1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

An ad keeps popping up

Discussion in 'Virus & Other Malware Removal' started by stellatodd, Jan 1, 2013.

Thread Status:
Not open for further replies.
Advertisement
  1. stellatodd

    stellatodd Thread Starter

    Joined:
    Jan 1, 2013
    Messages:
    7
    nearly every time i click on a link i get this " linkbucks" advertisment and i have to wait about 8 seconds before it allows me to skip the ad sometimes it comes up with multiple ad's before i can get to my page. how do i get rid of this?
     
  2. Mark1956

    Mark1956

    Joined:
    May 7, 2011
    Messages:
    14,142
    Hi and Happy New Year

    Please run these two scans and post the logs:

    SCAN 1
    Click on this link to download : ADWCleaner and save it to your desktop.

    NOTE: If using Internet Explorer and you get an alert that stops the program downloading click on Tools > Smartscreen Filter > Turn off Smartscreen Filter then click on OK in the box that opens. Then click on the link again.

    Close your browser and click on this icon on your desktop: [​IMG]

    You will then see the screen below, click on the Delete button (as indicated), accept any prompts that appear and allow it to reboot the PC. When the PC has rebooted you will be presented with the report, copy & paste it into your next post.

    [​IMG]



    SCAN 2
    Download RogueKiller (by tigzy) and save direct to your Desktop.
    On the web page click on this: [​IMG]

    • Quit all running programs
    • Start RogueKiller.exe
    • Wait until Prescan has finished.
    • Ensure all boxes are ticked under "Report" tab.
    • Click on Scan.
    • Click on Report when complete. Copy/paste the contents of the report and paste into your next reply.
    • NOTE: DO NOT attempt to remove anything that the scan detects.

    [​IMG]
     
  3. stellatodd

    stellatodd Thread Starter

    Joined:
    Jan 1, 2013
    Messages:
    7
    that did not fix my problem.
     
  4. Mark1956

    Mark1956

    Joined:
    May 7, 2011
    Messages:
    14,142
    Please post the logs so I can see what if anything has been removed and if RogueKiller found anything that needs to be removed.
     
  5. stellatodd

    stellatodd Thread Starter

    Joined:
    Jan 1, 2013
    Messages:
    7
    # AdwCleaner v2.104 - Logfile created 01/01/2013 at 10:54:52
    # Updated 29/12/2012 by Xplode
    # Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
    # User : Owner - LAPTOP
    # Boot Mode : Normal
    # Running from : C:\Documents and Settings\Owner\My Documents\Downloads\adwcleaner (2).exe
    # Option [Delete]


    ***** [Services] *****


    ***** [Files / Folders] *****

    Deleted on reboot : C:\Documents and Settings\Owner\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla
    File Deleted : C:\DOCUME~1\Owner\LOCALS~1\Temp\Searchqu.ini
    File Deleted : C:\DOCUME~1\Owner\LOCALS~1\Temp\searchqutoolbar-manifest.xml
    File Deleted : C:\DOCUME~1\Owner\LOCALS~1\Temp\SetupDataMngr_Searchqu.exe
    File Deleted : C:\DOCUME~1\Owner\LOCALS~1\Temp\Uninstall.exe
    File Deleted : C:\Program Files\Mozilla Firefox\searchplugins\avg-secure-search.xml
    File Deleted : C:\Program Files\Mozilla FireFox\searchplugins\Search_Results.xml
    Folder Deleted : C:\DOCUME~1\Owner\LOCALS~1\Temp\[email protected]
    Folder Deleted : C:\Documents and Settings\All Users\Application Data\boost_interprocess
    Folder Deleted : C:\Documents and Settings\Owner\Application Data\searchquband
    Folder Deleted : C:\Documents and Settings\Owner\Local Settings\Application Data\Ilivid Player
    Folder Deleted : C:\Program Files\Ilivid

    ***** [Registry] *****

    Key Deleted : HKCU\Software\DataMngr
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9D717F81-9148-4F12-8568-69135F087DB0}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9D717F81-9148-4F12-8568-69135F087DB0}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
    Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]
    Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [10]

    ***** [Internet Browsers] *****

    -\\ Internet Explorer v8.0.6001.18702

    Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.searchqu.com/406 --> hxxp://www.google.com

    -\\ Google Chrome v23.0.1271.97

    File : C:\Documents and Settings\Owner\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

    Deleted [l.48] : search_url = "hxxp://dts.search-results.com/sr?src=crb&appid=113&systemid=406&sr=0&q={searchT[...]

    *************************

    AdwCleaner[R1].txt - [3852 octets] - [01/01/2013 10:45:37]
    AdwCleaner[S2].txt - [3581 octets] - [01/01/2013 10:54:52]

    ########## EOF - C:\AdwCleaner[S2].txt - [3641 octets] ##########



    this is what i got after the computer started up again..
     
  6. stellatodd

    stellatodd Thread Starter

    Joined:
    Jan 1, 2013
    Messages:
    7
    OH the ad is a linksbuck thing it appears as a page like this one and in the top right corner has a skip button u can push after 8 secs.
     
  7. Mark1956

    Mark1956

    Joined:
    May 7, 2011
    Messages:
    14,142
    Ok, that log shows it has deleted a few bad items, could you now post the RogueKiller log as requested.

    Please also confirm which Browser you are using, I'd guess it is Firefox, do you get the same problem if you use IE, if you are not sure please run it for a while to check.

    Please also run this scan and post the log:

    Please download Junkware Removal Tool to your desktop.

    • Shutdown your antivirus to avoid any conflicts.
    • Right-mouse click JRT.exe and select Run as administrator
    • The tool will open and start scanning your system.
    • Please be patient as this can take a while to complete.
    • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
    • Post the contents of JRT.txt into your next message.
     
  8. stellatodd

    stellatodd Thread Starter

    Joined:
    Jan 1, 2013
    Messages:
    7
    im useing google chrome ..doing the second one now
     
  9. stellatodd

    stellatodd Thread Starter

    Joined:
    Jan 1, 2013
    Messages:
    7
    my computer wont download the junkware it says " this file appears malicious"
     
  10. stellatodd

    stellatodd Thread Starter

    Joined:
    Jan 1, 2013
    Messages:
    7
    it wont download the roguekiller either same message only lets me discard it
     
  11. Mark1956

    Mark1956

    Joined:
    May 7, 2011
    Messages:
    14,142
    You will have to disable your Anti Virus to allow it, I can assure you neither program is malicious in any way.
     
  12. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/1083273

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice