Author Topic: New Toshiba With Pop Up Problems  (Read 14446 times)

0 Members and 1 Guest are viewing this topic.

Offline mare_wbpa

  • Full Member
  • ***
  • Posts: 217
    • View Profile
New Toshiba With Pop Up Problems
« on: September 17, 2014, 11:55:16 PM »
Starting a new thread on this new laptop: Just Started using it yesterday. 1st thing I did was create Recovery Discs, I then deleted the trial version of Norton, downloaded Firefox, activated Windows Defender and downloaded and installed Avast.  I'm getting pop ups all over the place and have several Avast alerts especially when I click into a search box.  Help already.

  LAPTOP SUMMARY
Intel® Pentium® N3530 Processor
Windows 8.1
8GB DDR3L 1333MHz memory
Intel® Integrated Graphics
500GB HDD (5400rpm, Serial ATA)
DVD-SuperMulti drive (+/-R double layer)

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 20802
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
Re: New Toshiba With Pop Up Problems
« Reply #1 on: September 18, 2014, 12:18:21 AM »
First things first, Windows Defender on Windows 8/8.1 is antivirus software so with Avast installed, make sure that Windows Defender is not activated.  There aren't as many tools that work on Windows 8/8.1 but let's see what AdwCleaner shows.

Please download Adware Cleaner by Xplode.    Please save it to your desktop!
  • Close all open programs and internet browsers.
  • Double-click AdwCleaner.exe to run the tool. 
    Note:  Windows Vista, Windows 7/8 users right-click and select Run As Administrator.
  • Click the Scan button.
  • AdwCleaner will begin.  Be patient as the scan may take some time to complete.
  • After the scan has finished, click the Report button.  A logfile (AdwCleaner[R0].txt) will open in Notepad for review.
  • Copy and paste the contents of that logfile in your next reply.
  • A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline mare_wbpa

  • Full Member
  • ***
  • Posts: 217
    • View Profile
Re: New Toshiba With Pop Up Problems
« Reply #2 on: September 18, 2014, 12:36:39 AM »
# AdwCleaner v3.310 - Report created 17/09/2014 at 21:33:35
# Updated 12/09/2014 by Xplode
# Operating System : Windows 8.1  (64 bits)
# Username : MaryAnn - MYLAPTOP
# Running from : C:\Users\MaryAnn\Downloads\adwcleaner_3.310.exe
# Option : Clean

***** [ Services ] *****

  • Service Deleted : BackupStack

Service Deleted : pastaleadsServiceCore
Service Deleted : webinstr
  • Service Deleted : Update snipsmart
  • Service Deleted : Util snipsmart

Service Deleted : {6ccfd995-07be-49cf-8ad6-1422dc08761a}Gw64

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\pastaleads
Folder Deleted : C:\ProgramData\Pokki
Folder Deleted : C:\ProgramData\Systweak
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced System Protector
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegClean Pro
Folder Deleted : C:\Program Files (x86)\Advanced System Protector
Folder Deleted : C:\Program Files (x86)\AnyProtectEx
Folder Deleted : C:\Program Files (x86)\LPT
Folder Deleted : C:\Program Files (x86)\MyPC Backup
Folder Deleted : C:\Program Files (x86)\pastaleads
Folder Deleted : C:\Program Files (x86)\RegClean Pro
Folder Deleted : C:\Program Files (x86)\RocketTab
Folder Deleted : C:\Program Files (x86)\SearchProtect
Folder Deleted : C:\Program Files (x86)\snipsmart
Folder Deleted : C:\Program Files (x86)\ver1BlockAndSurf
Folder Deleted : C:\Users\MaryAnn\AppData\Local\ConvertAd
Folder Deleted : C:\Users\MaryAnn\AppData\Local\LPT
Folder Deleted : C:\Users\MaryAnn\AppData\Local\Pokki
Folder Deleted : C:\Users\MaryAnn\AppData\Local\SearchProtect
Folder Deleted : C:\Users\MaryAnn\AppData\Local\Smartbar
Folder Deleted : C:\Users\MaryAnn\AppData\Local\Temp\snipsmart
Folder Deleted : C:\Users\MaryAnn\AppData\LocalLow\Smartbar
Folder Deleted : C:\Users\MaryAnn\AppData\Roaming\ap_logs
Folder Deleted : C:\Users\MaryAnn\AppData\Roaming\Systweak
Folder Deleted : C:\Users\MaryAnn\AppData\Roaming\VOPackage
Folder Deleted : C:\Users\MaryAnn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AnyProtect PC Backup
Folder Deleted : C:\Users\MaryAnn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
Folder Deleted : C:\Users\Public\Pokki
File Deleted : C:\Users\Public\Desktop\Advanced System Protector.lnk
File Deleted : C:\Users\Public\Desktop\RegClean Pro.lnk
File Deleted : C:\Windows\System32\drivers\webinstr.sys
File Deleted : C:\Windows\System32\roboot64.exe
File Deleted : C:\Windows\System32\sasnative64.exe
File Deleted : C:\Windows\System32\drivers\{6ccfd995-07be-49cf-8ad6-1422dc08761a}Gw64.sys
File Deleted : C:\Users\MaryAnn\AppData\Roaming\aps.scan.quick.results
File Deleted : C:\Users\MaryAnn\AppData\Roaming\aps.scan.results
File Deleted : C:\Users\MaryAnn\AppData\Roaming\aps.uninstall.scan.results
File Deleted : C:\Users\MaryAnn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
File Deleted : C:\Users\MaryAnn\Desktop\AnyProtect.lnk
File Deleted : C:\Users\MaryAnn\Desktop\Configure VO Package.lnk
File Deleted : C:\Users\MaryAnn\Desktop\Continue Live Installation.lnk
File Deleted : C:\Users\MaryAnn\Desktop\MyPC Backup.lnk
File Deleted : C:\Users\MaryAnn\Desktop\Sync Folder.lnk
File Deleted : C:\Users\MaryAnn\AppData\Roaming\Mozilla\Firefox\Profiles\noewtotp.default\user.js

