Can't detect or get rid of...

[maddenman2006]

I have linked photos of possible spyware ads that I receive randomly. When viewing webpages on sites with completely different themes (meaning the spyware isn't just related to certain categories like shopping, porn, etc.), this advertisement pops up about 2-5 seconds after the page loads, blocking the actual webpage. There is a link at the top-right to "skip this advertisement" but it's just really annoying to have it constantly come up. I have scanned with latest version and updates of Spybot as well as Ad-Aware and neither have detected anything. Any ideas of what this is or how to get rid of it?

Here are the screen shots:

[img=http://img230.imagevenue.com/loc250/th_39574_spyware_ad_122_250lo.JPG] (http://img230.imagevenue.com/img.php?image=39574_spyware_ad_122_250lo.JPG)
[img=http://img231.imagevenue.com/loc400/th_39575_spyware_ad_2_122_400lo.JPG] (http://img231.imagevenue.com/img.php?image=39575_spyware_ad_2_122_400lo.JPG)
[img=http://img229.imagevenue.com/loc172/th_39576_spyware_ad_3_122_172lo.JPG] (http://img229.imagevenue.com/img.php?image=39576_spyware_ad_3_122_172lo.JPG)

As you can see from the pictures, the spyware or whatever it is works in both IE and Firefox.

[tashi]

Hello,

It looks like adwords affiliate marketing, annoying for sure.

Please follow the procedure in this link so someone can take a look at a log.
"BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) (http://forums.spybot.info/showthread.php?t=288)

Then start your own thread in the Malware Removal Forum (http://forums.spybot.info/forumdisplay.php?f=22) where a helper will advise you when available.

Cheers.

[maddenman2006]

Tashi, I followed your instructions for BEFORE you POST. I scanned with Kaspersky Online Scanner and it found a few viruses and infected objects. Do you want me to delete those before I post the results of the scan on my new thread along with the HJT log or should I just let them go for now?

[tashi]

Hi there,

Tashi, I followed your instructions for BEFORE you POST. I scanned with Kaspersky Online Scanner and it found a few viruses and infected objects. Do you want me to delete those before I post the results of the scan on my new thread along with the HJT log or should I just let them go for now?

The on-line scanner shouldn't clean, if you have a version that does, please don't delete anything.

The results of the scan allow our helpers to make an analysis, so just go ahead and start your topic.

Cheers. :)

[maddenman2006]

Tashi, I made a new thread in the malware removal forum and tried to include the screenshots from this thread. However, the links don't work and when I copy and paste them into the address bar, the images shown are extremely small. :oops: Is there any way that you can edit this for me as I have already replied once to that post to include my HijackThis log since it was too long. No one has replied yet to help so I don't want to start with more than 2 posts total in my topic before a helper responds. If you could edit that somehow to fix the hyperlinks that would be great. Here's the link to the new thread:

http://forums.spybot.info/showthread.php?p=173506#post173506

[tashi]

Hi there,

I made the links work but no worries, screenshots are not important it's the logs that count. :)

Cheers.

[goinspare]

Have justed posted in the Spybot S&D forum a new thread.. 'Celldorado !"$%^&*()....... '

is this the same problem? .. had it for months ..

dont know if this is relevant .. scanned and cleared everything last night/this morning .. just scanned again and SB shows 'MyWay.MyWebSearch' still there.

thank you

[spybotsandra]

Hello,

Please make sure that you are running the latest version of Spybot - Search & Destroy including the latest updates.

To see which version number and/or updates of Spybot - Search & Destroy you are using please run Spybot-S&D and choose "Help" --> "About" in the menu bar.
There you can see which version you have and which updates are installed.
It should be version 1.5.2 and the updates from the 2008/04/09.

Best regards
Sandra
Team Spybot