ubleclick Server Not Found - Am I Infected? What Do I Do?

#1 LittleGreenDots

• 
• Members
• 893 posts
• OFFLINE

• Gender:Male
• Location:Metro Detroit Area
• Local time:11:29 AM

Posted 25 June 2017 - 02:59 PM

new computer here, windows 10.

i am getting redirected from legitimate links to a 'server not found' msg associated with ad.doubleclick.  malwarebytes found nothing.  i'm sure i have some sort of browser redirect.  it's affecting both FIrefox and Chrome.

How do I clean my computer?

• Back to top

BC AdBot (Login to Remove)

• 
• BleepingComputer.com
• Register to remove ads

#2 Broni

The Coolest BC Computer

• 
• Helper Emeritus
• 42,964 posts
• OFFLINE

• Gender:Male
• Location:Krakow, Poland
• Local time:06:29 PM

Posted 25 June 2017 - 03:07 PM

Download Security Check from here or here and save it to your Desktop.

• Double-click SecurityCheck.exe
• Follow the onscreen instructions inside of the black box.
• A Notepad document should open automatically called checkup.txt; please post the contents of that document.

• Make sure the following options are checked:
  • Internet Services
  • Windows Firewall
  • System Restore
  • Security Center/Action Center
  • Windows Update
  • Windows Defender
  • Other Services
• Press "Scan".
• It will create a log (FSS.txt) in the same directory the tool is run.
• Please copy and paste the log to your reply.

• Report IE Proxy Settings
• Report FF Proxy Settings
• List content of Hosts
• List IP configuration
• List Winsock Entries
• List last 10 Event Viewer log
• List Installed Programs
• List Devices (do NOT change any settings here)
• List Users, Partitions and Memory size
• List Restore Points

• Double-click MBSetup-076981.076981-4.5.14.exe and follow the prompts to install the program.
• Then click Finish.
• Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu.
• If another update of the definitions is available, it will be implemented before the rest of the scanning procedure.
• When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
• Restart your computer when prompted to do so.
• The Scan log is available throughout History ->Application logs. Please post it contents in your next reply.

• Warning! Malwarebytes Anti-Rootkit needs to be run from an account with administrator rights.
• Double click on downloaded file. OK self extracting prompt.
• MBAR will start. Click "Next" to continue.
• Click in the following screen "Update" to obtain the latest malware definitions.
• Once the update is complete select "Next" and click "Scan".
• When the scan is finished and no malware has been found select "Exit".
• If malware was detected, make sure to check all the items and click "Cleanup". Reboot your computer.
• Open the MBAR folder located on your Desktop and paste the content of the following files in your next reply:
• "mbar-log-{date} (xx-xx-xx).txt"
• "system-log.txt"

• Double-click on the Rkill desktop icon to run the tool.
• If using Windows Vista, 7 or 8 right-click on it and choose Run As Administrator.
• A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
• If not, delete the file, then download and use the one provided in Link 2.
• Do not reboot until instructed.
• If the tool does not run from any of the links provided, please let me know.

• Back to top

#3 buddy215

• 
• Moderator
• 21,937 posts
• ONLINE

• Gender:Male
• Location:West Tennessee
• Local time:10:29 AM

Posted 25 June 2017 - 03:10 PM

That's a Google ad service. If you are not using an ad blocker...I recommend using Adblock Plus. Once you have installed it

click on the ABP icon and choose Filter Preferences. Then UNcheck the box next to Allow some non-intrusive advertisements.

Adblock Plus - Chrome Web Store   Adblock Plus :: Add-ons for Firefox   Adblock Plus for IE

You can block the install of Third Party cookies....known as ad/ tracking cookies. Once blocked from installing...run CCleaner to remove those that are presently installed.

How to disable third-party cookies in all major web browsers

If you haven't run scans using the programs below, that would be a good thing to do.

Use CCleaner to remove Temporary files, program caches, cookies, logs, etc. Use the Default settings. No need to use the

Registry Cleaning Tool...risky. Pay close attention while installing and UNcheck offers of toolbars....especially Google.

After install, open CCleaner and run by clicking on the Run Cleaner button in the bottom right corner.

