Ask Experts Questions for FREE Help !
Ask
    RickJ's Avatar
    RickJ Posts: 7,762, Reputation: 864
    Uber Member
     
    #1

    Mar 30, 2016, 07:30 AM
    Adware woes
    Just two days ago I started seeing a "Click to continue" icon with various underlined words on some web-pages and Google search results. When I hover over it, I see that it's pointing to s.igmhb.com/click?vXXXXXXXXXXXXXXXXXXXXXX (with the Xs being a long string of letters and numbers).

    I find nothing suspicious or recently added in Control Panel > Programs and Features.

    I use Webroot SecureAnywhere and notice that it's removing 6 threats every time it scans, but clearly not this.

    In searching for a fix I see many references to AdwCleaner, Bitdefender and Malwarebytes but am now overly fearful of installing something new.

    How to I get rid of this garbage?

    Thanks!
    Curlyben's Avatar
    Curlyben Posts: 18,514, Reputation: 1860
    BossMan
     
    #2

    Mar 30, 2016, 07:36 AM
    Grab Malwarebytes and activate the 14 day trial on premium.
    This is my go to malware application..
    RickJ's Avatar
    RickJ Posts: 7,762, Reputation: 864
    Uber Member
     
    #3

    Mar 30, 2016, 08:15 AM
    Thanks you.

    So stuff like this completely different than what Webroot can catch?
    Curlyben's Avatar
    Curlyben Posts: 18,514, Reputation: 1860
    BossMan
     
    #4

    Mar 30, 2016, 08:17 AM
    Different engines have different signature and detection algorithms.
    No harm in using 2, or more, for real stubborn nasties, although only have one active scanner at a time.
    Best to update and scan in safemode for fullest coverage.
    joypulv's Avatar
    joypulv Posts: 21,591, Reputation: 2941
    current pert
     
    #5

    Mar 30, 2016, 08:50 AM
    I got a whole mess of adware the minute I installed Win10. Not one malware/adware program worked. I reinstalled WIN10. That took one step and all was fine.
    RickJ's Avatar
    RickJ Posts: 7,762, Reputation: 864
    Uber Member
     
    #6

    Mar 30, 2016, 09:32 AM
    Thank you all. I'll let you know how it turns out.

    So far 70k items scanned in 10 minutes; no objects detected yet.
    cdad's Avatar
    cdad Posts: 12,700, Reputation: 1438
    Internet Research Expert
     
    #7

    Mar 30, 2016, 01:29 PM
    Also check your browser and make sure no new addons have appeared in it. Legitimate software tries to add it when doing upgrades.
    RickJ's Avatar
    RickJ Posts: 7,762, Reputation: 864
    Uber Member
     
    #8

    Mar 30, 2016, 01:45 PM
    Also check your browser and make sure no new addons have appeared in it
    Good point. That's something I forgot to confirm that I checked first. No new add-ons or extensions.

    I had to leave the Malwarebytes scan running to take off. I'll have to report back to y'all tomorrow on the outcome.
    cdad's Avatar
    cdad Posts: 12,700, Reputation: 1438
    Internet Research Expert
     
    #9

    Mar 30, 2016, 05:45 PM
    Good luck !!!
    RickJ's Avatar
    RickJ Posts: 7,762, Reputation: 864
    Uber Member
     
    #10

    Mar 31, 2016, 07:08 AM
    Round 1, no luck.

    Malwarebytes found 631 items but none were labeled as malware.

    2 instances of ASK
    17 of HomePageHelper, and the rest was MindSpark.

    I removed it all, but still have the same ad links (see pic). I'll run another scan and see how it goes.

    Name:  Adware 20160331.JPG
Views: 421
Size:  36.3 KB
    Curlyben's Avatar
    Curlyben Posts: 18,514, Reputation: 1860
    BossMan
     
    #11

    Mar 31, 2016, 07:15 AM
    For the ad links, check recently installed program and addins.
    These tend not to be picked up by scanners as they don't fall into the normal malicious categories.
    hanahblack's Avatar
    hanahblack Posts: 2, Reputation: 1
    New Member
     
    #12

    Apr 7, 2016, 12:23 PM
    Beware .locky files ransomware that encrypts data using AES encryption and then demands 0.5 bitcoins to decrypt files. Locky is currently being distributed via email that contains Word document attachments with malicious macros.

Not your question? Ask your question View similar questions

 

Question Tools Search this Question
Search this Question:

Advanced Search

Add your answer here.


Check out some similar questions!

Adware removal [ 1 Answers ]

Adware Agent.BN how do I remove this crap without buying a specific program ?

Adware [ 6 Answers ]

I have some adware in write protected files. I disabled the restore system function and started in safe mode and let the virus software (latest version of Mcafee) try to delete them, and also tried manually. I also disabled all start up applications. The only thing that changed when I started in...

Adware on win ME [ 2 Answers ]

I've got bargain buddy visiting but he won't go away even with adawareSE. I always get a program in my startup window NPTK with a dos icon. Ive screwed with registery and add/remove,deleted in task manager and rebooted, all for nothing. It seems to reload when I use my dialup connection. Seems...

Adware.BargainBuddy [ 18 Answers ]

Hi everyone. I did a full norton anti-virus (2004) scan and detected Adware.BargainBuddy but norton wasn't able to delete this. I also run Adaware SE and Spybot S&D and did another full norton scan but the adware still remained in my system. Could somebody help me out about this adware?...


View more questions Search