WiredWX Hobby Weather ToolsLog in

 


Random music/ads playing

2 posters

descriptionRandom music/ads playing - Page 2 EmptyRe: Random music/ads playing

more_horiz
It's okay. It'll be fine.

Scan for malware

Random music/ads playing - Page 2 Bf_new Please download Malwarebytes Anti-Malware from HERE.


Double Click mbam-setup.exe to install the application.

  • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select "Perform Quick Scan", then click Scan.
  • The scan may take some time to finish,so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. If you are prompted to restart, please allow it to restart your computer. Failure to do this, will cause the infection to still be active on the computer.
  • Please save the log to a location you will remember.
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  • The log can also be found at C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt or at C:\Program Files\Malwarebytes' Anti-Malware\Logs\log-date.txt
  • Copy and paste the entire report in your next reply.

descriptionRandom music/ads playing - Page 2 EmptyRe: Random music/ads playing

more_horiz
Malwarebytes Anti-Malware 1.62.0.1300
www.malwarebytes.org

Database version: v2012.08.17.05

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Sarah :: SARAH-PC [administrator]

8/21/2012 3:20:25 PM
mbam-log-2012-08-21 (15-20-25).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 199548
Time elapsed: 3 minute(s), 17 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

descriptionRandom music/ads playing - Page 2 EmptyRe: Random music/ads playing

more_horiz
ESET Online Scan

Please run a free online scan with the [URL='http://www.eset.com/onlinescan/']ESET Online Scanner[/URL]

  • Tick the box next to YES, I accept the Terms of Use
  • Click Start
  • When asked, allow the ActiveX control to install, or it will ask to download an installer. Please do so an install it.
  • Click Start or wait for the scanner to load.
  • Make sure that the options Remove found threats and the option Scan unwanted applications are checked.
  • Click Scan (This scan can take several hours, so please be patient)
  • Once the scan is completed, there are a couple of things to keep in mind:
  • 1. If NO threats were found, allow the scanner to Uninstall on close and then close the Window.
  • 2. If threats WERE detected, click on List of Threats Found, Export to Text File...save it as ESET-Scan-Log.txt. Click the back button/link, put a checkmark to Uninstall Application on Close and then close the window.
  • Open the logfile from wherever you saved it
  • Copy and paste the contents in your next reply.

descriptionRandom music/ads playing - Page 2 EmptyRe: Random music/ads playing

more_horiz
C:\ProgramData\Tarma Installer\{DA00D550-BB91-4A26-AAE5-9172D626CAAE}\_Setupx.dll a variant of Win32/Adware.Yontoo.B application cleaned by deleting - quarantined
C:\TDSSKiller_Quarantine\19.08.2012_09.05.38\zasubsys0000\file0000\tsk0000.dta Win64/Patched.B.Gen trojan deleted - quarantined
C:\TDSSKiller_Quarantine\19.08.2012_09.05.38\zasubsys0000\zafs0000\tsk0002.dta Win64/Sirefef.AL trojan cleaned by deleting - quarantined
C:\TDSSKiller_Quarantine\19.08.2012_09.05.38\zasubsys0000\zafs0000\tsk0003.dta Win64/Sirefef.AH trojan cleaned by deleting - quarantined
C:\Users\Sarah\Downloads\cnet_mergemp3_zip.exe a variant of Win32/InstallCore.D application cleaned by deleting - quarantined
C:\Users\Sarah\Downloads\setup_569733.exe Win32/Toolbar.Zugo application deleted - quarantined

descriptionRandom music/ads playing - Page 2 EmptyRe: Random music/ads playing

more_horiz
Any more issues?

We need to know any other issues that are plaguing your computer. Kindly give a summary so we know how to continue from here.

Many of the things to note for us would be:

  • Slow computer
  • Error messages
  • Fake antivirus alerts or the icon in the system tray
  • svchost.exe running at 100%
  • System crashes or blue screen of death

descriptionRandom music/ads playing - Page 2 EmptyRe: Random music/ads playing

more_horiz
No, I haven't seen any other issues since the voices/music/advertisements stopped playing, which happened after running the Kapersky TSS thing. I was honestly pretty surprised when the last scan found some malware/trojans, because I felt like everything was clean.

Computer's running great and I can't thank you enough for your help with cleaning it all up.

descriptionRandom music/ads playing - Page 2 EmptyRe: Random music/ads playing

more_horiz
Hi! Your logs appear to be clean. If there are no more issues, then we shall clean up!

Clean up System Restore

Now, to get you off to a clean start, we will be creating a new Restore Point, then clearing the old ones to make sure you do not get reinfected, in case you need to "restore back."