CCleaner - PC Optimization and Cleaning - Free Download

Download AdwCleaner by Xplode onto your desktop.

• Close all open programs and internet browsers.
• Double click on adwcleaner.exe to run the tool.
• Click on Scan button.
• When the scan has finished click on Clean button.
• Your computer will be rebooted automatically. A text file will open after the restart.
• Please post the contents of that logfile with your next reply.
• You can find the logfile at C:\AdwCleaner[S1].txt as well.

• download Junkware Removal Tool to your desktop.
• Shut down your protection software now to avoid potential conflicts.
• Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
• The tool will open and start scanning your system.
• Please be patient as this can take a while to complete depending on your system's specifications.
• On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
• Post the contents of JRT.txt into your next message

• Please download Security Check by glax24 and save the file to the Desktop
• Run the tool by accepting all the Security prompts
• when complete the tool will produce a log file C:\SecurityCheck\SecurityCheck.txt and also copy the contents to the Clipboard
• Simply Paste the log to your reply

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”― Lawrence M. KraussIf we are to have another contest in the near future of our national existence, I predict that the dividing line will not be Mason and Dixon’s, but between patriotism and intelligence on the one side, and superstition, ambition, and ignorance on the other. Ulysses S. Grant...Republican president who correctly predicted the cause of Trump's attempted coup.

• Back to top

#4 buddy215

• 
• Moderator
• 21,937 posts
• ONLINE

• Gender:Male
• Location:West Tennessee
• Local time:10:29 AM

Posted 25 June 2017 - 03:16 PM

From the Web:

Ad.doubleclick.net is a legitimate advertising service that website publishers use to generate revenue on their sites. Unfortunately, there are some adware programs that are injecting these ads onto web sites you visit without the permission of the publisher in order to generate revenue.

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”― Lawrence M. KraussIf we are to have another contest in the near future of our national existence, I predict that the dividing line will not be Mason and Dixon’s, but between patriotism and intelligence on the one side, and superstition, ambition, and ignorance on the other. Ulysses S. Grant...Republican president who correctly predicted the cause of Trump's attempted coup.

• Back to top

#5 LittleGreenDots

• Topic Starter
• 
• Members
• 893 posts
• OFFLINE

• Gender:Male
• Location:Metro Detroit Area
• Local time:11:29 AM

Posted 25 June 2017 - 04:08 PM

Thanks.  Here are the logs:

AdwCleaner:

