+ Post New Thread
Results 1 to 8 of 8
Windows Thread, Random Ads Playing in Background in Technical; A staff member brought her laptop in with an unusual problem that I have never come across. It randomly plays ...
  1. #1
    Zoom7000's Avatar
    Join Date
    Feb 2006
    Location
    London
    Posts
    988
    Thank Post
    342
    Thanked 93 Times in 62 Posts
    Rep Power
    34

    Random Ads Playing in Background

    A staff member brought her laptop in with an unusual problem that I have never come across. It randomly plays audio adverts in the background at random intervals and sometimes plays them for a few seconds up to a minute or so in length. I've had a look in Task Manager and there are 2 unexplained processes for IEXPLORE.EXE running. Everytime I manually close them, they start up again.

    I have run a full MSE scan, a full MRT scan and a full Malwarebytes scan and everything has shown up as clean with no infections.

    MSCONFIG is looking fine and nothing in the Startup folder or Scheduled Tasks.

    Any ideas how to remove these annoying ads?

  2. #2
    Dom_'s Avatar
    Join Date
    Dec 2008
    Posts
    1,011
    Thank Post
    151
    Thanked 138 Times in 115 Posts
    Rep Power
    57
    Tried hijackthis?

  3. #3
    gtg93's Avatar
    Join Date
    May 2010
    Posts
    363
    Thank Post
    226
    Thanked 46 Times in 38 Posts
    Rep Power
    17
    Seen this problem a few times... Spybot or Combofix usually sort it.

  4. #4

    nephilim's Avatar
    Join Date
    Nov 2008
    Location
    Dunstable
    Posts
    12,441
    Thank Post
    1,682
    Thanked 2,041 Times in 1,485 Posts
    Blog Entries
    2
    Rep Power
    461
    spybot does the job on this, basically she inadvertently installed malware

  5. #5

    Join Date
    Oct 2009
    Location
    The Netherlands
    Posts
    83
    Thank Post
    1
    Thanked 16 Times in 13 Posts
    Rep Power
    13
    Malwarebytes full scan and superantispyware full scan, never failed on me to clean an infected machine.

  6. #6

    Join Date
    Dec 2007
    Location
    cumbria
    Posts
    182
    Thank Post
    7
    Thanked 43 Times in 39 Posts
    Rep Power
    26
    autoruns from sysinternals - will usually find just about anything dubious.

  7. #7

    powdarrmonkey's Avatar
    Join Date
    Feb 2008
    Location
    Alcester, Warwickshire
    Posts
    4,867
    Thank Post
    412
    Thanked 778 Times in 651 Posts
    Rep Power
    182
    Don't trust the machine. Always reinstall from known good media, rescuing only what files you absolutely have to.

  8. #8
    Duke5A's Avatar
    Join Date
    Jul 2010
    Posts
    842
    Thank Post
    87
    Thanked 144 Times in 122 Posts
    Blog Entries
    8
    Rep Power
    34
    I cleaned this a few weeks ago off of a friend's machine. Had the exact same problem, spawning a pair of IE processes and playing audio advertisements in the background without them actually being visible. Someone is trying to run up their click-count on web ads.

    I made a couple of passes, first was a MalwareBytes scan booted from a BartPE disc, then with Security Essentials, and finally ComboFix. The first two methods, while finding a lot and removing it, don't seem to be able to deal with root kits all that well. ComboFix dealt with the ever spawning IE processes.



SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 4
    Last Post: 15th November 2010, 11:52 AM
  2. Random Website: Random.ORG
    By DaveP in forum Links
    Replies: 0
    Last Post: 20th March 2010, 09:05 AM
  3. New ads
    By Dos_Box in forum General EduGeek News/Announcements
    Replies: 0
    Last Post: 31st March 2009, 11:59 PM
  4. ADS on Edugeek
    By ahuxham in forum General Chat
    Replies: 3
    Last Post: 26th September 2008, 12:12 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •