logo elektroda
logo elektroda
X
logo elektroda

Dealing with Pop-up Ads & Porn Sites: Block & Remove UKASH Virus (POLICE Pop-up)

LuKaS1995 71850 8
ADVERTISEMENT
Treść została przetłumaczona polish » english Zobacz oryginalną wersję tematu
  • #1 14087632
    LuKaS1995
    Level 9  
    Hello, I have a problem, I have been popping up ads and porn sites for a while, I don't know how to deal with it. Before, I had a problem with the UKASH virus (the POLICE window was popping up) but for a long time it hasn't been popping up just these self-popping porn sites. What do I have to do to stop it popping up?
  • ADVERTISEMENT
  • #2 14087634
    sPeRaCz.PL
    Level 42  
    LuKaS1995 wrote:
    What do I have to do to stop it popping up?


    To get started, do:
    1. Perform MBAM scan after database update and remove detected threats
    http://www.malwarebytes.org/
    2. Perform a AdwCleaner scan - option "search" then "delete"
    http://www.bleepingcomputer.com/download/adwcleaner/
    3. Attach both logs from FRST (as an attachment)
    http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/
  • ADVERTISEMENT
  • #3 14087641
    wariato
    Level 43  
    LuKaS1995 wrote:
    What do I have to do to stop it popping up?

    Uninstall the garbage you have installed.
  • ADVERTISEMENT
  • #4 14087685
    LuKaS1995
    Level 9  
    Here are the FRST logs.

    Moderated By swiercm:

    I corrected the insertion of logs. Please, the next time you put the logs either in the attachment or, for example, as a spoiler. The post will be more readable and will not make browsing the topic difficult.

  • #5 14087692
    Acorus 20
    Level 43  
    You provide the logs as attachments or place them on wklej.org
  • #6 14087859
    LuKaS1995
    Level 9  
    Ok, I didn't know and what about those logos?
  • ADVERTISEMENT
  • #7 14088017
    Kolobos
    IT specialist
    Masz zainfekowany router.

    Wykonaj: https://www.elektroda.pl/rtvforum/topic2874173.html
    Dostep do panelu blokuje sie tak: http://www.tp-link.com.pl/article/?faqid=568 - we wszystkich routerach sa podobne opcje.

    Odinstaluj:
    Dll-Files Fixer (HKLM-x32...Dll-Files Fixer_is1) (Version: 3.1.81 - Dll-Files.com)
    Gadu-Gadu 10 (GG 10.5) Packages (HKCU...Gadu-Gadu 10 (GG 10.5) Packages) (Version: - ) C:P rogram Files (x86)Dll-Files.com FixerDLLFixer.exe [2014-02-13] (Dll-FIles.Com)
    Task: {3F8387BF-314B-4B3D-841A-5A718CC3DD63} - System32TasksDLL-Files FixerASKUSER => C:P rogram Files (x86)Dll-Files.com FixerDLLFixer.exe [2014-02-13] (Dll-FIles.Com)
    Task: {840EB13B-1408-4292-918E-18F44B95CFFF} - System32TasksDLL-Files.Com Fixer_Updates => C:P rogram Files (x86)Dll-Files.com FixerDLLFixer.exe [2014-02-13] (Dll-FIles.Com)
    Task: {B496818C-8E97-40BB-BB2B-D86A12104026} - System32TasksDLL-Files.Com Fixer_MONTHLY => C:P rogram Files (x86)Dll-Files.com FixerDLLFixer.exe [2014-02-13] (Dll-FIles.Com)
    Task: C:WindowsTasksDLL-Files FixerASKUSER.job => C:P rogram Files (x86)Dll-Files.com FixerDLLFixer.exe
    Task: C:WindowsTasksDLL-Files.Com Fixer_MONTHLY.job => C:P rogram Files (x86)Dll-Files.com FixerDLLFixer.exe
    Task: C:WindowsTasksDLL-Files.Com Fixer_Updates.job => C:P rogram Files (x86)Dll-Files.com FixerDLLFixer.exe
    S3 MBAMProtector; ??C:Windowssystem32driversmbam.sys [X]
    S3 MBAMSwissArmy; ??C:Windowssystem32driversMBAMSwissArmy.sys [X]
    S3 Synth3dVsc; System32driverssynth3dvsc.sys [X]
    S3 tsusbhub; system32driverstsusbhub.sys [X]
    S3 VGPU; System32driversrdvgkmd.sys [X]
    2014-10-30 17:46 - 2014-10-30 17:48 - 00000000 ____D () C:AdwCleaner

    W FRST wybierz Fix.

    Usun katalog C:FRST i to wszystko.
  • #8 14088540
    LuKaS1995
    Level 9  
    I did with the router as you wrote earlier, I deleted gg, dll files can't be done because the files are damaged. Where do I find this frst.exe file and how do I create the fixlist.txt?
  • #9 14088568
    mati211p
    HDD and data recovery specialist
    You create a new text document next to FRST.exe, ie in D: \ Downloads, you name it fixlist.txt and paste into it from the forum what you want to put in it.

Topic summary

The discussion addresses issues related to persistent pop-up ads and pornographic sites, previously linked to the UKASH virus (POLICE pop-up). Users are advised to perform scans using Malwarebytes Anti-Malware (MBAM) and AdwCleaner to detect and remove threats. Additionally, it is suggested to uninstall unwanted software, particularly Dll-Files Fixer and Gadu-Gadu 10, which may be contributing to the problem. Users are also instructed to check their routers for infections and to create a fixlist.txt file for the Farbar Recovery Scan Tool (FRST) to assist in the cleanup process.
Summary generated by the language model.
ADVERTISEMENT