# AdwCleaner v6.047 - Logfile created 25/06/2017 at 16:55:26 # Updated on 19/05/2017 by Malwarebytes # Database : 2017-06-23.1 [Server] # Operating System : Windows 10 Home  (X64) # Username : TooLooseLeTrek - LAPTOP-ELHBQQLQ # Running from : C:\Users\TooLooseLeTrek\Desktop\CleanUp\AdwCleaner.exe # Mode: Clean # Support : https://www.malwarebytes.com/support ***** [ Services ] ***** [-] Service deleted: vToolbarUpdater40.3.8 [-] Service deleted: WtuSystemSupport ***** [ Folders ] ***** [-] Folder deleted: C:\Users\TooLooseLeTrek\AppData\Local\avg web tuneup [-] Folder deleted: C:\Users\TooLooseLeTrek\AppData\Roaming\Mozilla\Firefox\Profiles\ij0ecpm9.default\adblocker [-] Folder deleted: C:\Program Files\avg web tuneup [-] Folder deleted: C:\Program Files\Common Files\AVG Secure Search [-] Folder deleted: C:\ProgramData\avg web tuneup [#] Folder deleted on reboot: C:\ProgramData\Application Data\avg web tuneup [-] Folder deleted: C:\Program Files (x86)\avg web tuneup [-] Folder deleted: C:\Program Files (x86)\Common Files\AVG Secure Search ***** [ Files ] ***** [-] File deleted: C:\Users\TooLooseLeTrek\AppData\Roaming\Mozilla\Firefox\Profiles\ij0ecpm9.default\extensions\[email protected] [-] File deleted: C:\Users\TooLooseLeTrek\AppData\Roaming\Mozilla\Firefox\Profiles\ij0ecpm9.default\searchplugins\avg-secure-search.xml ***** [ DLL ] ***** ***** [ WMI ] ***** ***** [ Shortcuts ] ***** ***** [ Scheduled Tasks ] ***** ***** [ Registry ] ***** [-] Key deleted: HKLM\SOFTWARE\Classes\ScriptHelper.GenericWnd [-] Key deleted: HKLM\SOFTWARE\Classes\ScriptHelper.GenericWnd.1 [-] Key deleted: HKLM\SOFTWARE\Classes\ScriptHelper.NativeApi [-] Key deleted: HKLM\SOFTWARE\Classes\ScriptHelper.NativeApi.1 [-] Key deleted: HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi [-] Key deleted: HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1 [-] Key deleted: HKLM\SOFTWARE\Classes\WtuServer.WtuServerObj [-] Key deleted: HKLM\SOFTWARE\Classes\WtuServer.WtuServerObj.1 [#] Key deleted on reboot: [x64] HKLM\SOFTWARE\Classes\ScriptHelper.GenericWnd [#] Key deleted on reboot: [x64] HKLM\SOFTWARE\Classes\ScriptHelper.GenericWnd.1 [#] Key deleted on reboot: [x64] HKLM\SOFTWARE\Classes\ScriptHelper.NativeApi [#] Key deleted on reboot: [x64] HKLM\SOFTWARE\Classes\ScriptHelper.NativeApi.1 [#] Key deleted on reboot: [x64] HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi [#] Key deleted on reboot: [x64] HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1 [#] Key deleted on reboot: [x64] HKLM\SOFTWARE\Classes\WtuServer.WtuServerObj [#] Key deleted on reboot: [x64] HKLM\SOFTWARE\Classes\WtuServer.WtuServerObj.1 [-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3} [-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A} [-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{CA3A5461-96B5-46DD-9341-5350D3C94615} [-] Key deleted: HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6} [-] Key deleted: HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94} [-] Key deleted: HKLM\SOFTWARE\Classes\TypeLib\{4BC8AD89-AC5F-4DBD-A38F-C355C7DD33D7} [-] Key deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A} [-] Key deleted: HKLM\SOFTWARE\AVG Tuneup [-] Data restored: HKU\S-1-5-21-1125824779-1569543521-4214938350-1001\Software\Microsoft\Internet Explorer\Main [Start Page] [-] Data restored: HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] [-] Data restored: [x64] HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] [-] Key deleted: HKU\S-1-5-21-1125824779-1569543521-4214938350-1001\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233} [#] Key deleted on reboot: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233} [#] Key deleted on reboot: [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233} [-] Key deleted: HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\avgsh [-] Key deleted: HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin ***** [ Web browsers ] ***** [-] [C:\Users\TooLooseLeTrek\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Deleted: aol.com [-] [C:\Users\TooLooseLeTrek\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Deleted: ask.com ************************* :: "Tracing" keys deleted :: Winsock settings cleared ************************* C:\AdwCleaner\AdwCleaner[C0].txt - [4667 Bytes] - [25/06/2017 16:55:26] C:\AdwCleaner\AdwCleaner[S0].txt - [5175 Bytes] - [25/06/2017 16:54:38] ########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [4813 Bytes] ##########  

JRT:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Malwarebytes Version: 8.1.3 (04.10.2017) Operating System: Windows 10 Home x64 Ran by TooLooseLeTrek (Administrator) on Sun 06/25/2017 at 17:00:58.37 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ File System: 0 Registry: 4 Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8202C444-9429-4C59-8504-5C76F3CCF182} (Registry Key) Successfully deleted: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{8202C444-9429-4C59-8504-5C76F3CCF182} (Registry Key) Successfully deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233} (Registry Key) Successfully deleted: HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233} (Registry Key) ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on Sun 06/25/2017 at 17:04:27.31 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~  

• Back to top

#6 buddy215

• 
• Moderator
• 21,937 posts
• ONLINE

• Gender:Male
• Location:West Tennessee
• Local time:10:29 AM

Posted 25 June 2017 - 04:16 PM

Got rid of some adware. Post the Security Check, too. Then after that run a FREE Eset online scan.

