Tech Problem Aggregator

Audio ads playing in background - Windows 7

Q: Audio ads playing in background - Windows 7

Hello everyone,
 
I have had random semi-muffled audio ads playing in the background for a month or two. This is extremely annoying. They show up in my audio mixer as 'Name Not Available." Any advice would be much appreciated!

A: Audio ads playing in background - Windows 7

Hi,
 
Please download Rkill (courtesy of BleepingComputer.com) to your desktop.
There are 2 different versions. If one of them won't run then download and try to run the other one.
You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.
 rKill.exe: http://www.bleepingcomputer.com/download/rkill/dl/10/iExplore.exe (renamed rKill.exe): http://www.bleepingcomputer.com/download/rkill/dl/11/
Double-click on the Rkill desktop icon to run the tool.
If using Vista or Windows 7 right-click on it and choose Run As Administrator.
A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
If not, delete the file, then download and use the one provided in Link 2.
Do not reboot until instructed.
If the tool does not run from any of the links provided, please let me know.
After the tool has finished running, a text file named Rkill.txt should be located on the desktop. Please copy and paste the contents into your next reply.
 
xXToffeeXx~

4 more replies
Answer Match 76.86%

Hello, i hope i can get some help here, as ive seen tons of other users around the net recently getting this same annoying virus or malware, whatever it is, that plays uncontrollable, unstoppable ad-sounds. 
 
Id like to make a few things 100% clear just to rule anything out for the tech support here.
 
 
It started around 8 or 9 am if i remember correctly. I was working on some art; using paint tool sai, watching youtube, and on skype with one of my good friends. Suddenly the computer without warning REBOOTED, without any provocation. I make sure NOT to visit any risky sites; i only frequent aol.com, youtube.com, tumblr, and a few art sites such as Deviantart. I had not visited ANY risky sites or downloaded ANY risky material to cause this virus,  have NO clue how it got on my computer, as i am a generally suspicious and careful person who tries desperately hard to avoid these situations.
 
Once the system had rebooted, i got back into my skype call thinking it was very weird and by this point i was nervous and anxiety was taking over, but within minutes of the reboot, loud ads, news reports, music, and other stuff started playing shockingly loud, overlapping each others ads sometimes.
 
It came at regular intervals and was unstoppable. I went into task manager to watch my processes and saw NOTHING out of the ordinary. I have gaming rig computer, and i saw nothing visible [to myself] that could be considered suspicious. I read many sites, i... Read more

A:Audio Ads playing in background on windows 7!

anyone.....? No help? i read similar posts on the forums, it seems this virus is becoming widespread and dangerous. I simply cannot do it alone since it seems it requires professional tech support.
 
Even if someone just responds letting me know im not alone in this  and they wanna try to help, and they are dealing with the same problem would let a load off my heart. 

7 more replies
Answer Match 76.02%

Starting today, I constantly have this audio playing in the background which sounds like some foreign radio with ads. Although it is very feint, I still can hear it. The weird thing is, if i restart my computer, I start hearing it even before putting in my password, meaning it's probably not a program that I need to physically open (chrome, etc). The weird part is that even when I mute my computer, I can still hear it. It's a Lenovo ThinkPad 450s, I just got it this January and I have kept it bloat-free with very few programs installed. I find nothing suspicious in the task manager, and I have ran Adwcleaner, Malware bytes, and Windows Defender full scan and they've caught nothing. I would very much appreciate any help I can get on this. I am posting this in the security subforum because others with this problem seemed to relate this to a Trojan. Thank you for taking your time to read this and I eagerly await for your responses.

A:Audio Ads and Radio playing in the background Windows 10

Hello sungholy and Welcome to the BleepingComputer.  
 My name is Yılmaz and I'll help you with the cleanup of malware from your computer.
Before we move on, please read the following points carefully.
Please complete all steps in the specified order.
Even if tools don't find malware, I want you to post the logfiles anyway.
Please copy and paste the logfiles directly into your posts. Please do not attach them unless you are instructed to do so.
Read the instructions carefully. If you have problems, stop what you  were doing and describe the problems you encountered as precisely as  you can.
Don't install or uninstall software during the cleanup unless you are told to do so.
Ensure your external and/or USB drives are inserted during always the scan.
If you can't answer for the next few days, please let me know. If  you haven't answered within 5 days, I am assuming that you don't need  help anymore and your topic will be closed.
If you have illegal/cracked software, cracks, keygens, etc. on the system, please remove or uninstall them now!
I can not guarantee that we will find and be able to remove all  malware. The cleaning process is not instant. Please continue to review  my answers until I tell you that your computer is clean
Please reply to this thread. Do not start a new topic
As my first language is not English, please do not use slang or idioms. It could be hard for me to understand.
Please open as administrator  the com... Read more

0 more replies
Answer Match 76.02%

Hi everyone,
 
I originally posted this topic here: http://www.bleepingcomputer.com/forums/t/531535/audio-ads-playing-in-background-windows-7/
 
I have extremely annoying audio ads playing in the background. This has been happening for the past 4-6 weeks. These ads show up as 'Name Not Available' in the audio mixer. So far I have used rkill.exe and was told that I have the latest version of the Zekos virus.
 
Thanks in advance for your help. DDS log below:
 
DDS (Ver_2012-11-20.01) - NTFS_x86 
Internet Explorer: 11.0.9600.16521
Run by anausied at 16:52:25 on 2014-04-18
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.3327.1587 [GMT -4:00]
.
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
C:\Windows\System32\WUDFHost.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome... Read more

A:DDS logs: Audio ads playing in background - Windows 7

Hello tonyroma I would like to welcome you to the Malware Removal section of the forum.Around here they call me Gringo and I will be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same",... Read more

25 more replies
Answer Match 75.18%

first time poster here, and completely lost over this. about 6 months ago I started getting background ads on my computer and I can't remember exactly how. i've been working out of town since then and just today was able to start my computer for the first time since. now I haven't heard any ads yet, but in the process of trying to update everything to the latest drivers and versions, I keep getting an error in win update that fails everything it tries to update.  can anyone help me please.  here is my dds.txt:
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 11.0.9600.17041  BrowserJavaVersion: 10.71.2
Run by Jay at 22:53:26 on 2014-12-01
Microsoft Windows 7 Ultimate   6.1.7601.1.1252.1.1033.18.16325.12494 [GMT -5:00]
.
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\atieclxx.exe
C:\Program Fi... Read more

A:i have audio ads playing in background and windows update errors

Hello and welcome.  Please follow these guidelines while we work on your PC:Malware removal is a sometimes lengthy and tedious process. Please stick with the thread until I’ve given you the “All clear.”  Absence of symptoms does not mean your machine is clean!Please do not run any scans or install/uninstall any applications without being directed to do so.Please note that the forum is very busy and if I don't hear from you within five days this thread will be closed.   Please download Farbar Recovery Scan Tool and save it to your desktop.Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.Double-click to run it. When the tool opens click Yes to disclaimer.Press Scan button.It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

3 more replies
Answer Match 71.82%

I keep hearing random audio ads or music coming from my speakers every now and then. I also noticed that in Windows Task Manager it shows two iexplorer.exe processes are running, and whenever I try to End Process they pop back up a few seconds later and I'm not sure if this is normal but svchost.exe is using a lot of memory. Also often when I search for websites on google it redirects me to random websites. And when following the "Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help" when I double click the Windows Firewall icon in the control panel I get a error window stating "Due to an unidentified problem, Windows cannot display Windows Firewall settings." I could not create a GMER Log, during the scanning process I always eventually get the blue screen of death.

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_32
Run by Brent at 18:53:15 on 2012-07-23
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3582.1922 [GMT -10:00]
.
AV: Symantec AntiVirus Corporate Edition *Enabled/Updated* {FB06448E-52B8-493A-90F3-E43226D3305C}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
svchost.exe
C:\Program Files\Common Files&#... Read more

A:Audio ads playing in background, google redirect, windows firewall "unidentified problem" error

Greetings and Welcome to The Forums!!My name is Gringo and I'll be glad to help you with your computer problems. I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At... Read more

18 more replies
Answer Match 68.04%

I have ads playing in my background when connected to the internet but no windows are open. I've tried some of the suggestions listed on this forum but I think I need a manual command to fix the issue. Here are the logs of some of the programs I've tried to use to fix the problem. Any help would be appreciated.

TDSSKILLER
20:08:03.0536 5592 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
20:08:05.0556 5592 ============================================================
20:08:05.0556 5592 Current date / time: 2014/01/06 20:08:05.0556
20:08:05.0556 5592 SystemInfo:
20:08:05.0556 5592
20:08:05.0556 5592 OS Version: 6.1.7601 ServicePack: 1.0
20:08:05.0556 5592 Product type: Workstation
20:08:05.0557 5592 ComputerName: OWNER-PC
20:08:05.0557 5592 UserName: Owner
20:08:05.0557 5592 Windows directory: C:\Windows
20:08:05.0557 5592 System windows directory: C:\Windows
20:08:05.0557 5592 Running under WOW64
20:08:05.0557 5592 Processor architecture: Intel x64
20:08:05.0557 5592 Number of processors: 4
20:08:05.0557 5592 Page size: 0x1000
20:08:05.0557 5592 Boot type: Normal boot
20:08:05.0557 5592 ============================================================
20:08:10.0040 5592 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
20:08:10.0044 5592 Drive \Device\Harddisk1\DR1 - Size: 0x3C8C0000 (0.95 Gb), SectorSize: 0x200, Cylinders: 0... Read more

A:Audio Ads Playing In The Background

16 more replies
Answer Match 68.04%

Hi

I have audio playing in the backgorund at random on my pc. The audio is adverts for products etc. Please can you help to remove this annoyance.

Thanks
Tony


DDS (Ver_09-10-13.01) - NTFSx86
Run by Tony at 21:20:51.21 on 15/10/2009
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1023.282 [GMT 1:00]


============== Running Processes ===============

C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
svchost.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Norton Internet Security\Engine\16.7.2.11\ccSvcHst.exe
C:\WINDOWS\system32\slserv.exe
C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Norton Internet Security\Engine\16.7.2.11\ccSvcHst.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\apps\ABoard\ABoard.exe
C:\apps\ABoard\AOSD.exe
C:\WINDOWS\System32\wltray.exe
C:\Program Files\ATI Technologies\ATI Control Pane... Read more

A:Audio Playing In The Background

Hi,

Please do the following:

Download ComboFix from either of these locations:
Link 1
Link 2


VERY IMPORTANT !!! Save ComboFix.exe to your Desktop

* IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here Double click on ComboFix.exe & follow the prompts.
As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.


Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:


Click on Yes, to continue scanning for malware.
When fini... Read more

9 more replies
Answer Match 68.04%

I am literally the most ignorant person you will ever meet when it comes to computers. For a few weeks I have had audio ads playing in the background of my computer whenever the internet is connected, even when there are no windows up. It is driving. me. crazy. I have ran my Norton and nothing shows up, but obviously something is wrong. I was wondering if anyone out there is patient enough to slowly walk me through figuring out how to fix this problem. I would greatly appreciate any and all help!

Thank you!
 

A:Audio ads playing in background, PLEASE HELP!

16 more replies
Answer Match 68.04%

I've been having problems with ads playing in the background when there are no programs running. There are occasional popups as well, which started when the background ads started. I've run my antivirus and spybot but they didn't find anything. Here's my HJT log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:38:38 PM, on 3/4/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
c:\Program Files\Microsoft Security Essentials\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\supportsoft\bin\sprtlisten.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Microsoft Security Essentials\msseces.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Soft... Read more

A:Audio ads playing in the background

I have downloaded and run Malwarebytes. It found and removed some items, and the audio ads have seemed to stop. I'll post if anything happens again.
 

1 more replies
Answer Match 68.04%

Hello,
Whenever I'm connected to the internet, at random times, audio ads play in the background, even when no browser is open. Ive searched the internet for solutions, and it seems that those who got the problem resolved posted in a forum like such. I have an idea as to what the problem is, but no idea how to solve it. If someone can walk me through this slowly, it would be much appreciated!
 

A:Audio Ads playing in background

Please run the following:

Please download Malwarebytes Anti-Rootkit and save it to your desktop.
Be sure to print out and follow the instructions provided on that same page for performing a scan.
Caution: This is a beta version so also read the disclaimer and back up all your data before using.
When the scan completes, click on the Cleanup button to remove any threats found and reboot the computer if prompted to do so.
Perform another scan with Malwarebytes Anti-Rootkit to verify that no threats remain. If they do, then click Cleanup once more and repeat the process.
If there are problems with Internet access, Windows Update, Windows Firewall or other system issues, run the fixdamage tool located in the folder Malwarebytes Anti-Rootkit was run from and reboot your computer.
Two files (mbar-log-YYYY-MM-DD, system-log.txt) will be created and saved within that same folder.
Copy and paste the contents of these two log files in your next reply.
Note: Further documentation can be found in the ReadMe.rtf file which is located in the Malwarebytes Anti-Rootkit folder.
 

3 more replies
Answer Match 68.04%

Hello There,

So recently, I've been hearing audio adverts play every once in a while on my laptop, I ran an AVG and that came up with nothing, and Ive had no warnings prior to it. To my knowledge, I have not downloaded anything.

