Solved Desktop Adverts

[XweAponX]

Also, don't be veered away fro the issue, which is you have a Virus of some kind. No Settings in IE, Chrome, Firefox, or any other browser will fix this for you, because your SYSTEM has been invaded.

 

[elbmek]

I have used iobit for a long time and never ever had a problem till this. Current situ - did scan with Kaspersky - clear; did Kaspersky Vulnerabilities scan - 8 - but nothing to do with this; still running Sophos, which is very slow. Will now check out this TDSS.

TDSS - zero return

 

[XweAponX]

Try Malwarebytes Anti-Rootkit as well. And in TDSSKiller, there is a setting to "Scan Loaded Programs" - Check that, it will force a reboot and then scan when it comes up. Make sure you have "scan for TDSS filesystems" checked as well.

As far as IObit, a lot of us here have seen invasive behaviour using their products, which is why we don't use them. I would dare to suggest that IObit may be the cause of all of this. Checking for IObit, it;s about 50-50, many people believe it is all invasive software, others think it is gods gift. It appears that it uses Malwarebytes, steals processes from them. It's my personal opinion that it is one of the worst junk apps, one time I installed some gunk from them and I had to scan my system for days to get rid of a problem similar to yours.

I think it is highly likely that it is the cause of all this - If you have a license for it, try removing all of it, seeing if the problem continues. If it does, then get a better AV. If not, then you can put it back in.

 

[elbmek]

Sophos - clean.

Thanks Xwe

 

[elbmek]

Currently running malwarebytes rootkit beta - it found something called appln***** it took it out before I wrote it down.

Full scan in operation now

You say get a better AV but I was under the impression that Kaspersky Internet Suite is the best.

 

[XweAponX]

That's what you use? It's OK, I used to use it, but I found Eset NOD32 6 to be easier to set up and it has never failed to find anything really atrocious. Sometimes one AV will find something that others won't - Kaspersky is pretty good but sometimes it just misses things.

 

[elbmek]

Ok malware scan done - nothing found, but that was AFTER it had removed a .dll - so hopefully solved. Time will tell. Never heard of this eset thing, am going to google it now

Thanks for the heads up on eset, will keep it in mind, had a look it 'claims' to do everything, but so did KIS - I still have 202 days subs with them.

 

[XweAponX]

Yah keep using it until it expires. That one DLL file may have been it, I ran Malwarebytes Anti-Rootkit and it informed me of one DLL file that was loaded, and it dealt with it before the program even ran. Is that what happened to you?

 

[elbmek]

yes, it told me of a dll fle then said I need to run a scan so I let it, and zero return. I deliberately left my pc on whilst I went out, and NO ad appeared when I came back - hopely Malwarebytes Rootkit has done what it says on the tin.

 

[elbmek]

Hey justa, not sure how to take that?

I got a reply from iobit, they confirmed that the url is 'bad' and must not be opened from the url at any price; they have asked for a photo shot of my add ons in IE10 which I have provided.

 

[JustATest]

@elbmek: It was meant to be a positive comment. Also, if you have checked your recent reps, you would have found out that I enjoyed it. Anyway, I'll delete the post and you can just keep the rep.

UPDATE: previous post deleted.

 

[elbmek]

no no that's fine, just curious that's all

 

[XweAponX]

Ok, so it was that IObit Addon wasn't it? What's 'Freecorder"?

 

[elbmek]

No to iobit, as far as I know. Freecorder is something my daughter uses; sound recorder for pc.

Iobit found that the url I sent then WAS dangerous but did not say whether or not it came from them. However, I am fairly sure it was not as I had been using iobit for quite some time, and trouble free.

 

[elbmek]

Sponsorship

Its still there but now a blank a I have it supposedly blocked

 

[caperjack]

quote
as far as I know. Freecorder is something my daughter uses


having children use your computer is just like a virus waiting for a place to happen ,or something like that .lol
as poor as I am i almost always had my own computer to use and there's to fix

 

[BRKING]

Today I left my pc on the desktop whilst I got ready to go to work, and when I returned there was a 'Microsoft sponsored' advert on my screen for some software or something. Nothing online was 'live'. The url was channel157.com or something similar.

Message for you Microsoft and anybody else reading this - piddle OFF, If I want to read ads, unsolicited ads, on my pc - I'll turn it off first and take up gardening!!! Its an intrusion and I'll sue.

Blaming MS for your computer virus due to YOUR web browsing. LOL

 

[XweAponX]

Well, we can still blame MS can't we? Besides, he knows it was cos of a virus. And, now that I see that his kid uses the system, I agree with the "Virus waiting to happen" assessment hahahahahaha.

 

[elbmek]

This is on a url sent to me via iobit:

Start Over » Adware » Remove tv.channel157news.com Pop-up
[h=1]Remove tv.channel157news.com Pop-up[/h]On July 24, 2013 | Under: Adware | No Comments

tv.channel157news.com is another address where users may see Sponsorship pop-up advertisements. It noticed that the address is being utilized by adware to promote various products. Previously, we have published other address such as othersa.info andbig.deluxeforthefuture.com. Both shows the same pop-up ads labeled Sponsorship.
This may not be the last time that the ads originating from the same adware. Attackers have designed it to utilized various web address aside from the latest tv.channel157news.com. As you can see, all mentioned web address published ads that are relevant to survey, questionnaire, fake raffle, contest, and some other stuff that aims to catch your attention.
It is clear that adware are taking advantage of user’s sensibility toward the subject to be involved in the online survey. On some instances, tv.channel157news.com will prompt to complete the questionnaire that asks for your sensitive details in the end. You should not provide personal details especially online user name, passwords, or contact numbers. tv.channel157news.com may use gathered data for fraud activities.
If you keep seeing constant pop-up advertisements from tv.channel157news.com no matter what web site you try to visit, it only indicates that your computer is infected with adware. You can only stop getting redirected to tv.channel157news.com ads when the adware is completely deleted from the computer.

 

[caperjack]

Spywareblaster by Brightfort ,is a program i have been using for years now to help stop Spyware from getting on my computers ,it has over 16,000 sites like the one you mention in it black list data base ,its free or can be purchased ,difference is manual/automatic updated .
BrightFort