Pop up ad by Inu Media-How to Remove.

Thread Status:
Not open for further replies.
  1. Pancake

    Pancake Well-Known Member

    Joined:
    Jun 1, 2006
    Posts:
    4,104
    Likes Received:
    12
    Location:
    Victoria, Australia
    Local time:
    09:16
    My System
    Loading...

    Just go with my post .Don't worry about OTL
  2. jocaan

    jocaan New Member Bronze Member

    Joined:
    Jan 3, 2014
    Posts:
    16
    Likes Received:
    0
    Local time:
    19:16
    My System
    Loading...

    I ran all the tests and posted them but now I cannot find them on this page. Did you receive my previous downloads?
  3. Pancake

    Pancake Well-Known Member

    Joined:
    Jun 1, 2006
    Posts:
    4,104
    Likes Received:
    12
    Location:
    Victoria, Australia
    Local time:
    09:16
    My System
    Loading...

    Just carry out the instructions in post #14 now please.
  4. jocaan

    jocaan New Member Bronze Member

    Joined:
    Jan 3, 2014
    Posts:
    16
    Likes Received:
    0
    Local time:
    19:16
    My System
    Loading...

    Here are the other two files requested. I think these are all that are wanted. If there is anything else let me know.
    Thanks.

    Attached Files:

  5. Pancake

    Pancake Well-Known Member

    Joined:
    Jun 1, 2006
    Posts:
    4,104
    Likes Received:
    12
    Location:
    Victoria, Australia
    Local time:
    09:16
    My System
    Loading...

    How are things now.Still got the popup.?
  6. jocaan

    jocaan New Member Bronze Member

    Joined:
    Jan 3, 2014
    Posts:
    16
    Likes Received:
    0
    Local time:
    19:16
    My System
    Loading...

    Things are looking pretty good. One time there was an overlay pop up where I entered the zip code for the weather page on my home page but in many succeeding attempts I could not duplicate it again. There are ads that show up, even the one that asks me to install Media Player HD but even that one did not show up after a few more attempts. Now others show up but that is OK, they are in a proper place and do not interfere with anything on the page so I can ignore them simply by not looking at them. Most of all the rectangular pop ups on the weather page which interfered with seeing the page are completely gone. Also which is a very good thing there is no obnoxious, loud Ad audio playing, everything is silent.
    One thing that is still consistent is that most of the time if I click a blank spot on the Excite home page I immediately go to a blank white page and a tab actually shows up on top by the menu saying it is a blank page. The blank page also shows up when I type in the Zip Code for Weather or click on Submit for the weather after typing in the zip code. Once I enter the zip code when I close the blank page and press Submit I get another blank white page, I then again close the Blank Page tab and there is my Weather page showing up right after I close the Blank Page tab.
    Every time I open my Excite IE home page or go back to it I get a pop up at the bottom of the screen saying: Protected Mode is turned off for the Internet and Restricted Sites zones. So I do not know if I should OK this message to turn on Protected Mode.
    But everything else is working far better so I consider that to be great progress so far.
    It is much appreciated.
    Frank
  7. Evan Omo

    Evan Omo Computer Support Technician Tech Member Elite Member

    Joined:
    May 13, 2013
    Posts:
    3,665
    Likes Received:
    660
    Location:
    Walnut Creek, California, United States
    Local time:
    16:16
    My System
    Loading...

    You should turn on Protected Mode if it is disabled. To do this open IE and click Tools< Internet Options< Security Tab. On both the Internet and Restricted Sites zones click the checkbox the says Enable Protected Mode and then click Ok to save the changes. Restart IE for the changes to take effect.
  8. jocaan

    jocaan New Member Bronze Member

    Joined:
    Jan 3, 2014
    Posts:
    16
    Likes Received:
    0
    Local time:
    19:16
    My System
    Loading...

    .........................................................................................................................................................................................
    OK, I turned on Protected Mode on both. The computer was shut off a few times before I did this.
    Anyway, when I just turned on IE before I changed the Protected Mode the problems came back. The diaphanous screen is in front of the Zip Code box again and the two rectangular pop ups one on either side of the page is back on the Weather Page which does not allow me to see the icons and maps properly. If I scroll the Weather Page up or down the two rectangular panels do not move but stay stable on the screen
  9. jocaan

    jocaan New Member Bronze Member

    Joined:
    Jan 3, 2014
    Posts:
    16
    Likes Received:
    0
    Local time:
    19:16
    My System
    Loading...

    Just thought I'd run AdwCleaner again. The only thing it shows to clean is not in the browsers but in the Registry.

    Attached Files:

  10. Pancake

    Pancake Well-Known Member

    Joined:
    Jun 1, 2006
    Posts:
    4,104
    Likes Received:
    12
    Location:
    Victoria, Australia
    Local time:
    09:16
    My System
    Loading...

    Looks as if it is no longer a malware problem but more of a setup one.
  11. Evan Omo

    Evan Omo Computer Support Technician Tech Member Elite Member

    Joined:
    May 13, 2013
    Posts:
    3,665
    Likes Received:
    660
    Location:
    Walnut Creek, California, United States
    Local time:
    16:16
    My System
    Loading...

    Can you post a screenshot of the advertisement that comes up?
  12. Malnutrition

    Malnutrition Member

    Joined:
    Nov 14, 2011
    Posts:
    3,780
    Likes Received:
    832
    Local time:
    20:16
    My System
    Loading...

    Please hit the start button and type or copy and paste Programs and Features in the start search box.

    Then right click and un install the following:
    Spybot - Search & Destroy


    Then lets remove some redundant files with OTL please.