Download and run the FREE online scanner from Free Virus Scan | Online Virus Scan from ESET | ESET

• Place a checkmark in YES, I accept the Terms of Use, then click Start. Wait for ESET Online Scanner to load its components.
• Select Enable detection of potentially unwanted applications.
• Click Advanced Settings, then place a checkmark in the following:
  • Remove found threats
  • Scan archives
  • Scan for potentially unsafe applications
  • Enable Anti-Stealth technology
• Click Start to begin scanning.
• ESET Online Scanner will start downloading signatures and scan. Please be patient, as this scan can take quite some time.
• When the scan is done, click List threats (only available if ESET Online Scanner found something).
• Click Export, then save the file to your desktop.
• Click Back, then Finish to exit ESET Online Scanner.

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”― Lawrence M. KraussIf we are to have another contest in the near future of our national existence, I predict that the dividing line will not be Mason and Dixon’s, but between patriotism and intelligence on the one side, and superstition, ambition, and ignorance on the other. Ulysses S. Grant...Republican president who correctly predicted the cause of Trump's attempted coup.

• Back to top

#7 LittleGreenDots

• Topic Starter
• 
• Members
• 893 posts
• OFFLINE

• Gender:Male
• Location:Metro Detroit Area
• Local time:11:29 AM

Posted 25 June 2017 - 04:22 PM

 Results of screen317's Security Check version 1.014 --- 12/23/15     x64 (UAC is enabled)   Internet Explorer 11  ``````````````Antivirus/Firewall Check:`````````````` Windows Firewall Enabled!  Windows Defender   Malwarebytes       AVG Antivirus       Antivirus up to date!  (On Access scanning disabled!)`````````Anti-malware/Other Utilities Check:````````` Spybot Anti-Beacon     AVG Web TuneUp    Mozilla Firefox (54.0) Google Chrome (58.0.3029.110) Google Chrome (SetupMetrics...)````````Process Check: objlist.exe by Laurent````````   Malwarebytes Anti-Malware mbamservice.exe   AVG Antivirus AVGUI.exe   Malwarebytes Anti-Malware mbamtray.exe  `````````````````System Health check````````````````` Total Fragmentation on Drive C:  %````````````````````End of Log`````````````````````` 

I'll run Eset now.

• Back to top

#8 LittleGreenDots

• Topic Starter
• 
• Members
• 893 posts
• OFFLINE

• Gender:Male
• Location:Metro Detroit Area
• Local time:11:29 AM

Posted 25 June 2017 - 05:22 PM

I ran the eSet scan and it found two infected files.  However, when the scan completed, I got a screen that offered me a free 30 day trial and I did not see a 'o thanks' button so I assumed when I closed it, a report would pop up.  Nope. 

What to do next?  I don't think eSet will allow a second scan just to see if I'm clean.

Also the advanced settings were way different than what you wrote.  It didn't have the same options at all.   I just checked all the boxes.  I hope that was okay.

Edited by LittleGreenDots, 25 June 2017 - 05:24 PM.

• Back to top

#9 buddy215

• 
• Moderator
• 21,937 posts
• ONLINE

• Gender:Male
• Location:West Tennessee
• Local time:10:29 AM

Posted 25 June 2017 - 05:39 PM

Reboot if you haven't and see if you can find the Eset log per directions below.

How can I view the log file from ESET Online Scanner? The ESET Online Scanner saves a log file after running, which can be examined or sent in to ESET for further analysis. To view the log file, Show hidden files and folders must be enabled. New logs are appended to the existing log files when multiple scans are run.  The path to the log file is the following: C:\users\%userprofile%\appdata\local\temp\log.txt 

That Security Check wasn't the one I expected. Please use the instructions below for a different security check.

• Please download Security Check by glax24 and save the file to the Desktop
• Run the tool by accepting all the Security prompts
• when complete the tool will produce a log file C:\SecurityCheck\SecurityCheck.txt and also copy the contents to the Clipboard
• Simply Paste the log to your reply

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”― Lawrence M. KraussIf we are to have another contest in the near future of our national existence, I predict that the dividing line will not be Mason and Dixon’s, but between patriotism and intelligence on the one side, and superstition, ambition, and ignorance on the other. Ulysses S. Grant...Republican president who correctly predicted the cause of Trump's attempted coup.

