Jump to content
Come try out the Arcade, Link at the top of the website ×

Need a hand please

Boomer

By Boomer
in Computer Help

 Share

Recommended Posts

Boomer Grand Master

Boomer

Posted
  • Member ID:  2083
  • Group:  **- Inactive Registered Users
  • Followers:  42
  • Topic Count:  172
  • Topics Per Day:  0.03
  • Content Count:  3554
  • Content Per Day:  0.68
  • Reputation:   4992
  • Achievement Points:  23761
  • Solved Content:  0
  • Days Won:  6
  • Joined:  12/31/10
  • Status:  Offline
  • Last Seen:  
  • Birthday:  10/20/1962
Posted

I don't do a hell of a lot on the internet so it is real easy for me to figure out where something went wrong.

 

I have gotten an extension on my computer that was installed yesterday while making a post on someones website...

 

I am not even sure wth happened but now when I go to that site now I get MAJOR hardcore porn in like pop ups

here I get pop ups but not like that...

 

it's called BetterSurf I need to know how to delete that shit off my computer any help?

 

Peace

Boomer


Astronomer Grand Master

Astronomer

Posted
  • Member ID:  2069
  • Group:  ***- Inactive Clan Members
  • Followers:  24
  • Topic Count:  214
  • Topics Per Day:  0.04
  • Content Count:  2411
  • Content Per Day:  0.46
  • Reputation:   2409
  • Achievement Points:  18298
  • Solved Content:  0
  • Days Won:  7
  • Joined:  12/25/10
  • Status:  Offline
  • Last Seen:  
  • Birthday:  08/08/1966
Posted

Do you use Google Chrome? If so, I found this:

 

"Figured it out people. If you're using chrome, click on the little menu button in the upper-right hand corner, right next to your url bar. Go down to settings, then extensions, and you'll find that that bettersurf thing got installed by a third party somehow... Delete it, and anything else downloaded by a third party because I had a couple things"

Awards
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1

Damage_inc- Grand Master

Damage_inc-

Posted
  • Member ID:  2048
  • Group:  ***- Inactive Clan Members
  • Followers:  0
  • Topic Count:  294
  • Topics Per Day:  0.06
  • Content Count:  6689
  • Content Per Day:  1.27
  • Reputation:   4709
  • Achievement Points:  48999
  • Solved Content:  0
  • Days Won:  5
  • Joined:  12/15/10
  • Status:  Offline
  • Last Seen:  
  • Birthday:  05/30/1967
Posted

is it good porn?

Awards
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1

7Toes Grand Master

7Toes

Posted
  • Member ID:  87
  • Group:  ***- Inactive Clan Members
  • Followers:  58
  • Topic Count:  98
  • Topics Per Day:  0.02
  • Content Count:  3789
  • Content Per Day:  0.66
  • Reputation:   3589
  • Achievement Points:  27251
  • Solved Content:  0
  • Days Won:  7
  • Joined:  09/02/09
  • Status:  Offline
  • Last Seen:  
  • Birthday:  04/02/1871
Posted

sounds like you went to the wrong web page to me and they downloaded a browser hyjack use malwarebites download and up date it then run it it should get rid of it........ :whistle:

Awards
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1

BUDMAN Grand Master

BUDMAN

Posted
  • Member ID:  800
  • Group:  *** Clan Members
  • Followers:  152
  • Topic Count:  139
  • Topics Per Day:  0.02
  • Content Count:  7097
  • Content Per Day:  1.26
  • Reputation:   4636
  • Achievement Points:  60350
  • Solved Content:  0
  • Days Won:  6
  • Joined:  11/27/09
  • Status:  Offline
  • Last Seen:  
  • Birthday:  05/29/1957
  • Device:  Android
Posted

Get avast and Malwarebites..........run the malware in safe mode,,,,,,very good free program and works well