    Right Click on OTL icon on your desktop and Run as Administrator.
    Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL

    Code:
    
    :otl
    
    
    
    MOD - [2013/12/06 14:01:15 | 000,137,216 | ---- | M] () -- C:\Program Files (x86)\Re-Markable\136.dll
    IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
    IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
    O2 - BHO: (Re-Markable) - {fa6f8ac8-dcd2-44a4-b7a9-40bc57c0cefd} - C:\Program Files (x86)\Re-Markable\136.dll ()
    O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
    O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found
    O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
    O18:[b]64bit:[/b] - Protocol\Handler\belarc - No CLSID value found
    O18:[b]64bit:[/b] - Protocol\Handler\gopher - No CLSID value found
    O18:[b]64bit:[/b] - Protocol\Handler\livecall - No CLSID value found
    O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
    O18:[b]64bit:[/b] - Protocol\Handler\ms-itss - No CLSID value found
    O18:[b]64bit:[/b] - Protocol\Handler\msnim - No CLSID value found
    O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap11 - No CLSID value found
    O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml - No CLSID value found
    [2011/06/13 13:13:34 | 000,000,000 | ---D | M] -- C:\Users\temp\AppData\Roaming\FixCleaner
    [2011/06/13 13:13:34 | 000,000,000 | ---D | M] -- C:\Users\Default\AppData\Roaming\FixCleaner
    [2011/06/13 13:13:34 | 000,000,000 | ---D | M] -- C:\Users\Default User\AppData\Roaming\FixCleaner
    @Alternate Data Stream - 120 bytes -> C:\ProgramData\TEMP:93E9C78D
    @Alternate Data Stream - 115 bytes -> C:\ProgramData\TEMP:D158BAF9
    
    
    :files
    
    C:\Program Files (x86)\Re-Markable\136.dll
    C:\Users\temp\AppData\Roaming\FixCleaner
    C:\Users\Default\AppData\Roaming\FixCleaner
    C:\Users\Default User\AppData\Roaming\FixCleaner
    C:\Program Files (x86)\AVG
    C:\Program Files (x86)\Emsisoft Anti-Malware
    C:\Program Files (x86)\Sophos
    
    
    :commands
    [resethosts]
    [emptytemp]
    [emptyflash]
    [emptyjava]
    [reboot]

    • Then click the Run Fix button at the top
    • Let the program run unhindered, reboot when it is done
    • Attach the new log produced by OTL (C:\_OTL).






    Please download Junkware Removal Tool and save it on your desktop.
    • Shut down your anti-virus, anti-spyware, and firewall software now to avoid potential conflicts.
    • Run the tool by double-clicking it. If you are using Windows Vista or Windows 7, right-click it and select Run as administrator.
    • The tool will open and start scanning your system.
    • Please be patient as this can take a while to complete depending on your system's specifications.
    • On completion, a log is saved to your desktop and will automatically open.
    • Please attach the JRT log file.
  13. Malnutrition

    Malnutrition Member

    Joined:
    Nov 14, 2011
    Posts:
    3,780
    Likes Received:
    832
    Local time:
    20:16
    My System
    Loading...

    Please Attach the log you can do that by hitting the uplaod a file button next to post reply. :mrgreen:
  14. jocaan

    jocaan New Member Bronze Member

    Joined:
    Jan 3, 2014
    Posts:
    16
    Likes Received:
    0
    Local time:
    19:16
    My System
    Loading...

    Spybot is removed. Here are the two files.

    Attached Files:

  15. Malnutrition

    Malnutrition Member

    Joined:
    Nov 14, 2011
    Posts:
    3,780
    Likes Received:
    832
    Local time:
    20:16
    My System
    Loading...

    Step 1:

    Download Zoek (By Smeenk) and save that file to your Desktop.
    http://www.hijackthi...220813/zoek.zip

    Disable your antivirus prior to running this scan.

    Double click zip file and extract to your Desktop:

    Copy the lines inside CodeBox
    Code:
    emptyclsid;
    firefoxlook;
    FFdefaults;
    Chromelook;
    CHRdefaults;
    autoclean;
    iedefaults;
    Right click on any white part of Zoek and select the paste option.

    Click the button [Run Script]

    The program will most likely request a reboot please do so.

    Wait for the scan. At the end of the report will be generated C: \ zoek-results.txt



    Step 2:

    Lets run a scan with Eset to mop up the remnants
    : Note you must disable your antivirus prior to running this scan.
    • Hold down Control and click on the following link to open ESET OnlineScan in a new window.
      ESET OnlineScan
    • Click the [​IMG] button.
    • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
      • Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer.
        Save it to your Desktop.
      • Double click on the [​IMG] to download the ESET Smart Installer. icon on your Desktop.
    • Check "YES, I accept the Terms of Use."
    • Click the Start button.
    • Accept any security warnings from your browser.
    • Under Scan Settings, check "Scan Archives" and Remove Found Threats
    • Click Advanced settingsand select the following:
      • Scan potentially unwanted applications
      • Scan for potentially unsafe applications
      • Enable Anti-Stealth technology
    • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
    • When the scan completes, click List Threats
    • Click Export, and save the file to your desktop using a unique name, such as ESET Scan. Include the contents of this report in your next reply.
    • Click the Back button.
    • Click the Finish button.


    Things I would like from you in the next reply.

    Zoek Log
    Eset Log
    Tell me if you have anymore issues so we can address them.
Similar Threads
Forum Title Date
System Security Snap.do impossible to remove Mar 18, 2014
System Security Help please. Can't remove Malware Feb 22, 2014
System Security How to remove ShopGlider Deals in chrome? Feb 13, 2014
System Security onclicksad, where to find it and how to remove it Dec 20, 2013

Thread Status:
Not open for further replies.