Popups when using Internet Explorer

[jayin804]

Hello, I need some assistance. When I use Windows Internet Explorer additional windows keep popping up. This did not start until 2 weeks ago. I'm taking classes online. Things where working fine until the school told me to install Mozilla Foxfire. I don't really care for it but it best supports my schools blackboard. Now when I use Windowns Internet Explorer all these windows keep popping up. Would you please assist me if you can. Thanks.

 

[kimsland]

Yes Foxfire can do that to Internet Explorer. Wait... there is no "Foxfire" I think you mean Firefox (it's well known by many, some even say that's all they use)

And didn't blackboards go out about 10yrs ago, how does it support your school's blackboard anyway?

Lets just go back a step, what are the popups exactly? Are they message boxes with writing in them? pictures? or extra Internet Explorer windows? You may need to provide more clearer information on what was installed and what pops up exactly

 

[jayin804]

Yes it is FireFox. And many of the schools still use some variation of the blackboard system. I'm taking classes through Ashford University and they use blackboard. I'm not exactly sure how FireFox supports blackboard. I just know that one night (the night of finals) I could not access the blackboard through Internet Explorer as I usually would. I had to call the help desk and after about an hour or so they directed me to install FireFox as it works best with the blackboard system.

Since installing FireFox (which I don't really like because I'm use to Internet Explorer) every time I open or am on Internet Explorer a window will pop up. Its usually some sort of ad/solicitation or infomercial about making money. This never happened before I installed FireFox.

 

[kimsland]

Oh yes that definitely sounds Malware (Virus; Spyware etc) related
Mind you Firefox itself did not cause the Malware to come, but obviously someone has been browsing the Internet somewhere where they probably shouldn't have

Anyway, please follow this exactly, and I'll see about changing the thread title a bit

Click Here ==> UPDATED 8-step Viruses/Spyware/Malware Preliminary Removal Instructions
Please read every step slowly and properly perform each step one at a time
Later on Attach the logs, I made a really easy guide on Attaching the logs here ==> https://www.techspot.com/vb/post733954-4.html

The entire process will take at least a couple of hours sometimes more, to complete all 8 steps

Reply back with logs once done

 

[jayin804]

Here are all the logs that where created.

 

[kimsland]

It's pretty bad, and you also forgot to remove the found malwares from Malwarebytes scan, but don't worry because it needs to be done again anyway (info below)
Obviously all these Malwares are coming in some how Are (or were) you running Peer 2 Peer file sharing programs? Or are you browsing bad sites or something? These types of sites can be p0rn or gaming or cr@ack sites etc, but P2P being the number one security threat.

Another point of interest is your AVG8 is not saving you from this influx of malwares, eventually if your system keeps getting bombarded like this, with poor protection, it will just keel over and fail, requiring a re-install to fix it, which may not be a bad idea anyway

Here's what to do

Uninstall your AVG Antivirus
Then run the removal tool
Here is the 32Bit version (most users): http://www.avg.com/filedir/util/avg_arm_sup_____.dir/avgremover.exe
Here is the 64Bit version: http://www.avg.com/filedir/util/avg_arv_sup_____.dir/avgremoverx64.exe

Restart

Install Avira free AntiVirus

Start up Malwarebytes again; Update it; then run a full scan (remove all found Malwares)
You need to run this multiple times, until all hidden Malwares are uncovered and removed

 

[jayin804]

My nephew had loaded LimeWire onto the computer. That may have been the cause.

 

[kimsland]

I agree

Ask him to read this


Info on using P2P Programs => https://www.techspot.com/vb/topic124748.html

Quote from 8-Step Removal Guide:

Uninstall File Sharing/P2P Programs

During the cleaning process all File Sharing Programs should be uninstalled
This is to avoid any possible reinfection of any malwares through file sharing

We reserve the right to withdraw our support:

• If such programs are found in your logs
• Should you not agree to their removal.

As they are normally set to bypass your Firewall and Anti-Virus software
Filesharing/P2P Programs serves as a constant threat to your computer

 

[jayin804]

I did uninstall the LimeWire when it was discovered the other day. I just finished running the Malware for the third time. The results are below:

Malwarebytes' Anti-Malware 1.36
Database version: 2026
Windows 5.1.2600 Service Pack 3

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Moderator Edit:
Pasted logs removed, all logs must be => attached

 

[kimsland]

Download Combofix Instructions

• Download Combofix to your desktop.
• Rename ComboFix to ComboF
• Double click ComboF & follow the prompts.
• A window will open with a warning.
• When the scan completes it will open a text window. Please attach that log back here together with a fresh HJT log.

 

[jayin804]

Okay, you lost me. What is an HJT Log?

Figured it out. Hijack This.

 

[kimsland]

Remove Limewire
Please click on: Start > Run > %appdata% > ok
Locate "Limewire" folder, right click on it, and click Delete -> yes


Un-install Combofix

• Click START then RUN
• Now type Combofix /u in the runbox and click OK
• 
• Any popup errors about Antivirus just ok or close

Note: 1 space after ComboFix in that uninstall command


Clear system restore points
Go to Start >> Run - type or copy/paste control sysdm.cpl,,4 and then press Enter
* Tick on the checkbox - Turn off System Restore on all drives
* Click Apply
Turn it back 'On' by unticking the same checkbox & click Apply > OK


Update Java
Run JavaRa
This will remove all your old Java stuff (that is not required)
It will also help you check for new Java updates


Run IE Reset
Through MS "Fixit" from here: http://support.microsoft.com/kb/923737
Or manually from here https://www.techspot.com/vb/post682762-2.html


Remove HJT entries
Run HJT scan only and check the following entries, then select fix

O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe

Un-install SuperAntiSpyware (user choice)
To uninstall SUPERAntiSpyware please visit the Control Panel and select the Add/Remove Programs option. Locate SUPERAntiSpyware in the list of software and click the Remove button.
If SuperAntiSpyware does not uninstall properly please run "SUPERAntiSpyware Uninstaller Assistant"
Read here for further info: http://www.superantispyware.com/supportfaqdisplay.html?faq=47


Cleanup
Download and run KCleaner https://www.techspot.com/downloads/4755-kcleaner.html
(uncheck RelevantKnowledge during install, pic here: http://i42.tinypic.com/aloy8z.gif)
Fully run (it says start actually )
Uninstall KCleaner once complete


Restart
All done