Tech Problem Aggregator

Audio Ads and Radio playing in the background Windows 10

Q: Audio Ads and Radio playing in the background Windows 10

Starting today, I constantly have this audio playing in the background which sounds like some foreign radio with ads. Although it is very feint, I still can hear it. The weird thing is, if i restart my computer, I start hearing it even before putting in my password, meaning it's probably not a program that I need to physically open (chrome, etc). The weird part is that even when I mute my computer, I can still hear it. It's a Lenovo ThinkPad 450s, I just got it this January and I have kept it bloat-free with very few programs installed. I find nothing suspicious in the task manager, and I have ran Adwcleaner, Malware bytes, and Windows Defender full scan and they've caught nothing. I would very much appreciate any help I can get on this. I am posting this in the security subforum because others with this problem seemed to relate this to a Trojan. Thank you for taking your time to read this and I eagerly await for your responses.

A: Audio Ads and Radio playing in the background Windows 10

Hello sungholy and Welcome to the BleepingComputer.  
 My name is Yılmaz and I'll help you with the cleanup of malware from your computer.
Before we move on, please read the following points carefully.
Please complete all steps in the specified order.
Even if tools don't find malware, I want you to post the logfiles anyway.
Please copy and paste the logfiles directly into your posts. Please do not attach them unless you are instructed to do so.
Read the instructions carefully. If you have problems, stop what you  were doing and describe the problems you encountered as precisely as  you can.
Don't install or uninstall software during the cleanup unless you are told to do so.
Ensure your external and/or USB drives are inserted during always the scan.
If you can't answer for the next few days, please let me know. If  you haven't answered within 5 days, I am assuming that you don't need  help anymore and your topic will be closed.
If you have illegal/cracked software, cracks, keygens, etc. on the system, please remove or uninstall them now!
I can not guarantee that we will find and be able to remove all  malware. The cleaning process is not instant. Please continue to review  my answers until I tell you that your computer is clean
Please reply to this thread. Do not start a new topic
As my first language is not English, please do not use slang or idioms. It could be hard for me to understand.
Please open as administrator  the computer. How is open as administrator  the computer?
Disable your AntiVirus and AntiSpyware applications, as they will  interfere with our tools and the removal. If you are unsure how to do  this, please refer to get help here
Thanks

Please do the following.Scan with Zemana AntiMalware Free:
Turn off the real time scanner of any existing antivirus and firewall programs while performing scan
Please download and install Zemana AntiMalware Free
Double-click software shortcut on the desktop and follow the prompts to install the program .
If an update is available, click the Update now button.
At the end Click Settings > Advanced > ''I have read the warning an wish to proceed anyway'' Click
Auto Launch > Untick the box next
Scan type > Smart scan (Default)
Close all open files, folders and browsers
Click scan now ''Run as Administrator'' and a threat Scan will begin.
When the scan is complete, Press report and send me report.
Please PC restart now.
============================================================================
How are your PC and browsers  and are there still septoms ?
 
Have a nice day.

0 more replies
Answer Match 88.2%

Hello,

Please help I have this annoying pirate radio playing in the background of my mums laptop. She is unable to use skype due to this and I haven't been able to track down where the virus/trojan is. Any help would be most appreciated.

Log file below. She is running Windows 7

Thanks

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:31:59, on 26/08/2012
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v9.00 (9.00.8112.16446)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_271.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_271.exe
C:\Users\Gaurav\Downloads\SysInfo.exe
C:\Users\Gaurav\Downloads\HijackThis.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\wuauclt.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.uk.msn.com/USREL/2
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Int... Read more

A:Unsolicited Radio Ads playing in background - Windows 7

9 more replies
Answer Match 80.64%

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft® Windows Vista™ Home Premium, Service Pack 2, 32 bit
Processor: Intel(R) Core(TM)2 Duo CPU E4500 @ 2.20GHz, x64 Family 6 Model 15 Stepping 13
Processor Count: 2
RAM: 2036 Mb
Graphics Card: Intel(R) G33/G31 Express Chipset Family, 320 Mb
Hard Drives: C: Total - 466650 MB, Free - 249216 MB; D: Total - 10239 MB, Free - 6004 MB;
Motherboard: Dell Inc., 0RY007
Antivirus: AVG Internet Security 2013, Updated and Enabled, When i log on to the internet there is a sounds like a radio station playing in the back ground. some times there are two playing at once some times there are none. The firewall is on popup blocker is on, i cant figure out how to stop it. please help!
 

A:Radio playing in background

Hello and welcome,

Run the following and post the produced logs...

Download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system (32 bit or 64 bit). If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

Kevin
 

1 more replies
Answer Match 79.8%

I suddenly started having like repeating commercials, talk-shows, even music starting and stopping randomly just from turning on pc 1 min after reaching desktop. computer is able to be used, but all this is playing in background randomly, sometimes more than 1. And i will slap the next person that says its the speakers picking up a frequency!, I'ts NOT!!! I really take care of my pc, (updates, antivirus, malware..etc). i have used MSE, Malware-bytes, TDSSKiller, Spybot s&d, RUBotted, and no luck with deep scans too. only ones i have installed still is MSE, MwBytes, and I just installed AdAware after previously deleting other software, (TDSSKiller, Spybot s&d, RUBotted). I ran that and it stopped it once AdAware was scanning. When scan was complete, it had to reboot pc, and all was good for about 3 hours. Then it started again. Now it seems like its immune to Ad-Aware too! Now i just downloaded and installed Google chrome as my browser, (just letting you know), then got HiJackThis2.0.4v and have log from that and the first 2 scans with AdAware. One other thing i noticed from the start of all this is nothing in task manager seems to be out of normal, (processes or services), that i can tell. Also, the only time i seem to consistently stop it, is if i just unplug the Ethernet cable. It will play on for about 30 secs. then stop for as long as i have it unplugged. Once i plug it back in, 1 min. later it starts again. OMG please HELP!!!

A:Help! radio(s) playing in background virus?

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Please take note:If you have since resolved the original problem you were having, we would appreciate you letting us know. If you are unable to create a log because your computer cannot start up successfully please provide detailed information about your installed Windows Operating System including the Version, Edition and if it is a 32bit or a 64bit system.
If you are unsure about any of these characteristics just post what you can and we will guide you.Please tell us if you have your original Windows CD/DVD available.If you are unable to perform the steps we have recommended please try one more time and if unsuccessful alert us of such and we will design an alternate means of obtaining the necessary information.If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review your topic an do their best to resolve your issues.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply'... Read more

10 more replies
Answer Match 79.8%

Recently i've noticed some weird music/radio ads coming out of my PC. Im running windows 7 and i notice that the sounds are coming from a source in the volume mixer labled "Name not available". How can i fix this issue? Any help would be greatly appreciated.

A:Ads/radio playing in the background virus.

Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Please download AdwCleaner by Xplode onto your Desktop.
Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Click the Report button and the report will open in Notepad.
IMPORTANT
If you click the Clean button all items listed in the report will be removed.
If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.
Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Check off the element(s) you wish to keep.Click on the Clean button follow the prompts.A log file will automatically open after the scan has finished.Please post the content of that log file with your next answer.You can find the log file at C:\AdwCleaner[Sn].txt (n is a number).
===

Please download ComboFix from any of the links below, and save it to your desktop. For information regarding this download, please visit this web page: Turorial
Link 1
Link 2

IMPORTANT !!! Save ComboFix.exe to your Desktop

1. Close any open browsers.
2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
3. D... Read more

2 more replies
Answer Match 79.8%

Hello,
 
I have noticed a faint radio station playing in the background of my computer for the past 3 weeks or so and am having a hard time getting it to go away. I have logitech external speakers plugged in and thought it was just weird radio interference, but then i unplugged them the radio station started to play on the computers internal speaker instead. I disable the internet for about 5 minutes and it continued to play. Funny thing is, the radio host is talking about current events so i know it is a somewhat live stream.
 
This is a win 7 64bit operation system on a HP xw4400 Workstation. I am currently running Trend Micro Security Agent and i have tried many different removal tools such as
Malwarebytes
superantispyware
Kaspersky tdskiller
combofix
trend rootkit buster
hijack this
and a few more things. nothing really turns it off.
 
Any ideas?
Thanks
Jeff
 

A:Radio station is playing in the background Win 7

Hi and welcome.
 
Please download Farbar Recovery Scan Tool and save it to your desktop.
 
Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

Double-click to run it. When the tool opens click Yes to disclaimer.
Make sure that under Optional Scans, there is a checkmark on Addition.txt and Shortcut.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The tool will also produce another two logs (Addition.txt and Shortcut.txt). Please attach these to your reply.

 
 

13 more replies
Answer Match 78.96%

Hello,
i have WIndows 7 Ultimate 64 bit. I have problem with virus or something for couple of days. Every time when my PC boot up, i hear some radio adverts and music playing in the background. After maybe 30 minutes its gone, but it¨s very annoying.
I saw this post: http://forums.techguy.org/virus-other-malware-removal/1043032-radio-adverts-playing-background-suspected.html

I think i have similar problem.

Can you guys please help me?

HiJack log:
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 2:52:50 PM, on 8/20/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16448)
Boot mode: Normal

Running processes:
C:\Users\sn3hura\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Users\sn3hura\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\sn3hura\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\sn3hura\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\sn3hura\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\sn3hura\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\sn3hura\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Prog... Read more

More replies
Answer Match 78.96%

My computer was fine till it did it's windows automatic updates. The next time i turned my laptop on it had a radio type mix playing in the background, i don't know how to stop it or remove it. I have norton antivirus and i did s complete scan and it found nothing. All i use my laptop for is my pictures and music everything else i do on my phone. Please help!

A:Radio randomly playing in the background and i can't get it to stop

Welcome aboard   Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2 SecurityCheck may produce some false warning(s), so leave the results reading to me. Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeClick Go and post the result. Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop.* Double-click mbam-setup.exe and follow the prompts to install the program.* At the end, be sure a checkmark is placed next to Up... Read more

19 more replies
Answer Match 78.96%

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 8.1 Pro, 64 bit
Processor: Intel(R) Core(TM) i7-4790K CPU @ 4.00GHz, Intel64 Family 6 Model 60 Stepping 3
Processor Count: 8
RAM: 24517 Mb
Graphics Card: AMD Radeon R9 200 Series, -1024 Mb
Hard Drives: C: Total - 243841 MB, Free - 148135 MB; D: Total - 610473 MB, Free - 452522 MB; E: Total - 953866 MB, Free - 419022 MB; F: Total - 953866 MB, Free - 319822 MB; G: Total - 953835 MB, Free - 256573 MB;
Motherboard: ASUSTeK COMPUTER INC., Z97-E
Antivirus: Bitdefender Antivirus Free Edition, Updated: Yes, On-Demand Scanner: Enabled

I am getting random radio style advertisements and short bursts of music playing through my PC (over everything else). This happens randomly and has woken me up at night the past couple of days. The last time this happened this morning I looked at the task manager and saw Media Dashboard V2. This pointed to a file called stdrt.exe locates in a Windows temp folder. Example:

C:\Windows\Temp\mrt2981.tmp\stdrt.exe

This morning I had 25 of these directories all starting with mrtXXXX.tmp... The earliest one was dated 5/12/2015 so this has been around on my system for awhile it appears. I attempted to use Old Timers tools to clean these up but every time I reboot my PC it seems to reappear. Any assistance would be appreciated.

Edit:

Besides OTM and OTL, I have also run the followings scans:

AswMBR
MBAR
SecurityCheck
AdwCleaner
RogueCleaner
ESET Online Scanner (currently run... Read more

A:Radio/Music playing in background, stdrt.exe

16 more replies
Answer Match 78.96%

Radio playing in background - suspected Virus

I run Windows Vista Home Premium on a Dell Laptop Inspiron E1505. I am getting random radio voices and music playing through my PC (over everything else). It also slows everything down. I suspect this is a Virus?? It just started about 6 weeks ago. Any assistance is greatly appreciated.

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft® Windows Vista™ Home Premium, Service Pack 2, 32 bit
Processor: Intel(R) Core(TM)2 CPU T5200 @ 1.60GHz, x64 Family 6 Model 15 Stepping 6
Processor Count: 2
RAM: 2037 Mb
Graphics Card: Mobile Intel(R) 945GM Express Chipset Family, 224 Mb
Hard Drives: C: Total - 140289 MB, Free - 76901 MB; D: Total - 10239 MB, Free - 6097 MB;
Motherboard: Dell Inc., 0KD882
Antivirus: USTechSupport Internet Security, Updated: Yes, On-Demand Scanner: Enabled
 

A:Radio playing in background - suspected virus

For viruses, the right forum to post in is the Virus & Other Malware Removal forum.
 

1 more replies
Answer Match 78.96%

This a was a prevous topic and I had tried to follow the suggestions but can't seem to follow.  I am fairly commputer stupid.  I have Run nortons's Anti Virus and come up with nothing.  I dowloaded to desktop and run the tdsskiller and it comes up clean.   The background noise/comnmercials will start and continue until I run  the tdsskiller program then stop for 2-5 mins then start again.  I need help.  I can't have issue when running my business as i deal with personal client information.  Help!

A:Help! I have some radio or Commercials playing in the background. Virus?