To manually create a new Restore Point

  • Go to Control Panel and select System and Maintenance
  • Select System
  • On the left select Advance System Settings and accept the warning if you get one
  • Select System Protection Tab
  • Select Create at the bottom
  • Type in a name i.e. Clean
  • Select Create
Now we can purge the infected ones
  • Go back to the System and Maintenance page
  • Select Performance Information and Tools
  • On the left select Open Disk Cleanup
  • Select Files from all users and accept the warning if you get one
  • In the drop down box select your main drive i.e. C
  • For a few moments the system will make some calculations:
    Random music/ads playing - Page 2 Diskcleanup1
  • Select the More Options tab
    Random music/ads playing - Page 2 Moreoptions
  • In the System Restore and Shadow Backups select Clean up
    Random music/ads playing - Page 2 Moreoptions2
  • Select Delete on the pop up
  • Select OK
  • Select Delete


Run OTC to remove our tools

To remove all of the tools we used and the files and folders they created, please do the following:
Please download OTC.exe by OldTimer:
  • Save it to your Desktop.
  • Double click OTC.exe.
  • Click the CleanUp! button.
  • If you are prompted to Reboot during the cleanup, select Yes.
  • The tool will delete itself once it finishes.

Note: If any tool, file or folder (belonging to the program we have used) hasn't been deleted, please delete it manually.

Purge old temporary files

Download CCleaner Slim and save it to your Desktop - Alternate download link

When the file has been saved, go to your Desktop and double-click on ccsetupxxx_slim.exe
Follow the prompts to install the program.

* Double-click the CCleaner shortcut on the desktop to start the program.
* Click on the Options block on the left, then choose Cookies.
* Under Cookies to Delete, highlight any cookies you would like to retain permanently
* Click the right arrow > to move them to the Cookies to Keep window.
* Go into Options > Advanced & uncheck Only delete files in Windows Temp folders older than 48 hours
* Click Cleaner on the left then Run Cleaner on the right to run the program.
* Important: Make sure that ALL browser windows are closed before selecting Run Cleaner

Caution: Only use the Registry feature if you are very familiar with the registry.
Always back up your registry before making any changes. Exit CCleaner after it has completed it's process.

Security Check

Please download Security Check by screen317 from SpywareInfoforum.org or Changelog.fr.
  • Save it to your Desktop.
  • Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt; please post the contents of that document.


Tell me in your next reply, if you have completed these tasks:
  • Cleaned System Restore
  • Ran OTC
  • Ran CCleaner
  • Ran Security Check

Also, let me know how your computer is running, and don't forget to post the contents of the Security Check log.

descriptionRandom music/ads playing - Page 2 EmptyRe: Random music/ads playing

more_horiz
Hello and thank you very much for your help.

I completed the Clean System Restore, Ran OTC, Ran CCleaner, and Ran Security Check. Here is the text file:

Results of screen317's Security Check version 0.99.46
Windows 7 Service Pack 1 x64 (UAC is enabled)
Internet Explorer 9
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
WMI entry may not exist for antivirus; attempting automatic update.
`````````Anti-malware/Other Utilities Check:`````````
McAfee SiteAdvisor
Malwarebytes Anti-Malware version 1.62.0.1300
JavaFX 2.1.0
Java(TM) 6 Update 29
Java(TM) 7 Update 4
Java version out of Date!
Adobe Reader X (10.1.4)
Mozilla Firefox (14.0.1)
````````Process Check: objlist.exe by Laurent````````
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: 0%
````````````````````End of Log``````````````````````


The computer seems to be running fine now - I haven't heard any mysterious ads or anything playing since running the TDSS Killer. Do you know how I got that bug in the first place, or how I can avoid it in the future?

descriptionRandom music/ads playing - Page 2 EmptyRe: Random music/ads playing

more_horiz
Java version out of Date!
This might have a bit to do with it. Otherwise, just normal browsing or downloading is usually the trigger.

Java Update!

Please download the newest version of Java from Java.com.

Before installing: it is important to remove older versions of Java since it does not do so automatically and old versions still leave you vulnerable.
Go to the Control Panel and enter Add or Remove Programs (Programs and Features in Vista/7).
Search in the list for all previous installed versions of Java. (J2SE Runtime Environment). Please uninstall/remove each of them.

Once old versions are gone, please install the newest version.

Read more about Java exploit problems


Personal Tips on Preventing Malware

See this page for more info about malware and prevention.

Any other questions before I mark this topic solved?

descriptionRandom music/ads playing - Page 2 EmptyRe: Random music/ads playing

more_horiz
Everything looks great now. Thank you so much for your help, I really appreciate it!

descriptionRandom music/ads playing - Page 2 EmptyRe: Random music/ads playing

more_horiz
You're welcome. Smile...

descriptionRandom music/ads playing - Page 2 EmptyRe: Random music/ads playing

more_horiz
privacy_tip Permissions in this forum:
You cannot reply to topics in this forum