Avast WEBforum
Other => Viruses and worms => Topic started by: 20elli on October 17, 2010, 01:21:55 AM
-
Hello everyone,
I download a free translation software called Lingoes and I needed to add a few dictionaries in the software. These dictionaries are provided from Xunlei.com, a fast download server and I needed to download their software to be able to download the dictionaries, It is working a bit like FlashGet(forgive my ignorance if the Flashget is different).
Since I downloaded the Xunlei, their is a desktop pop-up advertisement (widget) will pop-op every 4-5 hours, whether any applications I'm using. The pop-up Ad is mainly for Panli.com (a shopping website from China) and it also says the Ad is provided from Google.com.
It is a virus or something? How do I remove it? I've been using Avast to scan my whole my computer a few times and there is no threat found.
Can any experts help this, please?
-
This is Adware. Did you read the terms?
-
***
Welcome to the forums, 20elli :)
I suggest you try the free version of malwarebytes antimalware from the link below.
Download it, install it, update it, and then run a Quick scan.
Post the resulting log here using "copy & paste."
http://www.malwarebytes.org/mbam.php
***
-
This is Adware. Did you read the terms?
Come on who read eula?! ???
we all"i think"press next next install launch....
-
Charley0,
The result was amazing. I really appreciate your help.
This was the scanned result, and I have removed them. Is that all I need to do?
\/endor Category Item Other Action taken
Ø Trojan.Cinmus Registry Value HKEY_CURRENT_USER\SOFTWARE\Mi... Value: (b580c16... No action taken.
Adware.BDSe... Registry Key HKEY_CURRENT_USER\SOFTWARE\Mi... No action taken.
Ø Trojan.Cinmus Registry Key HKEY_CURRENT_USER\SOFTWARE\Mi... No action taken.
Adware.BDSe... Registry Key HKEY_LOCAL_MACHINE\SOFTWARE\Mi... No action taken.
Ø Trojan.Cinmus Registry Key HKEY_LOCAL_MACHINE\SOFTWARE\Mi... No action taken.
Ø Trojan.Cinmus Registry Key HKEY_LOCAL_MACHINE\SOFTWARE\B... No action taken.
-
HI again,
I just saw the pop-up Ad again, then I checked the software. Virus were still in the quarantine area(I thought I've removed them permanently ), so I deleted them. Is that all I have to do?
Thanks for sharing my problem.
-
Virus were still in the quarantine area (I thought I've removed them permanently ), so I deleted them. Is that all I have to do?
· Prior to scanning with MBAM, click update so you have latest database before scanning.
· Under Settings:
o General: Automatically Save File After Scan Completes is checked off
o Scanner Settings: Check all boxes
o Updater: Download and install update if available is checked off
· Once the program has loaded, select "Perform FULL Scan", then click Scan.
· The scan may take some time to finish, so please be patient.
· When the disinfection scan is complete, a log will appear in Notepad and you may be prompted to Restart. (See Extra Note).
· Click the “remove selected” button to quarantine anything found. You will find the infection details under the Quarantine tab.
· The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
· Copy & Paste the entire report in your next reply.
-> You should have moved the infected items to quarantine instead of deleting them. So update MBAM, and follow the directions above. Then cut and paste your log to your next post.
After running MBAM, update your Avast definitions and run a Full Avast scan. Report on the results of this as well. If anything comes up as infected, make sure it goes into the Virus Chest (do NOT delete it).
Do you have a 32 or 64-bit machine?
We will await your next post to give you further instructions. Thank you.