Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Windows 7 "Talking" Adware

11 Jul 2013   #1
tomato500

Windows 7 Professional x64
 
 
Windows 7 "Talking" Adware

So here I am with yet another PC problem.
My aunt gave me her Samsung laptop running windows 7 home edition. She said it had a virus that slowed her computer down. It also starts "talking" adverts. I turned it on, connected to my home Wi-Fi, and i heard it blabbing about Jack-in-the-Box specials. Tried running Avast full scan, but it's saying that there's some files it couldn't scan. Also, Avast is saying that it is blocking a malicious URL from various websites. Sorry if this is too little info, but I have never really had experience with virus removal.
Please help!


My System SpecsSystem Spec
.
11 Jul 2013   #2
VistaKing

Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
 
 

tomato500

Run the two programs below

AdwCleaner

Click here AdwCleaner

Click on Download Now button

Save to the Desktop

Right-click on AdwCleaner.exe and choose

Click on Delete and confirm the prompt.



Your computer will be rebooted automatically. A text file will open after the restart.

Upload the log : The log file is at C:\AdwCleaner[Sn].txt


Download Junkware Removal Toolkit

Click here Junkware Removal Tool to download

Drag the JRT.exe from the Downloads folder to your Desktop

Right click JRT.exe and choose

Once done upload the JRT.txt file
My System SpecsSystem Spec
11 Jul 2013   #3
tomato500

Windows 7 Professional x64
 
 

Quote   Quote: Originally Posted by VistaKing View Post
tomato500

Run the two programs below

AdwCleaner

Click here AdwCleaner

Click on Download Now button

Save to the Desktop

Right-click on AdwCleaner.exe and choose

Click on Delete and confirm the prompt.



Your computer will be rebooted automatically. A text file will open after the restart.

Upload the log : The log file is at C:\AdwCleaner[Sn].txt


Download Junkware Removal Toolkit

Click here Junkware Removal Tool to download

Drag the JRT.exe from the Downloads folder to your Desktop

Right click JRT.exe and choose

Once done upload the JRT.txt file
Ok here's the log files. It deleted a few files/registry keys associated with "StartNow toolbar".


Attached Files
File Type: txt AdwCleaner[S1].txt (6.0 KB, 6 views)
File Type: txt JRT.txt (9.2 KB, 6 views)
My System SpecsSystem Spec
.

11 Jul 2013   #4
VistaKing

Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
 
 

Can you boot into normal mode ? See if you hear the talking advertisements ?
My System SpecsSystem Spec
11 Jul 2013   #5
tomato500

Windows 7 Professional x64
 
 

Quote   Quote: Originally Posted by VistaKing View Post
Can you boot into normal mode ? See if you hear the talking advertisements ?
It's booting right now... it takes a while. I am using my other laptop to type this. It is configuring updates (taking a while). Yeah, it's talking about recipes? Oh, it just got a BSOD. It disappeared quickly, but it said something about "a clock interrupt was not received on a secondary processor within the allocated time interval". BlueScreenView shows that the same crash happened 2 days ago, when she said the PC got the virus. This is getting weird...
My System SpecsSystem Spec
11 Jul 2013   #6
VistaKing

Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
 
 

Do you have a USB Flash Drive ?
My System SpecsSystem Spec
11 Jul 2013   #7
tomato500

Windows 7 Professional x64
 
 

Quote   Quote: Originally Posted by VistaKing View Post
Do you have a USB Flash Drive ?
Yup.
My System SpecsSystem Spec
11 Jul 2013   #8
VistaKing

Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
 
 

warning   Warning
You will need a USB FLASH DRIVE


Tip   Tip
Download the Tool from a non infected PC


Farbar Recovery Scan Tool

Choose one that goes with your OS bit version . Save the file to a USB Flash drive

32-bit Version OS Farbar Recovery Scan Tool

64-Bit Version OS Farbar Recovery Scan Tool x64


Note   Note
Click the button and right-click Computer .Select Properties . Look for System Type: which will say 32-bit Operating System or 64-bit Operating System


Plug the flash drive into the infected PC.

Enter System Recovery Options.

To enter System Recovery Options from the Advanced Boot Options:
Restart the computer.
As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
Use the arrow keys to select Repair Your Computer menu item.
Select US as the keyboard language settings, and then click Next.
Select the operating system you want to repair, and then click Next.
Select your user account an click Next.

