View original (French)

Web page opens by itself with ads

Solved
Yohann38 -  
Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   -
Hello, for some time now I have had web pages opening on my internet browser (Mozilla Firefox and Chrome). I uninstalled Chrome where the ad pages appeared, but once Chrome was uninstalled, the ad pages opened on Mozilla. To test it, I uninstalled Mozilla and the ad pages opened on Microsoft Edge. These ads pop up while I'm playing and are very annoying. Please help me (I am on Windows 10).

2 answers

  1.
    Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 712
     
    Hello,

    Start with a FRST analysis:

    Follow the FRST tutorial. ( take the time to read carefully - everything is well explained ).

    Download and run the FRST scan,
    Wait for the scan to finish, a message will indicate that the analysis is complete.

    Three FRST reports will be generated:
    • FRST.txt
    • Shortcut.txt
    • Additionnal.txt


    Send these 3 reports to the site https://pjjoint.malekal.com/ to share them.
    In return, give the 3 pjjoint links leading to the reports here in a new response so that we can consult them.

    --
    Please press a key to continue the disinfecting process...
    0
    1. Yohann38
       
      Here are the results =
      FRST- https://pjjoint.malekal.com/files.php?id=FRST_20171210_w12f10g5t7q11
      Addition- https://pjjoint.malekal.com/files.php?id=20171210_l14j14j8u15z7
      ShortCut- https://pjjoint.malekal.com/files.php?id=20171210_l14j14j8u15z7
      0
      1. Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 712 > Yohann38
         
        You have programs that were installed when you purchased the computer or installed later that are not necessarily useful.
        They clutter Windows and can slow it down.
        You can therefore uninstall them.
        Go to the Control Panel
        then Programs and Features.
        Uninstall:

        CCleaner
        Java
        MEGAsync (unless you sync with it)


        PS: CCleaner is not really useful, even though it is recommended everywhere.
        Disable CCleaner's monitoring, which is unnecessary; it starts up with Windows and slows it down with its incessant cleanings. See: https://www.malekal.com/supprimer-ccleaner-demarrage-windows/


        Here is the correction to be made with FRST. You can use this explanatory note with screenshots.
        Restart FRST and then on your keyboard press the CTRL + Y keys.
        The notepad will open, copy/paste this. 

        CreateRestorePoint:
        CloseProcesses:
        Task: {B2349719-A2F5-42EE-8FBC-98495EC59F9D} - System32\Tasks\1bl0gcomazps => "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" 1bl0g.com/azps <==== ATTENTION
         2017-11-27 12:26 - 2017-11-27 18:02 - 3063259447 _____ C:\Users\Yohann\Downloads\PAYDAY.2.Ultimate.Edition.Incl.DLCs.Cracked-3DM.rar 
         2017-11-27 12:20 - 2017-11-27 12:25 - 000000000 ____D C:\Users\Yohann\Downloads\3DMGAME-PAYDAY.2.Ultimate.Edition.Incl.DLCs.Cracked-3DM 
         2017-11-27 12:18 - 2017-11-27 12:18 - 000128779 _____ C:\Users\Yohann\Downloads\PAYDAY.2.Ultimate.Edition.Incl.DLCs.Cracked-3DM.torrent 
         2017-11-27 12:15 - 2017-11-27 12:15 - 000000000 ____D C:\Program Files (x86)\3dm_game_files 
         2017-11-27 12:08 - 2017-11-27 12:08 - 000583651 _____ C:\Users\Yohann\Downloads\PayD2_pfr.rar 
         2017-11-27 11:52 - 2017-11-30 17:26 - 000000000 ____D C:\Users\Yohann\AppData\Local\PAYDAY 2 
         2017-11-23 12:26 - 2017-11-27 12:19 - 000000000 ____D C:\Users\Yohann\Downloads\3DMGAME-PAYDAY.2.Ultimate.Edition.v1.82.445.Incl.DLCs.Cracked-3DM 
         2017-11-23 12:25 - 2017-11-23 12:25 - 000139551 _____ C:\Users\Yohann\Downloads\PAYDAY.2.Ultimate.Edition.v1.82.445.Incl.DLCs.torrent 
        EmptyTemp:
        RemoveProxy:
        Reboot:


        Save the content from the file menu then save.

        Close the notepad, return to FRST and click the "Fix" button.
        A restart may be necessary and automatic.
        A text file will appear; copy/paste the content here in a new message.

        Restart the computer.
        0
    2. Yohann38
       
      Thank you very much, it's been 8 hours that my computer has been on and I haven't seen any ads, thanks again.
      0
      1. Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 712 > Yohann38
         
        You're welcome =)


        Delete the folder C:\FRST


        Finish with a cleanup using Malwarebytes - Malwarebytes Anti-Malware free version tutorial
        Avoid regular scans and cleanups with ZHPCleaner, AdwCleaner, not useful.

        A few tips:

        To avoid getting caught again.
        To read - Potentially Unwanted Programs (PUPs): Adwares/PUPs file: unwanted and parasitic programs
        (Especially enable LPI detections to spot unwanted and adware programs)
        0
  2. GeekQuinsy Posted messages 97 Status Member 33
     
    I then invite you to run an analysis with AdwCleaner to remove adware.

    The link is below:

    https://fr.malwarebytes.com/adwcleaner/

    If the problem persists, you might as well take the free version of MalwareBytes and if the problem is resolved, uninstall MalwareBytes.

    Best regards:

    Quinsy.
    0