Awards
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1

Labob Grand Master

Labob

Posted
  • Member ID:  42
  • Group:  *** Clan Members
  • Followers:  50
  • Topic Count:  338
  • Topics Per Day:  0.06
  • Content Count:  8389
  • Content Per Day:  1.47
  • Reputation:   6126
  • Achievement Points:  54468
  • Solved Content:  0
  • Days Won:  13
  • Joined:  09/01/09
  • Status:  Offline
  • Last Seen:  
  • Birthday:  01/30/1959
  • Device:  Windows
Posted

yep what browser ya all using down in porncity

Awards
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1

TecHnOBoY Grand Master

TecHnOBoY

Posted
  • Member ID:  755
  • Group:  ***- Inactive Clan Members
  • Followers:  21
  • Topic Count:  120
  • Topics Per Day:  0.02
  • Content Count:  2191
  • Content Per Day:  0.39
  • Reputation:   961
  • Achievement Points:  14309
  • Solved Content:  0
  • Days Won:  0
  • Joined:  11/17/09
  • Status:  Offline
  • Last Seen:  
  • Birthday:  01/14/1982
Posted (edited)

BetterSurf is not only a browser extension with annoying p0rn popups. It steals personal data!

 

Do me (and yourself) a favor and have a look into

 

You Scheduled Tasks if there is something you don't know about. (Start -> Control Panel -> Tasks or Scheduled Tasks)

Open this folder: c:\windows\tasks\ and watch out for AmiUpdXp.job on windows 7. (It might have different names)

AmiUpdXp sounds like a scheduled task to check for updates for AMI BIOS's but it isn't. Note that no reputable developer uses scheduled tasks to check for updates.

 

Please run HiJack This on your machine and post the results here Download page: http://www.chip.de/downloads/HijackThis_13011934.html

 

The page is in German but I guess you'll find the download buttons ;)

 

EDIT:

 

Other things I have found: A folder is created in your appdata/local called SwvUpdater which is referenced by the Task to run Updater.exe - the frightening part, since it will be able to download and execute any future malware/virus/worm. Server data goes to: hamonetizer.com Update downloads from: hxxp://www.helpfuldownload.com/update.php (borked it so it doesn't create clickable link)

Edited by TecHnOBoY
Awards
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1

Damage_inc- Grand Master

Damage_inc-

Posted
  • Member ID:  2048
  • Group:  ***- Inactive Clan Members
  • Followers:  0
  • Topic Count:  294
  • Topics Per Day:  0.06
  • Content Count:  6689
  • Content Per Day:  1.27
  • Reputation:   4709
  • Achievement Points:  48999
  • Solved Content:  0
  • Days Won:  5
  • Joined:  12/15/10
  • Status:  Offline
  • Last Seen:  
  • Birthday:  05/30/1967
Posted (edited)

seriously/this happened to me 3 months ago .it took a month to get rid of it all.this is the link that finally i used with free programs to run and i used them all to get rid of all the maleware causing my shit to happen.perhaps this will help .i saved this link in case another incident occurs and no its not a porn link...lmao

http://www.malwareremovalguides.info/pup-webcake-removal-guide/

Edited by Damage_inc-
Awards
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1

Boomer Grand Master

Boomer

Posted
  • Member ID:  2083
  • Group:  **- Inactive Registered Users
  • Followers:  42
  • Topic Count:  172
  • Topics Per Day:  0.03
  • Content Count:  3554
  • Content Per Day:  0.68
  • Reputation:   4992
  • Achievement Points:  23761
  • Solved Content:  0
  • Days Won:  6
  • Joined:  12/31/10
  • Status:  Offline
  • Last Seen:  
  • Birthday:  10/20/1962
  • Author
Posted

firefox is what I use


Boomer Grand Master

Boomer

Posted
  • Member ID:  2083
  • Group:  **- Inactive Registered Users
  • Followers:  42
  • Topic Count:  172
  • Topics Per Day:  0.03
  • Content Count:  3554
  • Content Per Day:  0.68
  • Reputation:   4992
  • Achievement Points:  23761
  • Solved Content:  0
  • Days Won:  6
  • Joined:  12/31/10
  • Status:  Offline
  • Last Seen:  
  • Birthday:  10/20/1962
  • Author
Posted

well according to the scan I no malware ;)


