Avast WEBforum

Other => Viruses and worms => Topic started by: Rick007 on March 17, 2013, 04:55:20 PM

Title: ilivid ads
Post by: Rick007 on March 17, 2013, 04:55:20 PM
Hey!
I'm stuck with the ilivid ads popping up randomly on webpage. I did uninstall everything I could, but they still are coming back. Any help would be appreciated. I have attached all the log.

Thanks

Malwarebytes Anti-Malware (Trial) 1.70.0.1100
www.malwarebytes.org

Database version: v2013.03.17.07

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Richard :: RICHARD-VAIO [administrator]

Protection: Enabled

17/03/2013 10:51:50 AM
mbam-log-2013-03-17 (10-51-50).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 238530
Time elapsed: 5 minute(s), 8 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 3
C:\Users\Richard\AppData\Local\Temp\pricepeep_130001_1001.exe (Adware.Shopper) -> Quarantined and deleted successfully.
C:\Users\Richard\AppData\Local\Temp\UpdUninstall.exe (PUP.Software.Updater) -> Quarantined and deleted successfully.
C:\Users\Richard\Downloads\mplayer_Setup.exe (PUP.Bundle.Installer.OI) -> Quarantined and deleted successfully.

(end)
Title: Re: ilivid ads
Post by: Pondus on March 17, 2013, 05:04:09 PM
are they still there after running AdwCleaner and Malwarebytes?

Essexboy is notified and will remove any leftovers when he arrive   ;)

Title: Re: ilivid ads
Post by: Rick007 on March 17, 2013, 05:06:10 PM
Hey Pondus,

yes, they are still there, but only on random webpages on IE.

Thanks
Title: Re: ilivid ads
Post by: essexboy on March 17, 2013, 05:13:28 PM
Let me know if this cures it

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL
Code: [Select]
:OTL
IE - HKU\S-1-5-21-539813603-3878447910-1714663330-1000\..\SearchScopes\{06E07138-DB4E-4A28-921B-37EC2E36AC77}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3101810&CUI=UN76230062829833151&UM=1
FF - prefs.js..extensions.enabledAddons: %7B8B2AC248-3917-41cf-82A8-A583EBA5418C%7D:1.0.2
O2 - BHO: (Yealt Class) - {40C78C4E-5AE5-4762-9B7D-D2DE31B03B77} - C:\Windows\SysWOW64\yealt.dll (Yealt)

:Commands
[resethosts]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]
Title: Re: ilivid ads
Post by: Rick007 on March 17, 2013, 06:23:14 PM
Hey essexboy,

Worked like a charm, your the best. I attached the OTL log.

Thanks
Title: Re: ilivid ads
Post by: essexboy on March 17, 2013, 09:45:22 PM
When you are happy let me know and we will tidy up