• Back to top

#10 LittleGreenDots

• Topic Starter
• 
• Members
• 893 posts
• OFFLINE

• Gender:Male
• Location:Metro Detroit Area
• Local time:11:29 AM

Posted 25 June 2017 - 05:55 PM

I am guessing you wanted me to enter that line into the 'run' box, right?  I did and it said that file the file is inaccessible land that the syntax is incorrect.

Here is the log:

SecurityCheck by glax24 & Severnyj v.1.4.0.51 [13.06.17]WebSite: www.safezone.ccDateLog: 25.06.2017 18:51:00Path starting: C:\Users\TooLooseLeTrek\AppData\Local\Temp\SecurityCheck\SecurityCheck.exeLog directory: C:\SecurityCheck\IsAdmin: TrueUser: TooLooseLeTrekVersionXML: 4.43is-24.06.2017___________________________________________________________________________Windows 10(6.3.14393) (x64) Core Release: 1607 Lang: English(0409)Installation date OS: 27.05.2017 17:11:09LicenseStatus: Windows®, Core edition The machine is permanently activated.Boot Mode: NormalDefault Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exeSystemDrive: C: FS: [NTFS] Capacity: [916.6 Gb] Used: [45.3 Gb] Free: [871.3 Gb]------------------------------- [ Windows ] -------------------------------Internet Explorer 11.1358.14393.0User Account Control enabledWindows Update (wuauserv) - The service is runningSecurity Center (wscsvc) - The service is runningRemote Registry (RemoteRegistry) - The service has stoppedSSDP Discovery (SSDPSRV) - The service is runningRemote Desktop Services (TermService) - The service has stoppedWindows Remote Management (WS-Management) (WinRM) - The service has stopped------------------------------- [ HotFix ] --------------------------------HotFix KB4013429 Warning! Download Update---------------------------- [ Antivirus_WMI ] ----------------------------Windows Defender (disabled and up to date)Malwarebytes (enabled and up to date)AVG Antivirus (enabled and up to date)--------------------------- [ FirewallWindows ] ---------------------------Windows Firewall (MpsSvc) - The service is running--------------------------- [ AntiSpyware_WMI ] ---------------------------Malwarebytes (enabled and up to date)Windows Defender (disabled and up to date)AVG Antivirus (enabled and up to date)-------------------------- [ SecurityUtilities ] --------------------------Malwarebytes version 3.1.2.1733 v.3.1.2.1733--------------------------- [ OtherUtilities ] ----------------------------VLC media player v.2.2.6LibreOffice 5.2.7.2 v.5.2.7.2 Warning! Download Update--------------------------- [ AppleProduction ] ---------------------------Bonjour v.3.0.0.10 Warning! Download Update^Please use Apple Software Update tool.^Bonjour Service (Bonjour Service) - The service is running------------------------------- [ Browser ] -------------------------------Google Chrome v.58.0.3029.110 Warning! Download UpdateMozilla Firefox 54.0 (x86 en-US) v.54.0--------------------------- [ RunningProcess ] ----------------------------C:\Program Files (x86)\Mozilla Firefox\firefox.exe v.54.0.0.6368------------------ [ AntivirusFirewallProcessServices ] -------------------AVG Antivirus (AVG Antivirus) - The service is runningC:\Program Files (x86)\AVG\Antivirus\AVGSvc.exe v.17.4.3482.0AVG Service (avgsvc) - The service is runningC:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe v.1.203.3.5167AVG Service (avgsvc) - The service is runningC:\Program Files (x86)\AVG\Antivirus\AVGUI.exe v.17.4.3482.0C:\Program Files (x86)\AVG\Framework\Common\avguix.exe v.1.203.3.5167C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe v.3.0.0.1068Malwarebytes Service (MBAMService) - The service is runningC:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe v.3.1.0.479Windows Defender Service (WinDefend) - The service has stoppedWindows Defender Network Inspection Service (WdNisSvc) - The service has stopped---------------------------- [ UnwantedApps ] -----------------------------Setup v.19.0.0.96 << Hidden Warning! Suspected Adware! If this program is not familiar to you it is recommended to uninstall it and execute PC scanning using Malwarebytes Anti-Malware and Malwarebytes AdwCleaner. Before uninstallation and scanning it is necessary to consult in the forum where cure is provided for you!!!----------------------------- [ End of Log ] ------------------------------ 

