[wfd31r]

I am having difficulty removing Ad Choices from Fireforx.  Using Win 8.1 and most recent Firefox.

 

What program do I download.

 

Thanks.

[Advertisements]

Hi there, first I need a little look see at the system

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

• Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
• Select additions at the bottom
• Press Scan button.
  
• It will produce a log called FRST.txt in the same directory the tool is run from.
• Please attach both logs generated.

THEN

Download aswMBR.exe ( 4.5mb ) to your desktop.
Double click the aswMBR.exe to run it.
You may be offered the option of using virtualisation, accept that
When it offers to download the virus database allow that as well
Click the "Scan" button to start scan




On completion of the scan click save log, save it to your desktop and post in your next reply

[Essexboy]

Hi there, first I need a little look see at the system

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

• Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
• Select additions at the bottom
• Press Scan button.
  
• It will produce a log called FRST.txt in the same directory the tool is run from.
• Please attach both logs generated.

THEN

Download aswMBR.exe ( 4.5mb ) to your desktop.
Double click the aswMBR.exe to run it.
You may be offered the option of using virtualisation, accept that
When it offers to download the virus database allow that as well
Click the "Scan" button to start scan




On completion of the scan click save log, save it to your desktop and post in your next reply

[wfd31r]

Hi, thanks for taking up the case. 

 

These are my logs as requested.

 

Thanks WFD31r

Attached Files

•  Addition.txt   21.08KB   193 downloads
•  FRST.txt   28.34KB   201 downloads

[Essexboy]

Could you let me know if this kills it

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:
 

CreateRestorePoint:
HKU\S-1-5-21-1082005236-1306948651-505354304-1001\...\Run: [Open Install] => C:\Users\Paul\AppData\Local\Open Install\Open Install\1.3.14.5\openinstall.exe
AlternateDataStreams: C:\Users\Paul\Documents\Form 100.jpeg:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Paul\Documents\Form 100.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
AlternateDataStreams: C:\Users\Paul\Documents\Kevin.jpeg:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Paul\Documents\Kevin.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
AlternateDataStreams: C:\Users\Paul\Documents\PY.jpeg:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Paul\Documents\PY.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
AlternateDataStreams: C:\Users\Paul\Documents\RC.jpeg:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Paul\Documents\RC.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
AlternateDataStreams: C:\Users\Paul\Documents\Scott.jpeg:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Paul\Documents\Scott.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
C:\Users\Paul\AppData\Local\Open Install
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
RemoveProxy:
EmptyTemp:
CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

Run FRST and press Fix
On completion a log will be generated please post that

THEN

Please download AdwCleaner by Xplode onto your desktop.

• Close all open programs and internet browsers.
• Double click on AdwCleaner.exe to run the tool.
• Click on Scan.
• After the scan is complete click on "Clean"
• Confirm each time with Ok.
• Your computer will be rebooted automatically. A text file will open after the restart.
• Please post the content of that logfile with your next answer.
• You can find the logfile at C:\AdwCleaner[S0].txt as well.

[wfd31r]

Attached new log's per request.

 

BTW, unable to scroll using mouse.  Can only scroll using up/down keys.

 

 

Attached Files

•  Fixlog.txt   4.37KB   273 downloads
•  AdwCleanerS1.txt   970bytes   213 downloads

[Essexboy]

Is the mouse wireless or USB ?

Are the ads still present ?

[wfd31r]

Yes darn it, the ads are still present. The mouse is wired.

[Essexboy]

Which browser are the ads in ? Is it firefox, IE or both ?

[wfd31r]

I use Firefox browser.  some web pages scroll OK, but this Geeks To Go page does not.  Also, my web mail, also thru Firefox will not scroll.

 

The ads appear on the Firefox (Time Warner Cable mail page.

[Essexboy]

Is it just on that page alone ?

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

CreateRestorePoint:
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: ipconfig /flushdns
CMD: netsh winsock reset catalog
CMD: netsh int ip reset c:\resetlog.txt
CMD: ipconfig /release
CMD: ipconfig /renew
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
EmptyTemp:
CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

Run FRST and press Fix
On completion a log will be generated please post that

[wfd31r]

Hello, attached requested download.

 

Here's what is happening. 

1.  I use Firefox Browser.

2.  My home page is www.twcc.com (Time Warner)

3.  The Ad choice banner pops up on my email page  www.mail.twcc.com, and freezes my mouse.  I can only scroll down using the keyboard.

4.. If my mail page is open, and I click a link, such as you send me.  The Geeks to go or any ohter liknked page opens, but disables my mouse.

5.  I can not find any software listing in my pc for Ad Choices.

 

Thanks for all you do.

 

WFD31r

Attached Files

•  Fixlog.txt   4.97KB   186 downloads

[Essexboy]

Could you try IE please and see if you get the same problem.. Also does this occur on any other page apart from twcc.com mail ?

[wfd31r]

Hi, same problem with using IE.  Tried MS Outlook, same problem with email.  I open an email, like yours, and cannot scroll to see entire message.

 

Other pages on bouth browsers appear to work OK, and scrolling works.

 

Ad Choice banner on mail page still appearing on both browsers.

 

WFD31r

[Essexboy]

This sounds to me like the web page itself is infected and not your computer

I will confirm that but it is I believe the case

Download AVZ tool from here to your desktop
Unzip all files to a folder on your desktop
Open the folder and double click the AVZ icon
When the tool opens select "File" > "Standards scripts"


Place a tick in :


5. Update signature database

Then press "Execute selected scripts"


Once that has execute then
select "File" > "Standards scripts"
Place a tick in :

3. Advanced System Analysis with malware removal mode enabled


When finished look in the folder AVZ4 on your desktop
Open the LOG folder
Attach virusinfo_syscure to your next post

[wfd31r]

OK, here is the AVZ4 log you requested.

 

Thanks.

 

WFD31r