[Nullarbor]

I should point out first I am very rusty with trouble shooting computers, so I would really appreciate any help be done step by step as if talking to an idiot
As for the problem itself it just seemed to come up from nowhere. Maybe from down loading picsa a while back where i got a browser hijacker that i removed or disabled More likely after software updates earlier this week when all [bleep] broke loose with pop ups
Whenever I go to various sites I get pop-up box messages some times trying to tell me that something is wrong with my PC and an automatic redirection happens. other times its quick money making schemes or hard core porn sites There doesn't seem to be any sort of pattern as to what sets it off. Sometimes I'll go to the local news paper website and it'll be fine, other times a box will pop-up. So that's just the basic idea of what the issue is. I have managed to work out some of the pop ups and redirects are coming from reduxmediia, adcash , Also on a couple of sites i have spoted a transparent giff that randomly appears and tends to want to link hXXp://t.cttrsv. c o m i have a feeling its a flash or java exploit.
As to what I have done so far:
I did do a fix on the host file using MicrosoftFixit50267 as it had been changed to various sites of a dubious nature this slowed the pop up down but didnt stop them.
I've googled various fixes for it but none of the steps seem to really match anything I can do/find. For example, they say to go into settings and delete extensions and have screenshots of what you should see when you go there, but when i do that there is nothing listed in the extensions at all. Likewise they say to start off by going into control panel and/or task manager and deleting certain files or stop certain programs running, but there doesn't seem to be any sort of variation of the files/programs they are telling me to delete which is in my add/remove program or task manager.
I have downloaded various any virus/malware programs malwarebytes, Ccleaner JRT adaware , emisoft antimalware farbar minitool many of which have found things when I run them but after doing a clean out nothing seems to change.I have tried resetting my router also. In short, I don't really know what exactly I am looking for on my computer to delete and any guides I find tell me to delete things which just aren't present where they say they should be on my PC.
I have reset all browsers
Programs used
r kill
malawarebytes anti malware
malawarebytes ant root kit
malaware anti exploit is running
Emsisoft Antimalaware
adwcleaner
Junkware removal tool
Farb mini tool
I can alleviate my problem running Adblock pro with pop up addon and a java script blocker in fire fox I also use IE and chrome bt dont have the script blocker installed
My son is having similar problems with his lap top also. So i guess i will have 2 machines to sort out and we could be dealing with a router being hacked Aswell . Lets deal with one issue at a time
 

edit
I have uninstalled java 7 and installed java 8
uninstalled MSE and installed avast anti virus.
Desk top is flahing at times and PC labouring. .
curently running java script blocker and Add block pro in Fire fox.
IE has pop ups blocked and now specifically blocking sites im being redirected to by adding them to blocking filters.

Although i am unable to find processes of the malware in task manager.
this is supposed to be a fix for t.cttsrv

Stop processes of this malware:
Open Task Manager to stop processes.
Remove associated registry settings:
HKEY_CLASSES_ROOT\urlsearchhook.toolbarurlsearchhook
HKEY_LOCAL_MACHINE\software\classes\urlsearchhook.toolbarurlsearchhook
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar
HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\extensions,
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run .exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings WarnonBadCertRecving = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop NoChangingWallPaper = 1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments SaveZoneInformation = 1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System DisableTaskMgr = 1
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download CheckExeSignatures = no
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main Use FormSuggest = yes
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced ShowSuperHidden = 0
Delete t.cttsrv.com infected files:
%Profile%\Local Settings\Temp\

have run ccleaner today and came across some enreries that disable registery tools and task manager i quarantined them.

Attached Files

•  OTL.Txt   100.9KB   169 downloads

Edited by Nullarbor, 24 October 2014 - 06:11 PM.

[Advertisements]

Welcome Nullarbor

 

I'm 23red, and it'll be my pleasure to assist you with your computer issues.  I am currently reviewing your log.  In the meantime, I'd be grateful if you would note the following:

 

•  Please make sure to carefully read every post completely before doing anything.
 
•  If you're not sure, or if something unexpected happens, do not continue! Stop and ask!  It is not a problem.

•  Please do not run any other scans or other software on your computer unless asked as it may make this repair more difficult.
 
•  Please stick with me until all malware is gone from your system.  Malware removal is not an instant process, just because you no longer see any symptoms it does not necessarily mean your system is completely clear.

 

•  Please copy/paste to Notepad and save my instructions as a text file on your desktop, or print them out, as you may not be able to access this thread at times.

 

• Back up your data. I will not knowingly suggest your any course that might damage your system but sometimes Malware infections are so severe that only option we have is to re-format and re-install the operating system.

 

•  As I am currently in training, I will be helping you under the supervision of our Expert Teachers.   As such, there will likely be a delay between posts.   I do my best to respond as quick as I can.  I, like everyone else here am also a volunteer and sometimes life keeps me busy 

 

•  Thank you for your understanding and I appreciate your patience.

 

Please allow some time to go through the log you posted.  I'll post back as soon as possible.  In the mean time, when you ran OTL, there were two logs generated.  The second was Extras.txt. 
It should be located at C:\Users\David\Desktop\Security tools

May you please post it here.  Also, the tools we run need to be run from the Desktop.  I see OTL is in a folder, please take it out of the folder and place it directly on the Desktop.

 

Thank you

[23red]

Welcome Nullarbor

 

I'm 23red, and it'll be my pleasure to assist you with your computer issues.  I am currently reviewing your log.  In the meantime, I'd be grateful if you would note the following:

 

•  Please make sure to carefully read every post completely before doing anything.
 
•  If you're not sure, or if something unexpected happens, do not continue! Stop and ask!  It is not a problem.

•  Please do not run any other scans or other software on your computer unless asked as it may make this repair more difficult.
 
•  Please stick with me until all malware is gone from your system.  Malware removal is not an instant process, just because you no longer see any symptoms it does not necessarily mean your system is completely clear.

 

•  Please copy/paste to Notepad and save my instructions as a text file on your desktop, or print them out, as you may not be able to access this thread at times.

 

• Back up your data. I will not knowingly suggest your any course that might damage your system but sometimes Malware infections are so severe that only option we have is to re-format and re-install the operating system.

 

•  As I am currently in training, I will be helping you under the supervision of our Expert Teachers.   As such, there will likely be a delay between posts.   I do my best to respond as quick as I can.  I, like everyone else here am also a volunteer and sometimes life keeps me busy 

 

•  Thank you for your understanding and I appreciate your patience.

 

Please allow some time to go through the log you posted.  I'll post back as soon as possible.  In the mean time, when you ran OTL, there were two logs generated.  The second was Extras.txt. 
It should be located at C:\Users\David\Desktop\Security tools

May you please post it here.  Also, the tools we run need to be run from the Desktop.  I see OTL is in a folder, please take it out of the folder and place it directly on the Desktop.

 

Thank you

[Nullarbor]

Sorry to waste your time. i have just started recieving help on another form.

[Essexboy]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.