• Back to top

#11 buddy215

• 
• Moderator
• 21,937 posts
• ONLINE

• Gender:Male
• Location:West Tennessee
• Local time:10:29 AM

Posted 25 June 2017 - 07:37 PM

First off...that user name is so clever and I got a chuckle out of it.

Not sure about HotFix KB4013429 Warning! Download Update.....Do you allow Windows 10 to automatically update? If so, I think you can ignore this Warning.

Before searching for that Eset log....did you UNhide hidden files and folders? Here is a link for doing that in Windows 10.

How to Show Hidden Files and Folders in Windows 10

Then try to find the log again and if unsuccessful then attempt to run a new Eset scan.

Once you have done the above....use Download Revo Uninstaller Freeware to uninstall Setup v.19.0.0.96 and AVG Web TuneUp 

I see you have Spybot Anti-Beacon installed. You may want to read the info in the link below concerning that. Especially if you are

experiencing any of the problems mentioned in the link.

Why You Shouldn’t Use “Anti-Spying” Tools for Windows 10

Please let me know if you are still seeing that ad error and what browser(s) it is happening in.

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”― Lawrence M. KraussIf we are to have another contest in the near future of our national existence, I predict that the dividing line will not be Mason and Dixon’s, but between patriotism and intelligence on the one side, and superstition, ambition, and ignorance on the other. Ulysses S. Grant...Republican president who correctly predicted the cause of Trump's attempted coup.

• Back to top

#12 LittleGreenDots

• Topic Starter
• 
• Members
• 893 posts
• OFFLINE

• Gender:Male
• Location:Metro Detroit Area
• Local time:11:29 AM

Posted 25 June 2017 - 07:51 PM

Yes, I did unhide files before searching for the Eset log.  I tried to update the various issues in red in that security check.  I don't use any Apple products and I'd rather not have them snooping around in my computer.  I tried the link provided in the log and it was all in Russian so I didn't install anything.

As for that installer, I searched online and it seems to be connected to Corel PaintShopPro v9. which I bought and installed on this computer.  Should I still delete it?

I am not at all comfortable with the liberties that Microsoft is taking regarding allowing themselves almost (?) complete access to my computer.  I'm not interested in helping MS make their products better.  In fact, I am seriously considering installing Linux and checking to see if I can get everything done I need in that operating system. 

I will search for the log again, and failing that, try another scan. 

I read the article and while it makes sense, I do not believe everything I read just because it is written.  I don't know the "How-to-Geek" people.  They sound legit for sure.  But as I said, I'm weary of WIndows and am getting a computer ready to install Linux and see if it will do what I need. My other computers are Windows 7.  I resisted W10 as long as I could but I needed a computer quickly and this is what was available. 

I hope you can respect my sentiments here.

Edited by LittleGreenDots, 25 June 2017 - 08:40 PM.

• Back to top

#13 buddy215

• 
• Moderator
• 21,937 posts
• ONLINE

• Gender:Male
• Location:West Tennessee
• Local time:10:29 AM

Posted 25 June 2017 - 08:10 PM

I use Linux...UBUNTU...but if you require a program that only works on Windows then that would be a big problem. But you can have both and you can

test drive most Linux distros without installing. If you need more info check out the Linux forum here at BC. Many experienced Linux users participate in that forum.

I think it is best not to remove that Corel installer....glad you caught that.

I only wanted to make you aware of problems with those tools...I figured you were smart enough to decide for yourself.

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”― Lawrence M. KraussIf we are to have another contest in the near future of our national existence, I predict that the dividing line will not be Mason and Dixon’s, but between patriotism and intelligence on the one side, and superstition, ambition, and ignorance on the other. Ulysses S. Grant...Republican president who correctly predicted the cause of Trump's attempted coup.