Here is my HijackThis log:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:20:40, on 19/06/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Users\Abigail\AppData\Local\Akamai\netsession_win.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe
C:\Users\Abigail\AppData\Local\Akamai\netsession_win.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\Autodesk\SketchBook Pro 2011\SketchBookSnapshot.exe
C:\Users\Abigail\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files (x86)\AVG\AVG2012\avgtray.exe
C:\Program Files (x86)\Bamboo Dock\BambooCore.exe
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\acrotray.exe
C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
C:\Program Files (x86)\Da... Read more

A:Audio ads playing on and off in the background

Hi,

If help still needed post fresh dds logs (attach.txt contents too).
 

3 more replies
Answer Match 68.04%

Audio ads playing in background, PLEASE HELP!
For a few weeks I have had audio ads playing in the background of my computer whenever the internet is connected, even when there are no windows up. I have ran my Norton and nothing shows up, but obviously something is wrong. I was wondering if anyone out there who can walk me through figuring out how to fix this problem. I would greatly appreciate any and all help!

Thank you!
 

More replies
Answer Match 68.04%

Hi everyone, I'm having the issue now that whilie I'm surfing the internet I'm getting these audio ads that can't be stopped, and some play in specfic tabs that you have to go to and press on the X buttom to cancel them, and on top of that there are these box ads all around the webpages now. How can this malware be eliminated? Thanks

A:Audio ads playing in background 2

Greetings Sternritter-A and to BleepingComputer's Virus/Trojan/Spyware/Malware Removal forum.My name is Oh My! and I am here to help you! Now that we are "friends" please call me Gary.If you would allow me to call you by your first name I would prefer to do that. ===================================================Ground Rules:First, I would like to inform you that most of us here at Bleeping Computer offer our expert assistance out of the goodness of our hearts. Please try to match our commitment to you with your patience toward us. If this was easy we would never have met. Please do not run any tools or take any steps other than those I will provide for you while we work on your computer together. I need to be certain about the state of your computer in order to provide appropriate and effective steps for you to take. Most often "well intentioned" (and usually panic driven!) independent efforts can make things much worse for both of us. If at any point you would prefer to take your own steps please let me know, I will not be offended. I would be happy to focus on the many others who are waiting in line for assistance.Please perform all steps in the order they are listed in each set of instructions. Some steps may be a bit complicated. If things are not clear, be sure to stop and let me know. We need to work on this together with confidence.Please copy and paste all logs into your post unless directed otherwise. Please do not re-run any programs I suggest. If you encounter... Read more

22 more replies
Answer Match 68.04%

Ive run a few programs (Combofix, Adw) and haven't solved the problem yet. The ads run while i have no programs open.
 
DDS (Ver_2012-11-20.01) - NTFS_x86 
Internet Explorer: 9.0.8112.16533  BrowserJavaVersion: 10.51.2
Run by Marcus Booker at 2:45:11 on 2014-03-24
Microsoft® Windows Vista™ Home Premium   6.0.6002.2.1252.1.1033.18.3070.550 [GMT -4:00]
.
AV: Norton Security Suite *Enabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Norton Security Suite *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton Security Suite *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\nvvsvc.exe
C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Windows\system32\SLsvc.exe
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\WLANExt.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
C:\Program Files\Hi-Rez Studios\HiPatchService.exe
C:\Program Files\Constant Guard Protection Suite\IDVaultSvc.exe
c:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\LogMeIn Hamachi\LMIG... Read more

A:Audio ads playing in background

Hello! Welcome to BleepingComputer Forums!
My name is Georgi and and I will be helping you with your computer problems.
Before we begin, please note the following:
I will working be on your Malware issues, this may or may not, solve other issues you have with your machine.
The logs can take some time to research, so please be patient with me.
Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
Instructions that I give are for your system only!
Please do not run any tools until requested ! The reason for this is so I know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.
Please perform all steps in the order received. If you can't understand something don't hesitate to ask.
Again I would like to remind you to make no further changes to your computer unless I direct you to do so. I will not help you if you do not follow my instructions.
 
 
Please download Farbar Recovery Scan Tool and save it to your desktop.Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your re... Read more

9 more replies
Answer Match 68.04%

Hi,
 
After startup I can hear advertisements in the background even though I am not running any programs. I run Windows 7
 
Upon opening the task manager it shows that internet explorer is open and that a website advertising something is open. I can't end the task either.
 
Sometimes it plays the entire ad or cuts off midway but it slows down other programs sometimes. It's more annoying than anything but I'm worried it may be a more serious threat.
 
I ran some anti malware
 
Hitman Pro
Malwarebytes
Rogue Killer
Comodo Cleaning Essentials
Emergency Kit Scanner
AdwCleaner
 
and ran full scans using myTrend Micro Antivirus and Microsoft Security Essentials.
 
They all came up clean but Hitman Pro did notice some tracking cookies
 
So anyway, what else can I do to try and fix this?

A:Background Audio ads playing

Let's try using MBAM Anti Rookit and ASWmbr.Download Malwarebytes Anti-Rootkit to your desktop.Double click on downloaded file. OK self extracting prompt.Warning! Malwarebytes Anti-Rootkit needs to be run from an account with administrator rights.MBAR will start. Click in the introduction screen "next" to continue.Click in the following screen "Update" to obtain the latest malware definitions.Once the update is complete select "Next" and click "Scan".When the scan is finished and no malware has been found select "Exit".If malware was detected, make sure to check all the items and click "Cleanup". Reboot your computer.Open the MBAR folder and paste the content of the following files in your next reply:"mbar-log-{date} (xx-xx-xx).txt""system-log.txt">>>Please download aswMBR ( 4.5MB ) to your desktop.Double click the aswMBR.exe icon, and click Run.When asked if you'd like to "download the latest Avast! virus definitions", click Yes.Click the Scan button to start the scan.On completion of the scan, click the save log button, save it to your desktop, then copy and paste it in your next reply.

3 more replies
Answer Match 68.04%

Hello! Earlier tonight my computer randomly restarted itself, and afterwards I've been having random audio ads playing in the background. It's not coming from my web browser, and my volume mixer is showing it as "name not available." I downloaded Avast! free and I'm currently running a full system scan, but it hasn't found anything, and the webshield is constantly popping up, telling me it's blocking multiple malware objects that are infecting my System32\svchost.exe. I haven't downloaded anything risky recently that I can remember, but I have streamed tv shows online on project free tv.
 
I've read a thread on here that had a similar problem and it ended up being a rootkit, and I think that might be the case here .
 
Any help would be appreciated!
 
I am running Windows 7 Ultimate 64bit

A:Audio Ads playing in the background

Hi xMassy,
 
Run these for me:
 
Please download Rkill (courtesy of BleepingComputer.com) to your desktop.
There are 2 different versions. If one of them won't run then download and try to run the other one.
You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.
 rKill.exe: http://www.bleepingcomputer.com/download/rkill/dl/10/iExplore.exe (renamed rKill.exe): http://www.bleepingcomputer.com/download/rkill/dl/11/
Double-click on the Rkill desktop icon to run the tool.
If using Vista or Windows 7 right-click on it and choose Run As Administrator.
A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
If not, delete the file, then download and use the one provided in Link 2.
Do not reboot until instructed.
If the tool does not run from any of the links provided, please let me know.
 
----------
 
Please download TDSSKiller from here and save it to your Desktop
Doubleclick on TDSSKiller.exe to run the application, then click on Change parameters
 
 
Check Loaded Modules, Verify Driver Digital Signature, and Detect TDLFS file system
If you are asked to reboot because an "Extended Monitoring Driver is required" please click Reboot now
 
 
Click Start Scan and allow the scan process to run
 
 
If threats are detected select Skip or Cure (if available) for all of them u... Read more

11 more replies
Answer Match 68.04%

Hi, I seem to have gotten infected by that bothersome malware that keeps playing audio ads by starting an internet explorer process. I tried using some anti-virus software but to no avail, so my last chance would be a hijackthis log.Thanks in advance for your help!The log:Logfile of Trend Micro HijackThis v2.0.4Scan saved at 00:20:58, on 09/07/2010Platform: Windows 7 (WinNT 6.00.3504)MSIE: Internet Explorer v8.00 (8.00.7600.16385)Boot mode: NormalRunning processes:C:\Windows\System32\smss.exeC:\Windows\system32\csrss.exeC:\Windows\system32\wininit.exeC:\Windows\system32\csrss.exeC:\Windows\system32\services.exeC:\Windows\system32\lsass.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exeC:\Windows\system32\nvvsvc.exeC:\Windows\system32\svchost.exeC:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exeC:\Windows\system32\svchost.exeC:\Windows\system32\winlogon.exeC:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exeC:\Windows\system32\nvvsvc.exeC:\Windows\System32\spoolsv.exeC:\Windows\system32\svchost.exeC:\Windows\system32\Dwm.exeC:\Windows\system32&#... Read more

A:IE8 playing audio ads in background

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

11 more replies
Answer Match 68.04%

Hi
I currently have the same issue as sutefaniidesu who had an entry entitled "Audio ads playing in the background" from Jan 1, 2010. I've included the sysinfo, ComboFix log and the "loaded drivers" information from my ntbtlog.txt. My issue occurs as soon as the login screen appears which is why I'm sending the ntbtlog.txt. Any help would be greatly appreciated.

Thanks,
zefram
=============== Sysinfo

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Ultimate, 64 bit
Processor: Intel(R) Core(TM) i7 CPU 960 @ 3.20GHz, Intel64 Family 6 Model 26 Stepping 5
Processor Count: 8
RAM: 12279 Mb
Graphics Card: NVIDIA GeForce GTX 470, 1280 Mb
Hard Drives: C: Total - 953767 MB, Free - 141312 MB; D: Total - 1907718 MB, Free - 924581 MB; E: Total - 953867 MB, Free - 182680 MB;
Motherboard: ASUSTeK Computer INC., SABERTOOTH X58
Antivirus: None
================ ComboFix log
ComboFix 12-05-24.01 - w7 05/24/2012 9:01.2.8 - x64
Microsoft Windows 7 Ultimate 6.1.7600.0.1252.1.1033.18.12279.10599 [GMT -4:00]
Running from: c:\users\w7\Downloads\ComboFix.exe
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Files Created from 2012-04-24 to 2012-05-24 )))))))))))))))))))))))))))))))
.
.
2012-05-24 13:07 . 2012-05-24 13:07 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2012-05-24 13:07 . 2012-05-24 13:07 -------- d-----w- c:\users\Default\AppData\Local\temp
20... Read more

A:Audio ads playing in background

13 more replies
Answer Match 68.04%

So basicly I hear audio advertisements playing in the background that talk about buying products, "How I got rich quick", etc...
 
Somethings to note are Firefox is my default browser I never use Internet explorer.
The Iexplorer.exe process will always run 3 instances of itself even though you cannot see it open, If you try to kill the process it will open back up automatically.
The application tab shows Internet explorer connected to the following website: "http://ib.pixadsserve.com/?s=23327" and will sometime switch to careercast.com.
 
I have tried MBAM but this thing will not go away. Maybe someone here knows.

A:Audio Ads Playing In Background

Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2. SecurityCheck may produce some false warning(s), so leave the results reading to me.NOTE 3. If you receive UNSUPPORTED OPERATING SYSTEM! ABORTED! message restart computer and Security Check should run Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeList Restore PointsClick Go and post the result. Please download Malwarebytes Anti-Malware (MBAM) to your desktop.NOTE. If you already have MBAM 2.0 installed scroll down.Double-click ... Read more

25 more replies
Answer Match 68.04%

Hi Guys,
Thanks in advance for the help.

I have a toshiba laptop running the following -

Intel (R) Core (TM) Duo CPU T2250 @1.73 Ghz 1.73 Ghz
Memory (RAM) 4.00GB
System Type - 32 bit Operating System

Running Windows Vista Business 2007 Service pack 1.

Browser - IE 8

Yesterday I downloaded a couple of (obviously dodgy) files and also a (supposedly legitimate) program. Since downloading these, I found my default search engine had changed, and also I was getting audio ads playing in the background without IE open at all.

One of the files was an .exe which I am not sure what it was, the program was the 'Coffee Cup' website building software.

The first thing I did was reset my browsers default search engine to google. I then went into see any addons were added to my browser, and found a few that were not there before. One of them was 'hot revenue browser' or something like that.

I then re-booted my computer.

I then figured I had a problem as the ads were still playing. I ran Malwarebytes, and found there were some problems, so I fixed all those errors. Log here -

Malwarebytes' Anti-Malware 1.37
Database version: 2190
Windows 6.0.6001 Service Pack 1
21/04/2010 3:08:13 PM
mbam-log-2010-04-21 (15-08-13).txt
Scan type: Quick Scan
Objects scanned: 97287
Time elapsed: 10 minute(s), 46 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 2
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected... Read more

A:Audio Playing in Background

11 more replies
Answer Match 68.04%

Ok so my machine keeps playing audio ad's, I can have nothing open and they play.
I have ran Malwarebytes and Super Antispyware and they have found nothing. Now I have two SVCHosts listed and when I kill the one that is using the most process the sound stops for a little bit. I have looked threw the following logs (Rkill, DDS) and cant spot what is causing this issue.
 