Damage_inc- Grand Master

Damage_inc-

Posted
  • Member ID:  2048
  • Group:  ***- Inactive Clan Members
  • Followers:  0
  • Topic Count:  294
  • Topics Per Day:  0.06
  • Content Count:  6689
  • Content Per Day:  1.27
  • Reputation:   4709
  • Achievement Points:  48999
  • Solved Content:  0
  • Days Won:  5
  • Joined:  12/15/10
  • Status:  Offline
  • Last Seen:  
  • Birthday:  05/30/1967
Posted

do malwarebytes and that adware remover -the adware remover wont show the results unles you click in each file ,then u see what it has found .inspect results then push clean  and it will clan and ask for reboot.i had luck.but like anything do your homework before you delete.gl m8

Awards
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1

Damage_inc- Grand Master

Damage_inc-

Posted
  • Member ID:  2048
  • Group:  ***- Inactive Clan Members
  • Followers:  0
  • Topic Count:  294
  • Topics Per Day:  0.06
  • Content Count:  6689
  • Content Per Day:  1.27
  • Reputation:   4709
  • Achievement Points:  48999
  • Solved Content:  0
  • Days Won:  5
  • Joined:  12/15/10
  • Status:  Offline
  • Last Seen:  
  • Birthday:  05/30/1967
Posted

i just ran that ad-ware scanner and cleaned a bunch of crap .my Firefox browser is much faster now btw now..

Awards
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1

Labob Grand Master

Labob

Posted
  • Member ID:  42
  • Group:  *** Clan Members
  • Followers:  50
  • Topic Count:  338
  • Topics Per Day:  0.06
  • Content Count:  8389
  • Content Per Day:  1.47
  • Reputation:   6126
  • Achievement Points:  54468
  • Solved Content:  0
  • Days Won:  13
  • Joined:  09/01/09
  • Status:  Offline
  • Last Seen:  
  • Birthday:  01/30/1959
  • Device:  Windows
Posted

Ah Bum Bum here try this http://www.spychecker.com/program/hijackthis.html its from trend micro. When downloading 3rd party software go real slow and look for the disclaimer to add more things and make sure its unchecked. On a side note to that you truly do have to read the ULA because they can in there state that you can refuse to load the added software but in 3 months it will load automaticlly. Sad sad sad :(  As Astronomer said use Google Chrome and run pop up blockers and I would also suggest using add blockers.

 

 LA Links to said stuff

 

 Browser  https://www.google.com/intl/en_ca/chrome/browser/

App Store in the search field type in add blocker and popup blocker load them

https://chrome.google.com/webstore/category/apps?hl=en

 

For IE

 How to make sure your pop up blocker is working right

http://support.microsoft.com/kb/909604

Adblocker for IE

http://simple-adblock.com/

 

 But like always its a user thing so do not rush through whatever it is your trying to download onto your computer.

Awards
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1

little_old_man Grand Master

little_old_man

Posted
  • Member ID:  1194
  • Group:  ***- Inactive Clan Members
  • Followers:  40
  • Topic Count:  436
  • Topics Per Day:  0.08
  • Content Count:  6692
  • Content Per Day:  1.21
  • Reputation:   11691
  • Achievement Points:  53094
  • Solved Content:  0
  • Days Won:  76
  • Joined:  02/27/10
  • Status:  Offline
  • Last Seen:  
  • Birthday:  04/15/1960
Posted

These are all great suggestions, but did anybody think to tell him to go to the control panel to see if the program can be removed from the uninstall programs feature? That's always the first place I look for these things and you would be surprised to find how many times that is all you need to get rid of these programs.