• Back to top

#14 LittleGreenDots

• Topic Starter
• 
• Members
• 893 posts
• OFFLINE

• Gender:Male
• Location:Metro Detroit Area
• Local time:11:29 AM

Posted 25 June 2017 - 09:42 PM

Did Eset again and no threats found.  Any other actions?  Thanks for your help.  You have been super.

About the Microsoft spyware, I am disgusted by how we've all become targets for marketing.  Our private information is sold like as a object.  I have personal conversations in email and see the objects of that conversation offered up as an ad.  I really can't comprehend how this is okay with people!  Apathy. 

Yeah, there are a few things I might need to do with Windows, but I can minimize my use of Windows.  I've been online since the early 90s and remember when the online community was so helpful and sharing, and now when I search for things, I have to sort through ads before I find the specific site I wanted.  It's all about pay to play (play being a higher position on the list.)

Again, thanks for your help.  Which version of Linux do you recommend?  I am definitely not a super user so something close to Windows would be nice.  I really liked XP.

This is a new computer and I have been downloading software that I hope is legit, like Notepad++, Sublime Text, VLC, etc.  I always seek out the origin source, and when installing, am vigilant about the user agreement.  I got stung with that a few years ago at sourceforge.  I am setting up this computer to replace one I'm ready to retire.  On the old computer yesterday, I downloaded a text editor I wanted to try called Atom.  It's open source.  It was available at a site called GitHub.  I did a little research on it before downloading and it looked okay.  As soon as I downloaded it, I noticed strange behavior on that computer, slowed down typing (a significant delay between typing and seeing the letter on the screen) and I decided to retire that computer from the Internet immediately.  All my software is legal.  I don't download games or music or movies.  I don't visit porno sites.

My question is how can I avoid these hijacking and other malicious programs?  I really thought I was practicing 'safe' computer practices. 

Edited by LittleGreenDots, 26 June 2017 - 05:42 AM.

• Back to top

#15 buddy215

• 
• Moderator
• 21,937 posts
• ONLINE

• Gender:Male
• Location:West Tennessee
• Local time:10:29 AM

Posted 26 June 2017 - 06:12 AM

If you don't have an ad blocker I would suggest using Adblock Plus. Once installed click on the ABP icon at the top of your browsers and

choose Filter Preferences. Then UNcheck the box next to Allow some non-intrusive advertisements.

Adblock Plus :: Add-ons for Firefox    Adblock Plus - Chrome Web Store

You can block the install of Third Party cookies...also known as ad/ tracking cookies. Once you have blocked the installing...run CCleaner

to remove the present ones. How to disable third-party cookies in all major web browsers

You can download and install Ubuntu Mate 16.04.2  (supported through April 2021) on a flash drive. That's faster to use to test Ubuntu than a DVD. Run it as LIVE...don't install at first.

Choose correctly either the 32 bit or 64 bit. 64 bit if your mother board supports it is best and you have a minimum of 2 gb of memory. Preferably 3 gb....

Download Ubuntu MATE | Ubuntu MATE 

Use the Universal installer if you want to be able to save changes and data by using Persistence...creates a small 4gb of storage space on the Flash Drive.

Universal USB Installer - Easy as 1 2 3 | USB Pen Drive Linux

You're welcome...enjoyed working with you...happy surfin'

Edited by buddy215, 26 June 2017 - 06:13 AM.

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”― Lawrence M. KraussIf we are to have another contest in the near future of our national existence, I predict that the dividing line will not be Mason and Dixon’s, but between patriotism and intelligence on the one side, and superstition, ambition, and ignorance on the other. Ulysses S. Grant...Republican president who correctly predicted the cause of Trump's attempted coup.

• Back to top

• Page 1 of 2
• 1
• 2

• Next

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

1. BleepingComputer Forums
2. → Security
3. → Am I infected? What do I do?
4. Privacy Policy
5. Rules ·

• 
• Help

Community Forum Software by IP.Board

Sign In

• Use Twitter

• Need an account? Register now!
• Username
• Forum Password I've forgotten my password
• Remember me This is not recommended for shared computers
• Sign in anonymously Don't add me to the active users list
• Privacy Policy