Hello, I will be helping you with your problems. Please be patient while I assist you. Some points for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do NOT run, install or uninstall any programs,  unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At the top of your post, click on the Watch Topic Button, select Immediate No... Read more

8 more replies
Answer Match 78.12%

Hi,
I run Windows 7 64bit Home Premium. I am getting random radio style adverts and short bursts of music playing through my PC (over everything else). I suspect this is malware or adware. Any assistance is greatly appreciated.

Regards
B

Hijackthis log:
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:54:43, on 28/02/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe
C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe
C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\CLMSService.exe
C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe
C:\Program Files (x86)\Norton 360\Engine\5.2.0.13\ccSvcHst.exe
C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe
C:\Users\KathTristan\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\KathTristan\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\KathTristan\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Users\KathTristan\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\KathTrist... Read more

A:Radio adverts playing in background - suspected malware

16 more replies
Answer Match 78.12%

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:19-05-2016Ran by Zuhair (administrator) on ZUHAIR (19-05-2016 18:52:12)Running from C:\Users\Zuhair\DownloadsLoaded Profiles: Zuhair (Available Profiles: Zuhair)Platform: Windows 10 Home Version 1511 (X64) Language: English (United States)Internet Explorer Version 11 (Default browser: Chrome)Boot Mode: NormalTutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/==================== Processes (Whitelisted) =================(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)(AMD) C:\Windows\System32\atiesrxx.exe(AMD) C:\Windows\System32\atieclxx.exe(Intel Corporation) C:\Windows\System32\igfxCUIService.exe() C:\Program Files (x86)\TOSHIBA\PasswordUtility\GFNEXSrv.exe(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe(McAfee, Inc.) C:\Windows\System32\mfevtps.exe(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe(Toshiba Corporation) C:\Program Files\TOSHIBA\Teco\TecoService.exe(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe(Synaptics Incorporated) C:\Program Fil... Read more

A:Internet Radio playing in background of computer, not sure how to stop it?

Greetings djohn4562 and to BleepingComputer's Virus/Trojan/Spyware/Malware Removal forum.My name is Oh My! and I am here to help you! Now that we are "friends" please call me Gary.If you would allow me to call you by your first name I would prefer to do that.===================================================Ground Rules:First, I would like to inform you that most of us here at Bleeping Computer offer our expert assistance out of the goodness of our hearts. Please try to match our commitment to you with your patience toward us. If this was easy we would never have met.Please do not run any tools or take any steps other than those I will provide for you while we work on your computer together. I need to be certain about the state of your computer in order to provide appropriate and effective steps for you to take. Most often "well intentioned" (and usually panic driven!) independent efforts can make things much worse for both of us. If at any point you would prefer to take your own steps please let me know, I will not be offended. I would be happy to focus on the many others who are waiting in line for assistance.Please perform all steps in the order they are listed in each set of instructions. Some steps may be a bit complicated. If things are not clear, be sure to stop and let me know. We need to work on this together with confidence.Please copy and paste all logs into your post unless directed otherwise. Please do not re-run any programs I suggest. If you encounter proble... Read more

0 more replies
Answer Match 78.12%

Hello,

About two weeks ago my computer became infected with malware. I'm not sure how I became infected but it came in the form of the Windows Restore virus. After numerous attempts I finally got MalwareBytes to run and it got rid of it. However a few days after this more problems started occuring. First off, I seem to have the google redirecting virus. All links I click on off of Google and various other search engines redirect me to random sites. Also I keep getting many different internet script errors popping up. And yet another problem is some random radio station is playing in the background whenever I'm connected to the internet. Before I stumbled on this site I tried numerous antispyware/malware programs including MalwareBytes, AVG, Spybot, AdAware, SuperAntiSpyware but none of them took care of these problems. Unfortunately I haven't been able to run my computer in Safe Mode for a long time (a problem in itself which I should've taken care of). I get to the screen where I can select safe mode but after I hit enter for it I get the blue screen with error codes relating to BIOS. I will write the specific codes down next time. I'm not too concerned with that at the moment if I can get the rest of my problems fixed first. Below is the results of the DDS scan. Thank you in advance!

.
DDS (Ver_11-03-05.01) - NTFSx86
Run by Bobby at 18:05:37.15 on Mon 04/18/2011
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Home Edition 5.1.2600.2.1252... Read more

A:Google redirecting virus, background radio playing

Hello and welcome to the forums!My secret agent name on the forums is SweetTech (you can call me ST for short), it's a pleasure to meet you. I would be glad to take a look at your log and help you with solving any malware problems.If you have since resolved the issues you were originally experiencing, or have received help elsewhere, please inform me so that this topic can be closed. If you have not, please adhere to the guidelines below and then follow instructions as outlined further below:Logs from malware removal programs (OTL is one of them) can take some time to analyze. I need you to be patient while I analyze any logs you post. Please remember, I am a volunteer, and I do have a life outside of these forums.
Please make sure to carefully read any instruction that I give you. Attention to detail is important! Since I cannot see or directly interact with your computer I am dependent on you to "be my eyes" and provide as much information as you can regarding the current state of your computer.
If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!
In Windows Vista and Windows 7, all tools need to be started by right clicking and selecting Run as Administrator!
Do not do things I do not ask for, such as running a spyware scan on your computer. The one thing that you should always do, is to make sure sure that your anti-virus definitions are up-to-date!
Please do not use the Attachme... Read more

15 more replies
Answer Match 78.12%

Hello and Thank You for being here!! I have some virus that was playing music in the background and I couldn't find a player to turn off, more recently my computer is running really really slow, and I am redirected to spam sites on the internet.

Here is the HiJack This log:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:51:24 PM, on 10/23/2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16869)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\AVG\AVG9\avgtray.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Apoint2K\ApMsgFwd.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\taskhost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\Windows\explorer.exe
C:\Users\mi\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\mi\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\mi\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\mi\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\rundll32.exe
C:\Users\mi\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\mi\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\mi\Downloads\HijackThi... Read more

A:virus radio playing in background and redirecting websites

16 more replies
Answer Match 77.28%

Music or radio stations start playing automatically. It appears to be the same stations and commercial over and over. When I disconnect Internet connection they play out and then stop. Task manager shows nothing running. This is using up 100% of system resources. I have McAfee installed, I have tried Malwarebytes, Superantispyware, spy bot, and Kaspersky with no luck in regular mode and safe mode.
I am by no means good with computers. I do fear that I have a virus/malware.
All help appreciated

A:Unwanted music/radio stations playing in the background automatically

Hello pike steamer I would like to welcome you to the Malware Removal section of the forum.Around here they call me Gringo and I will be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the s... Read more

54 more replies
Answer Match 76.86%

Hello everyone,
 
I have had random semi-muffled audio ads playing in the background for a month or two. This is extremely annoying. They show up in my audio mixer as 'Name Not Available." Any advice would be much appreciated!

A:Audio ads playing in background - Windows 7

Hi,
 
Please download Rkill (courtesy of BleepingComputer.com) to your desktop.
There are 2 different versions. If one of them won't run then download and try to run the other one.
You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.
 rKill.exe: http://www.bleepingcomputer.com/download/rkill/dl/10/iExplore.exe (renamed rKill.exe): http://www.bleepingcomputer.com/download/rkill/dl/11/
Double-click on the Rkill desktop icon to run the tool.
If using Vista or Windows 7 right-click on it and choose Run As Administrator.
A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
If not, delete the file, then download and use the one provided in Link 2.
Do not reboot until instructed.
If the tool does not run from any of the links provided, please let me know.
After the tool has finished running, a text file named Rkill.txt should be located on the desktop. Please copy and paste the contents into your next reply.
 
xXToffeeXx~

4 more replies
Answer Match 76.86%

Hello, i hope i can get some help here, as ive seen tons of other users around the net recently getting this same annoying virus or malware, whatever it is, that plays uncontrollable, unstoppable ad-sounds. 
 
Id like to make a few things 100% clear just to rule anything out for the tech support here.
 
 
It started around 8 or 9 am if i remember correctly. I was working on some art; using paint tool sai, watching youtube, and on skype with one of my good friends. Suddenly the computer without warning REBOOTED, without any provocation. I make sure NOT to visit any risky sites; i only frequent aol.com, youtube.com, tumblr, and a few art sites such as Deviantart. I had not visited ANY risky sites or downloaded ANY risky material to cause this virus,  have NO clue how it got on my computer, as i am a generally suspicious and careful person who tries desperately hard to avoid these situations.
 
Once the system had rebooted, i got back into my skype call thinking it was very weird and by this point i was nervous and anxiety was taking over, but within minutes of the reboot, loud ads, news reports, music, and other stuff started playing shockingly loud, overlapping each others ads sometimes.
 
It came at regular intervals and was unstoppable. I went into task manager to watch my processes and saw NOTHING out of the ordinary. I have gaming rig computer, and i saw nothing visible [to myself] that could be considered suspicious. I read many sites, i... Read more

A:Audio Ads playing in background on windows 7!

anyone.....? No help? i read similar posts on the forums, it seems this virus is becoming widespread and dangerous. I simply cannot do it alone since it seems it requires professional tech support.
 
Even if someone just responds letting me know im not alone in this  and they wanna try to help, and they are dealing with the same problem would let a load off my heart. 

7 more replies
Answer Match 76.02%

Hi everyone,
 
I originally posted this topic here: http://www.bleepingcomputer.com/forums/t/531535/audio-ads-playing-in-background-windows-7/
 
I have extremely annoying audio ads playing in the background. This has been happening for the past 4-6 weeks. These ads show up as 'Name Not Available' in the audio mixer. So far I have used rkill.exe and was told that I have the latest version of the Zekos virus.
 
Thanks in advance for your help. DDS log below:
 
DDS (Ver_2012-11-20.01) - NTFS_x86 
Internet Explorer: 11.0.9600.16521
Run by anausied at 16:52:25 on 2014-04-18
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.3327.1587 [GMT -4:00]
.
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
C:\Windows\System32\WUDFHost.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome... Read more

A:DDS logs: Audio ads playing in background - Windows 7

Hello tonyroma I would like to welcome you to the Malware Removal section of the forum.Around here they call me Gringo and I will be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same",... Read more

25 more replies
Answer Match 75.18%

first time poster here, and completely lost over this. about 6 months ago I started getting background ads on my computer and I can't remember exactly how. i've been working out of town since then and just today was able to start my computer for the first time since. now I haven't heard any ads yet, but in the process of trying to update everything to the latest drivers and versions, I keep getting an error in win update that fails everything it tries to update.  can anyone help me please.  here is my dds.txt:
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 11.0.9600.17041  BrowserJavaVersion: 10.71.2
Run by Jay at 22:53:26 on 2014-12-01
Microsoft Windows 7 Ultimate   6.1.7601.1.1252.1.1033.18.16325.12494 [GMT -5:00]
.
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\atieclxx.exe
C:\Program Fi... Read more

A:i have audio ads playing in background and windows update errors

Hello and welcome.  Please follow these guidelines while we work on your PC:Malware removal is a sometimes lengthy and tedious process. Please stick with the thread until I’ve given you the “All clear.”  Absence of symptoms does not mean your machine is clean!Please do not run any scans or install/uninstall any applications without being directed to do so.Please note that the forum is very busy and if I don't hear from you within five days this thread will be closed.   Please download Farbar Recovery Scan Tool and save it to your desktop.Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.Double-click to run it. When the tool opens click Yes to disclaimer.Press Scan button.It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

3 more replies
Answer Match 71.82%

I keep hearing random audio ads or music coming from my speakers every now and then. I also noticed that in Windows Task Manager it shows two iexplorer.exe processes are running, and whenever I try to End Process they pop back up a few seconds later and I'm not sure if this is normal but svchost.exe is using a lot of memory. Also often when I search for websites on google it redirects me to random websites. And when following the "Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help" when I double click the Windows Firewall icon in the control panel I get a error window stating "Due to an unidentified problem, Windows cannot display Windows Firewall settings." I could not create a GMER Log, during the scanning process I always eventually get the blue screen of death.

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_32
Run by Brent at 18:53:15 on 2012-07-23
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3582.1922 [GMT -10:00]
.
AV: Symantec AntiVirus Corporate Edition *Enabled/Updated* {FB06448E-52B8-493A-90F3-E43226D3305C}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
svchost.exe
C:\Program Files\Common Files&#... Read more

A:Audio ads playing in background, google redirect, windows firewall "unidentified problem" error

Greetings and Welcome to The Forums!!My name is Gringo and I'll be glad to help you with your computer problems. I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At... Read more

18 more replies
Answer Match 71.4%

Computer starting this yesterday afternoon.  I've read many posts and have tried, in Safe Mode, the following TDSSKill, RKill, Malware Bytes, SuperantiSpyware, ComboFix, HitmanPro, RogueKiller and the hoki poki and nothing has worked.  I believe it's to do with a malware called Rootkit.bot and it's corrupted my pcss.dll file.
 
