Computer Problem

[Szykneij]

If anyone has any recommendations on what kind of software that might be able to detect and remove this, I most certainly appreciate it! 

I've found Spybot sometimes detects things that my Norton and Macafee don't.

[Brahmsian]

I've found Spybot sometimes detects things that my Norton and Macafee don't.

Hi Tony, I might check out Spybot. 

Perfect example of the issue I'm seeing:  The word Norton type in your post, Tony, has that underlined link ad on it.

As I type my reply, it's not there.  Weird.

[kishnevi]

I've also got Spybot.   Do you have any adblocking software?

I have to admit this is something I've not heard of before.  You may have some sort of trojan or worm that's not being detected.  If you've got a Windows based system,  you can go to the Microsoft website and download their worm detecting program, which they seem to update on a monthly basis.

[Parsifal]

Hi Folks,

I am not the most technically savvy, when it comes to describing computer malfunctions/issues.  I do know I have something 'wrong', so to speak, on my computer.  It seems to have popped up very recently.

Not sure exactly what it is, I just know that I ran a Fully McAfee virus scan, as well as an AVG scan, and both did not detect and remove this 'annoyance'.

What happens is (and it does not matter whether I use IE, Firefox or Google Chrome browser) that on any website I go to (including GMG), there are underlined links, and beneath these underlined links (which look similar to regular links that you can click on any website), have fishy ads on them.

I'm assuming this is what someone might call 'Adware'.  Different ads show up, but the most frequent one that does (I have not actually clicked on them), I just put the pointer near the underlined 'link', and it was display a small box with the ad is one called "Earn $77/hr from home, or Mom earns $77/hr from home".

If anyone has any recommendations on what kind of software that might be able to detect and remove this, I most certainly appreciate it! 

Did you go into your browser setup menu and see if there are any plug-ins, extensions, add-ons that you do not know the origin of?

[mc ukrneal]

Hi Folks,

I am not the most technically savvy, when it comes to describing computer malfunctions/issues.  I do know I have something 'wrong', so to speak, on my computer.  It seems to have popped up very recently.

Not sure exactly what it is, I just know that I ran a Fully McAfee virus scan, as well as an AVG scan, and both did not detect and remove this 'annoyance'.

What happens is (and it does not matter whether I use IE, Firefox or Google Chrome browser) that on any website I go to (including GMG), there are underlined links, and beneath these underlined links (which look similar to regular links that you can click on any website), have fishy ads on them.

I'm assuming this is what someone might call 'Adware'.  Different ads show up, but the most frequent one that does (I have not actually clicked on them), I just put the pointer near the underlined 'link', and it was display a small box with the ad is one called "Earn $77/hr from home, or Mom earns $77/hr from home".

If anyone has any recommendations on what kind of software that might be able to detect and remove this, I most certainly appreciate it! 

This sounds like something skype does, where it changes numbers on the screen so that you can click on them to call them. It is a pain, as it doesn't always understand that a number is not always a phone number. You may have accidentally allowed a program to do something similar or you may indeed be infected with something. I would start with my internet settings to see if you can see anything that might have changed there. But in terms of software, there are several out there. I think CNET has adaware (or something like that). You might try that one.

[Holden]

These are indeed malware and while they won't take total control of your PC they are a nuisance. This was originally a Firefox problem but it has now extended to other browsers. The bug is called Text Enhance and can be removed.

You can try this

http://botcrawl.com/how-to-remove-text-enhance/

Before you do that, can I suggest that you download Malware Bytes Anti Malware (MBAM) and run that in safe mode. The program is free. Make sure you immediately restart your computer. After you have done that can I suggest that you download this program.

http://www.brightfort.com/sbdownload.html

It sits in the background and blocks 99% of malware without you even realising it. The Free version has to be updated manually.

Let us know if either works. BTW, what antimalware program do you run?

[Brahmsian]

These are indeed malware and while they won't take total control of your PC they are a nuisance. This was originally a Firefox problem but it has now extended to other browsers. The bug is called Text Enhance and can be removed.

You can try this

http://botcrawl.com/how-to-remove-text-enhance/

Before you do that, can I suggest that you download Malware Bytes Anti Malware (MBAM) and run that in safe mode. The program is free. Make sure you immediately restart your computer. After you have done that can I suggest that you download this program.

http://www.brightfort.com/sbdownload.html

It sits in the background and blocks 99% of malware without you even realising it. The Free version has to be updated manually.