 

If it's not there, then I would use malwarebytes or any of the other hundreds of freeware programs available online.  Personally I use Advanced System Care freeware and it's worked for me every time. It's made by a company called IOBIT. No need to buy the paid version, the free one works great. 

Awards
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1

2_MANY_BEERS Grand Master

2_MANY_BEERS

Posted
  • Member ID:  96
  • Group:  ** Registered Users
  • Followers:  108
  • Topic Count:  1049
  • Topics Per Day:  0.18
  • Content Count:  8817
  • Content Per Day:  1.54
  • Reputation:   3309
  • Achievement Points:  62219
  • Solved Content:  0
  • Days Won:  5
  • Joined:  09/02/09
  • Status:  Offline
  • Last Seen:  
  • Birthday:  06/30/1954
  • Device:  Windows
Posted

:clap:


loaderXI Grand Master

loaderXI

Posted
  • Member ID:  252
  • Group:  +++ COD2 Head Admin
  • Followers:  72
  • Topic Count:  396
  • Topics Per Day:  0.07
  • Content Count:  6438
  • Content Per Day:  1.13
  • Reputation:   6581
  • Achievement Points:  54654
  • Solved Content:  0
  • Days Won:  32
  • Joined:  09/05/09
  • Status:  Offline
  • Last Seen:  
  • Birthday:  03/22/1965
  • Device:  Windows
Posted

You may have to run Malwarebytes in safe mode to find it....

 

 

1 Go to firefox and remove any unwanted extensions/add ons 

 

2 Run Ccleaner cleaner

 

3 Look for the program under Ccleaner tools if there uninstall

 

4 reboot Cpu in safe mode launch Malwarebytes update if needed

 

 

try that see if that will get rid of da fooker

Awards
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1

LordOfChaos Grand Master

LordOfChaos

Posted
  • Member ID:  3174
  • Group:  **- Inactive Registered Users
  • Followers:  100
  • Topic Count:  78
  • Topics Per Day:  0.02
  • Content Count:  2162
  • Content Per Day:  0.45
  • Reputation:   1645
  • Achievement Points:  17423
  • Solved Content:  0
  • Days Won:  1
  • Joined:  02/03/12
  • Status:  Offline
  • Last Seen:  
  • Birthday:  07/24/1957
Posted

Boomer let us know how it works out.


Boomer Grand Master

Boomer

Posted
  • Member ID:  2083
  • Group:  **- Inactive Registered Users
  • Followers:  42
  • Topic Count:  172
  • Topics Per Day:  0.03
  • Content Count:  3554
  • Content Per Day:  0.68
  • Reputation:   4992
  • Achievement Points:  23761
  • Solved Content:  0
  • Days Won:  6
  • Joined:  12/31/10
  • Status:  Offline
  • Last Seen:  
  • Birthday:  10/20/1962
  • Author
Posted (edited)

Ok LOM yes sir I did check that first lol! And TYVM

 

Labob I did get that Hijack This from techno this morning I ran it and found the bettersurf and removed it, meanwhile I got the malwarebytes from Damage and while scanning that I think the bettersurf tried to reinstall itself and then my FOOKING norton saw it and removed the treat as shown below.......

 

After the malwarebytes finished its thing it found the listed items below the file insight OMG!

 

I got the free file viewer from funstick u bastard lol....... along with the free office 2007   so FU Funstick lol

 

But let me ask you guys something a couple of these things from the malware scan don't look like bad stuff so do I go ahead and delete it all or no?

 

edit: all was deleted BTW!