 
 
 
 
DDS (Ver_2012-11-20.01) - NTFS_x86 NETWORK
Internet Explorer: 8.0.7601.17514
Run by Administrator at 15:21:38 on 2014-04-11
Microsoft Windows 7 Professional   6.1.7601.1.1252.1.1033.18.3241.2421 [GMT -5:00]
.
AV: Trend Micro OfficeScan Antivirus *Enabled/Updated* {5D349EF8-873B-C657-917F-F1D93E101A7C}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Trend Micro OfficeScan Anti-spyware *Enabled/Updated* {E6557F1C-A101-C9D9-ABCF-CAAB459750C1}
FW: Trend Micro Personal Firewall *Enabled* {49A8346C-6900-54B6-B1B3-5F678736DDE9}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
C:\Program Files\Citrix\ICA Client\ssonsvr.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\ctfmon.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Windows\system32\ctfmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k DcomLa... Read more

A:Computer Playing Random Audio (Sounds like radio commercials)

Hello pastorjames I would like to welcome you to the Malware Removal section of the forum.Around here they call me Gringo and I will be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the sa... Read more

28 more replies
Answer Match 70.56%

Yesterday my computer all of a sudden decided to restart while browsing the web. When it started back up it began playing what sounds like multiple radio stations playing over top of each other. It's extremely annoying and quite creepy. I've ran quick scans with MalwareBytes and turned up nothing. MalwareBytes also keeps blocking svchost from connecting to a malicious address.
 
I'm sure I've got some kind of rootkit/bootkit/whatever. I'm actually pretty experienced with computers. I've been building them for 15 years or so. I sell custom built PCs and do some virus removal and IT work. I've never seen anything quite like this. I am really close to just wiping and reinstalling Windows. But I just put a new SSD in this laptop less than a month ago and am barely getting set back up from that. I'm thinking maybe I can learn something from the awesome people here and get back to safe operation.
 
I very much appreciate any help that can be offered!
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 10.0.9200.16635
Run by Dustin at 21:27:29 on 2013-07-16
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.4029.754 [GMT -5:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {3F839487-C7A2-C958-E30C-E2825BA31FB5}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Microsoft Security Essentials *Enabled/Updated* {84E27563-E198-C6D6-D9BC-D9F020245508}
.
============== Running Processes ============... Read more

A:Random radio stations playing audio constantly with no programs open

Hello dmaustin I would like to welcome you to the Malware Removal section of the forum.Around here they call me Gringo and I will be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same"... Read more

6 more replies
Answer Match 68.04%

Audio ads playing in background, PLEASE HELP!
For a few weeks I have had audio ads playing in the background of my computer whenever the internet is connected, even when there are no windows up. I have ran my Norton and nothing shows up, but obviously something is wrong. I was wondering if anyone out there who can walk me through figuring out how to fix this problem. I would greatly appreciate any and all help!

Thank you!
 

More replies
Answer Match 68.04%

So basicly I hear audio advertisements playing in the background that talk about buying products, "How I got rich quick", etc...
 
Somethings to note are Firefox is my default browser I never use Internet explorer.
The Iexplorer.exe process will always run 3 instances of itself even though you cannot see it open, If you try to kill the process it will open back up automatically.
The application tab shows Internet explorer connected to the following website: "http://ib.pixadsserve.com/?s=23327" and will sometime switch to careercast.com.
 
I have tried MBAM but this thing will not go away. Maybe someone here knows.

A:Audio Ads Playing In Background

Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2. SecurityCheck may produce some false warning(s), so leave the results reading to me.NOTE 3. If you receive UNSUPPORTED OPERATING SYSTEM! ABORTED! message restart computer and Security Check should run Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeList Restore PointsClick Go and post the result. Please download Malwarebytes Anti-Malware (MBAM) to your desktop.NOTE. If you already have MBAM 2.0 installed scroll down.Double-click ... Read more

25 more replies
Answer Match 68.04%

Hello! Earlier tonight my computer randomly restarted itself, and afterwards I've been having random audio ads playing in the background. It's not coming from my web browser, and my volume mixer is showing it as "name not available." I downloaded Avast! free and I'm currently running a full system scan, but it hasn't found anything, and the webshield is constantly popping up, telling me it's blocking multiple malware objects that are infecting my System32\svchost.exe. I haven't downloaded anything risky recently that I can remember, but I have streamed tv shows online on project free tv.
 
I've read a thread on here that had a similar problem and it ended up being a rootkit, and I think that might be the case here .
 
Any help would be appreciated!
 
I am running Windows 7 Ultimate 64bit

A:Audio Ads playing in the background

Hi xMassy,
 
Run these for me:
 
Please download Rkill (courtesy of BleepingComputer.com) to your desktop.
There are 2 different versions. If one of them won't run then download and try to run the other one.
You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.
 rKill.exe: http://www.bleepingcomputer.com/download/rkill/dl/10/iExplore.exe (renamed rKill.exe): http://www.bleepingcomputer.com/download/rkill/dl/11/
Double-click on the Rkill desktop icon to run the tool.
If using Vista or Windows 7 right-click on it and choose Run As Administrator.
A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
If not, delete the file, then download and use the one provided in Link 2.
Do not reboot until instructed.
If the tool does not run from any of the links provided, please let me know.
 
----------
 
Please download TDSSKiller from here and save it to your Desktop
Doubleclick on TDSSKiller.exe to run the application, then click on Change parameters
 
 
Check Loaded Modules, Verify Driver Digital Signature, and Detect TDLFS file system
If you are asked to reboot because an "Extended Monitoring Driver is required" please click Reboot now
 
 
Click Start Scan and allow the scan process to run
 
 
If threats are detected select Skip or Cure (if available) for all of them u... Read more

11 more replies
Answer Match 68.04%

Tech Support Guy System Info Utility version 1.0.0.1
OS Version: Microsoft® Windows Vista™ Home Premium , Service Pack 2, 32 bit
Processor: Intel(R) Core(TM)2 Duo CPU T6400 @ 2.00GHz, x64 Family 6 Model 23 Stepping 10
Processor Count: 2
RAM: 3033 Mb
Graphics Card: Mobile Intel(R) 4 Series Express Chipset Family, 1292 Mb
Hard Drives: C: Total - 223434 MB, Free - 122150 MB; D: Total - 953866 MB, Free - 716425 MB; E: Total - 14999 MB, Free - 7394 MB;
Motherboard: Dell Inc., 0G848F, , .D9WTBH1.CN701669690022.
Antivirus: McAfee Anti-Virus and Anti-Spyware, Updated and Enabled.

Malwarebytes has just been used to remove Fake "Hard Drive Diagnostics" program. PC now appears clean but audio adverts randomly play in background without showing any programs running but with iexplore.exe process active.
Any instructions and help you can give me would be greatly appreciated, thanks.
 

A:Audio ads playing in background

16 more replies
Answer Match 68.04%

Hi Guys,
Thanks in advance for the help.

I have a toshiba laptop running the following -

Intel (R) Core (TM) Duo CPU T2250 @1.73 Ghz 1.73 Ghz
Memory (RAM) 4.00GB
System Type - 32 bit Operating System

Running Windows Vista Business 2007 Service pack 1.

Browser - IE 8

Yesterday I downloaded a couple of (obviously dodgy) files and also a (supposedly legitimate) program. Since downloading these, I found my default search engine had changed, and also I was getting audio ads playing in the background without IE open at all.

One of the files was an .exe which I am not sure what it was, the program was the 'Coffee Cup' website building software.

The first thing I did was reset my browsers default search engine to google. I then went into see any addons were added to my browser, and found a few that were not there before. One of them was 'hot revenue browser' or something like that.

I then re-booted my computer.

I then figured I had a problem as the ads were still playing. I ran Malwarebytes, and found there were some problems, so I fixed all those errors. Log here -

Malwarebytes' Anti-Malware 1.37
Database version: 2190
Windows 6.0.6001 Service Pack 1
21/04/2010 3:08:13 PM
mbam-log-2010-04-21 (15-08-13).txt
Scan type: Quick Scan
Objects scanned: 97287
Time elapsed: 10 minute(s), 46 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 2
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected... Read more

A:Audio Playing in Background

11 more replies
Answer Match 68.04%

Hello,
Whenever I'm connected to the internet, at random times, audio ads play in the background, even when no browser is open. Ive searched the internet for solutions, and it seems that those who got the problem resolved posted in a forum like such. I have an idea as to what the problem is, but no idea how to solve it. If someone can walk me through this slowly, it would be much appreciated!
 

A:Audio Ads playing in background

Please run the following:

Please download Malwarebytes Anti-Rootkit and save it to your desktop.
Be sure to print out and follow the instructions provided on that same page for performing a scan.
Caution: This is a beta version so also read the disclaimer and back up all your data before using.
When the scan completes, click on the Cleanup button to remove any threats found and reboot the computer if prompted to do so.
Perform another scan with Malwarebytes Anti-Rootkit to verify that no threats remain. If they do, then click Cleanup once more and repeat the process.
If there are problems with Internet access, Windows Update, Windows Firewall or other system issues, run the fixdamage tool located in the folder Malwarebytes Anti-Rootkit was run from and reboot your computer.
Two files (mbar-log-YYYY-MM-DD, system-log.txt) will be created and saved within that same folder.
Copy and paste the contents of these two log files in your next reply.
Note: Further documentation can be found in the ReadMe.rtf file which is located in the Malwarebytes Anti-Rootkit folder.
 

3 more replies
Answer Match 68.04%

so ive had this problem for a few months now and at random times ads just start playing i dont even have anything open. ive tried many thing to fix it but nothing works they just keep on playing. also at random times it tells me somthing like plug n play services have terminated and must now restart and DCOM services have terminated and must now restart and its is annyoing please help me.Edit: Moved topic from Windows 7 to the more appropriate forum.~ Animal

A:Audio ads playing in background

Hi,
 
Please download Rkill (courtesy of BleepingComputer.com) to your desktop.
There are 2 different versions. If one of them won't run then download and try to run the other one.
You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.
 rKill.exe: http://www.bleepingcomputer.com/download/rkill/dl/10/iExplore.exe (renamed rKill.exe): http://www.bleepingcomputer.com/download/rkill/dl/11/
Double-click on the Rkill desktop icon to run the tool.
If using Vista or Windows 7 right-click on it and choose Run As Administrator.
A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
If not, delete the file, then download and use the one provided in Link 2.
Do not reboot until instructed.
If the tool does not run from any of the links provided, please let me know.
After the tool has finished running, a text file named Rkill.txt should be located on the desktop. Please copy and paste the contents into your next reply.
 
xXToffeeXx~

7 more replies
Answer Match 68.04%

i keep hearing ads in the background and i also cant install avast it cant connect to there server to confirm registration. i have ran avg malware bytes and adaware all in safe mode and they dont detect anything. im running win xp 32 on sp3

here my dds file

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 10.4.1
Run by Valued Customer at 21:09:07 on 2012-07-17
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2037.1044 [GMT -4:00]
.
AV: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
AV: Lavasoft Ad-Watch Live! Anti-Virus *Disabled/Updated* {A1C4F2E0-7FDE-4917-AFAE-013EFC3EDE33}
.
============== Running Processes ===============
.
"C:\WINDOWS\system32\svchost.exe"
"C:\WINDOWS\system32\svchost.exe"
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\system32... Read more

A:audio ads playing in the background

Greetings and Welcome to The Forums!!My name is Gringo and I'll be glad to help you with your computer problems. I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At... Read more

32 more replies
Answer Match 68.04%

Mod edit: Moved to Proper forum for DDS logs ~~ boopme
 
Ok so my machine keeps playing audio ad's, I can have nothing open and they play.
I have ran Malwarebytes and Super Antispyware and they have found nothing. Now I have two SVCHosts listed and when I kill the one that is using the most process the sound stops for a little bit. I have looked threw the following logs (Rkill, DDS) and cant spot what is causing this issue.
 
Thanks for the Help
 
 
 
Rkill 2.5.0 by Lawrence Abrams (Grinler)http://www.bleepingcomputer.com/
Copyright 2008-2013 BleepingComputer.com
More Information about Rkill can be found at this link:http://www.bleepingcomputer.com/forums/topic308364.html
Program started at: 05/28/2013 03:27:22 PM in x64 mode.
Windows Version: Windows 7 Home Premium Service Pack 1
Checking for Windows services to stop:
* No malware services found to stop.
Checking for processes to terminate:
* No malware processes found to kill.
Checking Registry for malware related settings:
* Explorer Policy Removed:  NoActiveDesktopChanges [HKLM]
Backup Registry file created at:
C:\Users\Home\Desktop\rkill\rkill-05-28-2013-03-27-26.reg
Resetting .EXE, .COM, & .BAT associations in the Windows Registry.
Performing miscellaneous checks:
* No issues found.
Checking Windows Service Integrity:
* No issues found.
Searching for Missing Digital Signatures:
* No issues found.
Checking HOSTS File:
* No issues found.
Program finished at: 05/28/2013 03:29:21 PM
Ex... Read more

A:Audio Ad's Playing in the Background

Hello nopcs I would like to welcome you to the Malware Removal section of the forum.Around here they call me Gringo and I will be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", t... Read more

3 more replies
Answer Match 68.04%

Hello There,

So recently, I've been hearing audio adverts play every once in a while on my laptop, I ran an AVG and that came up with nothing, and Ive had no warnings prior to it. To my knowledge, I have not downloaded anything.

Here is my HijackThis log:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:20:40, on 19/06/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Users\Abigail\AppData\Local\Akamai\netsession_win.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe
C:\Users\Abigail\AppData\Local\Akamai\netsession_win.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\Autodesk\SketchBook Pro 2011\SketchBookSnapshot.exe
C:\Users\Abigail\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files (x86)\AVG\AVG2012\avgtray.exe
C:\Program Files (x86)\Bamboo Dock\BambooCore.exe
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\acrotray.exe
C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
C:\Program Files (x86)\Da... Read more

A:Audio ads playing on and off in the background

Hi,

If help still needed post fresh dds logs (attach.txt contents too).
 

3 more replies
Answer Match 68.04%

I saw this problem was solved many times on the forums, but didn't want to follow the steps in case they were meant only for the other people's unique situations. So I decided to make an account and ask for help.
These ads usually play around 3-4 am, but happen throughout the day and in the volume mixer, its shown its done through chrome. Also recently, chrome has been eating up a lot of CPU usage even when it's not doing anything, so I think thats related.
Used malwarebytes, Kaspersky, doesn't detect anything.
Thanks in advance.
 

A:Audio ads playing in the background

Welcome aboard
Please, complete all steps listed here: http://www.techspot.com/vb/topic58138.html
Make sure, you PASTE all logs. If some log exceeds 50,000 characters post limit, split it between couple of replies.
Attached logs won't be reviewed.
Please, observe following rules:

Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
If you're stuck, or you're not sure about certain step, always ask before doing anything else.
Please refrain from running any tools, fixes or applying any changes to your computer other than those I suggest.
Never run more than one scan at a time.
Keep updating me regarding your computer behavior, good, or bad.
The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.

 

31 more replies
Answer Match 68.04%

Ok so my machine keeps playing audio ad's, I can have nothing open and they play.
I have ran Malwarebytes and Super Antispyware and they have found nothing. Now I have two SVCHosts listed and when I kill the one that is using the most process the sound stops for a little bit. I have looked threw the following logs (Rkill, DDS) and cant spot what is causing this issue.
 
Thanks for the Help
 
 
 
Rkill 2.5.0 by Lawrence Abrams (Grinler)http://www.bleepingcomputer.com/
Copyright 2008-2013 BleepingComputer.com
More Information about Rkill can be found at this link:http://www.bleepingcomputer.com/forums/topic308364.html
Program started at: 05/28/2013 03:27:22 PM in x64 mode.
Windows Version: Windows 7 Home Premium Service Pack 1
Checking for Windows services to stop:
* No malware services found to stop.
Checking for processes to terminate:
* No malware processes found to kill.
Checking Registry for malware related settings:
* Explorer Policy Removed:  NoActiveDesktopChanges [HKLM]
Backup Registry file created at:
C:\Users\Home\Desktop\rkill\rkill-05-28-2013-03-27-26.reg
Resetting .EXE, .COM, & .BAT associations in the Windows Registry.
Performing miscellaneous checks:
* No issues found.
Checking Windows Service Integrity:
* No issues found.
Searching for Missing Digital Signatures:
* No issues found.
Checking HOSTS File:
* No issues found.
Program finished at: 05/28/2013 03:29:21 PM
Execution time: 0 hours(s), 1 minute(s), and 58 seconds(s)
-----... Read more

A:Audio Ad's Keep Playing in the Background

Hello nopcs These are the programs I would like you to run next, if you have any problems with one of these just skip it and move on to the next one.-AdwCleaner-Please download AdwCleaner by Xplode onto your desktop.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click on Delete.Confirm each time with Ok.Your computer will be rebooted automatically. A text file will open after the restart.Please post the content of that logfile with your next answer.You can find the logfile at C:\AdwCleaner[S1].txt as well.-Junkware-Removal-Tool-Please download Junkware Removal Tool to your desktop.Shut down your protection software now to avoid potential conflicts.Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".The tool will open and start scanning your system.Please be patient as this can take a while to complete depending on your system's specifications.On completion, a log (JRT.txt) is saved to your desktop and will automatically open.Post the contents of JRT.txt into your next message.When they are complete let me have the two reports and let me know how things are running.Gringo

4 more replies
Answer Match 68.04%

Hello,

I am looking for some help here. My computer got infected Yesterday. I ran Malwarebyes and that cleared the main Virus but I still have Audio Ads playing randomly in the background. I can have no browser open but those Ads keep playing and I get redirected when using Google search. I also get Script error every so often. When I look at the process, there is nothing running there, Only way to stop it by killing Explorer.exe. I have run Rootkit Buster (Trend Micro), Tdss Killer, Malware Bytes, Hit Man Pro and Combofix. None of them are finding anything. I have also clear all my temps using Ccleaner. I also Uninstall Firefox (My Main Browser) and also reset Internet Explorer and also manually disabled all Browser. When None of this worked, I did a system restore to 2 weeks ago, the script error popped right back up as soon as I logged back in, I ran updated combofix again. Please help, I am not posting the Log as its says so i the forum rule but I ran it before reading this rule...

Thank you !

A:Background Audio Ads Playing

You most likely have a Bootkit infection.Having run ComboFix we need to see that and a DDS log.Please go here....Preparation Guide ,do steps 6 - 9.Create a DDS log and post it in the new topic explained in step 9 which is here Virus, Trojan, Spyware, and Malware Removal Logs and not in this topic,thanks.Skip the GMER step and instead post the ComboFix log you have.Let me know if that went well.

3 more replies
Answer Match 68.04%

I have ads playing in my background when connected to the internet but no windows are open. I've tried some of the suggestions listed on this forum but I think I need a manual command to fix the issue. Here are the logs of some of the programs I've tried to use to fix the problem. Any help would be appreciated.

TDSSKILLER
20:08:03.0536 5592 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
20:08:05.0556 5592 ============================================================
20:08:05.0556 5592 Current date / time: 2014/01/06 20:08:05.0556
20:08:05.0556 5592 SystemInfo:
20:08:05.0556 5592
20:08:05.0556 5592 OS Version: 6.1.7601 ServicePack: 1.0
20:08:05.0556 5592 Product type: Workstation
20:08:05.0557 5592 ComputerName: OWNER-PC
20:08:05.0557 5592 UserName: Owner
20:08:05.0557 5592 Windows directory: C:\Windows
20:08:05.0557 5592 System windows directory: C:\Windows
20:08:05.0557 5592 Running under WOW64
20:08:05.0557 5592 Processor architecture: Intel x64
20:08:05.0557 5592 Number of processors: 4
20:08:05.0557 5592 Page size: 0x1000
20:08:05.0557 5592 Boot type: Normal boot
20:08:05.0557 5592 ============================================================
20:08:10.0040 5592 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
20:08:10.0044 5592 Drive \Device\Harddisk1\DR1 - Size: 0x3C8C0000 (0.95 Gb), SectorSize: 0x200, Cylinders: 0... Read more

A:Audio Ads Playing In The Background

16 more replies
Answer Match 68.04%

Hi
I currently have the same issue as sutefaniidesu who had an entry entitled "Audio ads playing in the background" from Jan 1, 2010. I've included the sysinfo, ComboFix log and the "loaded drivers" information from my ntbtlog.txt. My issue occurs as soon as the login screen appears which is why I'm sending the ntbtlog.txt. Any help would be greatly appreciated.

Thanks,
zefram
=============== Sysinfo

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Ultimate, 64 bit
Processor: Intel(R) Core(TM) i7 CPU 960 @ 3.20GHz, Intel64 Family 6 Model 26 Stepping 5
Processor Count: 8
RAM: 12279 Mb
Graphics Card: NVIDIA GeForce GTX 470, 1280 Mb
Hard Drives: C: Total - 953767 MB, Free - 141312 MB; D: Total - 1907718 MB, Free - 924581 MB; E: Total - 953867 MB, Free - 182680 MB;
Motherboard: ASUSTeK Computer INC., SABERTOOTH X58
Antivirus: None
================ ComboFix log
ComboFix 12-05-24.01 - w7 05/24/2012 9:01.2.8 - x64
Microsoft Windows 7 Ultimate 6.1.7600.0.1252.1.1033.18.12279.10599 [GMT -4:00]
Running from: c:\users\w7\Downloads\ComboFix.exe
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Files Created from 2012-04-24 to 2012-05-24 )))))))))))))))))))))))))))))))
.
.
2012-05-24 13:07 . 2012-05-24 13:07 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2012-05-24 13:07 . 2012-05-24 13:07 -------- d-----w- c:\users\Default\AppData\Local\temp
20... Read more

A:Audio ads playing in background

13 more replies
Answer Match 68.04%

Hi everyone, I'm having the issue now that whilie I'm surfing the internet I'm getting these audio ads that can't be stopped, and some play in specfic tabs that you have to go to and press on the X buttom to cancel them, and on top of that there are these box ads all around the webpages now. How can this malware be eliminated? Thanks

A:Audio ads playing in background 2

Greetings Sternritter-A and to BleepingComputer's Virus/Trojan/Spyware/Malware Removal forum.My name is Oh My! and I am here to help you! Now that we are "friends" please call me Gary.If you would allow me to call you by your first name I would prefer to do that. ===================================================Ground Rules:First, I would like to inform you that most of us here at Bleeping Computer offer our expert assistance out of the goodness of our hearts. Please try to match our commitment to you with your patience toward us. If this was easy we would never have met. Please do not run any tools or take any steps other than those I will provide for you while we work on your computer together. I need to be certain about the state of your computer in order to provide appropriate and effective steps for you to take. Most often "well intentioned" (and usually panic driven!) independent efforts can make things much worse for both of us. If at any point you would prefer to take your own steps please let me know, I will not be offended. I would be happy to focus on the many others who are waiting in line for assistance.Please perform all steps in the order they are listed in each set of instructions. Some steps may be a bit complicated. If things are not clear, be sure to stop and let me know. We need to work on this together with confidence.Please copy and paste all logs into your post unless directed otherwise. Please do not re-run any programs I suggest. If you encounter... Read more

22 more replies
Answer Match 68.04%

Hi, I seem to have gotten infected by that bothersome malware that keeps playing audio ads by starting an internet explorer process. I tried using some anti-virus software but to no avail, so my last chance would be a hijackthis log.Thanks in advance for your help!The log:Logfile of Trend Micro HijackThis v2.0.4Scan saved at 00:20:58, on 09/07/2010Platform: Windows 7 (WinNT 6.00.3504)MSIE: Internet Explorer v8.00 (8.00.7600.16385)Boot mode: NormalRunning processes:C:\Windows\System32\smss.exeC:\Windows\system32\csrss.exeC:\Windows\system32\wininit.exeC:\Windows\system32\csrss.exeC:\Windows\system32\services.exeC:\Windows\system32\lsass.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exeC:\Windows\system32\nvvsvc.exeC:\Windows\system32\svchost.exeC:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exeC:\Windows\system32\svchost.exeC:\Windows\system32\winlogon.exeC:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exeC:\Windows\system32\nvvsvc.exeC:\Windows\System32\spoolsv.exeC:\Windows\system32\svchost.exeC:\Windows\system32\Dwm.exeC:\Windows\system32&#... Read more

A:IE8 playing audio ads in background

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

11 more replies
Answer Match 68.04%

Ever since last night when ever I get on my computer and I connect to the internet audio ads start playing in the background. When ever it starts playing I open Windows Task Manager and go to Processes and go to the process that is causing the ads to play I end it but after a few minutes it starts back up again. I have no idea what to do. I use a Windows Vista Home Basic that's a model Satellite L305. The process that is to the ads is always one of the svhost.exe that has the highest number of CPU Usage out of all of the others. Below is what showed up when I scanned using Hijack This.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 2:58:59 PM, on 9/13/2012
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16446)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Toshiba\Power Saver\TPwrMain.exe
C:\Program Files\Toshiba\SmoothView\SmoothView.exe
C:\Program Files\Toshiba\FlashCards\TCrdMain.exe
C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Users\Justin\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Norton Internet Security\Engine\19.8.... Read more

A:Audio Ads playing in background

Hello MythicG2001 and welcome to TSG,

I'm kevinf80 and I will be helping with any malware issues you may have with your system.
Please be aware that some of the logs I may ask for can be very complex and can take a long time to decipher. I am a volunteer here with a job and family so I ask that you be patient when waiting for replies.
Please DO NOT run any scans/tools/fixes on your own as this will conflict with the tools we are going to use.
Either print or Save to Notepad all instructions and please follow them carefully, if there's something you don't understand or that will not work please let me know and we will go through it together.
Malware is often buggy and can be very unstable, with that in mind it is advisable to backup any important data before we begin. Go Here and follow the instructions specific for your operating system.

Please proceed as follows :-

Delete any versions of Combofix that you may have on your Desktop, download a fresh copy from the following link :-

Combofix
Ensure that Combofix is saved directly to the Desktop <--- Very important

Disable all security programs as they will have a negative effect on Combofix, instructions available Here if required. Be aware the list may not have all programs listed, if you need more help please ask.

Close any open browsers and any other programs you might have running

Double click the icon to run the tool (Vista or Windows 7 users right click and select "Run as Adminis... Read more

1 more replies
Answer Match 68.04%

I have recently had audio only ads running in the background. No application open - no browser or media player.

I have run Spybot and Malwarebytes. Upon searching further I have found your site. I have installed Hijackthis and here is my log.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:29:10 PM, on 28/03/2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16470)
Boot mode: Normal

Running processes:
C:\ProgramData\DatacardService\DCSHelper.exe
C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
F:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
C:\Program Files (x86)\SMART Technologies\Education Software\SMARTBoardService.exe
C:\Windows\Samsung\PanelMgr\SSMMgr.exe
C:\Windows\twain_32\Samsung\CLX3180\Scan2Pc.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Creative\Sound Blaster Recon3D\Sound Blaster Recon3D Control Panel\SBRecon.exe
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_6_602_180.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_6_602_180.exe
F:\F-Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://... Read more

A:Audio ads playing in background

15 more replies
Answer Match 68.04%

All steps taken to try and resolve issue can be found at https://www.bleepingcomputer.com/forums/t/563549/audio-ads-playing-in-background/.
 
Audio ads play in background at seemingly random times. Whenever the ads play multiple instances of the Iexplorer.exe (you cant see any internet explorer windows) process are found running and sometimes taking up 100k plus memory while playing audio ads.
 
I will attach 2 sets of DDS logs one for when no audio ads are playing (after computer restart) and another for after the audio ads play.
 

A:Audio Ads Playing In Background

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Download the version of this tool for your operating system.Farbar Recovery Scan Tool (64 bit)Farbar Recovery Scan Tool (32 bit)and save it to a folder on your computer's Desktop.Double-click to run it. When the tool opens click Yes to disclaimer.Press Scan button.It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.===Please paste the logs in your next reply DO NOT ATTACH THEM unless specified.To attach a file select the "More Reply Option" and follow the instructions.Wait for further instructions.

7 more replies
Answer Match 68.04%

Hi folks...and hope you can help
 
I'm running Windows 7, 64 Bit
 
I've read a number of threads here on the subject, and tried a number of programs to clear this up, but no luck as of yet.  I also believe I have the "Proxy 127.0.0.1".  Using Admin rights I've tried to change the DWord for "ProxyEnable" to "0", and delete "ProxyServer", which was set to "http=127.0.0.1:8877;https=127.0.0.1:8877", but it keeps coming back.
 
I've downloaded the current versions, and virus databases of:
- Malwarebytes
- HitmanPro_x64
- SpyHunter
- tdsskiller
- ESET
- Adwcleaner 5.019
 
I've also downloaded the below files based on what i've read here, run them, and saved the text file:
- ESET
- Rkill
- Junkware Removal
- Adwcleaner
 
In may cases I have to run "RKill" again to launch the program.  Prior to realizing what RKill was, I was running in SAFE MODE.
 
Below are the FRST text files.  I sure hope someone can help
 

A:Audio Ads Playing in background

Hi there, I will be helping you with your malware related problems.
 
Can you please upload the below files:
C:\Program Files (x86)\claim\remember.exe
C:\Program Files (x86)\repulsive\cars.exe
To this link for review?
 
Thank you

19 more replies
Answer Match 68.04%

Ive run a few programs (Combofix, Adw) and haven't solved the problem yet. The ads run while i have no programs open.
 
DDS (Ver_2012-11-20.01) - NTFS_x86 
Internet Explorer: 9.0.8112.16533  BrowserJavaVersion: 10.51.2
Run by Marcus Booker at 2:45:11 on 2014-03-24
Microsoft® Windows Vista™ Home Premium   6.0.6002.2.1252.1.1033.18.3070.550 [GMT -4:00]
.
AV: Norton Security Suite *Enabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Norton Security Suite *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton Security Suite *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\nvvsvc.exe
C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Windows\system32\SLsvc.exe
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\WLANExt.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
C:\Program Files\Hi-Rez Studios\HiPatchService.exe
C:\Program Files\Constant Guard Protection Suite\IDVaultSvc.exe
c:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\LogMeIn Hamachi\LMIG... Read more

A:Audio ads playing in background

Hello! Welcome to BleepingComputer Forums!
My name is Georgi and and I will be helping you with your computer problems.
Before we begin, please note the following:
I will working be on your Malware issues, this may or may not, solve other issues you have with your machine.
The logs can take some time to research, so please be patient with me.
Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
Instructions that I give are for your system only!
Please do not run any tools until requested ! The reason for this is so I know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.
Please perform all steps in the order received. If you can't understand something don't hesitate to ask.
Again I would like to remind you to make no further changes to your computer unless I direct you to do so. I will not help you if you do not follow my instructions.
 
 
Please download Farbar Recovery Scan Tool and save it to your desktop.Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your re... Read more

9 more replies
Answer Match 68.04%

Hi All,
 
I am new in this community and I'm really glad I've come across it. 
 
I believe my problem started when I watched a video via streaming (for free) from this website called watch32.is. As expected, there are heaps of ads being free. Every time you clicked on the play button, it would open up a new page for the ads. After a few days, I noticed that while watching a show, an audio of a ads would play in the background.
 
I looked it up online and it appeared to be a malware/adware. I called my anti-virus/spyware product support and after running several scans no threats were reported. It is very annoying because even if I'm not browsing anything, the ad audio plays in the background.

Can anyone please tell me how to get rid of this? 
 
Thanks a lot.
 
Cheers,
iwannabe_geek

A:Ads audio playing in the background

I am a novice pretty new to this Site also and I am not going to even attempt to answer your query because I know that expert advice will be along here very shortly. 
All I can say is this Site has been a god-send to me in helping me gain tech knowledge in how to keep my pc virus-free. The guys and girls here are awesome!
I am sure someone will come along to recommend you use Junkware Removal Tool and/or AdwCleaner of which there are downloads available within this Site.
Use them if indeed this is the case -  as well as read up about the potential problems that PUP's (Potentially Unwanted Programs) can cause. Also, if you are ever tempted to download and use a free pc 'boosting' or other supposed performance-enhancing program in future - DONT! Registry cleaners are a no-no as well! 
 
Sorry to diverse away slightly from your original query....just a bit of 'advice' (if you can call it that! lol) from a fellow novice!

2 more replies
Answer Match 68.04%

I have been reading a bunch of different threads with people having the same problem. Computer all of the sudden restarts then audio ads are playing in the background. So far I have tried running Malwarebytes, AVG and TDDSKILLER.
 
DDS Below:
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64 
Internet Explorer: 8.0.7600.16385  BrowserJavaVersion: 10.45.2
Run by Jason at 14:50:06 on 2014-01-09
Microsoft Windows 7 Ultimate   6.1.7600.0.1252.1.1033.18.12264.6724 [GMT -5:00]
.
AV: AVG AntiVirus Free Edition 2014 *Enabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: AVG AntiVirus Free Edition 2014 *Enabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files (x86)\Common F... Read more

A:Audio Ad's Playing in Background

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Please download AdwCleaner by Xplode onto your Desktop.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Click the Report button and the report will open in Notepad.IMPORTANTIf you click the Clean button all items listed in the report will be removed.If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Check off the element(s) you wish to keep.Click on the Clean button follow the prompts.A log file will automatically open after the scan has finished.Please post the content of that log file with your next answer.You can find the log file at C:\AdwCleaner[Sn].txt (n is a number). Please downloadJunkware Removal Tool to your Desktop.Please close your security software to avoid potential conflicts.Run the tool by double-clicking it. If you are using Windows Vista or 7, right-mouse click it and select Run as administrator.The tool will open and start scanning your system.Please be patient as this can take a while to complete, depending on your system's specifica... Read more

2 more replies
Answer Match 68.04%

I am literally the most ignorant person you will ever meet when it comes to computers. For a few weeks I have had audio ads playing in the background of my computer whenever the internet is connected, even when there are no windows up. It is driving. me. crazy. I have ran my Norton and nothing shows up, but obviously something is wrong. I was wondering if anyone out there is patient enough to slowly walk me through figuring out how to fix this problem. I would greatly appreciate any and all help!

Thank you!
 

A:Audio ads playing in background, PLEASE HELP!

16 more replies
Answer Match 68.04%

Hello there, I'm having an issue with my computer that started today. It restarted by itself and when it rebooted these ads in the background started playing. I've already tried malwarebytes, and TDSS killer but it couldn't find anything If someone could please help me it'd be much appreciated, I already ran DDS so I'll post the log I got from that.
 
If there's anything else you guys need from me please let me know. Thank you.
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 9.0.8112.16448  BrowserJavaVersion: 10.9.2
Run by Fred at 0:05:59 on 2013-12-30
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.2811.798 [GMT -6:00]
.
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\system32\atiesrxx.exe
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\atieclxx.exe
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\windows\SysWOW64\svchost.exe -k Akamai
C:\windows\system32\svchost.exe -k LocalServic... Read more

A:Audio ads playing in background

Hello Leelee21 I would like to welcome you to the Malware Removal section of the forum.Around here they call me Gringo and I will be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same"... Read more

51 more replies
Answer Match 68.04%

My computer has been attacked by many different kinds of virus these few days, like trojans, FBI malware. I have cleared all of those by using my antivirus software except the audio ads playing in background. I have been following the instructions of the post in this link: http://forums.techguy.org/virus-other-malware-removal/890285-audio-ads-playing-background.html

I disabled all the antivirus software realtime protection and ran the ComboFix already, but I couldn't find the combofix report. Can anyone help me with this? Thanks
 

More replies
Answer Match 68.04%

Hi

I have audio playing in the backgorund at random on my pc. The audio is adverts for products etc. Please can you help to remove this annoyance.

Thanks
Tony


DDS (Ver_09-10-13.01) - NTFSx86
Run by Tony at 21:20:51.21 on 15/10/2009
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1023.282 [GMT 1:00]


============== Running Processes ===============

C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
svchost.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Norton Internet Security\Engine\16.7.2.11\ccSvcHst.exe
C:\WINDOWS\system32\slserv.exe
C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Norton Internet Security\Engine\16.7.2.11\ccSvcHst.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\apps\ABoard\ABoard.exe
C:\apps\ABoard\AOSD.exe
C:\WINDOWS\System32\wltray.exe
C:\Program Files\ATI Technologies\ATI Control Pane... Read more

A:Audio Playing In The Background

Hi,

Please do the following:

Download ComboFix from either of these locations:
Link 1
Link 2


VERY IMPORTANT !!! Save ComboFix.exe to your Desktop

* IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here Double click on ComboFix.exe & follow the prompts.
As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.


Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:


Click on Yes, to continue scanning for malware.
When fini... Read more

9 more replies
Answer Match 68.04%

I've been having problems with ads playing in the background when there are no programs running. There are occasional popups as well, which started when the background ads started. I've run my antivirus and spybot but they didn't find anything. Here's my HJT log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:38:38 PM, on 3/4/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
c:\Program Files\Microsoft Security Essentials\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\supportsoft\bin\sprtlisten.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Microsoft Security Essentials\msseces.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Soft... Read more

A:Audio ads playing in the background

I have downloaded and run Malwarebytes. It found and removed some items, and the audio ads have seemed to stop. I'll post if anything happens again.
 

1 more replies
Answer Match 68.04%

Good evening.

Ever since this morning, I've been getting audio ads playing on my computer despite the fact that my browser is closed and that no video is playing at all. I've been worried, since my Windows Live OneCare detected trojans recently... But I deleted them, and now it doesn't detect anything wrong anymore, no viruses, nothing. A few times I opened Task Manager to check if I noticed a process that I didn't recognize, but nothing came on.

Here is my HijackThis log. Please do tell me if you see something suspicious.

Thanks for the help in advance.

Logfile of Trend Micro HijackThis v2.0.3 (BETA)
Scan saved at 8:30:47 PM, on 01/01/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18865)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\lg_swupdate\GiljabiStart.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\LG Software\BatteryMiser\BatteryMiser5.exe
C:\Program Files\LG Software\LG Magnifier\MagnifyingGlass.exe
C:\Program Files\LG Software\On Screen Display Setup\HotKey.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program F... Read more

A:Audio ads playing in background

16 more replies
Answer Match 68.04%

Hi,
 
After startup I can hear advertisements in the background even though I am not running any programs. I run Windows 7
 
Upon opening the task manager it shows that internet explorer is open and that a website advertising something is open. I can't end the task either.
 
Sometimes it plays the entire ad or cuts off midway but it slows down other programs sometimes. It's more annoying than anything but I'm worried it may be a more serious threat.
 
I ran some anti malware
 
Hitman Pro
Malwarebytes
Rogue Killer
Comodo Cleaning Essentials
Emergency Kit Scanner
AdwCleaner
 
and ran full scans using myTrend Micro Antivirus and Microsoft Security Essentials.
 
They all came up clean but Hitman Pro did notice some tracking cookies
 
So anyway, what else can I do to try and fix this?

A:Background Audio ads playing

Let's try using MBAM Anti Rookit and ASWmbr.Download Malwarebytes Anti-Rootkit to your desktop.Double click on downloaded file. OK self extracting prompt.Warning! Malwarebytes Anti-Rootkit needs to be run from an account with administrator rights.MBAR will start. Click in the introduction screen "next" to continue.Click in the following screen "Update" to obtain the latest malware definitions.Once the update is complete select "Next" and click "Scan".When the scan is finished and no malware has been found select "Exit".If malware was detected, make sure to check all the items and click "Cleanup". Reboot your computer.Open the MBAR folder and paste the content of the following files in your next reply:"mbar-log-{date} (xx-xx-xx).txt""system-log.txt">>>Please download aswMBR ( 4.5MB ) to your desktop.Double click the aswMBR.exe icon, and click Run.When asked if you'd like to "download the latest Avast! virus definitions", click Yes.Click the Scan button to start the scan.On completion of the scan, click the save log button, save it to your desktop, then copy and paste it in your next reply.

3 more replies
Answer Match 67.2%

I have an intresting problem , i have a dell laptop that I just cleaned out a rouge program called windows disk fixer , I have the computer totally free of virus ans spyware but audio ads are playing in background and I occosionally get a script error and they stop. I have run the following programs and they all come up clean. Malware bytes, spybot, superantispyware, trend micro house call, numerous root kit removers from everbody ( kaspersky root kit remover will not run on this system all outhers have ) , i have run windsock fix as well as just about any other fixer you can think of I have reloaded the sound card and all the logs are clean from hijack this I have included just incase I missed anything. any Ideas?

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 5:19:15 PM, on 4/27/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Secunia\PSI\PSIA.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
C:\Program Files\UPHClean\uphclean.exe
C:\... Read more

A:Audio Advertisments playing in the background

7 more replies
Answer Match 67.2%

I seem to have picked up a virus. the most obvious symptom is that there are audio commercials playing with no applications open. I believe that the commercials are only running when i have an active intenet connection. The symptom that concerns me the most is that my task manager does not work properly, it has no tabs or menu options and it displays only the processes. i have checked these forums for anwers and found a similar problem. I followed the steps listed to fix the problem. First I ran Sophos rootkit removal tool, followed by Combofix. After i ran combo fix my computer stopped working temporarily saying that all registry keys were deleted, but after I rebooted that problem self corrected. The Final step I followed was to run kaspersky's TDSSKILLER. When i tried to run the cure function, it forced screen of death. twice. please help. Please tell instruct me which logs to post, and how to acess them

A:Audio Commercials playing in background

Hello jonesbrian1976,

If you still require assistance, kindly follow the instructions in our pre-posting topic New Instructions - Read This Before Posting for Malware Removal Help and post the requested logs in your next reply.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

1 more replies
Answer Match 67.2%

I have some kind of male-ware or virus in my computer. It plays audio, like ads and music in the background of my Windows 7 laptop. I followed the instructions given in other forums. I am pasting my report from ComboFix below. Please help. Thank you.
ComboFix 13-07-18.04 - Dharmesh 07/19/2013 13:11:05.1.2 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.4063.2121 [GMT -4:00]
Running from: c:\users\Dharmesh\Desktop\ComboFix.exe
AV: Norton Business Suite *Enabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
FW: Norton Business Suite *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
SP: Norton Business Suite *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\Microsoft\Windows\DRM\B9C3.tmp
c:\programdata\Services
c:\programdata\uninstaller.exe
c:\users\Dharmesh\AppData\Roaming\.#
c:\windows\SysWow64\System32\MASetupCleaner.exe
c:\windows\SysWow64\System32\muzapp.exe
.
.
((((((((((((((((((((((((( Files Created from 2013-06-19 to 2013-07-19 )))))))))))))))))))))))))))))))
.
.
2013-07-19 13:38 . 2013-07-02 08:34 9460976 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{BF45CACC-0EE4-4623-8DD6-C51190B54E53}\mpengine.dll
2013-07-18 16:21 . 2012-08-09 01:50 43680 ----a-r- c:\windows\system32\drivers\SymIMV.sys
2013-07-18 10:56 . 2013-07... Read more

More replies
Answer Match 67.2%

Hi, I took a backup of my laptop->HP Pavilion dm4-2070us. I followed the special instructions before posting the below HijackThis log contents. I double-clicked the dds.scr file but did not get this note: "Two logs shall be created on your Desktop". Please let me know whether restoring to factory settings may quickly resolve this issue. Thank you very much!

Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 2:12:19 PM, on 7/14/2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16496)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Internet Explorer\IELowutil.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\KOLLI\Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPNOT/1
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/HPNOT/1
R1 - HKLM\Software\Microsoft\... Read more

A:Audio Ads been playing in background for last 2-3 weeks

The log from Scan results of GMER is given below..

GMER 2.1.19163 - http://www.gmer.net
Rootkit scan 2013-07-14 16:57:39
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 WDC_WD64 rev.01.0 596.17GB
Running: enc511qx.exe; Driver: C:\Users\KOLLI\AppData\Local\Temp\pgtiqpod.sys
---- User code sections - GMER 2.1 ----

.text C:\Windows\system32\svchost.exe[400] C:\Windows\system32\WININET.dll!HttpSendRequestW 0000000076e8d1e8 14 bytes {JMP QWORD [RIP+0x0]}
.text C:\Windows\system32\svchost.exe[400] C:\Windows\system32\WININET.dll!HttpSendRequestA 0000000076f09dd0 14 bytes {JMP QWORD [RIP+0x0]}
.text C:\Windows\system32\svchost.exe[400] C:\Windows\system32\ole32.dll!CoCreateInstance 000007fefded7490 9 bytes {JMP QWORD [RIP+0x0]}
.text C:\Windows\system32\svchost.exe[400] C:\Windows\system32\ole32.dll!CoCreateInstance + 11 000007fefded749b 3 bytes [00, 00, 00]
.text C:\Windows\system32\svchost.exe[400] C:\Windows\system32\ole32.dll!CoGetClassObject 000007fefdee2e18 14 bytes {JMP QWORD [RIP+0x0]}
.text C:\Windows\system32\svchost.exe[400] C:\Windows\system32\ws2_32.dll!GetAddrInfoW + 1 000007feff1b23c1 13 bytes {JMP QWORD [RIP+0x0]}
.text C:\Windows\system32\svchost.exe[400] C:\Windows\system32\ws2_32.dll!GetAddrInfoExW 000007feff1bc090 14 bytes {JMP QWORD [RIP+0x0]}
.text C:\Windows\system32\svchost.exe[400] C:\Windows\system32\winmm.dll!waveOutOpen 000007fefbb538d0 14 bytes {JMP QWORD [RIP+0x0]}
.text C:\Windows\system32\svchost.exe[... Read more

1 more replies
Answer Match 67.2%

Hi,
 
My computer was infected with the FBI Moneypak Ransomware virus. It's mostly been removed (I no longer get a lockout screen, and the computer no longer restarts randomly when logging in to normal mode), but there are still a couple of lingering effects.
 
- When logged in to normal mode and connected to the internet, I can hear audio ads playing in the background, with no programs running.
- If I open the control panel and select on any of the options (for example, "back up your computer"), nothing happens.
 
Below is a copy of the DDS log I just ran - the attach.txt file is attached. Thank you in advance for your help!
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 9.0.8112.16476
Run by Joe at 21:13:38 on 2013-06-27
Microsoft Windows 7 Home Premium   6.1.7600.0.1252.1.1033.18.3836.1508 [GMT -7:00]
.
AV: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\PROGRA~2\AVG\AVG2012\avgrsa.exe
C:\Program Files (x86)\AVG\AVG2012\avgcsrva.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\sv... Read more

A:FBI Moneypak Still Playing Background Audio

Hello WIBSTR I would like to welcome you to the Malware Removal section of the forum.Around here they call me Gringo and I will be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", ... Read more

21 more replies
Answer Match 67.2%

My computer has a serious virus that does the following:
1) Runs audio ads indiscriminately in the background with all browsers and windows closed.
2) System is running slow
3) Virus hi-lites words such as 'password' and when hovered over with the mouse, ads appear.
4) Ads show up on websites that I've logged into. Can't get rid of them.

This is what I've tried to resolve the problem:
1. Ran Microsoft Security Essentials in regular mode AND safe mode
2. Ran system restore (can't go back far enough)
3. Installed and ran McAfee in regular mode AND safe mode
4. Ran CCleaner
5. Purchased and ran Trojan Remover 6.8.5 by Simply Super Software

NOTHING works!!! Are my passwords at risk?

HELP!!

Thank you!

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: AMD Phenom(tm) II X4 925 Processor, AMD64 Family 16 Model 4 Stepping 2
Processor Count: 4
RAM: 4094 Mb
Graphics Card: ATI Radeon HD 5570, 1024 Mb
Hard Drives: C: Total - 945554 MB, Free - 829280 MB;
Motherboard: Gigabyte Technology Co., Ltd., M68MT-S2
Antivirus: Microsoft Security Essentials, Updated and Enabled

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 3:31:13 PM, on 4/29/2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16537)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\HP\HP Software Updat... Read more

A:Audio Ads Playing in the Background + Other Problems

16 more replies
Answer Match 67.2%

I am working on a friends computer that is having 2 main issues. The desktop icons don't seem to be working but if I go to the start menu I can open programs and folders. The other issue is that it randomly plays commercial audio when sitting idle or doing anything else on the computer. I have run scan disk, defrag, avg scan, and malware bytes. Both problems persist. I have seen other topics on this using combofix but on that page it says wait til one of you guys tell me to run it before I do. So now I am just waiting for your advice and help. Thank you.

A:commercial audio playing in background

DownloadTDSSkillerLaunch it.Click on change parameters-Select TDLFS file systemClick on "Scan".Please post the LOG report(log file should be in your C drive) Do not change the default options on scan resultsDownloadaswMBRLaunch it, allow it to download latest Avast! virus definitionsClick the "Scan" button to start scan.After scan finishes,click on Save logPost the log results here.If you get crashes in normal mode,run it in safemode with networkingDownloadESET online scannerInstall itClick on START,it should download the virus definitionsWhen scan gets completed,click on LIST of found threatsExport the list to desktop,copy the contents of the text file in your reply

17 more replies
Answer Match 67.2%

Hi I have been experiencing a problem where audio, Music and voice play in the back ground even when I am not connected to the internet. The problem especially happens when I am connected to an external video and audio source using an hdmi cable.

I am using Windows 7 64 bit
My laptop is a pavilion m6-1045 dx.

I have run Hijack this, GMER, Frst64, Malware bytes, Kapersky, Microsoft Security Essentials, CCleaner.

I have reformatted my computer restoring it to factory settings but after a while the problem came back.

PLEASE HELP
 

A:Music/audio Keeps Playing in Background

This May help for additional information I have a name not found item in my sound mixer which I cant unmute or close or select.
 

1 more replies
Answer Match 67.2%

It started a month or two ago; my son had some random sound playing in the background; that went away after a restart.    On occasion, i'd get the same thing where ads / audio from a video would continue after IE has closed; that would go away when stopping any remaining "iexplorer.exe" from the services in task manager.    Now it is happening far more ofter; even after a fresh start.
 
I also see under audio mixer, an "application" called "name not available".    I was suspicious it was a virus or malware, so i ran both Norton (360 installed) and a fresh download of "Malwarebytes".   Malwarebytes found, and removed, something.   Norton found nothing.   The problem persists.
 
My machine is an HP G72 Notebook, 2.00Ghz, P6100, 4GB Ram, and is running WIndows 7 Home Premium.
 
Any help is appreciated!
 
 

A:Random Audio playing in background

Welcome aboard   Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2 SecurityCheck may produce some false warning(s), so leave the results reading to me. Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeClick Go and post the result. Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop.* Double-click mbam-setup.exe and follow the prompts to install the program.* At the end, be sure a checkmark is placed next to Up... Read more

30 more replies
Answer Match 67.2%

Hi,
My computer just start playing audio ad in the background, no programs running. I am a newbie on this site. I have Window 7 home premium on a dell I5-2430m cpu 64-bit. It is driving me crazy. I've removed a virus before (not on this computer), but this one scares me, don't know where to start. Please help.
Thanks!

A:Randon audio ads playing in the background

Greetings and Welcome to The Forums!!My name is Gringo and I'll be glad to help you with your computer problems. I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At... Read more

3 more replies
Answer Match 67.2%

Hi, I have recently had random audio start playing in the background. At the moment is seems to be the news, but previously it has been music and foreign talking. It has happened before a couple of months ago but I managed to fix the issue with a system restore. Can you help with a more permanent fix. I am not particularly computer savy. Thanks in advance.
 

A:Random audio playing in background

Hi and welcome.

Please download the latest version of TDSSKiller from here and save it to your Desktop.

Doubleclick on TDSSKiller.exe to run the application, then click on Change parameters.

Put a checkmark beside loaded modules.

A reboot will be needed to apply the changes. Do it.
TDSSKiller will launch automatically after the reboot. Also your computer may seem very slow and unusable. This is normal. Give it enough time to load your background programs.
Then click on Change parameters in TDSSKiller.
Check all boxes then click OK.

Click the Start Scan button.

The scan should take no longer than 2 minutes.
If a suspicious object is detected, the default action will be Skip, click on Continue.

If malicious objects are found, they will show in the Scan results - Select action for found objects and offer three options.
Ensure Cure (default) is selected, then click Continue > Reboot now to finish the cleaning process.

Note: If Cure is not available, please choose Skip instead, do not choose Delete unless instructed.
A report will be created in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.

Please download ComboFix from Here or Here to your Desktop.

**Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**

Please, never rename Combofix unless instru... Read more

1 more replies
Answer Match 67.2%

Hello I am new here and I am not that good with computers but I really need some help. My computer has random audio playing with no applications open. I am starting school soon and I need this PC clean as soon as possible. Thank you for your time.