Thanks for the Help
 
 
 
Rkill 2.5.0 by Lawrence Abrams (Grinler)http://www.bleepingcomputer.com/
Copyright 2008-2013 BleepingComputer.com
More Information about Rkill can be found at this link:http://www.bleepingcomputer.com/forums/topic308364.html
Program started at: 05/28/2013 03:27:22 PM in x64 mode.
Windows Version: Windows 7 Home Premium Service Pack 1
Checking for Windows services to stop:
* No malware services found to stop.
Checking for processes to terminate:
* No malware processes found to kill.
Checking Registry for malware related settings:
* Explorer Policy Removed:  NoActiveDesktopChanges [HKLM]
Backup Registry file created at:
C:\Users\Home\Desktop\rkill\rkill-05-28-2013-03-27-26.reg
Resetting .EXE, .COM, & .BAT associations in the Windows Registry.
Performing miscellaneous checks:
* No issues found.
Checking Windows Service Integrity:
* No issues found.
Searching for Missing Digital Signatures:
* No issues found.
Checking HOSTS File:
* No issues found.
Program finished at: 05/28/2013 03:29:21 PM
Execution time: 0 hours(s), 1 minute(s), and 58 seconds(s)
-----... Read more

A:Audio Ad's Keep Playing in the Background

Hello nopcs These are the programs I would like you to run next, if you have any problems with one of these just skip it and move on to the next one.-AdwCleaner-Please download AdwCleaner by Xplode onto your desktop.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click on Delete.Confirm each time with Ok.Your computer will be rebooted automatically. A text file will open after the restart.Please post the content of that logfile with your next answer.You can find the logfile at C:\AdwCleaner[S1].txt as well.-Junkware-Removal-Tool-Please download Junkware Removal Tool to your desktop.Shut down your protection software now to avoid potential conflicts.Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".The tool will open and start scanning your system.Please be patient as this can take a while to complete depending on your system's specifications.On completion, a log (JRT.txt) is saved to your desktop and will automatically open.Post the contents of JRT.txt into your next message.When they are complete let me have the two reports and let me know how things are running.Gringo

4 more replies
Answer Match 68.04%

I have been reading a bunch of different threads with people having the same problem. Computer all of the sudden restarts then audio ads are playing in the background. So far I have tried running Malwarebytes, AVG and TDDSKILLER.
 
DDS Below:
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64 
Internet Explorer: 8.0.7600.16385  BrowserJavaVersion: 10.45.2
Run by Jason at 14:50:06 on 2014-01-09
Microsoft Windows 7 Ultimate   6.1.7600.0.1252.1.1033.18.12264.6724 [GMT -5:00]
.
AV: AVG AntiVirus Free Edition 2014 *Enabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: AVG AntiVirus Free Edition 2014 *Enabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files (x86)\Common F... Read more

A:Audio Ad's Playing in Background

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Please download AdwCleaner by Xplode onto your Desktop.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Click the Report button and the report will open in Notepad.IMPORTANTIf you click the Clean button all items listed in the report will be removed.If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Check off the element(s) you wish to keep.Click on the Clean button follow the prompts.A log file will automatically open after the scan has finished.Please post the content of that log file with your next answer.You can find the log file at C:\AdwCleaner[Sn].txt (n is a number). Please downloadJunkware Removal Tool to your Desktop.Please close your security software to avoid potential conflicts.Run the tool by double-clicking it. If you are using Windows Vista or 7, right-mouse click it and select Run as administrator.The tool will open and start scanning your system.Please be patient as this can take a while to complete, depending on your system's specifica... Read more

2 more replies
Answer Match 68.04%

Mod edit: Moved to Proper forum for DDS logs ~~ boopme
 
Ok so my machine keeps playing audio ad's, I can have nothing open and they play.
I have ran Malwarebytes and Super Antispyware and they have found nothing. Now I have two SVCHosts listed and when I kill the one that is using the most process the sound stops for a little bit. I have looked threw the following logs (Rkill, DDS) and cant spot what is causing this issue.
 
Thanks for the Help
 
 
 
Rkill 2.5.0 by Lawrence Abrams (Grinler)http://www.bleepingcomputer.com/
Copyright 2008-2013 BleepingComputer.com
More Information about Rkill can be found at this link:http://www.bleepingcomputer.com/forums/topic308364.html
Program started at: 05/28/2013 03:27:22 PM in x64 mode.
Windows Version: Windows 7 Home Premium Service Pack 1
Checking for Windows services to stop:
* No malware services found to stop.
Checking for processes to terminate:
* No malware processes found to kill.
Checking Registry for malware related settings:
* Explorer Policy Removed:  NoActiveDesktopChanges [HKLM]
Backup Registry file created at:
C:\Users\Home\Desktop\rkill\rkill-05-28-2013-03-27-26.reg
Resetting .EXE, .COM, & .BAT associations in the Windows Registry.
Performing miscellaneous checks:
* No issues found.
Checking Windows Service Integrity:
* No issues found.
Searching for Missing Digital Signatures:
* No issues found.
Checking HOSTS File:
* No issues found.
Program finished at: 05/28/2013 03:29:21 PM
Ex... Read more

A:Audio Ad's Playing in the Background

Hello nopcs I would like to welcome you to the Malware Removal section of the forum.Around here they call me Gringo and I will be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", t... Read more

3 more replies
Answer Match 68.04%

All steps taken to try and resolve issue can be found at https://www.bleepingcomputer.com/forums/t/563549/audio-ads-playing-in-background/.
 
Audio ads play in background at seemingly random times. Whenever the ads play multiple instances of the Iexplorer.exe (you cant see any internet explorer windows) process are found running and sometimes taking up 100k plus memory while playing audio ads.
 
I will attach 2 sets of DDS logs one for when no audio ads are playing (after computer restart) and another for after the audio ads play.
 

A:Audio Ads Playing In Background

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Download the version of this tool for your operating system.Farbar Recovery Scan Tool (64 bit)Farbar Recovery Scan Tool (32 bit)and save it to a folder on your computer's Desktop.Double-click to run it. When the tool opens click Yes to disclaimer.Press Scan button.It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.===Please paste the logs in your next reply DO NOT ATTACH THEM unless specified.To attach a file select the "More Reply Option" and follow the instructions.Wait for further instructions.

7 more replies
Answer Match 68.04%

so ive had this problem for a few months now and at random times ads just start playing i dont even have anything open. ive tried many thing to fix it but nothing works they just keep on playing. also at random times it tells me somthing like plug n play services have terminated and must now restart and DCOM services have terminated and must now restart and its is annyoing please help me.Edit: Moved topic from Windows 7 to the more appropriate forum.~ Animal

A:Audio ads playing in background

Hi,
 
Please download Rkill (courtesy of BleepingComputer.com) to your desktop.
There are 2 different versions. If one of them won't run then download and try to run the other one.
You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.
 rKill.exe: http://www.bleepingcomputer.com/download/rkill/dl/10/iExplore.exe (renamed rKill.exe): http://www.bleepingcomputer.com/download/rkill/dl/11/
Double-click on the Rkill desktop icon to run the tool.
If using Vista or Windows 7 right-click on it and choose Run As Administrator.
A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
If not, delete the file, then download and use the one provided in Link 2.
Do not reboot until instructed.
If the tool does not run from any of the links provided, please let me know.
After the tool has finished running, a text file named Rkill.txt should be located on the desktop. Please copy and paste the contents into your next reply.
 
xXToffeeXx~

7 more replies
Answer Match 68.04%

Hi folks...and hope you can help
 
I'm running Windows 7, 64 Bit
 
I've read a number of threads here on the subject, and tried a number of programs to clear this up, but no luck as of yet.  I also believe I have the "Proxy 127.0.0.1".  Using Admin rights I've tried to change the DWord for "ProxyEnable" to "0", and delete "ProxyServer", which was set to "http=127.0.0.1:8877;https=127.0.0.1:8877", but it keeps coming back.
 
I've downloaded the current versions, and virus databases of:
- Malwarebytes
- HitmanPro_x64
- SpyHunter
- tdsskiller
- ESET
- Adwcleaner 5.019
 
I've also downloaded the below files based on what i've read here, run them, and saved the text file:
- ESET
- Rkill
- Junkware Removal
- Adwcleaner
 
In may cases I have to run "RKill" again to launch the program.  Prior to realizing what RKill was, I was running in SAFE MODE.
 
Below are the FRST text files.  I sure hope someone can help
 

A:Audio Ads Playing in background

Hi there, I will be helping you with your malware related problems.
 
Can you please upload the below files:
C:\Program Files (x86)\claim\remember.exe
C:\Program Files (x86)\repulsive\cars.exe
To this link for review?
 
Thank you

19 more replies
Answer Match 68.04%

Tech Support Guy System Info Utility version 1.0.0.1
OS Version: Microsoft® Windows Vista™ Home Premium , Service Pack 2, 32 bit
Processor: Intel(R) Core(TM)2 Duo CPU T6400 @ 2.00GHz, x64 Family 6 Model 23 Stepping 10
Processor Count: 2
RAM: 3033 Mb
Graphics Card: Mobile Intel(R) 4 Series Express Chipset Family, 1292 Mb
Hard Drives: C: Total - 223434 MB, Free - 122150 MB; D: Total - 953866 MB, Free - 716425 MB; E: Total - 14999 MB, Free - 7394 MB;
Motherboard: Dell Inc., 0G848F, , .D9WTBH1.CN701669690022.
Antivirus: McAfee Anti-Virus and Anti-Spyware, Updated and Enabled.

Malwarebytes has just been used to remove Fake "Hard Drive Diagnostics" program. PC now appears clean but audio adverts randomly play in background without showing any programs running but with iexplore.exe process active.
Any instructions and help you can give me would be greatly appreciated, thanks.
 

A:Audio ads playing in background

16 more replies
Answer Match 68.04%

Good evening.

Ever since this morning, I've been getting audio ads playing on my computer despite the fact that my browser is closed and that no video is playing at all. I've been worried, since my Windows Live OneCare detected trojans recently... But I deleted them, and now it doesn't detect anything wrong anymore, no viruses, nothing. A few times I opened Task Manager to check if I noticed a process that I didn't recognize, but nothing came on.

Here is my HijackThis log. Please do tell me if you see something suspicious.

Thanks for the help in advance.

Logfile of Trend Micro HijackThis v2.0.3 (BETA)
Scan saved at 8:30:47 PM, on 01/01/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18865)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\lg_swupdate\GiljabiStart.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\LG Software\BatteryMiser\BatteryMiser5.exe
C:\Program Files\LG Software\LG Magnifier\MagnifyingGlass.exe
C:\Program Files\LG Software\On Screen Display Setup\HotKey.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program F... Read more

A:Audio ads playing in background

16 more replies
Answer Match 68.04%

Hello,

I am looking for some help here. My computer got infected Yesterday. I ran Malwarebyes and that cleared the main Virus but I still have Audio Ads playing randomly in the background. I can have no browser open but those Ads keep playing and I get redirected when using Google search. I also get Script error every so often. When I look at the process, there is nothing running there, Only way to stop it by killing Explorer.exe. I have run Rootkit Buster (Trend Micro), Tdss Killer, Malware Bytes, Hit Man Pro and Combofix. None of them are finding anything. I have also clear all my temps using Ccleaner. I also Uninstall Firefox (My Main Browser) and also reset Internet Explorer and also manually disabled all Browser. When None of this worked, I did a system restore to 2 weeks ago, the script error popped right back up as soon as I logged back in, I ran updated combofix again. Please help, I am not posting the Log as its says so i the forum rule but I ran it before reading this rule...

Thank you !

A:Background Audio Ads Playing

You most likely have a Bootkit infection.Having run ComboFix we need to see that and a DDS log.Please go here....Preparation Guide ,do steps 6 - 9.Create a DDS log and post it in the new topic explained in step 9 which is here Virus, Trojan, Spyware, and Malware Removal Logs and not in this topic,thanks.Skip the GMER step and instead post the ComboFix log you have.Let me know if that went well.

3 more replies
Answer Match 68.04%

Hi All,
 
I am new in this community and I'm really glad I've come across it. 
 
I believe my problem started when I watched a video via streaming (for free) from this website called watch32.is. As expected, there are heaps of ads being free. Every time you clicked on the play button, it would open up a new page for the ads. After a few days, I noticed that while watching a show, an audio of a ads would play in the background.
 
I looked it up online and it appeared to be a malware/adware. I called my anti-virus/spyware product support and after running several scans no threats were reported. It is very annoying because even if I'm not browsing anything, the ad audio plays in the background.

Can anyone please tell me how to get rid of this? 
 
Thanks a lot.
 
Cheers,
iwannabe_geek

A:Ads audio playing in the background

I am a novice pretty new to this Site also and I am not going to even attempt to answer your query because I know that expert advice will be along here very shortly. 
All I can say is this Site has been a god-send to me in helping me gain tech knowledge in how to keep my pc virus-free. The guys and girls here are awesome!
I am sure someone will come along to recommend you use Junkware Removal Tool and/or AdwCleaner of which there are downloads available within this Site.
Use them if indeed this is the case -  as well as read up about the potential problems that PUP's (Potentially Unwanted Programs) can cause. Also, if you are ever tempted to download and use a free pc 'boosting' or other supposed performance-enhancing program in future - DONT! Registry cleaners are a no-no as well! 
 
