lose power." My mistake.

Hmmm how strange.

Try uninstalling flash. Then use the flash removal tool from here:

http://helpx.adobe.c...yer_uninstaller

Reboot. Download the latest version (11.4.402) from here:

http://get.adobe.com/flashplayer/

Reboot.

See if the issue persists. If so, perhaps it's browser specific. If you're in Firefox, try Internet Explorer. If IE, try Firefox.

i did all this and it still doesn't work, now on the desktop, windows xp, internet explorer 9 its works. but on my laptop windows 7 internet explorer 9 it does NOT. That is strange to me so I am guessing its not the browser?

[screen317]

Did you try it in Firefox as instructed?

[fireman5214]

no sorry, I dont have firefox as I have used it on other people's computers and do not like it.

[screen317]

I mean, use it to troubleshoot the issue and see if it's specific to Internet Explorer. You can try Chrome instead.. I just want to confirm if the issue persists in some browsers but not all.

[fireman5214]

I mean, use it to troubleshoot the issue and see if it's specific to Internet Explorer. You can try Chrome instead.. I just want to confirm if the issue persists in some browsers but not all.

ok ill try it but i doubt it will work with the youtube forum having problems int he browsers, maybe you can help me delete firefox out after i put it in?

[screen317]

Sure I can. Let me know how it goes.

[fireman5214]

well i tested the exact same video and it works with firefox unfortunately.

[screen317]

Hi,

Since it's specific to Internet Explorer, an add-on may be to blame. Try running it in Safe Mode as outlined here:

http://www.killertechtips.com/2008/04/14/run-internet-explorer-and-firefox-without-addons/