52868f23e8d8c_11.png

 

52868ff103cfc_12.png

Edited by Boomer

Boomer Grand Master

Boomer

Posted
  • Member ID:  2083
  • Group:  **- Inactive Registered Users
  • Followers:  42
  • Topic Count:  172
  • Topics Per Day:  0.03
  • Content Count:  3554
  • Content Per Day:  0.68
  • Reputation:   4992
  • Achievement Points:  23761
  • Solved Content:  0
  • Days Won:  6
  • Joined:  12/31/10
  • Status:  Offline
  • Last Seen:  
  • Birthday:  10/20/1962
  • Author
Posted

BetterSurf is not only a browser extension with annoying p0rn popups. It steals personal data!

 

Do me (and yourself) a favor and have a look into

 

You Scheduled Tasks if there is something you don't know about. (Start -> Control Panel -> Tasks or Scheduled Tasks)

Open this folder: c:\windows\tasks\ and watch out for AmiUpdXp.job on windows 7. (It might have different names)

AmiUpdXp sounds like a scheduled task to check for updates for AMI BIOS's but it isn't. Note that no reputable developer uses scheduled tasks to check for updates.

 

Please run HiJack This on your machine and post the results here Download page: http://www.chip.de/downloads/HijackThis_13011934.html

 

The page is in German but I guess you'll find the download buttons ;)

 

EDIT:

 

Other things I have found: A folder is created in your appdata/local called SwvUpdater which is referenced by the Task to run Updater.exe - the frightening part, since it will be able to download and execute any future malware/virus/worm. Server data goes to: hamonetizer.com Update downloads from: hxxp://www.helpfuldownload.com/update.php (borked it so it doesn't create clickable link)

 

I see this stuff Techno, in the scan I just did!


Boomer Grand Master

Boomer

Posted
  • Member ID:  2083
  • Group:  **- Inactive Registered Users
  • Followers:  42
  • Topic Count:  172
  • Topics Per Day:  0.03
  • Content Count:  3554
  • Content Per Day:  0.68
  • Reputation:   4992
  • Achievement Points:  23761
  • Solved Content:  0
  • Days Won:  6
  • Joined:  12/31/10
  • Status:  Offline
  • Last Seen:  
  • Birthday:  10/20/1962
  • Author
Posted

You may have to run Malwarebytes in safe mode to find it....

 

 

1 Go to firefox and remove any unwanted extensions/add ons 

 

2 Run Ccleaner cleaner

 

3 Look for the program under Ccleaner tools if there uninstall

 

4 reboot Cpu in safe mode launch Malwarebytes update if needed

 

 

try that see if that will get rid of da fooker

 

I did Ccleaner right off the batt also did windows defender, last I looked in firefox I still see the bettersurf in my extensions but it is disabled. I have not seen anything that gives me the option to delete that fooker?


TecHnOBoY Grand Master

TecHnOBoY

Posted
  • Member ID:  755
  • Group:  ***- Inactive Clan Members
  • Followers:  21
  • Topic Count:  120
  • Topics Per Day:  0.02
  • Content Count:  2191
  • Content Per Day:  0.39
  • Reputation:   961
  • Achievement Points:  14309
  • Solved Content:  0
  • Days Won:  0
  • Joined:  11/17/09
  • Status:  Offline
  • Last Seen:  
  • Birthday:  01/14/1982
Posted

And his last words...

[23:25] Boomer>XI<: got to restart
[23:25] Boomer>XI<: brb
[23:25] TecHnOBoY>XI<: gl
[23:25] Boomer>XI<: thx
[23:25] <User is now offline>
Now it is 23:58 ^^

Well, back to topic:

It seems that there were two different things:
BetterSurf and an "Unfriend Checker" for Facebook. I think he'll sort the rest out and hope that he will be back online soon.  :)
MWB flagged this as PUP - potential unwanted program". Means that Malwarebytes was not sure if it is really abusive or not.

A warning to all Facebook users:

FB does not support showing profile views, unfriend notifications etc. I am not really sure if this has been installed by the first malware crap (BetterSurf) or on a different way.

@Boomer
Give me a yell if you need further assistance.
 

