TechSpot

ad.firstadsolutions problem

By thecheez
Dec 18, 2006
  1. hi,

    i have recently had a problem spring up where on opening mozilla firefox, an ie7 window pops up linking me through ad.firstadsolutions to an advertising page. this then persists through sporadic advertising pop ups. i have read numerous other posts suggesting multiple ad/spybot/virus scanners which i have tried and haven't succeeded in fixing the problem. i use avg antivirus and normally use spybot s&d, adaware and ccleaner. I've also used avg anti-spyware, smitfraud, housecall and kapersky on-line scanners and have performed a hijackthis log posted below. if anyone else has experienced this problem and overcome it or can see a problem with my log (i don't know how to read it :( ) i'd be grateful if they could suggest a solution.

    thanks, mike
     
  2. kitty500cat

    kitty500cat TS Evangelist Posts: 2,154   +6

    As far as I can read your HiJackThis log, it's clean. I wasn't sure about one entry though, and googling it didn't turn up much. Do you know anything about the 'Team Once Meal Store'?
    --kitty
    P.S. Welcome to TechSpot, mate!
     
  3. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Hello and welcome to Techspot.

    It looks like you may have some kind of lop infection.

    Go and read the Viruses/Spyware/Malware, preliminary removal instructions. Follow all the instructions exactly.


    Post fresh HJT and AVG Antispyware logs as attachments into this thread, only after doing the above.


    Regards Howard :wave: :wave:


    This thread is for the use of thecheez only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  4. thecheez

    thecheez TS Rookie Topic Starter

    thanks howard, i'll check into the lop removal instructions see if anything works.

    Kitty, that was an entry i wasn't sure about either, i've never hearf of the 'team once meal store' either. it was a folder with a meal.exe file inside in my application data folder but i can't delete it. it claims it's in use. however there is nothing listed in my task manager :\ does anyone know about this?

    thanks for your help, Mike
     
  5. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    The meal.exe file along with one or two other .exe files in your log is probably a trojan of some kind, lop related possibly.

    Once I have you new log files, I`ll have a better idea.

    Regards Howard :)

    This thread is for the use of thecheez only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  6. thecheez

    thecheez TS Rookie Topic Starter

    thanks howard,
    i checked into lop infections and the mealcool.exe file and folder seemed to fit the bill. this page: http://www.pchell.com/support/opensearchweb.shtml offered a removal tool which fixed the problem on the first run :) hopefully it can offer a fix for others with this problem.

    thanks for pointing me in the right direction, Mike
     
  7. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    I don`t know if that so called removal tool is legit, so use at your own risk.

    You`d be better of just following the instructions in the link I gave you.

    Regards Howard :)

    This thread is for the use of thecheez only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  8. thecheez

    thecheez TS Rookie Topic Starter

    Thanks Howard,

    i see what you're saying but i have already used the program and it fixed my problem,

    thanks anyway, Mike
     
  9. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Ok, no problem.

    It`d be a good idea to post at least a fresh HJT log, so I can check to see if it`s clean, but it`s up to you.

    Regards Howard :)

    This thread is for the use of thecheez only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  10. thecheez

    thecheez TS Rookie Topic Starter

    Sure, just in case I guess

    thanks, Mike
     
  11. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Run HJT with no other programmes open. Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).

    O2 - BHO: (no name) - {AE7CD045-E861-484f-8273-0445EE161910} - (no file)

    Click on the fix checked button.

    Close HJT and reboot your system.

    Other than the above, your HJT log is clean.

    If you have any further virus/spyware problems, please post in this thread.

    Regards Howard :)

    This thread is for the use of thecheez only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...