Audio ad virus?

[frecklish]

A few days ago an audio ad played on my machine, and has played each day since. This happens when no programs are running, and all my attempts to find/fix have been unsuccessful (none of the anti-malware programs find anything).

Machine is running Win 8.1


I appreciate in advance anything you can do to help.

 

[TwinHeadedEagle]

Hi,

You've already run TDSS Killer. Can you attach all its reports?

 

[frecklish]

Hi, c/p'd the text of the report, attached.

 

[TwinHeadedEagle]

Let's make another check:


Please download zoek.zip or zoek.rar by smeenk (

) from here or here and save it to your Desktop.
Unpack the archive...

• Close any open browsers
• Temporarily disable your AntiVirus program. (If necessary)
  If you are unsure how to do this please read this or this Instruction.
  
• Double click on zoek.exe to run the tool .
  Please wait while the tool does not start...
  
• Copy the text present inside the code box below and paste it into the large window in the zoek tool:
  
  

  createsrpoint; 
  StandardSearch; 
  emptyfolderscheck; 
  installer-list; 
  installedprogs; 
  uninstall-list;

• Click on
  
  button.
  Please wait until a logreport will open (this can be after reboot)
  
• Save notepad to your Desktop and attach here zoek-results.log
  Note: It will also create a log in the C:\ directory named "zoek-results.log"

 

[frecklish]

Script is running, but taking a while. :/

 

[TwinHeadedEagle]

It is normal, let it run

 

[frecklish]

Here it is.

 

[TwinHeadedEagle]

Your PC seems clean to me, no signs of infection. When exactly does this happen?

 

[frecklish]

In the morning when my computer un-hibernates, and today it also happened at about midday. No indicators of where it was/is coming from.
I thank you for your time and effort, in any case.

 

[TwinHeadedEagle]

It was probably some system sound or something similar. Monitor the situation and reply here if you spot something...

 

[frecklish]

I don't think so, today it was a Verizon ad, then a Toyota ad.

I'll keep poking around.

 

[TwinHeadedEagle]

You have a bunch of extension installed in Google Chrome, can you review them and see if there is some unknown to you.

Let's run another scan:

Run this script within Zoek

autoclean;
emptyalltemp;

 

[frecklish]

Scan just started.

Yes, I have a lot of extensions (I also have a chromebook), but none of them are unknown to me; I go through them weekly and delete any I'm not using.

 

[frecklish]

Scan log attached.

 

[TwinHeadedEagle]

Looks clean, as I've said, monitor the situation and reply if and when it appear again...

 

[frecklish]

Ok, thanks very much!

 

[Earthling783]

I have the same malware. It acts about the same: it runs an ad when I first use the units, then it will do it again later. I'll try to log anything I notice about the ads. The ads seem to be from legit companies. The ads are in a North American English accent. That could be important as I browse sites in Europe too.
I used the same procedure as Frecklish. Now it has spread, as it were, to another computer. So it has something to do with browsing habits.
The unit I attempted to clean was a 64 bit W7 SP1. The second unit, which has just exhibited this problem, is a WXP. Both units run AVG Free 2014 and have been updated. I use Chrome on both units.

 

[Ink]

@TwinHeadedEagle

@Earthling783 Please post a new topic in the Malware Removal Assistance.
It's suggested that you read both:
http://malwaretips.com/threads/malware-removal-assistance-how-to-get-help.20334/
http://malwaretips.com/threads/read-me-before-posting-in-this-forum.125/

Thank you.

 

[frecklish]

I am currently resetting my computer to factory settings, a clean install. I'm hoping this will kill the critter causing the issue.

 

[TwinHeadedEagle]

Why you all reinstall systems for stupid virus?