PDA

View Full Version : Adware woes


RickJ
Mar 30, 2016, 07:30 AM
Just two days ago I started seeing a "Click to continue" icon with various underlined words on some web-pages and Google search results. When I hover over it, I see that it's pointing to s.igmhb.com/click?vXXXXXXXXXXXXXXXXXXXXXX (with the Xs being a long string of letters and numbers).

I find nothing suspicious or recently added in Control Panel > Programs and Features.

I use Webroot SecureAnywhere and notice that it's removing 6 threats every time it scans, but clearly not this.

In searching for a fix I see many references to AdwCleaner, Bitdefender and Malwarebytes but am now overly fearful of installing something new.

How to I get rid of this garbage?

Thanks!

Curlyben
Mar 30, 2016, 07:36 AM
Grab Malwarebytes and activate the 14 day trial on premium.
This is my go to malware application..

RickJ
Mar 30, 2016, 08:15 AM
Thanks you.

So stuff like this completely different than what Webroot can catch?

Curlyben
Mar 30, 2016, 08:17 AM
Different engines have different signature and detection algorithms.
No harm in using 2, or more, for real stubborn nasties, although only have one active scanner at a time.
Best to update and scan in safemode for fullest coverage.

joypulv
Mar 30, 2016, 08:50 AM
I got a whole mess of adware the minute I installed Win10. Not one malware/adware program worked. I reinstalled WIN10. That took one step and all was fine.

RickJ
Mar 30, 2016, 09:32 AM
Thank you all. I'll let you know how it turns out.

So far 70k items scanned in 10 minutes; no objects detected yet.

cdad
Mar 30, 2016, 01:29 PM
Also check your browser and make sure no new addons have appeared in it. Legitimate software tries to add it when doing upgrades.

RickJ
Mar 30, 2016, 01:45 PM
Also check your browser and make sure no new addons have appeared in it
Good point. That's something I forgot to confirm that I checked first. No new add-ons or extensions.

I had to leave the Malwarebytes scan running to take off. I'll have to report back to y'all tomorrow on the outcome.

cdad
Mar 30, 2016, 05:45 PM
Good luck !!!

RickJ
Mar 31, 2016, 07:08 AM
Round 1, no luck.

Malwarebytes found 631 items but none were labeled as malware.

2 instances of ASK
17 of HomePageHelper, and the rest was MindSpark.

I removed it all, but still have the same ad links (see pic). I'll run another scan and see how it goes.

48279

Curlyben
Mar 31, 2016, 07:15 AM
For the ad links, check recently installed program and addins.
These tend not to be picked up by scanners as they don't fall into the normal malicious categories.

hanahblack
Apr 7, 2016, 12:23 PM
Beware .locky (http://manual-removal.com/locky-files/) files ransomware that encrypts data using AES encryption and then demands 0.5 bitcoins to decrypt files. Locky is currently being distributed via email that contains Word document attachments with malicious macros.