Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

AdChoices [Closed]


  • This topic is locked This topic is locked

#1
wfd31r

wfd31r

    Member

  • Member
  • PipPip
  • 21 posts

I am having difficulty removing Ad Choices from Fireforx.  Using Win 8.1 and most recent Firefox.

 

What program do I download.

 

Thanks.


  • 0

Advertisements


#2
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Hi there, first I need a little look see at the system

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
  • Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
  • Select additions at the bottom
  • Press Scan button.
    frst.JPG
  • It will produce a log called FRST.txt in the same directory the tool is run from.
  • Please attach both logs generated.
THEN

Download aswMBR.exe ( 4.5mb ) to your desktop.
Double click the aswMBR.exe to run it.
You may be offered the option of using virtualisation, accept that
When it offers to download the virus database allow that as well
Click the "Scan" button to start scan

AswMBR%20scan.JPG


On completion of the scan click save log, save it to your desktop and post in your next reply
  • 0

#3
wfd31r

wfd31r

    Member

  • Topic Starter
  • Member
  • PipPip
  • 21 posts

Hi, thanks for taking up the case. 

 

These are my logs as requested.

 

Thanks WFD31r

Attached Files


  • 0

#4
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Could you let me know if this kills it :)

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:
 

CreateRestorePoint:
HKU\S-1-5-21-1082005236-1306948651-505354304-1001\...\Run: [Open Install] => C:\Users\Paul\AppData\Local\Open Install\Open Install\1.3.14.5\openinstall.exe
AlternateDataStreams: C:\Users\Paul\Documents\Form 100.jpeg:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Paul\Documents\Form 100.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
AlternateDataStreams: C:\Users\Paul\Documents\Kevin.jpeg:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Paul\Documents\Kevin.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
AlternateDataStreams: C:\Users\Paul\Documents\PY.jpeg:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Paul\Documents\PY.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
AlternateDataStreams: C:\Users\Paul\Documents\RC.jpeg:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Paul\Documents\RC.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
AlternateDataStreams: C:\Users\Paul\Documents\Scott.jpeg:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Paul\Documents\Scott.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
C:\Users\Paul\AppData\Local\Open Install
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
RemoveProxy:
EmptyTemp:
CMD: bitsadmin /reset /allusers


Save this as fixlist.txt, in the same location as FRST.exe
FRSTfix.JPG
Run FRST and press Fix
On completion a log will be generated please post that

THEN

Please download AdwCleaner by Xplode onto your desktop.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click on Scan.
  • After the scan is complete click on "Clean"
  • Confirm each time with Ok.
  • Your computer will be rebooted automatically. A text file will open after the restart.
  • Please post the content of that logfile with your next answer.
  • You can find the logfile at C:\AdwCleaner[S0].txt as well.

  • 0

#5
wfd31r

wfd31r

    Member

  • Topic Starter
  • Member
  • PipPip
  • 21 posts

Attached new log's per request.

 

BTW, unable to scroll using mouse.  Can only scroll using up/down keys.

 

 

Attached Files


  • 0

#6
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Is the mouse wireless or USB ?

Are the ads still present ?
  • 0

#7
wfd31r

wfd31r

    Member

  • Topic Starter
  • Member
  • PipPip
  • 21 posts
Yes darn it, the ads are still present. The mouse is wired.
  • 0

#8
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Which browser are the ads in ? Is it firefox, IE or both ?
  • 0

#9
wfd31r

wfd31r

    Member

  • Topic Starter
  • Member
  • PipPip
  • 21 posts

I use Firefox browser.  some web pages scroll OK, but this Geeks To Go page does not.  Also, my web mail, also thru Firefox will not scroll.

 

The ads appear on the Firefox (Time Warner Cable mail page.


  • 0

#10
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Is it just on that page alone ?

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

CreateRestorePoint:
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: ipconfig /flushdns
CMD: netsh winsock reset catalog
CMD: netsh int ip reset c:\resetlog.txt
CMD: ipconfig /release
CMD: ipconfig /renew
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
EmptyTemp:
CMD: bitsadmin /reset /allusers


Save this as fixlist.txt, in the same location as FRST.exe
FRSTfix.JPG
Run FRST and press Fix
On completion a log will be generated please post that
  • 0

Advertisements


#11
wfd31r

wfd31r

    Member

  • Topic Starter
  • Member
  • PipPip
  • 21 posts

Hello, attached requested download.

 

Here's what is happening. 

1.  I use Firefox Browser.

2.  My home page is www.twcc.com (Time Warner)

3.  The Ad choice banner pops up on my email page  www.mail.twcc.com, and freezes my mouse.  I can only scroll down using the keyboard.

4.. If my mail page is open, and I click a link, such as you send me.  The Geeks to go or any ohter liknked page opens, but disables my mouse.

5.  I can not find any software listing in my pc for Ad Choices.

 

Thanks for all you do.

 

WFD31r

Attached Files


  • 0

#12
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Could you try IE please and see if you get the same problem.. Also does this occur on any other page apart from twcc.com mail ?
  • 0

#13
wfd31r

wfd31r

    Member

  • Topic Starter
  • Member
  • PipPip
  • 21 posts

Hi, same problem with using IE.  Tried MS Outlook, same problem with email.  I open an email, like yours, and cannot scroll to see entire message.

 

Other pages on bouth browsers appear to work OK, and scrolling works.

 

Ad Choice banner on mail page still appearing on both browsers.

 

WFD31r


  • 0

#14
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
This sounds to me like the web page itself is infected and not your computer

I will confirm that but it is I believe the case

Download AVZ tool from here to your desktop
Unzip all files to a folder on your desktop
Open the folder and double click the AVZ icon avz.JPG
When the tool opens select "File" > "Standards scripts"
avz1.jpg

Place a tick in :


5. Update signature database

Then press "Execute selected scripts"
avz2.JPG

Once that has execute then
select "File" > "Standards scripts"
Place a tick in :

3. Advanced System Analysis with malware removal mode enabled


When finished look in the folder AVZ4 on your desktop
Open the LOG folder
Attach virusinfo_syscure to your next post
vz3.JPG
  • 0

#15
wfd31r

wfd31r

    Member

  • Topic Starter
  • Member
  • PipPip
  • 21 posts

OK, here is the AVZ4 log you requested.

 

Thanks.

 

WFD31r


  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP