[stanhilliard]

Doy know what I would look for on the DVD?

[Advertisements]

As it was a firefox extension I am not sure if it would have been present on the disc

Subject to no further problems

I will remove my tools now and give some recommendations, but, I would like you to run for 24 hours or so and come back if you have any problems

Now the best part of the day ----- Your log now appears clean

A good workman always cleans up after himself so..The following will implement some cleanup procedures as well as reset System Restore points:

Remove tools

Download and run Delfix
Select the options as shown



: Keep Java Updated :

WARNING: Java is the #1 exploited program at this time. The Department of Homeland Security recommends that computer users disable Java
See this article

I would recommend that you completely uninstall Java unless you need it to run an important software.
In that instance I would recommend that you disable Java in your browsers until you need it for that software and then enable it. (See How to diasble Java in your web browser and How to unplug Java from the browser)

If you do need to keep Java then download JavaRa
Run the programme and select Remove Java Runtime. Uninstall all versions of Java present
Once done then run it again and select Update Java runtime > Download and install Latest version



Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:

Malwarebytes.

Update and run weekly to keep your system clean

Unchecky

Click on the link above to be taken to Unchecky.com
click the very large Download button.
click Save
Click Open folder
Right click on the Unchecky_setup and choose to Run as Administrator
Once open click the Install button.
Then click on Finish
Unchecky is now installed and will help you keep unwanted check boxes unchecked, this is a fire and forget programme

It is critical to have both a firewall and anti virus to protect your system and to keep them updated.

To learn more about how to protect yourself while on the internet read this little guide Best security practices Keep safe

[Essexboy]

As it was a firefox extension I am not sure if it would have been present on the disc

Subject to no further problems

I will remove my tools now and give some recommendations, but, I would like you to run for 24 hours or so and come back if you have any problems

Now the best part of the day ----- Your log now appears clean

A good workman always cleans up after himself so..The following will implement some cleanup procedures as well as reset System Restore points:

Remove tools

Download and run Delfix
Select the options as shown



: Keep Java Updated :

WARNING: Java is the #1 exploited program at this time. The Department of Homeland Security recommends that computer users disable Java
See this article

I would recommend that you completely uninstall Java unless you need it to run an important software.
In that instance I would recommend that you disable Java in your browsers until you need it for that software and then enable it. (See How to diasble Java in your web browser and How to unplug Java from the browser)

If you do need to keep Java then download JavaRa
Run the programme and select Remove Java Runtime. Uninstall all versions of Java present
Once done then run it again and select Update Java runtime > Download and install Latest version



Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:

Malwarebytes.

Update and run weekly to keep your system clean

Unchecky

Click on the link above to be taken to Unchecky.com
click the very large Download button.
click Save
Click Open folder
Right click on the Unchecky_setup and choose to Run as Administrator
Once open click the Install button.
Then click on Finish
Unchecky is now installed and will help you keep unwanted check boxes unchecked, this is a fire and forget programme

It is critical to have both a firewall and anti virus to protect your system and to keep them updated.

To learn more about how to protect yourself while on the internet read this little guide Best security practices Keep safe

[stanhilliard]

I haven't done the cleanup yet because I found two anomalies. They do not involve pop-ups but might be related to the cause. I will get the situation better defined and post back.

[Essexboy]

OK

[stanhilliard]

I have done a lot more testing. I still haven't experienced any ads or other pop-ups.

Previously mentioned Problem 1:
The HP program "HP Support Assistant" stopped working and shuts down after it displays a window. The HP online forum advised to download and run an uninstall program and a new install file. But that didn't fix the problem. By good luck and a hunch I discovered that HP Support Assistant conflicts with the Win8.1 version of voice input. The fix is to close voice input before running HP Support Assistant. This is not a problem anymore.

Previously mentioned Problem 2:
One of the 4 user accounts (barb) froze up repeatedly. At one point prior to being unresponsive a message flashed that was too fast to read, except I saw the name CspNotify.  Then later today it is working. Maybe it is OK now -- unless the CspNotify implies that it could be related to Malware. If I don't hear otherwise I will do the cleanup.

Edited by stanhilliard, 09 July 2015 - 06:56 PM.

[Essexboy]

Do the cleanup and monitor for a day or so

[stanhilliard]

OK!

[stanhilliard]

OOPS!
A problem remains:

In user account barb my licensed malwarebytes found this:

2 objects found

PUP.Optional.BDYYahoo.A
C:Users\barb\Appdata\Roaming\Mozilla\Firefox\Profiles\lqwuywet.default\prefs.js

PUP.Optional.BDYYahoo.A
C:Users\barb\Appdata\Roaming\Mozilla\Firefox\Profiles\lqwuywet.default\prefs.js

I allowed malwarebytes to quaranteen them.

Then it blocked what it said was a malicious web page at 8.34.112.228. At the time I was using Firefox and I think I was displaying Xmarks website.

I tried to synchronize my bookmarks with the xmarks server and it can't log in. (This has happened before.) The favorites in IE also won't synchronize in this user. The default search engine keeps switching to Yahoo when I restart Firefox. Also the startup page changes from about:blank to yahoo.

These symptoms only happen in the barb account. The other three accounts seem OK.


I thought maybe your tools were blocking it so I ran DELFIX. That was a bad move because it didn't make any difference.

I await your advice.

Edited by stanhilliard, 10 July 2015 - 08:20 PM.

[Essexboy]

The MBAM detections are neither her nor there for that account, they are precautionary removals

Could you reset firefox on that account

1.Click the menu button and then click help .
2.From the Help menu choose Troubleshooting Information. ...
3.Click the Reset Firefox button in the upper-right corner of the Troubleshooting Information page.
4.To continue, click Reset Firefox in the confirmation window that opens.

[stanhilliard]

I reset Firefox on account barb this afternoon. I had been sick with a bad allergy all weekend.There have been no more ads. Xmarks updates correctly. HP Support Assistant starts correctly.

[Essexboy]

Any further problems before I tidy up ?

[Essexboy]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.