Sorry to diverse away slightly from your original query....just a bit of 'advice' (if you can call it that! lol) from a fellow novice!

2 more replies
Answer Match 68.04%

Ever since last night when ever I get on my computer and I connect to the internet audio ads start playing in the background. When ever it starts playing I open Windows Task Manager and go to Processes and go to the process that is causing the ads to play I end it but after a few minutes it starts back up again. I have no idea what to do. I use a Windows Vista Home Basic that's a model Satellite L305. The process that is to the ads is always one of the svhost.exe that has the highest number of CPU Usage out of all of the others. Below is what showed up when I scanned using Hijack This.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 2:58:59 PM, on 9/13/2012
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16446)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Toshiba\Power Saver\TPwrMain.exe
C:\Program Files\Toshiba\SmoothView\SmoothView.exe
C:\Program Files\Toshiba\FlashCards\TCrdMain.exe
C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Users\Justin\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Norton Internet Security\Engine\19.8.... Read more

A:Audio Ads playing in background

Hello MythicG2001 and welcome to TSG,

I'm kevinf80 and I will be helping with any malware issues you may have with your system.
Please be aware that some of the logs I may ask for can be very complex and can take a long time to decipher. I am a volunteer here with a job and family so I ask that you be patient when waiting for replies.
Please DO NOT run any scans/tools/fixes on your own as this will conflict with the tools we are going to use.
Either print or Save to Notepad all instructions and please follow them carefully, if there's something you don't understand or that will not work please let me know and we will go through it together.
Malware is often buggy and can be very unstable, with that in mind it is advisable to backup any important data before we begin. Go Here and follow the instructions specific for your operating system.

Please proceed as follows :-

Delete any versions of Combofix that you may have on your Desktop, download a fresh copy from the following link :-

Combofix
Ensure that Combofix is saved directly to the Desktop <--- Very important

Disable all security programs as they will have a negative effect on Combofix, instructions available Here if required. Be aware the list may not have all programs listed, if you need more help please ask.

Close any open browsers and any other programs you might have running

Double click the icon to run the tool (Vista or Windows 7 users right click and select "Run as Adminis... Read more

1 more replies
Answer Match 68.04%

Hello there, I'm having an issue with my computer that started today. It restarted by itself and when it rebooted these ads in the background started playing. I've already tried malwarebytes, and TDSS killer but it couldn't find anything If someone could please help me it'd be much appreciated, I already ran DDS so I'll post the log I got from that.
 
If there's anything else you guys need from me please let me know. Thank you.
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 9.0.8112.16448  BrowserJavaVersion: 10.9.2
Run by Fred at 0:05:59 on 2013-12-30
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.2811.798 [GMT -6:00]
.
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\system32\atiesrxx.exe
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\atieclxx.exe
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\windows\SysWOW64\svchost.exe -k Akamai
C:\windows\system32\svchost.exe -k LocalServic... Read more

A:Audio ads playing in background

Hello Leelee21 I would like to welcome you to the Malware Removal section of the forum.Around here they call me Gringo and I will be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same"... Read more

51 more replies
Answer Match 68.04%

I have recently had audio only ads running in the background. No application open - no browser or media player.

I have run Spybot and Malwarebytes. Upon searching further I have found your site. I have installed Hijackthis and here is my log.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:29:10 PM, on 28/03/2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16470)
Boot mode: Normal

Running processes:
C:\ProgramData\DatacardService\DCSHelper.exe
C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
F:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
C:\Program Files (x86)\SMART Technologies\Education Software\SMARTBoardService.exe
C:\Windows\Samsung\PanelMgr\SSMMgr.exe
C:\Windows\twain_32\Samsung\CLX3180\Scan2Pc.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Creative\Sound Blaster Recon3D\Sound Blaster Recon3D Control Panel\SBRecon.exe
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_6_602_180.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_6_602_180.exe
F:\F-Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://... Read more

A:Audio ads playing in background

15 more replies
Answer Match 68.04%

i keep hearing ads in the background and i also cant install avast it cant connect to there server to confirm registration. i have ran avg malware bytes and adaware all in safe mode and they dont detect anything. im running win xp 32 on sp3

here my dds file

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 10.4.1
Run by Valued Customer at 21:09:07 on 2012-07-17
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2037.1044 [GMT -4:00]
.
AV: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
AV: Lavasoft Ad-Watch Live! Anti-Virus *Disabled/Updated* {A1C4F2E0-7FDE-4917-AFAE-013EFC3EDE33}
.
============== Running Processes ===============
.
"C:\WINDOWS\system32\svchost.exe"
"C:\WINDOWS\system32\svchost.exe"
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\system32... Read more

A:audio ads playing in the background

Greetings and Welcome to The Forums!!My name is Gringo and I'll be glad to help you with your computer problems. I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At... Read more

32 more replies
Answer Match 68.04%

I saw this problem was solved many times on the forums, but didn't want to follow the steps in case they were meant only for the other people's unique situations. So I decided to make an account and ask for help.
These ads usually play around 3-4 am, but happen throughout the day and in the volume mixer, its shown its done through chrome. Also recently, chrome has been eating up a lot of CPU usage even when it's not doing anything, so I think thats related.
Used malwarebytes, Kaspersky, doesn't detect anything.
Thanks in advance.
 

A:Audio ads playing in the background

Welcome aboard
Please, complete all steps listed here: http://www.techspot.com/vb/topic58138.html
Make sure, you PASTE all logs. If some log exceeds 50,000 characters post limit, split it between couple of replies.
Attached logs won't be reviewed.
Please, observe following rules:

Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
If you're stuck, or you're not sure about certain step, always ask before doing anything else.
Please refrain from running any tools, fixes or applying any changes to your computer other than those I suggest.
Never run more than one scan at a time.
Keep updating me regarding your computer behavior, good, or bad.
The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.

 

31 more replies
Answer Match 68.04%

My computer has been attacked by many different kinds of virus these few days, like trojans, FBI malware. I have cleared all of those by using my antivirus software except the audio ads playing in background. I have been following the instructions of the post in this link: http://forums.techguy.org/virus-other-malware-removal/890285-audio-ads-playing-background.html

I disabled all the antivirus software realtime protection and ran the ComboFix already, but I couldn't find the combofix report. Can anyone help me with this? Thanks
 

More replies
Answer Match 67.2%

Ever since yesterday (12/6/2013), I've been randomly hearing audio ads in the background, even while nothing is open. I've opened up Volume Control and saw the source, something along the lines of Windows Run Process (rundll32) or something like that. I went into task manager and quit it, and I haven't heard anything (yet), but I want to know if I can make sure it's gone-gone. Any help would be appreciated, and I would like to thank you before hand.
 
Operating System: Windows 7 Home Premium
Computer: Lenovo G560

A:Audio Playing Randomly in Background

Hello SDCore I would like to welcome you to the Malware Removal section of the forum.Around here they call me Gringo and I will be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", ... Read more

3 more replies
Answer Match 67.2%

First off, I want to thank you for viewing this post and for helping me resolve this issue. I'll give you the back-story of what happened. This morning, I turned on my computer as normal and played games. I then turned on my Skype so I could talk to the friends I was playing with. After a while, while playing my game, my computer randomly restarts itself. When it finally booted, I immediately got back on Skype and started my game. After some time, however, it started playing random audio such as advertisements, music, etc. I thought it was Skype so I closed it. The audio continued to play. I knew it couldn't have been my game because League of Legends does not play radio and advertisements. However, I closed my game after a while in an attempt to figure out what is playing the audio. I opened up my Volume Control and noticed that there was something called "Name Not Available". I muted this and the audio stopped. This should not be there, however, and I'm trying to figure out what is making this audio play and how I can get rid of it.

Anti-virus/Anti-spyware programs:

AVG (Free Version)
Malwarebytes Anti-Malware
CCleaner

 

A:Random Audio playing in the background

Hmm. This is quite odd. I am not really sure but the only thing I can recommend with the details given is to run a full Malwarebytes Anti-Malware scan and see if it detects something. I am not really sure what else it could be. My first guess would be some sort of adware installed on your computer. If Malwarebytes comes up clean, then download SuperAntiSpyware and run a full scan. If that comes up clean, I am really not sure what the issue is and I hope someone else in the TS community can help you out and resolve the issue! Good luck!
 

6 more replies
Answer Match 67.2%

Hi,
My computer just start playing audio ad in the background, no programs running. I am a newbie on this site. I have Window 7 home premium on a dell I5-2430m cpu 64-bit. It is driving me crazy. I've removed a virus before (not on this computer), but this one scares me, don't know where to start. Please help.
Thanks!

A:Randon audio ads playing in the background

Greetings and Welcome to The Forums!!My name is Gringo and I'll be glad to help you with your computer problems. I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At... Read more

3 more replies
Answer Match 67.2%

My laptop has been playing random audio ads in the background. Please help.
 

More replies
Answer Match 67.2%

Hi, I took a backup of my laptop->HP Pavilion dm4-2070us. I followed the special instructions before posting the below HijackThis log contents. I double-clicked the dds.scr file but did not get this note: "Two logs shall be created on your Desktop". Please let me know whether restoring to factory settings may quickly resolve this issue. Thank you very much!

Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 2:12:19 PM, on 7/14/2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16496)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Internet Explorer\IELowutil.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\KOLLI\Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPNOT/1
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/HPNOT/1
R1 - HKLM\Software\Microsoft\... Read more

A:Audio Ads been playing in background for last 2-3 weeks

The log from Scan results of GMER is given below..

GMER 2.1.19163 - http://www.gmer.net
Rootkit scan 2013-07-14 16:57:39
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 WDC_WD64 rev.01.0 596.17GB
Running: enc511qx.exe; Driver: C:\Users\KOLLI\AppData\Local\Temp\pgtiqpod.sys
---- User code sections - GMER 2.1 ----

.text C:\Windows\system32\svchost.exe[400] C:\Windows\system32\WININET.dll!HttpSendRequestW 0000000076e8d1e8 14 bytes {JMP QWORD [RIP+0x0]}
.text C:\Windows\system32\svchost.exe[400] C:\Windows\system32\WININET.dll!HttpSendRequestA 0000000076f09dd0 14 bytes {JMP QWORD [RIP+0x0]}
.text C:\Windows\system32\svchost.exe[400] C:\Windows\system32\ole32.dll!CoCreateInstance 000007fefded7490 9 bytes {JMP QWORD [RIP+0x0]}
.text C:\Windows\system32\svchost.exe[400] C:\Windows\system32\ole32.dll!CoCreateInstance + 11 000007fefded749b 3 bytes [00, 00, 00]
.text C:\Windows\system32\svchost.exe[400] C:\Windows\system32\ole32.dll!CoGetClassObject 000007fefdee2e18 14 bytes {JMP QWORD [RIP+0x0]}
.text C:\Windows\system32\svchost.exe[400] C:\Windows\system32\ws2_32.dll!GetAddrInfoW + 1 000007feff1b23c1 13 bytes {JMP QWORD [RIP+0x0]}
.text C:\Windows\system32\svchost.exe[400] C:\Windows\system32\ws2_32.dll!GetAddrInfoExW 000007feff1bc090 14 bytes {JMP QWORD [RIP+0x0]}
.text C:\Windows\system32\svchost.exe[400] C:\Windows\system32\winmm.dll!waveOutOpen 000007fefbb538d0 14 bytes {JMP QWORD [RIP+0x0]}
.text C:\Windows\system32\svchost.exe[... Read more

1 more replies
Answer Match 67.2%

Running Windows 8.1 and Firefox 37.0.2
Audio commercials playing in background at random times when running Firefox. Hasn't happened when not running Firefox (so far).
This started about a week ago. So far, this has happened only in Firefox; but, I am not absolutely sure it won't happen in IE as I use it almost none at all. If I close Firefox, the commercial stops immediately. Firefox and IE are the only browsers I have installed. I have reset Firefox to defaults, run Malwarebytes Antimalware, CCleaner, removed the hard disk and connected it to another system as a secondary drive and scanned for viruses. No change.
 

A:Audio Commercials Playing in Background

16 more replies
Answer Match 67.2%

It's back.  Was here last week, someone was -quite- helpful, I can't find the person tho as this forum doesn't seem to keep track of posts.
 
Anyway, last week all of a sudden I get audio commercials playing in the bg.  I've run:
 
SASW
MWB
Crap Cleaner
SpyBot
ADW
TDSS
 
and prolly a few more.  All negative.  This machine is as clean as I can make it. So it stopped last Mon after all this...we figured, we got it.  Nope- back again this AM. "Castrol GTL" ad, I believe.  What's my next move here?  Could this be browser specific?  All I use is Chrome.
 

A:Audio playing in background, Part II

Please stay in your original topic: http://www.bleepingcomputer.com/forums/t/500920/rootkitbootharbingera/page-3

1 more replies
Answer Match 67.2%

Hey,
 
For last couple of days (5-7) I'm experiencing some kind of a virus. It's playing audio ads on various websites (for example it can play an ad in listenonrepeat but it has never happened on facebook). There is no apparent schedule to this, it can be silent for 4 hours and then play the ad or play ads one by one after closing the page. Also, when I'm trying to close the page ad is playing on I get the message "Do you really want to close this tab?". I haven't downloaded anything fishy lately nor have been on fishy websites so I don't know where it came from. The only explanation is a pendrive I connected to my PC from a video guy that is going to film my wedding. I tried scanning my PC with various apps recommended and supposed-to-be-good in fighting malware and nothing. I'm not an IT guy so I don't know what to do next and need help. I need to format my system yesterday due to my mistake so I'm on fresh Windows 7 installation.
 