***** [ Scheduled Tasks ] *****

Task Deleted : APSnotifierPP1
Task Deleted : APSnotifierPP2
Task Deleted : APSnotifierPP3
Task Deleted : LaunchSignup
Task Deleted : RocketTab Update Task
Task Deleted : RocketTab

***** [ Shortcuts ] *****


***** [ Registry ] *****

Value Deleted : HKCU\Software\Mozilla\Firefox\Extensions [{2807B33F-3F4E-B5BF-F662-1D4E6CE039FD}]
Key Deleted : HKCU\Software\Classes\pokki
Key Deleted : HKCU\Software\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\superfish.com
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.superfish.com
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.superfish.com
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Browser Infrastructure Helper]
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Pokki]
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.bandobjectattribute
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.bho
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.dockingpanel
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbar
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbarbandobject
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.smartbardisplaystate
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.smartbarmenuform
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\mypc backup
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\snipsmart_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\snipsmart_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\updatesnipsmart_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\updatesnipsmart_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\utilsnipsmart_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\utilsnipsmart_RASMANCS
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\Update snipsmart
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\Util snipsmart
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6D4506CE-F855-4657-AA38-DB6B1F733982}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{982AEA8D-9EB1-2F8F-F81D-AB8337CE10DD}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{68261aaa-dc9f-4c2b-a168-c323e304c3a2}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4086DF47-C0E9-4EA0-A7E4-FDD954B182A1}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{03771AEF-400D-4A13-B712-25878EC4A3F5}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{0c8e7de5-d3f4-4ff0-be7d-2547ff22a3bb}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{68261aaa-dc9f-4c2b-a168-c323e304c3a2}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{982AEA8D-9EB1-2F8F-F81D-AB8337CE10DD}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{68261aaa-dc9f-4c2b-a168-c323e304c3a2}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{982AEA8D-9EB1-2F8F-F81D-AB8337CE10DD}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{68261aaa-dc9f-4c2b-a168-c323e304c3a2}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{982AEA8D-9EB1-2F8F-F81D-AB8337CE10DD}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4086DF47-C0E9-4EA0-A7E4-FDD954B182A1}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{982AEA8D-9EB1-2F8F-F81D-AB8337CE10DD}
Value Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Key Deleted : HKCU\Software\AnyProtect
Key Deleted : HKCU\Software\Pokki
Key Deleted : HKCU\Software\RocketTabInstalled
Key Deleted : HKCU\Software\SmartBar
Key Deleted : HKCU\Software\smartbarbackup
Key Deleted : HKCU\Software\smartbarlog
Key Deleted : HKCU\Software\snipsmart
Key Deleted : HKCU\Software\AppDataLow\Software\blockAndSurf
Key Deleted : HKLM\SOFTWARE\NpApp
Key Deleted : HKLM\SOFTWARE\RocketTab
Key Deleted : HKLM\SOFTWARE\SearchProtect
Key Deleted : HKLM\SOFTWARE\systweak
Key Deleted : HKLM\SOFTWARE\snipsmart
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AnyProtect
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\pastaleads
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RegClean Pro_is1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RocketTab
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VOPackage
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\5242B4AF-9CA9-3708-AA06-18F697891D24
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\snipsmart
Data Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\5E8031606EB60A64C882918F8FF38DD4

