How so I remove AdChoices?

[LiquidTension]

Hi Gary,

The ads are native to the sites you're visiting.
I've just visited the site from the image you posted earlier. With my AdBlocker disabled and third party cookies enabled, I also saw the AdChoices ad.

--------------------------

Please ensure you complete each step, and in the order specified.

Install SpywareBlaster to block Doubleclick
https://www.brightfort.com/spywareblaster.html
Update the programme and enable all protection.


CCleaner

• Open CCleaner and click Options.
• Click Settings. Ensure Run CCleaner when the computer starts is unchecked.
• Click Monitoring. Ensure Enable system monitoring is unchecked.
• Click Cookies. In the left column, scroll through the list and check for sites you regularly visit/recognise.
• Click these sites followed by -> to move the site into the right column.
• Click Cleaner. Under Internet Explorer, ensure all options excluding Saved Passwords are checked.
• Click Applications. Under Chrome, ensure all options excluding the last three are checked.
• Click Run Cleaner.
• Close the programme upon completion.

Install AdBlock
https://adblockplus.org/
Close and reopen Chrome after installation.


Chrome Settings

• Open Chrome and type chrome://settings/ in the URL bar.
• Scroll down and click Show advanced settings....
• Under Privacy, click Content Settings.
• Place a checkmark next to Block third-part cookies and site data. Leave Allow local data to be set (recommended) checked.
• Click Done.

[captngaryr]

YES!!!!!!!!!!!!!!!! Adam, you are tenacious and amazing! THANK YOU! THANK YOU! THANK YOU!

No wonder we couldn't get it off my machine! It wasn't on it! The solution works on both machines.

All the best,
Gary

[captngaryr]

I made a donation for your efforts.
Gary

[Juliet]

I think he did an amazing job too!

[LiquidTension]

HI Gary,

I'm pleased to hear.

The solution works on both machines.

Your other machine is still infected with adware/undesirable software, so if you would like that to be looked at, please create a new topic.

--------------------

Lets update your vulnerable software to reduce the risk of infection.
This is for the machine we've been working on.

STEP 1
Update Outdated Software
Outdated software contain security risks that must be patched. Please download and install the latest version of the programmes below.

• Adobe Air
• Adobe Reader (uncheck the Optional Offer)
• Java (watch out for "Optional Offers" or bundled software)
• Follow these instructions to check for and download the latest Windows Updates.

STEP 2
Remove Outdated Software

• Press the Windows Key + r on your keyboard at the same time. Type appwiz.cpl and click OK.
• Search for the following programmes, right-click and click Uninstall one at a time.
• Note: The programmes below may not be present. If this is the case, please skip to the next step.
  
  
  • Adobe Reader X (10.1.12)
  • Java 7 Update 71
  
  
• Follow the prompts and reboot if necessary.

STEP 3
Disable Java in Your Browser
Due to frequent exploits we recommend you disable Java in your browser.
For information on Java vulnerabilities, please read the following article (point #7).

• Click the Windows Start Button and type Java Control Panel (or javacpl) in the search bar.
• Click on the Java Control Panel. Once opened, click the Security tab.
• Deselect the check box for Enable Java content in the browser. This will disable the Java plug-in in the browser.
• Click Apply. When the Windows User Account Control (UAC) appears, allow permissions to make the changes.
• Click OK in the Java Plug-in confirmation window.
• Restart your browser(s) for changes to take effect.
• More information can be found here and here.

STEP 4
Security Check

• Please download SecurityCheck and save the file to your desktop.
• Double-click SecurityCheck.exe and follow the onscreen instructions inside the black box.
• A log (checkup.txt) will automatically open on your desktop.
• Copy the contents of the log and paste in your next reply.

======================================================

STEP 5
Logs
In your next reply please include the following logs. Please be sure to copy and paste the requested logs, as well as provide information on any questions I may have asked.

• checkup.txt
• How is your computer performing? Are there any outstanding issues?

[captngaryr]

Hi Adam,
For laptop #1
In step 2, I did not remove Adobe Reader X(10.1.12) because I had already updated it to Adobe Reader X1.
In step 3 I could not disable Java because I had already removed it in Step 2.