Let us know if either works. BTW, what antimalware program do you run?

Thanks Holden.  I have Mcafee, and yesterday tried AVG free and then I tried Spybot.  It still hasn't removed it.  When I did run Spybot, it detected several potential threats, and rid them all, except for the one in question.  It detected it, but said it was unsuccessful in removing it.

Thanks, Holden, I will try your suggestions.  And report back. 

[Parsifal]

Thanks Holden.  I have Mcafee, and yesterday tried AVG free and then I tried Spybot.  It still hasn't removed it.  When I did run Spybot, it detected several potential threats, and rid them all, except for the one in question.  It detected it, but said it was unsuccessful in removing it.

Thanks, Holden, I will try your suggestions.  And report back. 

How do you know the thing spybot didn't remove is the thing causing your problem?  And if spybot detected it, why don't you tell us what it was that spybot detected?

[SonicMan46]

Well, it is more annoying that anything else!  Computer is running fine.  Just at times it is confusing if something is an actual link or not, and it changes to a different word or area when you refresh a page.

i

Hi Ray - sorry about your computer problem - sounds like adware/spam to me (and hopefully benign) - if you look back on my posts w/ Bill (2008!), I recommended that he visit CyberTechHelp Forum - join and then go to the 'Malware forum' and leave a post describing your problem; one of their malware specialists will respond (may take a few days) and likely ask you to run a number programs and post the logs - have used them a half dozen times in the past (both on my PC laptop & desktop) - and it is FREE! 

BTW - I"m transitioning over to Apple in my retirement - typing now on my new Mac Book Pro w/ retina display, and we're about to go out to a computer class @ Mac Authority (local mall) mainly to introduce Susan to OS X (Mountain Lion) - will likely order an iMac today.  Dave

[Brahmsian]

These are indeed malware and while they won't take total control of your PC they are a nuisance. This was originally a Firefox problem but it has now extended to other browsers. The bug is called Text Enhance and can be removed.

You can try this

http://botcrawl.com/how-to-remove-text-enhance/

Before you do that, can I suggest that you download Malware Bytes Anti Malware (MBAM) and run that in safe mode. The program is free. Make sure you immediately restart your computer. After you have done that can I suggest that you download this program.

http://www.brightfort.com/sbdownload.html

It sits in the background and blocks 99% of malware without you even realising it. The Free version has to be updated manually.

Let us know if either works. BTW, what antimalware program do you run?

OK, I promise you - I am not an imbecile, but I have to ask the question because I simply do not know:  What is running in safe mode? 

[Opus106]

OK, I promise you - I am not an imbecile, but I have to ask the question because I simply do not know:  What is running in safe mode? 

http://windows.microsoft.com/en-gb/windows7/what-is-safe-mode
http://windows.microsoft.com/en-gb/windows7/start-your-computer-in-safe-mode

[Brahmsian]

http://windows.microsoft.com/en-gb/windows7/what-is-safe-mode
http://windows.microsoft.com/en-gb/windows7/start-your-computer-in-safe-mode

Thanks, Navneeth.

[Brahmsian]

Hi everyone, everything is fixed now.  The following list below were the culprits.  The combination of using Spybot, MBAM (Malawarebytes Anti-malware), removing cookies, re-installing Google Chrome, and finally (at the suggestion of a co-worker), running Pirform CCleaner, clean, followed by a registry scan and clean did the trick! 


W3i.IQ5.fraud: [SBI $5ADC6E84] Program directory (Directory, nothing done)
  C:\Windows\system32\AI_RecycleBin\
iCrossRider: [SBI $C6832577] Settings (Registry Value, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow\*.crossrider.com
iCrossRider: [SBI $52E714A1] Settings (Registry Value, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\New Windows\Allow\*.crossrider.com
iCrossRider: [SBI $52E714A1] Settings (Registry Value, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\New Windows\Allow\*.crossrider.com
iCrossRider: [SBI $11B04738] Settings (Registry Value, nothing done)
  HKEY_USERS\S-1-5-21-3633419910-4259067242-2189196552-1000\Software\Microsoft\Internet Explorer\New Windows\Allow\*.crossrider.com