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17278

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Secondary Start Pages]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Secondary_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Secondary_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Secondary Start Pages]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Secondary_Page_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Secondary Start Pages]

-\\ Mozilla Firefox v32.0.1 (x86 en-US)

[ File : C:\Users\MaryAnn\AppData\Roaming\Mozilla\Firefox\Profiles\noewtotp.default\prefs.js ]


-\\ Google Chrome v

[ File : C:\Users\MaryAnn\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [14458 octets] - [17/09/2014 21:25:40]
AdwCleaner[R1].txt - [14519 octets] - [17/09/2014 21:30:45]

Offline winchester73

  • Half a bubble off plumb
  • Administrator
  • Hero Member
  • *****
  • Posts: 7424
  • Liverpool FC - YNWA
    • View Profile
Re: New Toshiba With Pop Up Problems
« Reply #3 on: September 18, 2014, 12:41:13 PM »
Quote
# Option : Clean

I see you ran the "clean" option after you the "report" Corrine asked for.  If something isn't working properly, we'll have to look for false positives that AdwCleaner removed by accident.

In your list of "what I did so far", you didn't mention where/how you got Advanced System Protector and RegClean Pro.  You installed a bunch of garbage in just one day  :(
Speak softly, but carry a big Winchester ... Winchester Arms Collectors Association member

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 20802
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
Re: New Toshiba With Pop Up Problems
« Reply #4 on: September 18, 2014, 01:11:57 PM »
Just Started using it yesterday.
Where do you go to download files -- what website do you use?

Seeing as how you have already gone ahead with the clean option, let's proceed with JRT and then MBAM.

1.  Please download Junkware Removal Tool to your desktop.
  • Disable your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it.  If you are using Windows Vista or Seven, right-mouse click it and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.

2.  Please download Malwarebytes Anti-Malware FREE Version from here: http://downloads.malwarebytes.org/file/mbam and save it to your Desktop.

Note::  MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.
 
  • Make sure you are connected to the Internet.
  • Double-click to execute the installation. Accept the terms, and allow MBAM to install to the default location in your Program Files.
  • Please update the database by clicking on the Update Now button as shown below.


  • Following the update, click on the large green Scan Now button to begin the Threat Scan.

Note: Optionally, you could have simply clicked Fix Now if it is displayed. That will automatically download updates and run a Threat Scan.
If Malware or Potentially Unwanted Programs are found you will receive a Prompt so that you can decide what you want to do. I suggest "Quarantine". Click the button: Apply All Actions.
  • A window with an option to view the detailed log will appear. Click on View Detailed Log.

    • After viewing the results, please click on the Copy to Clipboard button > OK.

  • Paste your log into your next reply.
  • Note: If you lose the Clipboard copy and need to retrieve the log again it can be found by opening Malwarebytes and clicking on History> Application Logs with the date of the scan. Simply double-click on that in order to see the options for Copying to Clipboard or to Export to a .txt file (Notepad). etc.. The .txt file can be saved and posted when you are ready.


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline mare_wbpa

  • Full Member
  • ***
  • Posts: 217
    • View Profile
Re: New Toshiba With Pop Up Problems
« Reply #5 on: September 18, 2014, 01:38:57 PM »
I didn't download Advanced System Protector and RegClean Pro on purpose.  I hit the clean button by accident when I meant to hit the report button.  Sorry about that.  I usually go to Cnet to download programs like Mbam or Avast.  The pop up situation is so much better since I ran the AdwCleaner.  I'll be running the others soon and get back to you.  I don't know how this all happened.

Offline winchester73

  • Half a bubble off plumb
  • Administrator
  • Hero Member
  • *****
  • Posts: 7424
  • Liverpool FC - YNWA
    • View Profile
Re: New Toshiba With Pop Up Problems
« Reply #6 on: September 18, 2014, 01:49:15 PM »
I'd suggest you avoid C|net and go directly to the developer's site to get a program.  If you use a third-party site like C|net, you really have to pay careful attention to what you are clicking to make sure you are getting only (and exactly) what you want, without additional clutter.  You also have to read and understand the steps you are working your way through, and avoid hitting buttons by "accident".