To enter System Recovery Options by using Windows installation disc:
Insert the installation disc.
Restart your computer.
If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
Click Repair your computer.
Select US as the keyboard language settings, and then click Next.
Select the operating system you want to repair, and then click Next.
Select your user account and click Next.

On the System Recovery Options menu you will get the following options:
  • Startup Repair
  • System Restore
  • Windows Complete PC Restore
  • Windows Memory Diagnostic Tool
  • Command Prompt

Select Command Prompt

In the command window type X:\FRST.exe (for x64 bit version type X:\FRST64.exe) and press Enter

Note   Note
Replace letter X with the drive letter of your flash drive.


Tip   Tip
Type the commands below to see what your letter is for the USB drive and press ENTER after each command


Code:
Diskpart
List volume
The tool will start to run.
When the tool opens click Yes to disclaimer.
Press Scan button.
FRST will let you know when the scan is complete and has written the FRST.txt to file
Please copy and paste both logs in your reply.(FRST.txt and Addition.txt)

Note   Note
FRST.txt and Addition.txt files will be inside the root of the USB Flash Drive
My System SpecsSystem Spec
11 Jul 2013   #9
tomato500

Windows 7 Professional x64
 
 

Ok, I ran the scan. For some reason there was no "Addition.txt"?


Attached Files
File Type: txt FRST.txt (43.2 KB, 6 views)
My System SpecsSystem Spec
11 Jul 2013   #10
VistaKing

Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
 
 

Open Notepad . Inside Notepad paste the highlighted text inside notepad


start
HKU\UpdatusUser\...\RunOnce: [mctadmin] -
HKU\Melody\...\Run: [swg] - "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
C:\Windows\System32\mctadmin.exe
C:\Users\Melody\jqs.exe
end


Click on File ====> Save As

File Name : Fixlist.txt

Save as type : All Files

Location : USB flash drive

Click on the [Save] button .

Open the FRST tool again inside System Recovey and click on the [Fix] button . Once complete it will create a new log called Fixlog.txt . Upload the new log created in your reply . It should be inside the usb drive .
My System SpecsSystem Spec
Reply

 Windows 7 "Talking" Adware




Thread Tools




Similar help and support threads
Thread Forum
No connection to browser : Adware "generic5,akmv"
I just went through this mess! Internet active but no internet connection through your browser ------------------------------------------------------------------------------------------- When you get the message DO NOT restart your computer before you repair the affected areas. ...
System Security
Changing the "minimize" "maximize" and "close" buttons of a theme
Ok so I'm using a custom visual style made by another user however I don't really like the buttons used that I mentioned above. The creator states it is acceptable to change the theme to however you like as long as you don't redistribute it anywhere. Ok so I opened up the .msstyles file (using...
Customization
BSOD every few hours: mostly "STOP: 0x00000F4", "c00021a" & "c0000135"
Hi everyone! Yesterday my HP laptop (Windows 7) started getting BSOD with various types of errors (mostly "STOP: 0x00000F4", "STOP: 0x0000007A", "c00021a" and one "missing %hs, c0000135"). Most of the time it restarts without any issues and works fine right after the BSOD and then an hour or two...
BSOD Help and Support
Need to add "TASKBARS" (MSese for "Launchpads", "Docks" NOT "Toolbars"
My office just upgraded, and I can no longer use Windows XP. On this system, I was able to add a separate taskbar to facilitate quick access to commonly-browsed folder locations on our vast network, and another one expedited the launching of useful programs and lists. Each task on each taskbar...
General Discussion
Security Essentials can't remove/quarantine "Adware:Win32/FastSaveApp"
Hi there Each time I switch on my PC Security Essentials flags up an medium alert (status active) concerning a detected item - "Adware:Win32/FastSaveApp". I've applied the action "Quarantine" and "Remove", each time Security Essentials completes the operation and tells me to restart my PC. ...
System Security
"dependency chain" "windows 7" internet "windows explorer"
"dependency chain" "windows 7" internet "windows explorer" At the time of this writing, this search in Google will produce one result at best. Am I searching the wrong things? I have tried a couple handfuls of variants, and I am coming up with zilch. Though I am fairly well versed in...
System Security


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 01:22.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App