Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: ads

24 Aug 2013   #1

Windows 7 Home Premium 64bit (Service Pack 1) ads

For about three weeks, I've noticed junky-looking ads on a few sites that I've often used in the past. At first, the most frequent ones claimed that my computer is slow and that my flash/media player needed updating. They have since stopped, but others have taken their place, such as "weight loss breakthrough" and "buy a piece of Google/Apple/Facebook". When I move my cursor over these ads, the address starts with The majority of sites that I visit don't have these ads, which is what makes me curious.

Has anyone else using Firefox seen these ads recently? Should I be worried? Neither Avira nor Malwarebytes detects anything wrong.

My System SpecsSystem Spec
25 Aug 2013   #2

Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit

ThisIsMadness91 , lets try these programs and see what it finds


Click here AdwCleaner

Click on Download Now button

Save to the Desktop

Right-click on AdwCleaner.exe and choose

Click the Scan button then click on Clean

Upload the AdwCleaner[Rn].txt in your reply.

Note   Note
The log file is at C:\AdwCleaner

Junkware Removal Toolkit

Click here Junkware Removal Tool to download

Drag the JRT.exe from the Downloads folder to your Desktop

Right click JRT.exe and choose

Once done upload the JRT.txt file
My System SpecsSystem Spec
25 Aug 2013   #3

Windows 7 Home Premium 64bit (Service Pack 1)

Hi, VistaKing. I ran AdwCleaner recently and got rid of a few things, but it didn't have any effect on the ads. I'll run the JRT later and upload the file.
My System SpecsSystem Spec

25 Aug 2013   #4

Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit

Ok then run

Farbar Recovery Scan Tool

Farbar Recovery Scan Tool <===== Download Link

Pick the one that ones with your OS BIT version

Drag the .exe file from the Downloads folder to your Desktop

Right click on FRST executable and choose

When the tool opens click Yes on the disclaimer window .

Press Scan button.

FRST will let you know when the scan is complete and has written the FRST.txt to file

Note   Note
The first time Farbar Recovery Scan Tool is run, it makes also another log Addition.txt

Please upload both logs in your reply.(FRST.txt and Addition.txt)

FRST.txt and Addition.txt will be on the Desktop

Upload a File
Click on the Go Advanced button under the Message box . Scroll down to Additional Options then click on Manage Attachments in the Attach Files sections . Click the Browse button locate the file then click on the Open button . In the Upload File from your Computer section click on the Upload button . Wait until it finishes uploading then close the window . Then click Submit Reply .
My System SpecsSystem Spec
25 Aug 2013   #5

Windows 7 Home Premium 64bit (Service Pack 1)

I was about to run the JRT, but it looks VistaKing has been banned. Should I still go through with it, or wait for someone else to provide assistance?
My System SpecsSystem Spec
26 Aug 2013   #6

Windows 7 Home Premium 64bit (Service Pack 1)

I decided to run JRT on my laptop first so that I could see it in action before running it on my desktop, and it deleted a folder at C:\ProgramData\Partner. Is it okay for this folder to be deleted? I didn't realise JRT would automatically remove any detections, since AdwCleaner lets you choose what to remove.
My System SpecsSystem Spec
26 Aug 2013   #7

Linux Mint 15 "Olivia" x32

Sorry about the confusion, Vistakings Post is completely safe to do, I'll help you thru this now, if you have any questions, just ask. Check your Add-Ons in forefox and make sure there's nothing fishy in there
My System SpecsSystem Spec
26 Aug 2013   #8

Linux Mint 15 "Olivia" x32

Then, download IOBit Toolbox and run IOBit Uninstaller. (DO NOT use the registry scanner (Use CCleaner if you must do this) OR the security holes scanner(just do windows updates) in this toolbox.)

Go thru your programs in your computer from here and uninstall any suspicious toolbars or programs you have no idea what they do since they could be potentially malicious.

if you are unsure about one, go to the default windows Unsinstallation program, click on the program you are not sure about, and use the windows "Snipping tool"(it says vista but works for 7) to upload a picture of the window so i can verify whether you should remove or keep the program.

Then, click the start orb and type in "msconfig" (without the quotes, of course) in the search bar and press enter. Click the Startup tab on the Top and verify that no unwanted programs are started with windows.( if you want to disable something your not sure about, again, just ask)

Also, please provide me with the sites you are talking about so I can vrify if i see the Ad's or not Also :)
My System SpecsSystem Spec
26 Aug 2013   #9

Windows 7 Home Premium


The following provides information on the C:\ProgramData\Partner folder you questioned:
SystemLookup - 83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4

See if resetting FireFox back to its defaults takes care of the: ads
Restart the computer when done.

Also, please proceed with the following (Post #4):

Download the Farbar Recovery Scan Tool
Select the version that applies to the system.

Save to the Desktop.
  • Double-click the downloaded file to run it.
  • When the tool opens click Yes to disclaimer.
  • Press the Scan button.
  • FRST64 makes a log (FRST.txt) in the same directory from which the tool is run (Desktop).
Please provide the FRST.txt in your reply.
The first time the tool is run, it also makes another log: Addition.txt
Also post the Addition.txt in your reply. It will present a list of the programs that are installed on your computer, and any undesirables can be identified.
My System SpecsSystem Spec
27 Aug 2013   #10

Windows 7 Home Premium


Thanks for the info!

Pressing on with FRST...

Please open Notepad (Start > All Programs > Accessories > Notepad)
Copy the entire contents of the code box below
Save it on the Desktop, and name it: fixlist.txt

AlternateDataStreams: C:\ProgramData\Temp:DED17083
This script is written specifically for use only on this computer.
Running this on another computer may cause damage to the Operating System!!

Run FRST, and press the Fix button, just once, and wait.

The tool creates a report on the Desktop called: Fixlog.txt
Please post the Fixlog.txt in your reply.

Next, follow up with Malwarebytes Anti-Malware:
Save to the Desktop

Right-click the downloaded MBAM file, and select: Run as Administrator
When the installation begins, follow the prompts in the setup process.

DO NOT make any changes to default settings and when the program has finished installing, but, make sure only the Update Malwarebytes’ Anti-Malware and Launch Malwarebytes’ Anti-Malware options are checked.

Uncheck: Enable free trial of Malwarebytes Anti-Malware PRO
Click on the Finish button.

If an update is found, the program automatically updates itself.
At the program console, on the Scanner tab, and select: Perform Full Scan
When the Select the Drives to scan appears, make sure all drives (except CD-Rom, DVD) are selected.
Next, click on the Scan button.

When the Malwarebytes scan is completed, click on: Show Results
When presented with a screen showing the malware detected, make sure everything is Checked, and click on: Remove Selected

When removal is completed, a report opens in Notepad.
Please copy/paste the entire contents of the MBAM report in your reply

Also, please press on with resetting FireFox, use it and check things out, then, post back as to whether those blankity-blank ads returned.
My System SpecsSystem Spec
Reply ads

Thread Tools

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 04:39.
Twitter Facebook Google+