Awards
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1

Boomer Grand Master

Boomer

Posted
  • Member ID:  2083
  • Group:  **- Inactive Registered Users
  • Followers:  42
  • Topic Count:  172
  • Topics Per Day:  0.03
  • Content Count:  3554
  • Content Per Day:  0.68
  • Reputation:   4992
  • Achievement Points:  23761
  • Solved Content:  0
  • Days Won:  6
  • Joined:  12/31/10
  • Status:  Offline
  • Last Seen:  
  • Birthday:  10/20/1962
  • Author
Posted

And his last words...

 

[23:25] Boomer>XI<: got to restart

[23:25] Boomer>XI<: brb

[23:25] TecHnOBoY>XI<: gl

[23:25] Boomer>XI<: thx

[23:25] <User is now offline>

Now it is 23:58 ^^

 

Well, back to topic:

 

It seems that there were two different things:

BetterSurf and an "Unfriend Checker" for Facebook. I think he'll sort the rest out and hope that he will be back online soon.  :)

MWB flagged this as PUP - potential unwanted program". Means that Malwarebytes was not sure if it is really abusive or not.

 

A warning to all Facebook users:

FB does not support showing profile views, unfriend notifications etc. I am not really sure if this has been installed by the first malware crap (BetterSurf) or on a different way.

 

@Boomer

Give me a yell if you need further assistance.

 

LOL techno,

 

Just following advice from my brothers here.....

So far we CLEAN, I'm on my old computer right now Asus P4P800E Deluxe Pent4 3Ghz / 2 GB kingston hyperx ram / 1 GB Radeon HD 2400Pro / Sound Blaster oh hell I don't remember now lol.......

 

Anyway I rebooted in safemode did an update on the malwarebytes did a quick scan with 0 malware detected and now I am doing a full system scan sitting at 303,000 plus files scanned and still clean!

 

I think everything will be fine now & I thank you guys for your help in pointing me in the right direction!

 

No I did not do google chrome ;)


Boomer Grand Master

Boomer

Posted
  • Member ID:  2083
  • Group:  **- Inactive Registered Users
  • Followers:  42
  • Topic Count:  172
  • Topics Per Day:  0.03
  • Content Count:  3554
  • Content Per Day:  0.68
  • Reputation:   4992
  • Achievement Points:  23761
  • Solved Content:  0
  • Days Won:  6
  • Joined:  12/31/10
  • Status:  Offline
  • Last Seen:  
  • Birthday:  10/20/1962
  • Author
Posted

is it good porn?

 

well I have to be honest Damage, hell yeah man! I mean WOW...


Boomer Grand Master

Boomer

Posted
  • Member ID:  2083
  • Group:  **- Inactive Registered Users
  • Followers:  42
  • Topic Count:  172
  • Topics Per Day:  0.03
  • Content Count:  3554
  • Content Per Day:  0.68
  • Reputation:   4992
  • Achievement Points:  23761
  • Solved Content:  0
  • Days Won:  6
  • Joined:  12/31/10
  • Status:  Offline
  • Last Seen:  
  • Birthday:  10/20/1962
  • Author
Posted

Reporting in!

 

ALL IS WELL SIR! ALL IS WELL!

 

 

THANKS GUYS!


Damage_inc- Grand Master

Damage_inc-

Posted
  • Member ID:  2048
  • Group:  ***- Inactive Clan Members
  • Followers:  0
  • Topic Count:  294
  • Topics Per Day:  0.06
  • Content Count:  6689
  • Content Per Day:  1.27
  • Reputation:   4709
  • Achievement Points:  48999
  • Solved Content:  0
  • Days Won:  5
  • Joined:  12/15/10
  • Status:  Offline
  • Last Seen:  
  • Birthday:  05/30/1967
Posted

http://www.youtube.com/watch?v=nn2FB1P_Mn8&feature=youtu.be

Awards
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1

Guest
This topic is now closed to further replies.
 Share
Go to topic listing
×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.