A:Random audio playing in the background

Hello and welcome to TSF.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and
Quote:




Having problems with spyware and pop-ups? First Steps




a link at the top of each page.

Please follow our pre-posting process outlined below.

NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help - Tech Support Forum

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

1 more replies
Answer Match 67.2%

I am fixing my friends laptop. He had some issues that were resolved using Malware Anti-Malware Bytes as his computer was completly unprocted before. He also had browser redirects that were fixed with Hijack this. However, after resolving those issues he still has a strange problem. Random audio ads will play even when there is nothing open. I thought it was maybe simply a problem with Google Chrome but it still happens when Chrome is not open. Is there any way to resolve this?

I actually just ran a MAMB scan. The last time I did so there were 0 objects infected this time there were six. I allowed MAMB to fix them. I have the log saved if posting it is required.

A:Random Audio Ads Playing In Background

DownloadTDSSkillerLaunch it.Click on change parameters-Select TDLFS file systemClick on "Scan".Please post the LOG report(log file should be in your C drive) Please download GMER from here(doesnot work on 64 bit OS)http://www2.gmer.net/download.phpTemporarily disable any real-time active protection so your security programs will not conflict with gmer's driver.GMER will open to the Rootkit/Malware tab and perform an automatic Full Scan when first run. (do not use the computer while the scan is in progress)If you receive a WARNING!!! about rootkit activity and are asked to fully scan your system...click NO.Now click the Scan button. If you see a rootkit warning window, click OK.When the scan is finished, click the Save... button to save the scan results to your Desktop. Save the file as gmer.log.Click the Copy button and paste the results into your next reply. DownloadaswMBRLaunch it, allow it to download latest Avast! virus definitionsClick the "Scan" button to start scan.After scan finishes,click on Save logPost the log results here

3 more replies
Answer Match 67.2%

It's back.  Was here last week, someone was -quite- helpful, I can't find the person tho as this forum doesn't seem to keep track of posts.
 
Anyway, last week all of a sudden I get audio commercials playing in the bg.  I've run:
 
SASW
MWB
Crap Cleaner
SpyBot
ADW
TDSS
 
and prolly a few more.  All negative.  This machine is as clean as I can make it. So it stopped last Mon after all this...we figured, we got it.  Nope- back again this AM. "Castrol GTL" ad, I believe.  What's my next move here?  Could this be browser specific?  All I use is Chrome.
 

A:Audio playing in background, Part II

Please stay in your original topic: http://www.bleepingcomputer.com/forums/t/500920/rootkitbootharbingera/page-3

1 more replies
Answer Match 67.2%

I recently discovered audio playing when I didn't have any windows open.  In mixer is says name not available.  I am running windows 7.  Malwarebytes, and avg have been no help.

A:Audio ads playing in background on boot up

Hi there,please run a FRST scan to start with:Please download Farbar Recovery Scan Tool and save it to your Desktop.(If you are not sure which version (32-/64-bit) applies to your system, download and try to start both of them as just the right one will run.)Start FRST with administator privileges.Make sure the option Addition.txt is checked and press the Scan button.When finished, FRST will produce two logs (FRST.txt and Addition.txt) in the same directory the tool was run from.Please copy and paste these logs in your next reply.

14 more replies
Answer Match 67.2%

First off, I want to thank you for viewing this post and for helping me resolve this issue. I'll give you the back-story of what happened. This morning, I turned on my computer as normal and played games. I then turned on my Skype so I could talk to the friends I was playing with. After a while, while playing my game, my computer randomly restarts itself. When it finally booted, I immediately got back on Skype and started my game. After some time, however, it started playing random audio such as advertisements, music, etc. I thought it was Skype so I closed it. The audio continued to play. I knew it couldn't have been my game because League of Legends does not play radio and advertisements. However, I closed my game after a while in an attempt to figure out what is playing the audio. I opened up my Volume Control and noticed that there was something called "Name Not Available". I muted this and the audio stopped. This should not be there, however, and I'm trying to figure out what is making this audio play and how I can get rid of it.

Anti-virus/Anti-spyware programs:

AVG (Free Version)
Malwarebytes Anti-Malware
CCleaner

 

A:Random Audio playing in the background

Hmm. This is quite odd. I am not really sure but the only thing I can recommend with the details given is to run a full Malwarebytes Anti-Malware scan and see if it detects something. I am not really sure what else it could be. My first guess would be some sort of adware installed on your computer. If Malwarebytes comes up clean, then download SuperAntiSpyware and run a full scan. If that comes up clean, I am really not sure what the issue is and I hope someone else in the TS community can help you out and resolve the issue! Good luck!
 

6 more replies
Answer Match 67.2%

After the new years, I also got the annoying malware that plays audio ads in the background. In the volume mixer it is listed as "Name not available" Tried all the virus removal tools (rkill, combo fix, tpsskiller, adwcleaner, malwarebyte anti-rootkit, etc.) with no success.
 
symptoms - other than the audio ads playing in the background. I would randomly get the message that either Dcomlaunch or plug and play has stopped unexpectedly and I was forced to restart.
 
After running TPSSkiller, I found that dcomlaunch and RpcSs were listed as suspicious objects.
 
Here is the FRST log
 
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-01-2014 02
Ran by Gilbert (administrator) on GILBERT-PC on 19-01-2014 11:20:39
Running from C:\Users\Gilbert\Desktop
Windows 7 Ultimate (X64) OS Language: English(US)
Internet Explorer Version 8
Boot Mode: Normal
 
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(Enigma Software Group USA, LLC.) C:\Program File... Read more

A:Audio ads playing in the background cannot stop it

Hello and welcome.  Please follow these guidelines while we work on your PC:Malware removal is a sometimes lengthy and tedious process. Please stick with the thread until I’ve given you the “All clear.”  Absence of symptoms does not mean your machine is clean!Please do not run any scans or install/uninstall any applications without being directed to do so.Please note that the forum is very busy and if I don't hear from you within five days this thread will be closed.   Open notepad. Please copy the contents of the code box below. To do this highlight the contents of the box and right click on it. Paste this into the open notepad. Save it in the same location as FRST (usually your desktop) as fixlist.txt2014-01-02 11:01 - 2014-01-02 11:01 - 00037376 _____ C:\Windows\system32\gbamdrn.bae
2014-01-02 10:50 - 2014-01-18 19:03 - 00000093 _____ C:\Windows\system32\blmckkg.eda
2014-01-02 10:50 - 2014-01-02 11:01 - 00000102 _____ C:\Windows\system32\phmlp.zoo
2014-01-02 10:50 - 2014-01-02 10:50 - 00000064 _____ C:\Windows\system32\foqvxgg.zth
2014-01-02 10:35 - 2014-01-02 10:35 - 00219314 ____S C:\Windows\system32\bhnbpeh.umoNOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating systemNow run FRST again.When the tool opens click Yes to disclaimer.Press the Fix button just once and wait.The tool will make a log (Fixlog.txt) please post... Read more

8 more replies
Answer Match 67.2%

Earlier today i visited some of my usual sites online. there was a clicking sound like web pages being opened but no pages were popping up then advertisments began playing in background not always the same advertisment. MBAM scan clean Mcafee clean ad-ware clean please help

thanks

A:Random audio playing in background

Hello and welcome,we'll try these now.Next run ATF and SAS: If you cannot access Safe Mode,run in normal ,but let me know.Note: On Vista, "Windows Temp" is disabled. To empty "Windows Temp" ATF-Cleaner must be "Run as an Administrator".From your regular user account..Download Attribune's ATF Cleaner and then SUPERAntiSpyware , Free Home Version. Save both to desktop ..DO NOT run yet.Open SUPER from icon and install and Update itUnder Scanner Options make sure the following are checked (leave all others unchecked):Close browsers before scanning.Scan for tracking cookies.Terminate memory threats before quarantining.Click the "Close" button to leave the control center screen and exit the program. DO NOT run yet.Now reboot into Safe Mode: How to enter safe mode(XP)Using the F8 MethodRestart your computer. When the machine first starts again it will generally list some equipment that is installed in your machine, amount of memory, hard drives installed etc. At this point you should gently tap the F8 key repeatedly until you are presented with a Windows XP Advanced Options menu. Select the option for Safe Mode using the arrow keys. Then press enter on your keyboard to boot into Safe Mode. Double-click ATF-Cleaner.exe to run the program.Under Main "Select Files to Delete" choose: Select All.Click the Empty Selected button.If you use Firefox or Opera browser click that browser at the top and choose: Select AllClick the Empty ... Read more

1 more replies
Answer Match 67.2%

I have a dell Vostro 2510 windows xp. For the last 2 months i have been fighting this problem. I get random audio playing in the background at differnent intervals. I have norton 360 and it dosn't seem to be picking anything up. I have seen similar entrys on this forum and the problems have been fixed. So I went to hijackthis and here is my log.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:01:16 AM, on 5/27/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Norton 360\Engine\3.8.0.41\ccSvcHst.exe
C:\Program Files\Norton PC Checkup\Engine\2.0.2.543\SymcPCCULaunchSvc.exe
C:\WINDOWS\system32\DRIVERS\o2flash.exe
C:\Program Files\Norton PC Checkup\Engine\2.0.2.543\ccSvcHst.exe
C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
C:\Program Files\Norton PC Checkup\Engine\2.0.2.543\ccSvcHst.exe
C:\Program Files\Micr... Read more

More replies
Answer Match 67.2%

To whom this may concern,

I am aware that there is a similar posting to this on this site, but even after following all the instructions given by CatByte on 23rd July 2010 I find that i am still getting the audio from adverts despite no programmes actually running. This problem is quite recent and i find that along with the audio from ads, i occasionally get pop ups which i believe are from Internet Explorer.

I am currently running Nod32 anti-virus with ZoneAlarm Pro. My primary internet browser is Firefox but on occasion i do use Internet Explorer. I would be extremely grateful for any assistance you can provide. Please see below for a copy of my Hijackthis log. Thank you for your help.
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:25:58, on 26/07/2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.21256)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program File... Read more

A:Audio from advert playing in background

16 more replies
Answer Match 67.2%

Hi,

Recently when online I have experienced audio adverts playing in the background. There do not appear to be any open windows or extra/unusual processes. I use Avast Antivirus but using this within windows and as a boot-time scan has not solved the problem. I have also tried Spybot S&G, Super Antispyware, and Malbyte's Anti-Malware to no avail. I'm running Windows Vista and generally use Firefox to browse.

HJT log to follow.

Many thanks in advance.
 

A:Audio advert playing in background

16 more replies
Answer Match 67.2%

I'm not sure what I did, but ever since this morning my laptop has been playing ad sounds randomly. I can tell by looking at the volume mixer that the sound is coming from internet explorer even though I don't have any instances of IE open. Also, I already tried doing a system restore to a restore point that was made before I started having this problem.

Here is the log of a Malawarebyte's Anti-Malware Quick Scan that I ran:
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4332

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

7/20/2010 1:36:36 PM
mbam-log-2010-07-20 (13-36-36).txt

Scan type: Quick scan
Objects scanned: 131587
Time elapsed: 7 minute(s), 50 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

And here is a log from HiJackThis:
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 1:42:06 PM, on 7/20/2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mod... Read more

A:Random Audio Playing in the background

16 more replies
Answer Match 67.2%

My laptop has been playing random audio ads in the background. Please help.
 

More replies
Answer Match 67.2%

Ever since yesterday (12/6/2013), I've been randomly hearing audio ads in the background, even while nothing is open. I've opened up Volume Control and saw the source, something along the lines of Windows Run Process (rundll32) or something like that. I went into task manager and quit it, and I haven't heard anything (yet), but I want to know if I can make sure it's gone-gone. Any help would be appreciated, and I would like to thank you before hand.
 
Operating System: Windows 7 Home Premium
Computer: Lenovo G560

A:Audio Playing Randomly in Background

Hello SDCore I would like to welcome you to the Malware Removal section of the forum.Around here they call me Gringo and I will be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", ... Read more

3 more replies
Answer Match 67.2%

Hi! I've been having a serious problem with unwanted audio ads constantly playing in the background of my computer. This occurs whether or not I have my browser (IE) open, and even happens when my network connection is unplugged. The ads are short (about 30 seconds) - some of them are for companies I've heard of (like Bank of America or UPS), but some I don't recognize. Some are gibberish. I've run Malwarebytes and McAfee, both of which have found nothing. I also used a secure erase program to delete all cookies and temporary files (one site suggested that might help), with no luck. It's driving me crazy.Here is the HijackThis log I ran this morning:Run by V at 7:53:51.00 on Fri 03/27/2009Internet Explorer: 7.0.5730.11Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.2046.1260 [GMT -4:00]AV: McAfee VirusScan *On-access scanning enabled* (Updated)FW: Norton Internet Worm Protection *disabled*FW: McAfee Personal Firewall *enabled*FW: Norton Internet Security 2006 *disabled*============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exesvchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\Program Files\Common Files\Creative Labs Shared\Serv... Read more

A:Unwanted Audio Ads Playing in Background

Hello RGP7711,Sorry about the delay. If you still need help, please post a new HijackThis log to make sure nothing has changed, and I'll be happy to look at it for you.Please do this:1. Download HijackThis? here:http://www.trendsecure.com/portal/en-US/th.../hijackthis.php2. Click 'Do a System Scan and Save log'.The HJT log will open in notepad.Thanks,tea

2 more replies
Answer Match 67.2%

Running Windows 8.1 and Firefox 37.0.2
Audio commercials playing in background at random times when running Firefox. Hasn't happened when not running Firefox (so far).
This started about a week ago. So far, this has happened only in Firefox; but, I am not absolutely sure it won't happen in IE as I use it almost none at all. If I close Firefox, the commercial stops immediately. Firefox and IE are the only browsers I have installed. I have reset Firefox to defaults, run Malwarebytes Antimalware, CCleaner, removed the hard disk and connected it to another system as a secondary drive and scanned for viruses. No change.
 