I know that there are sentences not in English but FRST chose my native language as default and I have no idea how to change it to English. If this scan is not good, just let me know.
 
 
 
 
Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 12-09-2016
Uruchomiony przez admin (administrator)  ADMIN-KOMPUTER (15-09-2016 04:06:24)
Uruchomiony z C:\Users\admin\Downloads
Załadowane profile: admin (Dostępne profile: admin)
Platform: Windows 7 Home Premium (X64) Język: Polski (Polska... Read more

More replies
Answer Match 67.2%

Random audio ads and news clips keep playing on my computer and they are definitely not originating from any window I have open.

SysInfo:

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: Intel(R) Core(TM) i7-2670QM CPU @ 2.20GHz, Intel64 Family 6 Model 42 Stepping 7
Processor Count: 8
RAM: 8139 Mb
Graphics Card: Radeon (TM) HD 7690M XT, 1024 Mb
Hard Drives: C: Total - 689290 MB, Free - 585568 MB; D: Total - 21849 MB, Free - 2353 MB; E: Total - 4054 MB, Free - 1098 MB;
Motherboard: Hewlett-Packard, 17FB
Antivirus: Microsoft Security Essentials, Disabled

HijackThis Log:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:52:23 AM, on 9/8/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16447)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\HP SimplePass 2012\TouchControl.exe
C:\Program Files (x86)\HP SimplePass 2012\BioMonitor.exe
C:\Program Files (x86)\uTorrent\uTorrent.exe
C:\Users\Trevor\Local Settings\Apps\F.lux\flux.exe
C:\Program Files (x86)\Java\jre6\bin\javaw.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
C:\Program Files (x86)\Commo... Read more

A:Random audio playing in background

9 more replies
Answer Match 67.2%

Hi dear mods so i have been getting random audio ads in playing in the background. The time between them varies from 10 to 30, 40 minutes each. The ads are short, probably less than a minute each and they are about food items like bertolli's pasta and marie callendar pies if that matters at all haha. 
 
Thank you for your time and help!! Here's the FRST data
 
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-02-2015
Ran by xana (administrator) on MORPHINE on 08-02-2015 04:06:03
Running from C:\Users\xana\Downloads
Loaded Profiles: xana (Available profiles: xana)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdr... Read more

A:Random audio ads playing in background

sorry, accidentally posted two of the same thread. if the mods could please delete one that would be great. they are the same. thank you. 

18 more replies
Answer Match 67.2%

I am working on a friends computer that is having 2 main issues. The desktop icons don't seem to be working but if I go to the start menu I can open programs and folders. The other issue is that it randomly plays commercial audio when sitting idle or doing anything else on the computer. I have run scan disk, defrag, avg scan, and malware bytes. Both problems persist. I have seen other topics on this using combofix but on that page it says wait til one of you guys tell me to run it before I do. So now I am just waiting for your advice and help. Thank you.

A:commercial audio playing in background

DownloadTDSSkillerLaunch it.Click on change parameters-Select TDLFS file systemClick on "Scan".Please post the LOG report(log file should be in your C drive) Do not change the default options on scan resultsDownloadaswMBRLaunch it, allow it to download latest Avast! virus definitionsClick the "Scan" button to start scan.After scan finishes,click on Save logPost the log results here.If you get crashes in normal mode,run it in safemode with networkingDownloadESET online scannerInstall itClick on START,it should download the virus definitionsWhen scan gets completed,click on LIST of found threatsExport the list to desktop,copy the contents of the text file in your reply

17 more replies
Answer Match 67.2%

I have an intresting problem , i have a dell laptop that I just cleaned out a rouge program called windows disk fixer , I have the computer totally free of virus ans spyware but audio ads are playing in background and I occosionally get a script error and they stop. I have run the following programs and they all come up clean. Malware bytes, spybot, superantispyware, trend micro house call, numerous root kit removers from everbody ( kaspersky root kit remover will not run on this system all outhers have ) , i have run windsock fix as well as just about any other fixer you can think of I have reloaded the sound card and all the logs are clean from hijack this I have included just incase I missed anything. any Ideas?

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 5:19:15 PM, on 4/27/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Secunia\PSI\PSIA.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
C:\Program Files\UPHClean\uphclean.exe
C:\... Read more

A:Audio Advertisments playing in the background

7 more replies
Answer Match 67.2%

My laptop has an issue with audio advertisements popping up randomly. When I go to task manager, I find that IE is running and when I click "end task" the ad goes away. I use Chrome, not IE. Also, I download installed and tried to run Cobian backup but it did not work. It just got stuck on "closing other instances of the user interface"
 

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-02-2015 02
Ran by pastorjasonharris (administrator) on MRLAPPY on 12-02-2015 13:08:38
Running from C:\Users\pastorjasonharris\Downloads
Loaded Profiles: pastorjasonharris (Available profiles: pastorjasonharris)
Platform: Windows 8.1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(Bitdefender) C:\Program Files\Bitdefender\Antivirus Free Edition\gzserv.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Windows ® Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(CobianSoft, Luis Cobian) C:\Program Files (x86)\Cobian Backup 11\cbVSCService11.exe
(Luis Cobian, CobianSoft) C:\Program Files (x86)\Cobian Backup 11\cbService.exe
(ELAN Microelectronics Corp.) C:\Program Fil... Read more

A:Audio Advertisements Playing in Background

I deleted a few extra games and programs and ran Malware bytes.
 
THE STUPID AUDIO ADS ARE STILL PLAYING =(
 
This is the log:
 
Malwarebytes Anti-Malware
www.malwarebytes.org
 
Scan Date: 2/12/2015
Scan Time: 12:47:00 PM
Logfile: malwarebyteslog.txt
Administrator: Yes
 
Version: 2.00.4.1028
Malware Database: v2015.02.12.05
Rootkit Database: v2015.02.03.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled
 
OS: Windows 8.1
CPU: x64
File System: NTFS
User: pastorjasonharris
 
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 347557
Time Elapsed: 18 min, 4 sec
 
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled
 
Processes: 0
(No malicious items detected)
 
Modules: 0
(No malicious items detected)
 
Registry Keys: 17
PUP.Optional.Consumer.Input.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{B49699FC-1665-4414-A1CB-C4A2A4A13EEC}, Quarantined, [276e72ab26645adc429c7d8da55eb24e], 
PUP.Optional.Consumer.Input.A, HKLM\SOFTWARE\CLASSES\ConsumerInputUpdate.CoreClass, Quarantined, [148177a6cfbb69cd36308a4ddc27837d], 
PUP.Optional.Consumer.Input.A, HKLM\SOFTWARE\CLASSES\ConsumerInputUpdate.CoreClass.1, Quarantined, [c2d3de3fd5b5c571273f19bebf4406fa], 
PUP.Optional.Consumer.Input.A, HKLM\SOFTWARE\CLASSES\Con... Read more

12 more replies
Answer Match 67.2%

I seem to have picked up a virus. the most obvious symptom is that there are audio commercials playing with no applications open. I believe that the commercials are only running when i have an active intenet connection. The symptom that concerns me the most is that my task manager does not work properly, it has no tabs or menu options and it displays only the processes. i have checked these forums for anwers and found a similar problem. I followed the steps listed to fix the problem. First I ran Sophos rootkit removal tool, followed by Combofix. After i ran combo fix my computer stopped working temporarily saying that all registry keys were deleted, but after I rebooted that problem self corrected. The Final step I followed was to run kaspersky's TDSSKILLER. When i tried to run the cure function, it forced screen of death. twice. please help. Please tell instruct me which logs to post, and how to acess them

A:Audio Commercials playing in background

Hello jonesbrian1976,

If you still require assistance, kindly follow the instructions in our pre-posting topic New Instructions - Read This Before Posting for Malware Removal Help and post the requested logs in your next reply.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

1 more replies
Answer Match 67.2%

After the new years, I also got the annoying malware that plays audio ads in the background. In the volume mixer it is listed as "Name not available" Tried all the virus removal tools (rkill, combo fix, tpsskiller, adwcleaner, malwarebyte anti-rootkit, etc.) with no success.
 
symptoms - other than the audio ads playing in the background. I would randomly get the message that either Dcomlaunch or plug and play has stopped unexpectedly and I was forced to restart.
 
After running TPSSkiller, I found that dcomlaunch and RpcSs were listed as suspicious objects.
 
Below is my FRST log
 
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-01-2014
Ran by Gilbert (administrator) on GILBERT-PC on 04-01-2014 12:18:14
Running from C:\Users\Gilbert\Downloads
Windows 7 Ultimate (X64) OS Language: English(US)
Internet Explorer Version 8
Boot Mode: Normal
 
==================== Processes (Whitelisted) =================
 
(Enigma Software Group USA, LLC.) C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(cFos Software GmbH) C:\Program Files\ASRock\XFast LAN\spd.exe
(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files\Inte... Read more

A:Audio ads playing in the background cannot stop it

here is the dds log
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64 
Internet Explorer: 8.0.7600.16385  BrowserJavaVersion: 10.45.2
Run by Gilbert at 13:19:58 on 2014-01-04
Microsoft Windows 7 Ultimate   6.1.7600.0.1252.1.1033.18.8074.4621 [GMT -5:00]
.
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE
C:\Windows\system32\nvvsvc.exe
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\ASRock\XFast LAN\spd.exe
C:\Program Files\Intel\iCLS Client\HeciServer.exe
C:\Program Files\Intel\Intel® Smart Connect Technology Agent\iSCTAgent.exe
C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe
C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
C:... Read more

5 more replies
Answer Match 67.2%

Hi guys,

I've been having these random audio ads play in the background and it's driving me mad - tried running Anti-Malware Bytes, Kaspersky TDSS etc. and the ads still persist. I'm not in the mood to reformat my hard-drive, so I'm hoping someone here can help. Thanks in advance!

Here is my FRST logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by Anthony (administrator) on HOMEPC on 11-04-2015 17:50:48
Running from C:\Users\Anthony\Desktop
Loaded Profiles: Anthony (Available profiles: Anthony)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporat... Read more

A:Random audio ads playing in background

And here is the Addition.txt log:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-03-2015
Ran by Anthony at 2015-04-11 17:51:06
Running from C:\Users\Anthony\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

64 Bit HP CIO Components Installer (Version: 7.2.4 - Hewlett-Packard) Hidden
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.134 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1... Read more

23 more replies
Answer Match 67.2%

I have a DELL 14 3437 laptop with windows 8.1 64bit.
Recently there seems to be new virus which plays audio tones in the background even if I`m doing nothing at all,no browsers are open, no files are open.Also my laptop performance reduced drastically and also it would restart on its own.

I tried to remove it using tdsskiller.exe but it was not helpful.
Thereafter I used malicious malware remover,junkware remover tool,and HitmanPro.Thereafter for 2 days there were no audio tones.But since I realised my laptop was not performing as good as before. I uninstalled malicious malware remover,junkware remover tool,and HitmanPro. I installed 1-click cleaner and windows 8 manager.After running them, it seemed like a lot of my system files wer infected and had to be fixed. After this the audio tones have come back and the performance is still very sluggish.

Currently my antivirus gives a message as follows:

"McAfee detected an infected file on your PC.Restart your PC so we can fix it.

About This Trojan
Detected: Trojan-FDOQ!828BCAF63645(Trojan)
Quarantined From: C:\Users\Capt.Meril\AppData\Local\Osmics\CoreMedia.dll"
But nothing happens even if i restart my computer, I just get the same error message.

I have run TSG SysInfo and the following is the log:
Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 8.1 Single Language, 64 bit
Processor: Intel(R) Core(TM) i5-4200U CPU @ 1.60GHz, Intel64 Family 6 Model 69 Stepping 1
Processor Count:... Read more

A:Audio virus playing in background

16 more replies
Answer Match 67.2%

I'm not sure what I did, but ever since this morning my laptop has been playing ad sounds randomly. I can tell by looking at the volume mixer that the sound is coming from internet explorer even though I don't have any instances of IE open. Also, I already tried doing a system restore to a restore point that was made before I started having this problem.

Here is the log of a Malawarebyte's Anti-Malware Quick Scan that I ran:
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4332

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

7/20/2010 1:36:36 PM
mbam-log-2010-07-20 (13-36-36).txt

Scan type: Quick scan
Objects scanned: 131587
Time elapsed: 7 minute(s), 50 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

And here is a log from HiJackThis:
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 1:42:06 PM, on 7/20/2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mod... Read more

A:Random Audio Playing in the background

16 more replies
Answer Match 67.2%

Earlier today i visited some of my usual sites online. there was a clicking sound like web pages being opened but no pages were popping up then advertisments began playing in background not always the same advertisment. MBAM scan clean Mcafee clean ad-ware clean please help

thanks

A:Random audio playing in background

Hello and welcome,we'll try these now.Next run ATF and SAS: If you cannot access Safe Mode,run in normal ,but let me know.Note: On Vista, "Windows Temp" is disabled. To empty "Windows Temp" ATF-Cleaner must be "Run as an Administrator".From your regular user account..Download Attribune's ATF Cleaner and then SUPERAntiSpyware , Free Home Version. Save both to desktop ..DO NOT run yet.Open SUPER from icon and install and Update itUnder Scanner Options make sure the following are checked (leave all others unchecked):Close browsers before scanning.Scan for tracking cookies.Terminate memory threats before quarantining.Click the "Close" button to leave the control center screen and exit the program. DO NOT run yet.Now reboot into Safe Mode: How to enter safe mode(XP)Using the F8 MethodRestart your computer. When the machine first starts again it will generally list some equipment that is installed in your machine, amount of memory, hard drives installed etc. At this point you should gently tap the F8 key repeatedly until you are presented with a Windows XP Advanced Options menu. Select the option for Safe Mode using the arrow keys. Then press enter on your keyboard to boot into Safe Mode. Double-click ATF-Cleaner.exe to run the program.Under Main "Select Files to Delete" choose: Select All.Click the Empty Selected button.If you use Firefox or Opera browser click that browser at the top and choose: Select AllClick the Empty ... Read more

1 more replies
Answer Match 67.2%

Hi,
 
My computer was infected with the FBI Moneypak Ransomware virus. It's mostly been removed (I no longer get a lockout screen, and the computer no longer restarts randomly when logging in to normal mode), but there are still a couple of lingering effects.
 
- When logged in to normal mode and connected to the internet, I can hear audio ads playing in the background, with no programs running.
- If I open the control panel and select on any of the options (for example, "back up your computer"), nothing happens.
 
Below is a copy of the DDS log I just ran - the attach.txt file is attached. Thank you in advance for your help!
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 9.0.8112.16476
Run by Joe at 21:13:38 on 2013-06-27
Microsoft Windows 7 Home Premium   6.1.7600.0.1252.1.1033.18.3836.1508 [GMT -7:00]
.
AV: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\PROGRA~2\AVG\AVG2012\avgrsa.exe
C:\Program Files (x86)\AVG\AVG2012\avgcsrva.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\sv... Read more

A:FBI Moneypak Still Playing Background Audio

Hello WIBSTR I would like to welcome you to the Malware Removal section of the forum.Around here they call me Gringo and I will be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", ... Read more

21 more replies
Answer Match 67.2%

I am fixing my friends laptop. He had some issues that were resolved using Malware Anti-Malware Bytes as his computer was completly unprocted before. He also had browser redirects that were fixed with Hijack this. However, after resolving those issues he still has a strange problem. Random audio ads will play even when there is nothing open. I thought it was maybe simply a problem with Google Chrome but it still happens when Chrome is not open. Is there any way to resolve this?

I actually just ran a MAMB scan. The last time I did so there were 0 objects infected this time there were six. I allowed MAMB to fix them. I have the log saved if posting it is required.

A:Random Audio Ads Playing In Background

DownloadTDSSkillerLaunch it.Click on change parameters-Select TDLFS file systemClick on "Scan".Please post the LOG report(log file should be in your C drive) Please download GMER from here(doesnot work on 64 bit OS)http://www2.gmer.net/download.phpTemporarily disable any real-time active protection so your security programs will not conflict with gmer's driver.GMER will open to the Rootkit/Malware tab and perform an automatic Full Scan when first run. (do not use the computer while the scan is in progress)If you receive a WARNING!!! about rootkit activity and are asked to fully scan your system...click NO.Now click the Scan button. If you see a rootkit warning window, click OK.When the scan is finished, click the Save... button to save the scan results to your Desktop. Save the file as gmer.log.Click the Copy button and paste the results into your next reply. DownloadaswMBRLaunch it, allow it to download latest Avast! virus definitionsClick the "Scan" button to start scan.After scan finishes,click on Save logPost the log results here

3 more replies
Answer Match 67.2%

Hi,

Recently when online I have experienced audio adverts playing in the background. There do not appear to be any open windows or extra/unusual processes. I use Avast Antivirus but using this within windows and as a boot-time scan has not solved the problem. I have also tried Spybot S&G, Super Antispyware, and Malbyte's Anti-Malware to no avail. I'm running Windows Vista and generally use Firefox to browse.

HJT log to follow.

Many thanks in advance.
 

A:Audio advert playing in background

16 more replies
Answer Match 67.2%

I recently discovered audio playing when I didn't have any windows open.  In mixer is says name not available.  I am running windows 7.  Malwarebytes, and avg have been no help.

A:Audio ads playing in background on boot up

Hi there,please run a FRST scan to start with:Please download Farbar Recovery Scan Tool and save it to your Desktop.(If you are not sure which version (32-/64-bit) applies to your system, download and try to start both of them as just the right one will run.)Start FRST with administator privileges.Make sure the option Addition.txt is checked and press the Scan button.When finished, FRST will produce two logs (FRST.txt and Addition.txt) in the same directory the tool was run from.Please copy and paste these logs in your next reply.

14 more replies
Answer Match 67.2%

Hello I am new here and I am not that good with computers but I really need some help. My computer has random audio playing with no applications open. I am starting school soon and I need this PC clean as soon as possible. Thank you for your time.

A:Random audio playing in the background

Hello and welcome to TSF.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and
Quote:




Having problems with spyware and pop-ups? First Steps




a link at the top of each page.

Please follow our pre-posting process outlined below.

NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help - Tech Support Forum

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

1 more replies
Answer Match 67.2%

To whom this may concern,

I am aware that there is a similar posting to this on this site, but even after following all the instructions given by CatByte on 23rd July 2010 I find that i am still getting the audio from adverts despite no programmes actually running. This problem is quite recent and i find that along with the audio from ads, i occasionally get pop ups which i believe are from Internet Explorer.

I am currently running Nod32 anti-virus with ZoneAlarm Pro. My primary internet browser is Firefox but on occasion i do use Internet Explorer. I would be extremely grateful for any assistance you can provide. Please see below for a copy of my Hijackthis log. Thank you for your help.
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:25:58, on 26/07/2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.21256)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program File... Read more

A:Audio from advert playing in background

16 more replies
Answer Match 67.2%

I have a dell Vostro 2510 windows xp. For the last 2 months i have been fighting this problem. I get random audio playing in the background at differnent intervals. I have norton 360 and it dosn't seem to be picking anything up. I have seen similar entrys on this forum and the problems have been fixed. So I went to hijackthis and here is my log.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:01:16 AM, on 5/27/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Norton 360\Engine\3.8.0.41\ccSvcHst.exe
C:\Program Files\Norton PC Checkup\Engine\2.0.2.543\SymcPCCULaunchSvc.exe
C:\WINDOWS\system32\DRIVERS\o2flash.exe
C:\Program Files\Norton PC Checkup\Engine\2.0.2.543\ccSvcHst.exe
C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
C:\Program Files\Norton PC Checkup\Engine\2.0.2.543\ccSvcHst.exe
C:\Program Files\Micr... Read more

More replies
Answer Match 67.2%

Hi, I have recently had random audio start playing in the background. At the moment is seems to be the news, but previously it has been music and foreign talking. It has happened before a couple of months ago but I managed to fix the issue with a system restore. Can you help with a more permanent fix. I am not particularly computer savy. Thanks in advance.
 

A:Random audio playing in background

Hi and welcome.

Please download the latest version of TDSSKiller from here and save it to your Desktop.

Doubleclick on TDSSKiller.exe to run the application, then click on Change parameters.

Put a checkmark beside loaded modules.

A reboot will be needed to apply the changes. Do it.
TDSSKiller will launch automatically after the reboot. Also your computer may seem very slow and unusable. This is normal. Give it enough time to load your background programs.
Then click on Change parameters in TDSSKiller.
Check all boxes then click OK.

Click the Start Scan button.

The scan should take no longer than 2 minutes.
If a suspicious object is detected, the default action will be Skip, click on Continue.

If malicious objects are found, they will show in the Scan results - Select action for found objects and offer three options.
Ensure Cure (default) is selected, then click Continue > Reboot now to finish the cleaning process.

Note: If Cure is not available, please choose Skip instead, do not choose Delete unless instructed.
A report will be created in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.

Please download ComboFix from Here or Here to your Desktop.

**Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**

Please, never rename Combofix unless instru... Read more

1 more replies
Answer Match 67.2%

This is odd.

There are random clips of audio playing from my computer every 5 minutes or so. Some clips sound like commercials, and some sound like songs.


Anyone know how to fix this?

Heres my log.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:24:48 PM, on 7/26/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\DVDRAMSV.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\Tablet.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\WINDOWS\system32\WTablet\TabUserW.exe
C:\WINDOWS\system32\Tablet.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\ltmoh\L... Read more

More replies
Answer Match 67.2%

It started a month or two ago; my son had some random sound playing in the background; that went away after a restart.    On occasion, i'd get the same thing where ads / audio from a video would continue after IE has closed; that would go away when stopping any remaining "iexplorer.exe" from the services in task manager.    Now it is happening far more ofter; even after a fresh start.
 
I also see under audio mixer, an "application" called "name not available".    I was suspicious it was a virus or malware, so i ran both Norton (360 installed) and a fresh download of "Malwarebytes".   Malwarebytes found, and removed, something.   Norton found nothing.   The problem persists.
 
My machine is an HP G72 Notebook, 2.00Ghz, P6100, 4GB Ram, and is running WIndows 7 Home Premium.
 
Any help is appreciated!
 
 

A:Random Audio playing in background

Welcome aboard   Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2 SecurityCheck may produce some false warning(s), so leave the results reading to me. Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeClick Go and post the result. Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop.* Double-click mbam-setup.exe and follow the prompts to install the program.* At the end, be sure a checkmark is placed next to Up... Read more

30 more replies
Answer Match 67.2%

I have some kind of male-ware or virus in my computer. It plays audio, like ads and music in the background of my Windows 7 laptop. I followed the instructions given in other forums. I am pasting my report from ComboFix below. Please help. Thank you.
ComboFix 13-07-18.04 - Dharmesh 07/19/2013 13:11:05.1.2 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.4063.2121 [GMT -4:00]
Running from: c:\users\Dharmesh\Desktop\ComboFix.exe
AV: Norton Business Suite *Enabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
FW: Norton Business Suite *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
SP: Norton Business Suite *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\Microsoft\Windows\DRM\B9C3.tmp
c:\programdata\Services
c:\programdata\uninstaller.exe
c:\users\Dharmesh\AppData\Roaming\.#
c:\windows\SysWow64\System32\MASetupCleaner.exe
c:\windows\SysWow64\System32\muzapp.exe
.
.
((((((((((((((((((((((((( Files Created from 2013-06-19 to 2013-07-19 )))))))))))))))))))))))))))))))
.
.
2013-07-19 13:38 . 2013-07-02 08:34 9460976 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{BF45CACC-0EE4-4623-8DD6-C51190B54E53}\mpengine.dll
2013-07-18 16:21 . 2012-08-09 01:50 43680 ----a-r- c:\windows\system32\drivers\SymIMV.sys
2013-07-18 10:56 . 2013-07... Read more

More replies
Answer Match 67.2%

Hi I have been experiencing a problem where audio, Music and voice play in the back ground even when I am not connected to the internet. The problem especially happens when I am connected to an external video and audio source using an hdmi cable.

I am using Windows 7 64 bit
My laptop is a pavilion m6-1045 dx.

I have run Hijack this, GMER, Frst64, Malware bytes, Kapersky, Microsoft Security Essentials, CCleaner.

I have reformatted my computer restoring it to factory settings but after a while the problem came back.

PLEASE HELP
 

A:Music/audio Keeps Playing in Background

This May help for additional information I have a name not found item in my sound mixer which I cant unmute or close or select.
 

1 more replies
Answer Match 67.2%

My computer has a serious virus that does the following:
1) Runs audio ads indiscriminately in the background with all browsers and windows closed.
2) System is running slow
3) Virus hi-lites words such as 'password' and when hovered over with the mouse, ads appear.
4) Ads show up on websites that I've logged into. Can't get rid of them.

This is what I've tried to resolve the problem:
1. Ran Microsoft Security Essentials in regular mode AND safe mode
2. Ran system restore (can't go back far enough)
3. Installed and ran McAfee in regular mode AND safe mode
4. Ran CCleaner
5. Purchased and ran Trojan Remover 6.8.5 by Simply Super Software

NOTHING works!!! Are my passwords at risk?

HELP!!

Thank you!

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: AMD Phenom(tm) II X4 925 Processor, AMD64 Family 16 Model 4 Stepping 2
Processor Count: 4
RAM: 4094 Mb
Graphics Card: ATI Radeon HD 5570, 1024 Mb
Hard Drives: C: Total - 945554 MB, Free - 829280 MB;
Motherboard: Gigabyte Technology Co., Ltd., M68MT-S2
Antivirus: Microsoft Security Essentials, Updated and Enabled

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 3:31:13 PM, on 4/29/2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16537)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\HP\HP Software Updat... Read more

A:Audio Ads Playing in the Background + Other Problems

16 more replies
Answer Match 67.2%

Recently the audio for adverts has been playing in the background even when nothing is running. When the audio is playing there are no unusual or extra processes running, like other people have been experiencing. I've tried running avg and malwarebytes anti malware in and out of safe mode. in safe mode avg did find something a trojan called loader.exe and smss.exe (see attached file for more information) but even when they were deleted it didn't solve the problem. I've also tried cleaning out all temporary files but still no luck. I'm running windows 7 and mainly use google chrome as my default internet browser. I have also attached my HJT log.
 

