UNSOLVED

hunterabq

updated

13 years ago

H

hunterabq

11 Posts

0

22828

November 27th, 2013 08:00

Adware after Upgrade to Windows 7

Updated a Vista Dell Inspiration to Windows 7. After several restarts, got message from Dell about which programs needed to be updated - mostly drivers, and went thru the list, one by one, as they updates. After all those updates, started getting pop up adds every time I opened IE 10, which was also an update. Cannot seem to get rid of them.

Anytime I select anything on IE, a get 6-8 pop ads, some you cannot close. Pops ups are blocked in IE, but these keep coming thru.

Any suggested. Ran NS total scan; spy bot scan, and Dell Diagnostics. Problem still there.

  • Bugbatter

    4 Apprentice

    20487 Posts

    1112

    0

    Posted November 27th, 2013 10:00

    Hi Hunterabq,

    A bit more information may be needed.  You did not mention what type of popups you are getting -- Dell sponsored ads, or random ads for other things. Where did you obtain the Windows 7 media for your upgrade from Vista?  What type of security are you using? For the ads, I would try AdwCleaner.

    1. Please download, save to your Desktop, and run as Admin: http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/2-adwcleaner 
    2. You will be presented with a screen that contains a Search and a Delete button.  Click the Search button. That button will cause AdwCleaner to search your computer for unwanted programs and then display a log showing the various files, folders, and registry entries used by these programs.
    3. To delete these unwanted programs click on the Delete button. This will cause AdwCleaner to reboot your computer and remove the files and registry entries associated with the various adware that you are removing.
    4. On reboot, AdwCleaner will display a log showing the files, folders, and registry entries that were removed. It might be good to save that text file in case you have additional problems, and need to refer to it later. If so, you may need additional step-by-step help. Please post back if that is the case.

  • hunterabq

    11 Posts

    1112

    0

    Posted November 27th, 2013 11:00

    Pop ups are not from dell, unless I visit a dell page. Random mostly. Visited Zagg and got some there. Often for software upgrades, but not by software provider. Periodically it will change my home page to Sweet something, or I see Conduit in address???

    Windows 7 upgrade disk was from Dell, as part of deal when I bought the Inspiration with Vista 64. Had to update to talk to icloud to sync contacts.

    Security is Norton Security Suite, ver 20 something. Have also scanned with spy bot and Microsoft fix it, but fix does not id anything.

    Have been "given" two new toolbars (Intenet Helper 3.7) and (SweetpacksA14).

    Will try adwcleaner as soon as malwarebttes finishes.

    Also downgraded to IE 9 and see if that helps. Ads also pop up in firefox and Chrome, but don't run those usually and not sure if they up to date.

  • Bugbatter

    4 Apprentice

    20487 Posts

    1112

    0

    Posted November 27th, 2013 14:00

    Dell no longer handles one-on-one malware removal unless you use their paid support. Therefore, the regular volunteers on this Dell forum have been suggesting SpywareHammer so you can work with a trained analyst for free. The instructions for downloading and running a tool named DDS are posted HERE over at SpywareHammer in their Malware Removal Forum.

  • hunterabq

    11 Posts

    1112

    0

    Posted November 27th, 2013 14:00

     post the required DDS logs on the Malware Removal Forum at SpywareHammer ???

    What is the required DDS Log?

    Is Spywarhammer a different forum?

  • Bugbatter

    4 Apprentice

    20487 Posts

    1112

    0

    Posted November 27th, 2013 14:00

    Ah, okay, I know exactly what you've got on there.  If AdwCleaner doesn't help my suggestion is to post the required DDS logs on the Malware Removal Forum at SpywareHammer and have the staff trained in malware removal walk you through the diagnostic logs and a cleanup. They do not use remote access but will advise you step-by-step on what you can do. Please do not attempt to run any additional scans, install software, or use any other tools until an analyst can advise you on the next step. Please use the same username there as you have here. Help is free, but you will need to register there and follow the posting instructions.

    The instructions will inform you of where to download DDS and how to run a scan to post the output information. Don't forget to check your email and click on the link they send you in order to confirm your registration.

  • Bugbatter

    4 Apprentice

    20487 Posts

    1112

    0

    Posted November 27th, 2013 17:00

    Your registration has been approved. If for some reason you don't receive the confirmation email, just go ahead and post on SpywareHammer's MR Forum. They have handled that infection before, so unless something new shows up, I'm sure you'll be successful.

  • hunterabq

    11 Posts

    1112

    0

    Posted November 27th, 2013 19:00

    Tried to post. Discription of how it got that way, and copies of the two DDS documents. Not the documents - but a full copy of the text.

    Did log me in, but when tried to send, get:

    Get the following message:

    HTTP Error 403 Forbidden

    You don't have permission to access

    /simplemachinesforum/index.php?action=post2;start=0;board=10 on this server.

    Your computer may be infected with a virus or a trojan.  The Firewall has determined that you: Request Entity Attack:  x22!

    If you get this message in error, please contact the ADM1N and provide the date and time of this message.

  • hunterabq

    11 Posts

    1112

    0

    Posted November 28th, 2013 06:00

    No, was not sending DDS scripts as attachment. Spywarehammer instructions said to copy and paste. Added history of when this started and hit post, and that is when I go the error message.

  • Bugbatter

    4 Apprentice

    20487 Posts

    1112

    0

    Posted November 28th, 2013 06:00

    Did log me in, but when tried to send, get:
    Were you trying to send your logs as an attachment? That won't work unless you have special permission to attach a file.

    Try this: In the MR Forum, click New Topic on the upper right. When the text window opens, copy and paste your information. Click Post. Let me know if that does not work.

  • Bugbatter

    4 Apprentice

    20487 Posts

    387

    0

    Posted November 28th, 2013 14:00

    There is something in the script that is probably looking like malware to the firewall. As long as you are able to post here at Dell, see if you can post those two logs here. We'll have your helper look at them here and reply to you over at SpywareHammer.

    Start a topic over there in MR to hold the spot and explain that your logs are in the V&S forum at Dell.