At firsrt I was just ignoreing the green words that kept appearing in just about anything I opened to read on the internet. Often there will be several green words in each paragraph. If I click on a word it brings up an add that has nothing to do with what I am reading. There is no pattern to what words are green. Example. “Major” brings up an add for a University and play games. Since it was appearing on my Paint Shop Pro forum also I wrote and asked if anyone else was getting it. Only one person said she was, out of a dozen that answered me. Some said that I may have a Malware or Virus. So I ran my Malware program through and it said no Malware. I then ran avast through and it said no virus. Can anyone explain what is causing this. Thanks
Hello
yes you are infected with a rogue
does this
http://www.malwarebytes.org/
you then you install the updates and then you start a complete scan when done you delete everything and you post me the report obtained
Thank you
I just downloaded the Malware AntiMalware but that’s the same as what I have and updated and ran yesterday and it said no Malware. But read on. About a week ago I ran the Malware and it brought up five problems as follows. Trojan Dropper, Trojan Dropper, Adware.Game…, Rogue.Antivirus, Rogue. Antivirus. I put all of them in quarantine and have left them there. Is this having anything to do with my problem? Should I go ahead and run Malware AntiMalware again.
yes I think you’re still infected
therefore malwarebytes again and this also
http://eric.71.mespages.googlepages.com/ToolBarSD.exe
starts to search you and you post me the report before cleaning
Thank you
I ran Malware again and it still comes up No malicious found. I tried running the other thing you gave me but it only comes up with a small blue box with languages and I can’t select anything. There’s a blinking cursor but I don’t know what to type. What about the Rogue antivirus items in avast that I have in quarantine do they just stay there?
The files “in Chest” are actually stored in a encrypted form inside of the avast! installation directory.
Leave them in the chest (they can’t do any harm there) for a week or two so as to ensure that there are no harmful effects from them having been moved there (incorrect detection, etc.). This gives you time to investigate if at all possible (google search, ask here, etc.) to confirm. So, there is no rush to delete anything from the chest, it’s a protected area where infections can do no harm. Anything that you send to the chest you should leave there for a few weeks. If after that time you have suffered no adverse effects from moving these to the chest, scan them again (inside the chest) and if they are still detected as viruses, delete them. This is a precaution because:
a) system files (necessary to boot and use the computer)
b) false positives (clean files that was wrong detected as being infected) could happen from time to time and it’s safer not to delete the file, but send them to Chest for further analysis.
It was suggested that I have Spyware so I ran Spybot and it came up clean. I contacted my internet provider, Road Runner, and they were no help but suggested that I contact avast tech support. Does anyone have a number for them. Thanks
Type a capital “E” (assuming you want the results in English)then “enter” and at the next prompt, type the appropriate number (1) then “enter”.
The limited GUI works a bit like a command prompt.
Copy and paste the log to your next post.
If you are using Avast Pro, raise a support ticket online.
If you are using Avast Home, you’re at the tech support, right here.
I have Pro. I don’t follow, “raise a support ticket online.”
I ran the ToolBarSD.exe but I can’t copy it. Copy is grayed out. Only paste is there. I just clicked on paste but it’s something else.
I think I got it.