A:Advert audio playing in background

11 more replies
Answer Match 67.2%

Hi! I've been having a serious problem with unwanted audio ads constantly playing in the background of my computer. This occurs whether or not I have my browser (IE) open, and even happens when my network connection is unplugged. The ads are short (about 30 seconds) - some of them are for companies I've heard of (like Bank of America or UPS), but some I don't recognize. Some are gibberish. I've run Malwarebytes and McAfee, both of which have found nothing. I also used a secure erase program to delete all cookies and temporary files (one site suggested that might help), with no luck. It's driving me crazy.Here is the HijackThis log I ran this morning:Run by V at 7:53:51.00 on Fri 03/27/2009Internet Explorer: 7.0.5730.11Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.2046.1260 [GMT -4:00]AV: McAfee VirusScan *On-access scanning enabled* (Updated)FW: Norton Internet Worm Protection *disabled*FW: McAfee Personal Firewall *enabled*FW: Norton Internet Security 2006 *disabled*============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exesvchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\Program Files\Common Files\Creative Labs Shared\Serv... Read more

A:Unwanted Audio Ads Playing in Background

Hello RGP7711,Sorry about the delay. If you still need help, please post a new HijackThis log to make sure nothing has changed, and I'll be happy to look at it for you.Please do this:1. Download HijackThis? here:http://www.trendsecure.com/portal/en-US/th.../hijackthis.php2. Click 'Do a System Scan and Save log'.The HJT log will open in notepad.Thanks,tea

2 more replies
Answer Match 67.2%

After the new years, I also got the annoying malware that plays audio ads in the background. In the volume mixer it is listed as "Name not available" Tried all the virus removal tools (rkill, combo fix, tpsskiller, adwcleaner, malwarebyte anti-rootkit, etc.) with no success.
 
symptoms - other than the audio ads playing in the background. I would randomly get the message that either Dcomlaunch or plug and play has stopped unexpectedly and I was forced to restart.
 
After running TPSSkiller, I found that dcomlaunch and RpcSs were listed as suspicious objects.
 
Here is the FRST log
 
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-01-2014 02
Ran by Gilbert (administrator) on GILBERT-PC on 19-01-2014 11:20:39
Running from C:\Users\Gilbert\Desktop
Windows 7 Ultimate (X64) OS Language: English(US)
Internet Explorer Version 8
Boot Mode: Normal
 
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(Enigma Software Group USA, LLC.) C:\Program File... Read more

A:Audio ads playing in the background cannot stop it

Hello and welcome.  Please follow these guidelines while we work on your PC:Malware removal is a sometimes lengthy and tedious process. Please stick with the thread until I’ve given you the “All clear.”  Absence of symptoms does not mean your machine is clean!Please do not run any scans or install/uninstall any applications without being directed to do so.Please note that the forum is very busy and if I don't hear from you within five days this thread will be closed.   Open notepad. Please copy the contents of the code box below. To do this highlight the contents of the box and right click on it. Paste this into the open notepad. Save it in the same location as FRST (usually your desktop) as fixlist.txt2014-01-02 11:01 - 2014-01-02 11:01 - 00037376 _____ C:\Windows\system32\gbamdrn.bae
2014-01-02 10:50 - 2014-01-18 19:03 - 00000093 _____ C:\Windows\system32\blmckkg.eda
2014-01-02 10:50 - 2014-01-02 11:01 - 00000102 _____ C:\Windows\system32\phmlp.zoo
2014-01-02 10:50 - 2014-01-02 10:50 - 00000064 _____ C:\Windows\system32\foqvxgg.zth
2014-01-02 10:35 - 2014-01-02 10:35 - 00219314 ____S C:\Windows\system32\bhnbpeh.umoNOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating systemNow run FRST again.When the tool opens click Yes to disclaimer.Press the Fix button just once and wait.The tool will make a log (Fixlog.txt) please post... Read more

8 more replies
Answer Match 66.36%

*REDIRECTING*. Computer was lagging, didn't catch that.

Recently, It's been irritating me (and disturbing me) that strange audio-ads are playing in the background of my PC at random intervals of time, sometimes overlapping with other ad-playings (creating a somewhat eerie symphony of odd product advertisements).

When I attempted to search for a solution, I noticed I was getting riderected to garbage-sites with no purpose or my request was stopped completely.

When these ads play, the system slows down noticably (especially when I try to play Minecraft on multiplayer).

I've ran full Malwarebytes (With Latest Definitions) scans twice, taking a total of about three hours. I found minor trojans and removed them, but the ads still played... And I still get redirected when using Internet Explorer.

I reached this site by using Steam's in-game Web-Browser to prevent redirection.
I've read similar problems like this, but the actual issues seem to be more specialized to the situations they're in, and the removal processes are different.
 

A:Audio Ads Playing in Background + Riderecting Issues

16 more replies
Answer Match 66.36%

Hi, recently my Internet explorer browser started redirecting me to random websites. For example, I would google search football, and though the correct results came up, when I click on it, it redirects me to some random ad website. So I downloaded Firefox to see if that would work better and it did. I have had no redirecting problems with firefox. However, another issue has come up. I hear random audio ads in the background of my computer, even if no browser is open. These are well known ads too, like movie trailers. I believe both of these problems are from the same virus/hijacking. Now I have scanned my computer in safe mode with both malwarebytes and symantec and they haven't found anything.

Its as if internet explorer is running in the background.
PLEASE HELP

A:Audio ads playing in the background/browser redirecting

Hello and welcome. it's possibly a rootkit. I want to run this first if we can. It will take a couple hours. Before we start fixing anything you should print out these instructions or copy them to a NotePad file so they will be accessible. Some steps will require you to disconnect from the Internet or use Safe Mode and you will not have access to this page.Please download Dr.Web CureIt and save it to your desktop. DO NOT perform a scan yet.alternate download linkNote: The file will be randomly named (i.e. 5mkuvc4z.exe).Reboot your computer in "Safe Mode" using the F8 method. To do this, restart your computer and after hearing your computer beep once during startup (but before the Windows icon appears) press the F8 key repeatedly. A menu will appear with several options. Use the arrow keys to navigate and select the option to run Windows in "Safe Mode".Scan with Dr.Web CureIt as follows:Double-click on the randomly named file to open the program and click Start. (There is no need to update if you just downloaded the most current versionRead the anti-virus check by DrWeb scanner prompt and click Ok where asked to Start scan now? Allow the setup.exe to load if asked by any of your security programs.The Express scan will automatically begin.
(This is a short scan of files currently running in memory, boot sectors, and targeted folders).If prompted to dowload the Full version Free Trial, ignore and click the X to close the window.If an infected object is fo... Read more

12 more replies
Answer Match 66.36%

For the past two days i have been hearing audio ads in the background even though there is no internet explorer running. I am also getting script errors from sites that i dont even go on.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 7:23:30 PM, on 5/2/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\CA\SharedComponents\HIPSEngine\UmxCfg.exe
C:\Program Files\CA\SharedComponents\HIPSEngine\UmxFwHlp.exe
C:\Program Files\CA\SharedComponents\HIPSEngine\UmxPol.exe
C:\Program Files\CA\SharedComponents\HIPSEngine\UmxAgent.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus Plus\caamsvc.exe
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus Plus\isafe.exe
C:\Program Files\CA\CA Internet Security Suite\ccschedulersvc.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Nexon\Mabinogi\npkcmsvc.exe
C:\Program Files\NVIDIA Corporatio... Read more

A:Audio ads playing in background and scriped errors

I also now have the google redirect virus.
 

1 more replies
Answer Match 66.36%

I have been trying to fix this issue for over a week now. After attempts to clean it I actually did a clean install or at least I believe I did. Still here. I even took my computer into a repair place got it back this afternoon and still hear the commercials playing in the background. So clearly they didnt fix it either. From all the research I have done I believe it to be the Rootkit.Boot.Harbinger.a. I have read some forums and used many of the tools that are suggested. Included AdwCleaner, Hitman Pro, Rkill, Roguekiller, Junkware Removal. Unfortunately nothing has worked. I currently have Malwarebytes installed my computer and that too usually finds nothing. Roguekiller seems to be the only one that ever finds malware but it doesnt seem to completely remove the virus. I finally figured out that the virus or at least part of it creates two registries in the internet section of the hkey current user. One being Emulation and the other being a GP rendering something. I am totally clueless and thought I could figure this out but clearly I am not an expert. With all that said I am looking for some guidance on getting rid of this virus once and for all.
 
Oh yeah I am running Windows 7 Professional on a Dell XPS computer
 
Originally I posted this in an incorrect forum but someone mentioned that I will probably need to run a log. If you can tell me how to go about doing that and a link to the software I may need I will get it right up

A:Random Audio Commercials Playing in Background

Please download Farbar Recovery Scan Tool and save it to your desktop.Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.Double-click to run it. When the tool opens click Yes to disclaimer.Press Scan button.It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply. Type the following in the edit box on FRST, after "Search:".rpcss.dllIt then should look like:Search: rpcss.dllClick Search button and post the log (Search.txt) it makes on the USB drive in your next reply.

32 more replies
Answer Match 66.36%

I have been having a virus which randomly plays advertisments in the background. I have followed the instructions here Forum Link. TDSSKiller.exe will not run. FixTDSS.exe will not run. They both load into memory but nothing happens. I have followed the prep guide per the instructions in the forum link above. I was able to run defogger.exe succesfully, though it did not ask for a reboot. I was able to run dds.com successfully the logs are below. I was unable to run GMER.exe i got an error message when it loaded and I couldn't click on any of the options to changed them as was instructed to in the forum so I stopped and posted. GMER error messageLoadDriver("C:\Users\admin\AppData\Local\Temp\pwldqpob.sys")error 0xC000010E: An instance of the service is already running.DDS.com Logs.DDS (Ver_2011-08-26.01) - NTFSx86 Internet Explorer: 9.0.8112.16421Run by MGiaccone at 8:47:15 on 2012-09-26Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.3317.1233 [GMT -4:00].AV: Microsoft Security Essentials *Enabled/Updated* {9765EA51-0D3C-7DFB-6091-10E4E1F341F6}SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}SP: Microsoft Security Essentials *Enabled/Updated* {2C040BB5-2B06-7275-5A21-2B969A740B4B}.============== Running Processes ===============.C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Window... Read more

A:Virus with Audio Playing Randomly in Background

Please run the following:Download ListParts to a USB flash drive.
Plug the USB drive into the infected machine.Boot your computer into Recovery EnvironmentRestart the computer and press F8 repeatedly until the Advanced Options Menu appears.Select Repair your computer.Select Language and click NextEnter password (if necessary) and click OK, you should now see the screen below ...Select the Command Prompt option.A command window will open.
Type notepad then hit Enter.Notepad will open.
Click File > Open then select Computer.Note down the drive letter for your USB Drive.Close Notepad.[*]Back in the command window ....Type e:/listparts.exe and hit Enter (where e: is replaced by the drive letter for your USB drive)
ListParts will start to run.
Press the Scan button.When finished scanning it will make a log Result.txt on the flash drive.[*]Close the command window.[*]Boot back into normal mode and post me the Result.txt log please.[/list]

6 more replies
Answer Match 66.36%

Hi,
 
So the problem is that after startup, I can hear advertisments playing in the background even though I currently have no programs open. I run Windows 7
If I open the Task Manager it shows that Internet Explorer is open and the website is an advertisement of some kind. I can't use End Task on it either.
It slows down the programs that require the internet
 
I ran malware scanners such as
 
Hitman Pro
Malwarebytes
Adaware
EEK
Comodo Cleaning Essentials
 
and my antivirus Trend Micro and Microsoft Security Essentials but the problem couldn't be identified
 
So any advice on what to do next would be much appreciated
 
Thanks
 
 
FRST.txt
 
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-03-2015
Ran by User (administrator) on USER-PC on 04-03-2015 19:14:26
Running from C:\Users\User\Desktop
Loaded Profiles: User (Available profiles: User)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision... Read more

A:Unknown malware playing audio ads in the background

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Open notepad (Start =>All Programs => Accessories => Notepad). Please copy the entire contents of the code box below.
start

CloseProcesses:

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-3592699937-1405755372-3412231820-1002\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
CHR HKLM-x32\...\Chrome\Extension: [dflinnddekagfkncpgojoppgnppfkbkj] - No Path Or update_url value
R2 Amsp; "C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=rb -dt=60000 -ad -bt=0 [X]
S2 KromtechAccountService; "C:\Program Files\Kromtech\Common\AccountService.exe" [X]
S0 wayuia; No ImagePath
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
S1 QMUdisk; \??\C:\Program Files (x86)\Tencent\QQPCMgr\10.5.15800.209\QM... Read more

4 more replies
Answer Match 66.36%

Problem mostly just started this evening -- when I turn my computer on, I automatically hear multiple different audio advertisements playing at the same time, with no video anywhere and no web browser open or anything like that. The Task Manager doesn't show any open programs that should be causing this. The computer also now crashes very frequently, within minutes of startup. I had to run DDS in Safe Mode so it would scan without crashing, and it even took a few attempts to boot in Safe Mode (previous attempts just gave me a black screen and a shut down before Safe Mode would load).
Any help would be greatly appreciated!
DDS log:
 

DDS (Ver_2012-11-20.01) - NTFS_AMD64 MINIMAL
Internet Explorer: 9.0.8112.16483 BrowserJavaVersion: 1.6.0_39
Run by owner at 21:05:41 on 2013-06-12
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.3001.2097 [GMT -4:00]
.
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\Explorer.EXE
C:\Windows\system32\ctfmon.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
mWinlogon: Userinit = userinit.ex... Read more

A:Audio ads playing in background, frequent crashes

Hello dthal I would like to welcome you to the Malware Removal section of the forum.Around here they call me Gringo and I will be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", t... Read more

32 more replies
Answer Match 66.36%

My wifes computer was infected with system recovery which I think I managed to get cleaned (albeit I dont have any of her icons back). While cleaning this I noticed that her computer kept playing audio in the background. I closed all programs but found that the "commercials" were continuing to play. I managed to figure out that they are being played by iexplore (when I kill it in processes the audio immediatly stops) however something is causing it to come up again. After it has been killed it can take some time to start making it difficult to tell if I have been successful at solving the problem.