A:Audio Commercials Playing in Background

16 more replies
Answer Match 67.2%

Hey,
 
For last couple of days (5-7) I'm experiencing some kind of a virus. It's playing audio ads on various websites (for example it can play an ad in listenonrepeat but it has never happened on facebook). There is no apparent schedule to this, it can be silent for 4 hours and then play the ad or play ads one by one after closing the page. Also, when I'm trying to close the page ad is playing on I get the message "Do you really want to close this tab?". I haven't downloaded anything fishy lately nor have been on fishy websites so I don't know where it came from. The only explanation is a pendrive I connected to my PC from a video guy that is going to film my wedding. I tried scanning my PC with various apps recommended and supposed-to-be-good in fighting malware and nothing. I'm not an IT guy so I don't know what to do next and need help. I need to format my system yesterday due to my mistake so I'm on fresh Windows 7 installation.
 
I know that there are sentences not in English but FRST chose my native language as default and I have no idea how to change it to English. If this scan is not good, just let me know.
 
 
 
 
Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 12-09-2016
Uruchomiony przez admin (administrator)  ADMIN-KOMPUTER (15-09-2016 04:06:24)
Uruchomiony z C:\Users\admin\Downloads
Załadowane profile: admin (Dostępne profile: admin)
Platform: Windows 7 Home Premium (X64) Język: Polski (Polska... Read more

More replies
Answer Match 67.2%

This is odd.

There are random clips of audio playing from my computer every 5 minutes or so. Some clips sound like commercials, and some sound like songs.


Anyone know how to fix this?

Heres my log.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:24:48 PM, on 7/26/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\DVDRAMSV.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\Tablet.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\WINDOWS\system32\WTablet\TabUserW.exe
C:\WINDOWS\system32\Tablet.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\ltmoh\L... Read more

More replies
Answer Match 67.2%

Hi guys,

I've been having these random audio ads play in the background and it's driving me mad - tried running Anti-Malware Bytes, Kaspersky TDSS etc. and the ads still persist. I'm not in the mood to reformat my hard-drive, so I'm hoping someone here can help. Thanks in advance!

Here is my FRST logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by Anthony (administrator) on HOMEPC on 11-04-2015 17:50:48
Running from C:\Users\Anthony\Desktop
Loaded Profiles: Anthony (Available profiles: Anthony)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporat... Read more

A:Random audio ads playing in background

And here is the Addition.txt log:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-03-2015
Ran by Anthony at 2015-04-11 17:51:06
Running from C:\Users\Anthony\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

64 Bit HP CIO Components Installer (Version: 7.2.4 - Hewlett-Packard) Hidden
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.134 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1... Read more

23 more replies
Answer Match 67.2%

I have a DELL 14 3437 laptop with windows 8.1 64bit.
Recently there seems to be new virus which plays audio tones in the background even if I`m doing nothing at all,no browsers are open, no files are open.Also my laptop performance reduced drastically and also it would restart on its own.

I tried to remove it using tdsskiller.exe but it was not helpful.
Thereafter I used malicious malware remover,junkware remover tool,and HitmanPro.Thereafter for 2 days there were no audio tones.But since I realised my laptop was not performing as good as before. I uninstalled malicious malware remover,junkware remover tool,and HitmanPro. I installed 1-click cleaner and windows 8 manager.After running them, it seemed like a lot of my system files wer infected and had to be fixed. After this the audio tones have come back and the performance is still very sluggish.

Currently my antivirus gives a message as follows:

"McAfee detected an infected file on your PC.Restart your PC so we can fix it.

About This Trojan
Detected: Trojan-FDOQ!828BCAF63645(Trojan)
Quarantined From: C:\Users\Capt.Meril\AppData\Local\Osmics\CoreMedia.dll"
But nothing happens even if i restart my computer, I just get the same error message.

I have run TSG SysInfo and the following is the log:
Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 8.1 Single Language, 64 bit
Processor: Intel(R) Core(TM) i5-4200U CPU @ 1.60GHz, Intel64 Family 6 Model 69 Stepping 1
Processor Count:... Read more

A:Audio virus playing in background

16 more replies
Answer Match 67.2%

After the new years, I also got the annoying malware that plays audio ads in the background. In the volume mixer it is listed as "Name not available" Tried all the virus removal tools (rkill, combo fix, tpsskiller, adwcleaner, malwarebyte anti-rootkit, etc.) with no success.
 
symptoms - other than the audio ads playing in the background. I would randomly get the message that either Dcomlaunch or plug and play has stopped unexpectedly and I was forced to restart.
 
After running TPSSkiller, I found that dcomlaunch and RpcSs were listed as suspicious objects.
 
Below is my FRST log
 
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-01-2014
Ran by Gilbert (administrator) on GILBERT-PC on 04-01-2014 12:18:14
Running from C:\Users\Gilbert\Downloads
Windows 7 Ultimate (X64) OS Language: English(US)
Internet Explorer Version 8
Boot Mode: Normal
 
==================== Processes (Whitelisted) =================
 
(Enigma Software Group USA, LLC.) C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(cFos Software GmbH) C:\Program Files\ASRock\XFast LAN\spd.exe
(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files\Inte... Read more

A:Audio ads playing in the background cannot stop it

here is the dds log
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64 
Internet Explorer: 8.0.7600.16385  BrowserJavaVersion: 10.45.2
Run by Gilbert at 13:19:58 on 2014-01-04
Microsoft Windows 7 Ultimate   6.1.7600.0.1252.1.1033.18.8074.4621 [GMT -5:00]
.
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE
C:\Windows\system32\nvvsvc.exe
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\ASRock\XFast LAN\spd.exe
C:\Program Files\Intel\iCLS Client\HeciServer.exe
C:\Program Files\Intel\Intel® Smart Connect Technology Agent\iSCTAgent.exe
C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe
C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
C:... Read more

5 more replies
Answer Match 67.2%

Recently the audio for adverts has been playing in the background even when nothing is running. When the audio is playing there are no unusual or extra processes running, like other people have been experiencing. I've tried running avg and malwarebytes anti malware in and out of safe mode. in safe mode avg did find something a trojan called loader.exe and smss.exe (see attached file for more information) but even when they were deleted it didn't solve the problem. I've also tried cleaning out all temporary files but still no luck. I'm running windows 7 and mainly use google chrome as my default internet browser. I have also attached my HJT log.
 

A:Advert audio playing in background

11 more replies
Answer Match 67.2%

Hi dear mods so i have been getting random audio ads in playing in the background. The time between them varies from 10 to 30, 40 minutes each. The ads are short, probably less than a minute each and they are about food items like bertolli's pasta and marie callendar pies if that matters at all haha. 
 
Thank you for your time and help!! Here's the FRST data
 
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-02-2015
Ran by xana (administrator) on MORPHINE on 08-02-2015 04:06:03
Running from C:\Users\xana\Downloads
Loaded Profiles: xana (Available profiles: xana)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdr... Read more

A:Random audio ads playing in background

sorry, accidentally posted two of the same thread. if the mods could please delete one that would be great. they are the same. thank you. 

18 more replies
Answer Match 67.2%

My laptop has an issue with audio advertisements popping up randomly. When I go to task manager, I find that IE is running and when I click "end task" the ad goes away. I use Chrome, not IE. Also, I download installed and tried to run Cobian backup but it did not work. It just got stuck on "closing other instances of the user interface"
 

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-02-2015 02
Ran by pastorjasonharris (administrator) on MRLAPPY on 12-02-2015 13:08:38
Running from C:\Users\pastorjasonharris\Downloads
Loaded Profiles: pastorjasonharris (Available profiles: pastorjasonharris)
Platform: Windows 8.1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(Bitdefender) C:\Program Files\Bitdefender\Antivirus Free Edition\gzserv.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Windows ® Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(CobianSoft, Luis Cobian) C:\Program Files (x86)\Cobian Backup 11\cbVSCService11.exe
(Luis Cobian, CobianSoft) C:\Program Files (x86)\Cobian Backup 11\cbService.exe
(ELAN Microelectronics Corp.) C:\Program Fil... Read more

A:Audio Advertisements Playing in Background

I deleted a few extra games and programs and ran Malware bytes.
 
THE STUPID AUDIO ADS ARE STILL PLAYING =(
 
This is the log:
 
Malwarebytes Anti-Malware
www.malwarebytes.org
 
Scan Date: 2/12/2015
Scan Time: 12:47:00 PM
Logfile: malwarebyteslog.txt
Administrator: Yes
 
Version: 2.00.4.1028
Malware Database: v2015.02.12.05
Rootkit Database: v2015.02.03.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled
 
OS: Windows 8.1
CPU: x64
File System: NTFS
User: pastorjasonharris
 
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 347557
Time Elapsed: 18 min, 4 sec
 
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled
 
Processes: 0
(No malicious items detected)
 
Modules: 0
(No malicious items detected)
 
Registry Keys: 17
PUP.Optional.Consumer.Input.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{B49699FC-1665-4414-A1CB-C4A2A4A13EEC}, Quarantined, [276e72ab26645adc429c7d8da55eb24e], 
PUP.Optional.Consumer.Input.A, HKLM\SOFTWARE\CLASSES\ConsumerInputUpdate.CoreClass, Quarantined, [148177a6cfbb69cd36308a4ddc27837d], 
PUP.Optional.Consumer.Input.A, HKLM\SOFTWARE\CLASSES\ConsumerInputUpdate.CoreClass.1, Quarantined, [c2d3de3fd5b5c571273f19bebf4406fa], 
PUP.Optional.Consumer.Input.A, HKLM\SOFTWARE\CLASSES\Con... Read more

12 more replies
Answer Match 67.2%

Random audio ads and news clips keep playing on my computer and they are definitely not originating from any window I have open.

SysInfo:

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: Intel(R) Core(TM) i7-2670QM CPU @ 2.20GHz, Intel64 Family 6 Model 42 Stepping 7
Processor Count: 8
RAM: 8139 Mb
Graphics Card: Radeon (TM) HD 7690M XT, 1024 Mb
Hard Drives: C: Total - 689290 MB, Free - 585568 MB; D: Total - 21849 MB, Free - 2353 MB; E: Total - 4054 MB, Free - 1098 MB;
Motherboard: Hewlett-Packard, 17FB
Antivirus: Microsoft Security Essentials, Disabled

HijackThis Log:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:52:23 AM, on 9/8/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16447)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\HP SimplePass 2012\TouchControl.exe
C:\Program Files (x86)\HP SimplePass 2012\BioMonitor.exe
C:\Program Files (x86)\uTorrent\uTorrent.exe
C:\Users\Trevor\Local Settings\Apps\F.lux\flux.exe
C:\Program Files (x86)\Java\jre6\bin\javaw.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
C:\Program Files (x86)\Commo... Read more

A:Random audio playing in background

9 more replies
Answer Match 66.36%

Hi -

Having an issue with some advertising audio playing randomly in the background. It only plays for a few seconds, but Malwarebytes Anti-Malware program has been going nuts since this happened.

The bubble above the task bar for that program keeps appearing every few seconds saying:

Successfully blocked access to a potentially malicious website: 178.238.36.17 (note, these IPs vary)

Type: outgoing
Port: 5000 (these vary), Process: iexplore.exe (sometimes svchost.exe or firefox.exe).

Thanks!

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 2:36:13 PM, on 1/18/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Symantec AntiVirus\VPTray.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
C:\Program Files\Sharp\Sharpdesk\IndexTray.exe
C:\Program Files\Sharp\Sharpdesk\SharpTray.exe
C:\Program Files\Sharp\Sharpdesk\FTPServer.exe
C:\PROGRA~1\Sharp\SHARPD~1\Indexer.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\Sharp\Sharpdesk\nsapp.exe
C:\Windows\System32\nwtray.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Adobe\Adobe Dr... Read more

A:Random Audio Bits Playing in Background?

11 more replies
Answer Match 66.36%

Hi guys i have a problem, when i am on my pc after about 30 mins i get this random audio playing usually about chinese tourist things but i don't know where it is coming from, even if i have no programs open and if i do i close them but it still keeps playing them. I wondered if anyone knew how to locate and get rid of these i have looked for programs i don't recongnise but can't any on my computer. i am running windows xp service pack 2.

thankyou
 

A:Problem keep getting random audio playing in the background

Please click here to download and install version 2.0.2 of the HijackThis Installer.

Run it and select Do a system scan and save a logfile.

The log will be saved in Notepad. Copy and paste the log in your next post.

Do not fix anything
 

3 more replies