ADS and Popups everywhere.

Toggle sidebar Toggle sidebar
Janny1993UK

Janny1993UK

Distinguished
Feb 14, 2013
177
0
18,680
Hi, since my brother has used the computer yesterday there has been lots of ads popping up everywhere. They are bothering me and stopping me from using my computer. Is there anything I can do to get rid of these? I have adblock plus and it's not doing anything. Ads are popping up on every page. This wasn't happening yesterday and just started happening this morning when I turned the computer on. Maybe he downloaded something but can't find anything that has recently been downloaded. Pics below.

popup1ads.jpg


popup2ads.jpg
 
Solution
S
PUP.Optional.OffersWizard.A, C:\Program Files (x86)\Common Files\Config, , [5db2e864a5e51026c0da24c058ab18e8]

This sounds like your brother have clicked yes to some add plugin/program that he shouldn't.

Here's a link to a fix http://malwaretips.com/blogs/offerswizard-removal/
Sort by date Sort by votes
laviniuc

laviniuc

Judicious
Nov 29, 2013
5,505
18
32,415
you probably have also a keylogger somewhere, do not fill in any passwords till you finish cleaning it up, he probably got the pc infected. malwarebytes is a good place to start the cleanup process, run also ccleaner and cleanup any temporary files

start run msconfig, and look for new things on the startup tab and runnning services (skip the microsoft ones)
 
Upvote 1 Downvote
S

Sn3akr

Honorable
Nov 16, 2013
24
1
10,525
Search google for "sale plus remove" also check ur browser settings and go into the extensions and remove any unwanted extension from there.

Also u might be ablo to find som crapware installed if u check controlpanel/remove program
 
Upvote 1 Downvote
Janny1993UK

Janny1993UK

Distinguished
Feb 14, 2013
177
0
18,680
Hi, I have done the malware scanner and came up with this

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 31/03/2015
Scan Time: 09:49:02
Logfile:
Administrator: Yes

Version: 2.01.4.1018
Malware Database: v2015.03.31.03
Rootkit Database: v2015.03.26.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Janny

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 446259
Time Elapsed: 22 min, 27 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 1
Trojan.Agent, C:\Users\Janny\AppData\Local\Temp\Microsoft.exe, 3392, , [907f80cc602ab482f7ed6da307fe52ae]

Modules: 0
(No malicious items detected)

Registry Keys: 7
PUP.Optional.Multiplug, HKU\S-1-5-21-2690658473-544632904-3922746831-1000_Classes\TYPELIB\{157B1AA6-3E5C-404A-9118-C1D91F537040}, , [33dcdd6fbad02b0b237d101c5ca7d828],
PUP.Optional.Multiplug, HKU\S-1-5-21-2690658473-544632904-3922746831-1000_Classes\INTERFACE\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4326}, , [33dcdd6fbad02b0b237d101c5ca7d828],
PUP.Optional.InstallBrain.A, HKLM\SOFTWARE\WOW6432NODE\InstallIQ, , [8b84de6ee1a95adc42a6c53f669e8779],
PUP.Optional.FastSearchings, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}, , [858a014b6b1faf87594192aff80dde22],
PUP.Optional.MultiPlug, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{4820778D-AB0D-6D18-C316-52A6A0E1D507}, , [5db2aaa2e7a3270f8647a436e71c16ea],
PUP.Optional.WebSearchInfo, HKU\S-1-5-21-2690658473-544632904-3922746831-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}, , [8e81fa526723c6702d6160ce6b9a1fe1],
PUP.Optional.WebSearchInfo, HKU\S-1-5-21-2690658473-544632904-3922746831-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}, , [f01f71dbc7c3aa8caae447e7e421c43c],

Registry Values: 1
PUP.Optional.WebSearchInfo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {BB74DE59-BC4C-4172-9AC4-73315F71CFFE}, , [e9262b217e0cea4cf4bd87bc20e58a76]

Registry Data: 0
(No malicious items detected)

Folders: 4
PUP.Optional.OffersWizard.A, C:\Program Files (x86)\Common Files\Config, , [5db2e864a5e51026c0da24c058ab18e8],
PUP.Optional.YoutubeAdblocker.A, C:\ProgramData\YoutubeAdblocker, , [f41b8fbd1d6d082e25dd9be4d52e8b75],
PUP.Optional.MultiPlug.A, C:\ProgramData\NeextCoup, , [d03f3f0d46440630b7ee356219eac63a],
PUP.Optional.MultiPlug.A, C:\Program Files (x86)\NeextCoup, , [46c93b11d5b50e2806a04d4af3103ac6],

Files: 7
PUP.Optional.MultiPlug.A, C:\ProgramData\webssave\X0H.exe, , [0b04ff4d32582c0a0b50294e47ba966a],
PUP.Optional.MultiPlug.A, C:\Windows\SysWOW64\setup.exe, , [040b62ea1c6e082e1561990f2bdaca36],
PUP.Optional.InstallD.A, C:\Windows\SysWOW64\installd.exe, , [cc4313398802c86e2f7a20c1e51e9868],
PUP.Optional.OffersWizard.A, C:\Program Files (x86)\Common Files\Config\ver.xml, , [5db2e864a5e51026c0da24c058ab18e8],
PUP.Optional.OffersWizard.A, C:\Program Files (x86)\Common Files\Config\uninstinethnfd.exe, , [5db2e864a5e51026c0da24c058ab18e8],
Trojan.Agent, C:\Users\Janny\AppData\Local\Temp\System32.exe, , [e42bad9f0b7fe74fbf2d15f6ba4b19e7],
Trojan.Agent, C:\Users\Janny\AppData\Local\Temp\Microsoft.exe, , [907f80cc602ab482f7ed6da307fe52ae],

Physical Sectors: 0
(No malicious items detected)


(end)
 
Upvote 0 Downvote
S

Sn3akr

Honorable
Nov 16, 2013
24
1
10,525
PUP.Optional.OffersWizard.A, C:\Program Files (x86)\Common Files\Config, , [5db2e864a5e51026c0da24c058ab18e8]

This sounds like your brother have clicked yes to some add plugin/program that he shouldn't.

Here's a link to a fix http://malwaretips.com/blogs/offerswizard-removal/
 
Upvote 0 Downvote
Solution
Janny1993UK

Janny1993UK

Distinguished
Feb 14, 2013
177
0
18,680


okay thank you :) ill have a look at it.
 
Upvote 0 Downvote
JP7PlaysMC

JP7PlaysMC

Distinguished
Jan 27, 2014
882
1
19,360
Use CCleaner to uninstall programs you don't want. Search online for programs that you're not sure if needed (http://www.shouldiremoveit.com/). Set MalwareBytes to do a scan each week or so, and regularly clean your PC using CCleaner. Besides that and regularly de-fragging your Hard Drive (if it's an HDD) there's not much else you can do.

 
Upvote 0 Downvote
You must log in or register to reply here.

TRENDING THREADS

Latest posts

Moderators online

Share this page

COMPANY
RESOURCES
FOLLOW
Top Bottom