I've attached the "attach" and "dds" log files. I was not able to run the gmer application the way it was requested on the forum post as when I open it all of the check boxes are unchecked and greyed out.

I've attached a hijackthis log that I took while the audio files were running just in case it may prove hellpful.

Any help you can give me would be greatly appreciated as the only place I've seen people say this problem was resolved was on your site after running the mysterious "combo fix".

I'm sure the logs will tell you this but just in case the computer is running Windows Vista Business Edition Service Pack 2 32 bit.

Thank you for your help,

Chris
 Attach.txt   11.75KB
  4 downloads

 DDS.txt   17.37KB
  5 downloads

 hijackthis.log   10.6KB
&nb... Read more

A:hidden iexplore playing audio in the background

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

25 more replies
Answer Match 66.36%

I hope I followed all the rules and met all the requirements. 
 
This all started about a week ago.  My computer was playing audio adds in the background.  I also would get errors with every program I opened.   I tried malware bytes and it solved the audio problems but I still know I have malware.  In Processes I see multiple versions of waona.exe but every scanner I run seems to not find any malware.
 
Any advice you  can offer is greatly appreciated.  I am willing to learn and am always willing to help.
Here is my logs from DDS
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 11.0.9600.17280  BrowserJavaVersion: 10.51.2
Run by Tony at 9:28:16 on 2014-09-21
Microsoft Windows 7 Professional   6.1.7601.1.1252.1.1033.18.8183.4369 [GMT -5:00]
.
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\svchost.exe -k Local... Read more

A:UP-HEUR - audio adds playing in background

Hi there,please run a FRST scan:Please download Farbar Recovery Scan Tool and save it to your Desktop.(If you are not sure which version (32-/64-bit) applies to your system, download and try to start both of them as just the right one will run.)Start FRST with administator privileges.Make sure the option Addition.txt is checked and press the Scan button.When finished, FRST will produce two logs (FRST.txt and Addition.txt) in the same directory the tool was run from.Please copy and paste these logs in your next reply.

22 more replies
Answer Match 66.36%

I have been trying to fix this issue for over a week now. After attempts to clean it I actually did a clean install or at least I believe I did. Still here. I even took my computer into a repair place got it back this afternoon and still hear the commercials playing in the background. So clearly they didnt fix it either. From all the research I have done I believe it to be the Rootkit.Boot.Harbinger.a. I have read some forums and used many of the tools that are suggested. Included AdwCleaner, Hitman Pro, Rkill, Roguekiller, Junkware Removal. Unfortunately nothing has worked. I currently have Malwarebytes installed my computer and that too usually finds nothing. Roguekiller seems to be the only one that ever finds malware but it doesnt seem to completely remove the virus. I finally figured out that the virus or at least part of it creates two registries in the internet section of the hkey current user. One being Emulation and the other being a GP rendering something. I am totally clueless and thought I could figure this out but clearly I am not an expert. With all that said I am looking for some guidance on getting rid of this virus once and for all.
 
Oh yeah I am running Windows 7 Professional on a Dell XPS computer

A:Random Audio Commercials Playing in Background

It's a virus infection.
 
Quick fix is to connect to the internet, then open your volume control mixer. You'll probably have an unknown audio device that is active. You can mute that device and the radio should stop.
 
This infection is the Zekos rootkit. I had a client infected with it a week ago. Removal takes careful work, because the virus patches itself to a crucial system file, and removing the file can cause a black screen on boot (which I had to deal with)
 
Once you've disabled the audio device I would start a thread in Virus, Spyware, Malware Removal Logs. You'll need to run and post a log of either DDS or Hijackthis.

3 more replies
Answer Match 66.36%

Hi - I have ad's that are running on my computer without any programs open at all, they include McDonalds and others. Additionally I have had an issue with a redirect virus when performing searches on the web. I have tried the Microsoft suggestions to no avail - hours and hours and now it seems worse because I have audio ads now. Can someone help me? Thanks!
 

More replies
Answer Match 66.36%

I was told to post in this forum. I apparently have the Zero Access Virus.

I have followed the steps taken as instructed before posting. I attached my logs since the post would not go through since it was to big. My GMER log could not be posted or attached as it was too big. Is there any alternative means of posting it?

A:Random Audio Ads Playing In Background Zero Access

Hello and Welcome to Bleeping Computer!!My name is Gringo and I'll be glad to help you with your computer problems. I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE:... Read more

15 more replies
Answer Match 66.36%

A couple of weeks ago I started hearing strange audio and ads coming from my computer. I hear them even when there are no programs running. I'm also getting redirected from google searches to different ad pages. I've never had any kind of virus like this before. None of my malware scanners have been able to detect anything wrong. I hope you guys can help.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 4:40:48 PM, on 8/23/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16448)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Chicony\GameKeys\MODPS2KEY.EXE
C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE
C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe
C:\Program Files (x86)\Hotkey\Hotkey.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\POWERISO\PWRISOVM.EXE
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Datacolor\Spyder3Elite\Utility\Spyder3Utility.exe
C:\Users\Owner\Documents\batterydeley\BatteryDeley.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
C:\Users\Owner\AppData\Loca... Read more

A:Audio Ads Playing in Background + Redirecting from google

16 more replies
Answer Match 66.36%

Hello. I seem to have the exact same problem as was posted by the user in this forum: http://www.bleepingcomputer.com/forums/topic470346.html

Firefox is redirecting almost all of my searches to random sites with ads, and often times music will start playing in the background, although no pop ups seem to be hosting the music. I've been running a number of anti-virus/malware searches, including Kaspersky, Flashfake Removal Tool, Sophos Anti-Virus, and iAntivirus to try to take care of this problem. Sometimes they find threats and I delete or quarantine them, but the problem persists. Sometimes they don't even find any threats, but it's clear there is still a virus as the web browser is still messed up. I've been working on this for days and can't figure out the solution.

Can anyone help? I'm running an iMac OS X 10.6.8. I'm not incredibly tech-savvy, but can follow directions and would really appreciate assistance resolving this problem. Thank you!

A:Google redirecting, audio playing in background

Also, I'm not sure how to run and post the DDS logs on a Mac, but am happy to do so if someone can provide me with directions. Thanks again-- looking forward to your response(s)!

33 more replies
Answer Match 66.36%

I hope someone can please help me with a problem I have been experiencing lately with my computer.  I sometimes hear random audio ads playing in the background for no reason.  It sounds like a commercial ad playing, yet there are no other windows open or programs running, other than the one I am using, which is not playing video or audio.  This occurs about once every few days when I am online, and I am only able to stop the background audio, if I restart my computer.  The audio is not constant, it just randomly appears out of nowhere on any given day or time.  I checked my volume mixer and there was an application named "name not available".  When I closed the volume mixer and opened it again, it was gone, and has not reappeared.  My Firefox browser is very slow, and constantly freezing and crashing ever since this audio problem began.  I am usually very cautious about the websites I visit, so I don't know how I might have become infected.  I scanned my system with Norton 360 and Malwarebytes, but both results came back clean, but I am still convinced something is not right.  I am running Windows Vista Home Premium 32 - bit operating system Service Pack 2.  I am not very computer savvy, so I do not want to do anything without advice first.  I am hoping there is someone who can please help me, as I have never experienced having a virus before.  Thank you so much for all of your help. 

A:Random audio ads playing in the background. Am I infected?

Hello! Welcome to BleepingComputer Forums!
My name is Georgi and and I will be helping you with your computer problems.
Before we begin, please note the following:
I will working be on your Malware issues, this may or may not, solve other issues you have with your machine.
The logs can take some time to research, so please be patient with me.
Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
Instructions that I give are for your system only!
Please do not run any tools until requested ! The reason for this is so I know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.
Please perform all steps in the order received. If you can't understand something don't hesitate to ask.
Again I would like to remind you to make no further changes to your computer unless I direct you to do so. I will not help you if you do not follow my instructions.
 
 
Please download the latest version of Farbar Recovery Scan Tool and save it to your desktop.Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
Double-click to run it. When the tool opens click Yes to disclaimer. Make sure that Addition.txt is ticked as well.
Press Scan button.
It will make a log (FRST.txt) in th... Read more

42 more replies
Answer Match 66.36%

I have a similar problem to poster fridgeman, although the sounds I here are a series of Pod networks?  I hear advertisements, interviews, etc.
 
Please help as this is driving me nuts.  It just started happening a couple days ago.  The sound is there whether I am connected to the internet or not.
 
Thanks,
 
davey999

A:Some type of Pod Network Audio playing in background

Hello Davey999 I would like to welcome you to the Malware Removal section of the forum.Around here they call me Gringo and I will be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same"... Read more

25 more replies
Answer Match 66.36%

Hi guys i have a problem, when i am on my pc after about 30 mins i get this random audio playing usually about chinese tourist things but i don't know where it is coming from, even if i have no programs open and if i do i close them but it still keeps playing them. I wondered if anyone knew how to locate and get rid of these i have looked for programs i don't recongnise but can't any on my computer. i am running windows xp service pack 2.

thankyou
 

A:Problem keep getting random audio playing in the background

Please click here to download and install version 2.0.2 of the HijackThis Installer.

Run it and select Do a system scan and save a logfile.

The log will be saved in Notepad. Copy and paste the log in your next post.

Do not fix anything
 

3 more replies
Answer Match 66.36%

On my iMac whenever I use the internet (I use google chrome) random audio from ads keep playing in the background. It can happen anywhere, not on specific websites; even on the new tab page. Sometimes they buffer, other times they stop halfway through, I don't know what's going on, this has been going on for about two days. Google Chrome has also been randomly crashing lately; here's the crash report, if it helps:

Process: Google Chrome [470]
Path: /Applications/Google Chrome.app/Contents/MacOS/Google Chrome
Identifier: com.google.Chrome
Version: 24.0.1312.36 (1312.36)
Code Type: X86 (Native)
Parent Process: launchd [155]
User ID: 503

Date/Time: 2012-12-09 16:08:44.433 -0500
OS Version: Mac OS X 10.8.2 (12C60)
Report Version: 10

Interval Since Last Report: 454321 sec
Crashes Since Last Report: 4
Per-App Interval Since Last Report: 24358 sec
Per-App Crashes Since Last Report: 4
Anonymous UUID: CA2F8BBF-97C7-C2E3-7D7D-E77F587C419F

Crashed Thread: 19 BrowserBlockingWorker2/-1204875264

Exception Type: EXC_BAD_ACCESS (SIGBUS)
Exception Codes: KERN_PROTECTION_FAILURE at 0x00000000b7af0fdc

VM Regions Near 0xb7af0fdc:
Stack 00000000b7aee000-00000000b7af0000 [ 8K] rw-/rwx SM=COW
--> Stack 00000000b7af0000-00000000b7af1000 [ 4K] ---/rwx SM=NUL
Stack 00000000b7af1000-00000000b82f2000 [ 8196K] rw-/rwx SM=COW

Thread 0:: CrBrowserMain Dispatch queue: com.apple.main-thread
0 com.apple.AppKit 0x96acd178 -[NSView _hasDrawMatrix] + 20
1 com.apple.AppKit 0x96b3ec12 -... Read more

More replies
Answer Match 66.36%

Hello Bleepingcomputer community!
I have read several threads in the forum concerning this problem and tried to fix it myself, but still cannot get rid of these audio advertisements. These audio ads play as soon as i sign into my computer. one or a few of these audio ads will play at the same time. PLEASE HELP! I need my laptop for school next week, so I need to have my laptop cleaned by then.
 
 
Thanks again Bleepingcomputer community. 
 
 
 
Below is the DDS log and attatchment:
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64 
Internet Explorer: 8.0.7600.17267  BrowserJavaVersion: 10.9.2
Run by Mae at 15:25:34 on 2014-01-10
Microsoft Windows 7 Home Premium   6.1.7600.0.1252.1.1033.18.3895.1555 [GMT -8:00]
.
AV: Norton 360 *Disabled/Outdated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Norton 360 *Enabled/Outdated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton 360 *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
.
============== Running Processes ===============
.
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k LocalSer... Read more

A:Audio Advertisements playing in the background on Start Up

issue resolved, please close mods. thank you

3 more replies