Author Topic: Scareware, Popups and Tool Bar Takeover  (Read 14158 times)

0 Members and 1 Guest are viewing this topic.

thewebguy

  • Guest
Scareware, Popups and Tool Bar Takeover
« on: June 10, 2013, 11:19:07 PM »
Hello again,

Ran Tdsskiller - Negative results

Question, they have 3 user accounts, do I need to run these programs in each account??

Win7
Scareare, Popups to redirect, and many toolbars

See below logs:
« Last Edit: June 10, 2013, 11:21:38 PM by thewebguy »

thewebguy

  • Guest
Re: Scareware and Tool Bar Takeover
« Reply #1 on: June 10, 2013, 11:20:10 PM »
more logs

thewebguy

  • Guest
Re: Scareware and Tool Bar Takeover
« Reply #2 on: June 10, 2013, 11:20:50 PM »
fss

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37547
  • Not a avast user
Re: Scareware and Tool Bar Takeover
« Reply #3 on: June 10, 2013, 11:21:09 PM »
after running AdwCleaner.....is the problem still there?

removal expert is notified....


thewebguy

  • Guest
Re: Scareware, Popups and Tool Bar Takeover
« Reply #4 on: June 10, 2013, 11:24:26 PM »
Yes getting popups still for coupons and ads etc when different pages open.

Lots of toolbars...

Seem to have stopped the scareware for pc antivirus software....

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37547
  • Not a avast user
Re: Scareware, Popups and Tool Bar Takeover
« Reply #5 on: June 10, 2013, 11:28:29 PM »
ok....essexboy is online and should assist you soon.   ;)


Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Scareware, Popups and Tool Bar Takeover
« Reply #6 on: June 10, 2013, 11:46:31 PM »
Hi there, toolbar city

Download the attached fix.txt to your desktop
Run OTL and press Run Fix
A dialogue will open asking for the location of fix.txt
Locate and select the file you just downloaded to the desktop
Press Run Fix again

THEN

Please download Junkware Removal Tool to your desktop.
  • Right-mouse click JRT.exe and select "Run as Administrator" the tool will open and start scanning your system
  • please be patient as this can take a while to complete depending on your system's specifications
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • post the contents of JRT.txt into your next message.
Once completed then run a fresh OTL scan please

thewebguy

  • Guest
Re: Scareware, Popups and Tool Bar Takeover
« Reply #7 on: June 11, 2013, 01:26:11 AM »
I don't know how people just always click YES LOL

Here is log from JRT

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Scareware, Popups and Tool Bar Takeover
« Reply #8 on: June 11, 2013, 03:28:40 PM »
OK time now to see what is left, could you run a fresh OTL scan please selecting all users

thewebguy

  • Guest
Re: Scareware, Popups and Tool Bar Takeover
« Reply #9 on: June 11, 2013, 10:03:28 PM »
ok see attached. We don't need to run this for each user just one time correct?

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Scareware, Popups and Tool Bar Takeover
« Reply #10 on: June 11, 2013, 11:49:45 PM »
It would be worth running JRT for each user.  How is the computer at the moment

thewebguy

  • Guest
Re: Scareware, Popups and Tool Bar Takeover
« Reply #11 on: June 12, 2013, 11:47:57 PM »
seems good, no popups or ads on the first user...

Second user had a bunch of conduit toolbars...

third user seems ok

Only issues, every time I turn computer on from it being off, it goes to the prompt screen saying windows did not load properly, and asks if I want to start windows normally or safe mode...

Trying to get windows updates loaded...there are about 15 right now....

Here are the JRT for all the users.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Scareware, Popups and Tool Bar Takeover
« Reply #12 on: June 13, 2013, 02:58:17 PM »
Silly question but does windows close down properly or does it hang ?

thewebguy

  • Guest
Re: Scareware, Popups and Tool Bar Takeover
« Reply #13 on: June 13, 2013, 10:46:58 PM »
Made a error...hit the system restore point option and restored to a week ago so all the toobars and crap are back :-[

I will post all the logs again shortly.... :-\

Did the JRT logs look ok for other users...the user#2 seemed to have toolbars also...

As for the START WINDOWS NORMALLY issue, it seems to shut don fine, sometimes maybe the 'waiting for program' to shut off thing...When I restart computer it seems to start fine, but then almost looks like it restarts and I get the error, once I click start normally all is fine...?

Will also let you know shortly about all the updates for windows..some where not installing....


Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Scareware, Popups and Tool Bar Takeover
« Reply #14 on: June 13, 2013, 11:07:49 PM »
OK the start problem may require a check disc run to clear that

Use JRT under each user