Direct links to common applications like MBAM and Avast are provided here at LzD:

Security Software Programs: http://www.landzdown.com/anti-spyware-software/

General Software News:  http://www.landzdown.com/general-software-news-updates-discussions/
Speak softly, but carry a big Winchester ... Winchester Arms Collectors Association member

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 20802
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
Re: New Toshiba With Pop Up Problems
« Reply #7 on: September 18, 2014, 01:57:48 PM »
That explains it!  I'd do more than "suggest" avoiding C|Net -- NEVER go to C|Net or any other download site especially when you can download programs from the vendor site.  Using C|Net and other download sites explains why you have been having so many problems with the garbage that has been installed on your computers.  See Safe software download sites: Beware of deceptive download links.  Even with vendor sites, particularly those providing free software, you need to pay attention every step of the way during the installation.


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline winchester73

  • Half a bubble off plumb
  • Administrator
  • Hero Member
  • *****
  • Posts: 7424
  • Liverpool FC - YNWA
    • View Profile
Re: New Toshiba With Pop Up Problems
« Reply #8 on: September 18, 2014, 02:37:48 PM »
Let's see the results of the JRT and MBAM scans  :D
Speak softly, but carry a big Winchester ... Winchester Arms Collectors Association member

Offline mare_wbpa

  • Full Member
  • ***
  • Posts: 217
    • View Profile
Re: New Toshiba With Pop Up Problems
« Reply #9 on: September 18, 2014, 03:14:53 PM »
I downloaded JRt, when I try to run it I get a band across the screen telling me that Windows Smart Screen has protected me from an unrecognized app.  I tried several times.

Offline winchester73

  • Half a bubble off plumb
  • Administrator
  • Hero Member
  • *****
  • Posts: 7424
  • Liverpool FC - YNWA
    • View Profile
Re: New Toshiba With Pop Up Problems
« Reply #10 on: September 18, 2014, 03:38:26 PM »
If you click on the "More info" button in the message, you'll see two buttons: "Run anyway" and "Don't run".  Click on the "Run anyway" button to launch the program.

Microsoft has extended to the Windows 8 operating system the same SmartScreen protection it began with the Internet Explorer 8 browser.  It is meant to alert users before running unrecognized programs downloaded from the Internet, to protect from possible malware.  Windows 8 comes with SmartScreen filter enabled by default, and if you try to run a downloaded program from Internet, it first checks the file and if it is unrecognized, it blocks the program.  Since we know JRT is "safe", we can over-ride the warning.

Do the same if it "warns" you about MBAM.

Speak softly, but carry a big Winchester ... Winchester Arms Collectors Association member

Offline mare_wbpa

  • Full Member
  • ***
  • Posts: 217
    • View Profile
Re: New Toshiba With Pop Up Problems
« Reply #11 on: September 18, 2014, 07:37:43 PM »
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.6 (09.18.2014:1)
OS: Windows 8.1 x64
Ran by MaryAnn on Thu 09/18/2014 at 16:26:37.92
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Thu 09/18/2014 at 16:37:44.24
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Offline mare_wbpa

  • Full Member
  • ***
  • Posts: 217
    • View Profile
Re: New Toshiba With Pop Up Problems
« Reply #12 on: September 18, 2014, 07:41:40 PM »
How do I disable Avast?  I didn't see that option when I checked.  I forgot about doing that before running JRT.  Sorry that I seem to be all over the place.

Offline mare_wbpa

  • Full Member
  • ***
  • Posts: 217
    • View Profile
Re: New Toshiba With Pop Up Problems
« Reply #13 on: September 18, 2014, 08:45:25 PM »
I ran Mbam I can't find the log.  When I double click on the icon I get a window asking if I will allow changes to the xomputer by this program.

??????

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 20802
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
Re: New Toshiba With Pop Up Problems
« Reply #14 on: September 18, 2014, 09:47:28 PM »
Did MBAM find anything in the scan?  If so, if MBAM was closed before opening the log, it can be found by opening Malwarebytes and clicking on History> Application Logs with the date of the scan. Simply double-click on that in order to see the options for Copying to Clipboard or to Export to a .txt file (Notepad).  You will want to select the option to export to a .txt file.

To disable Avast!

-- Right click on the Avast icon in the system tray
-- Scroll up to Avast! shields control
-- Select the desired option from the list (10 minutes, 1 hour, until the computer is restarted or permanently).
-- Reverse to enable.


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.