Solved Cannot Remove Ad's by 'Notification' / 'Advertising Support'

JayneCobbs

New Member
Thread author
Verified
Sep 19, 2014
18
I have been experiencing problems identical to those described by Kyle. So far these are restricted to chrome. I have installed Opera and it has been ad free, IE also so far does not appear to be infected.
 

JayneCobbs

New Member
Thread author
Verified
Sep 19, 2014
18
Yes I most certainly do.

Appologies for breaking the etiquette and posting on another thread. My problems are identical to described here: http://malwaretips.com/threads/cannot-remove-ads-by-notification-advertising-support.33628/page-2

To recap:

"ad by notification" infests my Chrome.

I have followed your advice in that thread and still continue getting those adds.

I run Kaspersky, Malaware Bytes, Spybot S&D, Combofix and several others. all scans come out clean.

The problems are so far restricted to Chrome, Opera and IE show no ads but I try not to use these to avoid the infection spreading.

Uninstalling chrome and installing it again helps only briefly.

When I logged in form work Chrome run clean for about an hour and then ads came back, so router at home does not seem to be factor.
 

JayneCobbs

New Member
Thread author
Verified
Sep 19, 2014
18
Noticed one more thing: I cannot access or even view comments under youtube videos, again in chrome only.
 

JayneCobbs

New Member
Thread author
Verified
Sep 19, 2014
18
Yep, I still have ads. Reset the router and the ads came right back.
Note two things pls:
1. I have three computers connected to the router, the ads appear only on one.
2. Wen I connect from work problems persist.
 

TwinHeadedEagle

Level 41
Verified
Mar 8, 2013
22,627
Okay, then this is something in your PC.


Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.


  • Double-click to run it. When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
  • The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.
 

TwinHeadedEagle

Level 41
Verified
Mar 8, 2013
22,627
warning.gif
SpyBot S&D Warning

MVPS.org is no longer recommending SpyBot S&D due to very poor testing results (scroll down and read under Freeware Antispyware Products).
My advice is to get rid of this program. To do so:
  • Press the
    WindowsKey.png
    + R on your keyboard at the same time. Type appwiz.cpl and click OK.
  • Search for SpyBot, right-click the entry and click Uninstall.

This is optional, but please consider it.




FRST.gif
Fix with Farbar Recovery Scan Tool

icon_exclaim.gif
This fix was created for this user for use on that particular machine.
icon_exclaim.gif

icon_exclaim.gif
Running it on another one may cause damage and render the system unstable.
icon_exclaim.gif

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

  • Right-click on
    FRST.gif
    icon and select
    RunAsAdmin.jpg
    Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Press the Fix button just once and wait.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  • When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.




TDSSKiller_Kaspersky.png
Scan with TDSSKiller

Please download TDSSKiller by Kaspersky and save it to your desktop.

  • Right-click on
    TDSSKiller_Kaspersky.png
    icon and select
    RunAsAdmin.jpg
    Run as Administrator to start the tool.
  • Click on Change parameters and put a checkmark beside Loaded modules. A reboot will be needed to apply the changes, allow it to do so.
  • Your machine may appear very slow and unusable after that - it's normal.
  • TDSSKiller will run automaticaly. Click on Change parameters and click OK.
  • Click the Start Scan button and wait patiently.

If anything will be found follow this guidelines:
  • If a suspicious object is detected, the default action will be Skip, click on Continue.
  • If malicious objects are found, they will show in the Scan results - Select action for found objects and offer three options.
    Ensure Cure (default) is selected, then click Continue > Reboot now to finish the cleaning process.
    If Cure is not available, please choose Skip instead.
  • Do not choose Delete unless instructed!

A report will be created in your root directory, (usually C:\ drive) in the form of TDSSKiller.[Version]_[Date]_[Time]_log.txt. Please include the contents of that file in your next post.
 

Attachments

  • fixlist.txt
    2.7 KB · Views: 67

JayneCobbs

New Member
Thread author
Verified
Sep 19, 2014
18
Done, done and done. Uninstalled spybot, run both programs logs attached. Note, I got two logs from TDSSkiller, I attach both.

What's next?

Once again: I am very greatful for your patience and help.
 

Attachments

  • Fixlog.txt
    6.8 KB · Views: 78
  • TDSSKiller.3.0.0.40_21.09.2014_13.55.44_log.txt
    4.2 KB · Views: 51
  • TDSSKiller.3.0.0.40_21.09.2014_13.58.33_log.txt
    761.7 KB · Views: 73

JayneCobbs

New Member
Thread author
Verified
Sep 19, 2014
18
Picture attached, this one is from bottom of Google search page, similar ads appear everywhere else including this forum.
 

Attachments

  • ads2.pdf
    151.7 KB · Views: 174

JayneCobbs

New Member
Thread author
Verified
Sep 19, 2014
18
One more, not sure if it makes a difference but it is from the top of this very page.
 

Attachments

  • ads3.pdf
    141.3 KB · Views: 120

TwinHeadedEagle

Level 41
Verified
Mar 8, 2013
22,627
51a612a8b27e2-Zoek.png
Scan with ZOEK

Please download ZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

  • Right-click on
    51a612a8b27e2-Zoek.png
    icon and select
    RunAsAdmin.jpg
    Run as Administrator to start the tool.
  • Wait patiently until the main console will appear, it may take a minute or two.
  • In the main box please paste in the following script:
    Code:
    createsrpoint;
    autoclean;
    chrdefaults;
    emptyalltemp;
    ipconfig /flushdns;b
  • Make sure that Scan All Users option is checked.
  • Push Run Script and wait patiently. The scan may take a couple of minutes.
  • When the scan completes, a zoek-results logfile should open in notepad.
  • If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)

Post its content into your next reply.
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top