-----------\ ToolBar S&D 1.2.8 XP/Vista
Microsoft Windows XP Home Edition ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Core™2 Duo CPU E4500 @ 2.20GHz )
BIOS : Default System BIOS
USER : user ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1335 [VPS 090821-0] 4.8.1335 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:74 Go (Free:34 Go)
D:\ (CD or DVD)
E:\ (USB)
“C:\ToolBar SD” ( MAJ : 21-12-2008|20:47 )
Option : [1] ( Fri 08/21/2009|23:06 )
-----------\ Searching for Files - Folders …
C:\Program Files\AskBarDis
C:\Program Files\AskBarDis\bar
C:\Program Files\AskBarDis\unins000.dat
C:\Program Files\AskBarDis\unins000.exe
C:\Program Files\AskBarDis\bar\bin
C:\Program Files\AskBarDis\bar\Cache
C:\Program Files\AskBarDis\bar\History
C:\Program Files\AskBarDis\bar\Settings
C:\Program Files\AskBarDis\bar\bin\askBar.dll
C:\Program Files\AskBarDis\bar\bin\askPopStp.dll
C:\Program Files\AskBarDis\bar\bin\psvince.dll
C:\Program Files\AskBarDis\bar\Cache\0095DF5E
C:\Program Files\AskBarDis\bar\Cache\0095E114
C:\Program Files\AskBarDis\bar\Cache\0095E23D.bin
C:\Program Files\AskBarDis\bar\Cache\0095E385.bin
C:\Program Files\AskBarDis\bar\Cache\0095E5C7.bin
C:\Program Files\AskBarDis\bar\Cache\0095E75D.bin
C:\Program Files\AskBarDis\bar\Cache\0095E886.bin
C:\Program Files\AskBarDis\bar\Cache\0095E942.bin
C:\Program Files\AskBarDis\bar\Cache\files.ini
C:\Program Files\AskBarDis\bar\History\search
C:\Program Files\AskBarDis\bar\Settings\config.dat
C:\Program Files\AskBarDis\bar\Settings\config.dat.bak
C:\Program Files\AskBarDis\bar\Settings\prevcfg.htm
-----------\ Extensions
(user) - {E9A1DEE0-C623-4439-8932-001E7D17607D} => ajtoolbar
-----------\ […\Internet Explorer\Main]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
“Local Page”=“C:\WINDOWS\system32\blank.htm”
“Start Page”=“http://www.yahoo.com/?fr=fp-yie8”
“Search Page”=“http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch”
“Default_Page_URL”=“http://www.yahoo.com/?fr=fp-yie8”
“Url”=“http://go.microsoft.com/fwlink/?LinkId=68929”
“Url”=“http://go.microsoft.com/fwlink/?LinkId=68928”
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
“Default_Page_URL”=“http://go.microsoft.com/fwlink/?LinkId=69157”
“Default_Search_URL”=“http://go.microsoft.com/fwlink/?LinkId=54896”
“Search Page”=“http://go.microsoft.com/fwlink/?LinkId=54896”
“Local Page”=“C:\WINDOWS\system32\blank.htm”
“Start Page”=“http://go.microsoft.com/fwlink/?LinkId=69157”
--------------------\ Searching for other infections
No other infections found !
1 - “C:\ToolBar SD\TB_1.txt” - Fri 08/21/2009|23:07 - Option : [1]
-----------\ Scan completed at 23:07:57.39
chosen cleaning
What does choosen cleaning mean?
I’m sorry to be beating this horse to death but after exausting every thing else and all the good advise you all have offered I have tried to get to avast tech support. I have 4.8 pro. I typed in www.support@avast.com and it says it can’t locate it. I double checked the typing and tried again and again with no luck. I did a search and came up with avast 4.8 tech support and a 800 phone number. Calling them they say I am not a member. (a member of what?) I’ve been using avast for over a year. Then they say they are not tech support for avast although it says “avast tech support.” They told me to go to Freedownloadzone.com and sign up. That is just ordering games and other stuff. What do I have to become a member of? Very frustrating. I guess since I’ve exhusted all other meens of finding out what is causing these green words which no one else has ever had I’ll have to take the computer to a shop and see if they can figure it out, ($60.00 an hour), unless it appears that this stuff is not going to harm my computer in anyway. Thanks for all the help attempts.
just visit this site. it’ll tell you what to do.
On This page there are the various valid email addresses for contact, also.
The page linked to above by nmb contains all the info for raising a support ticket. You may have to register first.
Sorry, I don’t know what “chosen cleaning” means in the context used. I thought, since the user suggested it, he would be able to suggest what to clean and how.
That may still happen.