Here is checkup.txt:

Results of screen317's Security Check version 0.99.91
Windows 7 Service Pack 1 x64 (UAC is enabled)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
Microsoft Security Essentials
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
SpywareBlaster 5.0
Spybot - Search & Destroy
Adobe Reader XI
Google Chrome (39.0.2171.71)
````````Process Check: objlist.exe by Laurent````````
Microsoft Security Essentials MSMpEng.exe
Microsoft Security Essentials msseces.exe
Spybot Teatimer.exe is disabled!
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: 4%
````````````````````End of Log``````````````````````


Best regards,
Gary

[captngaryr]

Hi Adam,
For Laptop 2

Results of screen317's Security Check version 0.99.91
Windows 7 Service Pack 1 x86 (UAC is disabled!)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
Microsoft Security Essentials
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
MVPS Hosts File
SpywareBlaster 5.0
Spybot - Search & Destroy
CCleaner
Java 8 Update 25
Java version 32-bit out of Date!
Adobe Flash Player 14.0.0.145 Flash Player out of Date!
Adobe Reader 9
Adobe Reader XI
Google Chrome 37.0.2062.124 Google Chrome out of date!
````````Process Check: objlist.exe by Laurent````````
Windows Defender MSMpEng.exe
Spybot Teatimer.exe is disabled!
Microsoft Security Client Antimalware MsMpEng.exe
Microsoft Security Client Antimalware NisSrv.exe
Microsoft Security Client Antimalware MpCmdRun.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: 0%
````````````````````End of Log``````````````````````


I got a little confused with the instructions for Laptop #1 but I'm ok now. Java is updated an disabled properly, etc.

Laptop 1 is runnin g fine, but laptop 2 is pretty slow but it's an old Del Inspiron 1501 anyway. I ran Spybot on it. We'll see if it's better and I wil report back.

Best regards,
Gary

[captngaryr]

Laptop #2 seems to be running better as well.
Thanks,
Gary

[LiquidTension]

Hi Gary,

The instructions in my previous post were for laptop #1.
Laptop #2 is still infected. If you wish to clean laptop #2, please create a new topic and provide the requested logs.

----------------

At this point, we should be good to close this one out.


All Clean!
Congratulations, your computer appears clean!
I no longer see signs of malware on your computer, and feel satisfied that our work here is done. The steps below will remove the tools we have used, and reset any settings changed. I have also provided a list of resources and tools that you may find useful.

STEP 1
ComboFix Uninstall

• Press the Windows Key + r on your keyboard at the same time. Type the following text into the Run box:
  
  

  ComboFix /Uninstall

• Click OK.
• Note: It may appear as if Combofix is installing. This is not the case; the programme is uninstalling. Please do not interrupt the process.

STEP 2
DelFix

• Please download DelFix and save the file to your Desktop.
• Double-click DelFix.exe to run the programme.
• Place a checkmark next to the following items:
  
  
  • Activate UAC
  • Remove disinfection tools
  • Create registry backup
  • Purge system restore
  • Reset system settings
  
  
• Click the Run button.

-- This will remove the specialised tools we used to disinfect your system. Any leftover logs, files, folders or tools remaining on your Desktop which were not removed can be deleted manually (right-click the file + delete).

======================================================

Below I have compiled a list of resources you may find useful. The articles document information on computer security, common infection vectors and how you can stay safe on the Internet.

• Answers to common security questions - Best Practices by quietman7, MVP
• How Malware Spreads - How did I get infected? by quietman7, MVP
• Simple and easy ways to keep your computer safe and secure on the Internet by Lawrence Abrams, MVP
• How to Prevent Malware by miekiemoes, MVP
• How to backup and restore your data using Cobian Backup by YourHighness
• Slow Computer/browser? It May Not Be Malware by quietman7, MVP

The following programmes come highly recommended in the security community.

• Malwarebytes Anti-Exploit (MBAE) is designed to prevent zero-day malware from exploiting vulnerable software.
• NoScript is a Firefox add-on that blocks the actions of malicious scripts by using whitelisting and other technology.
• Sandboxie isolates programmes of your choice, preventing files from writing to your HDD unless you approve the file.
• Secuina PSI will scan your computer for vulnerable software that is outdated, and automatically find the latest update for you.
• SpywareBlaster is a form of passive protection, designed to block the actions of malicious websites and tracking cookies.
• Unchecky automatically removes checkmarks for additional software in programme installers, helping you avoid adware and PUPs.
• Web of Trust (WOT) is a browser add-on designed to alert the user before interacting with a potentially malicious website.

-- Please feel free to ask if you have any questions or concerns on computer security or the programmes above.

======================================================

Please confirm you have no outstanding issues, and are happy with the state of your computer. Once I have confirmation things are in order, we can wrap things up and I will close this thread.

Thank you for using Safer Networking.

Safe Surfing,
Adam

[captngaryr]

Hi Adam,
Are the recommended programs compatible with my Microsoft Essentials ans Spybot?
Best regards,
Gary