possumpaw
Member
Posts: 83 
Former World Start Member: Yes
World Start Name: possumpaw
|
Post by possumpaw on Jan 11, 2018 18:16:06 GMT -5
  Avira pop-up Since Christmas weekend I've had this annoying "Avira" Pop-UP that loads 2min after I boot up in the a.m.. If I x it off it leaves a white square where it was. That square remains on when off-line as well as on internet regardless of the browser I'm using. So far the only way I've found to get rid of it online is to use F11 I have run MB, CCleaner, and SuperAntiSpyware. SpywareBlaster is up to date and have run a virus scan. Have tried unplugning everything and letting it set for awhile before redoing it and loging-in. The little hummer still pop's up after two min. The notice does look a bit suspicious.. with all the question marks and larger size. Any help will be appreciated. HP Pavilion 500 series. HP Pavilion 27xi Screen Windows 10 64bit Edge, Classic Shell and Firefox v.57.0.2 ;WLM2012; Avira Free, Windows Firewall, MBAM, SpywareBlaster, SUPERAntispyware, HP Protectsmart Laptop with all of the above items |
|
|
|
Post by jholland1964 on Jan 11, 2018 18:55:32 GMT -5
I find it very suspicious also.While it "appears" to be similar to the normal once a day slide up you receive with the Free version I agree, the large print and the question marks AND the fact the white box remains even if you "X" out of it. Did your MB or SUPERAntispyware scans show anything? If so please post the logs. Also please do this: Download Malwarebytes AdwCleaner from this link: www.malwarebytes.com/adwcleaner/This will give you the executable file itself. Save it to your desktop where you can easily find it. THERE ARE TWO STEPS REQUIRED BUT RUN THE TOOL ITSELF ONCE ONLY. IF RUN MORE THAN ONCE THEN ORIGINAL REMOVALS DONE WILL NOT BE ABLE TO BE SEEN
CLOSE ALL other programs you have running....browsers, email programs. Letting those run while clean up tools to run slows the clean up immensely AND may not allow full clean up because many, if not most tools, cannot clean an open program. So close all that. Only open browser window AFTER the a tool has been run and used to clean and produces a log. Then open the one window and come back here and post the logs required. Double click AdwCleaner to open it. 1. Hit the Scan button to have AdwCleaner to search your computer for unwanted programs and then display a log showing the various files, folders, and registry entries used by these programs. Once this search is complete you will see the words “PENDING” immediately move on to step 2. 2. NEXT Click on the Clean button, which will cause AdwCleaner to reboot your computer and remove the files and registry entries associated with the various adware that you are removing. On reboot, AdwCleaner will display a log showing the files, folders, and registry entries that were removed. Copy/paste that log here. Please NOTE there are TWO steps so sure to absolutely BOTH steps and do save the log produced. |
|
possumpaw
Member
Posts: 83
Former World Start Member: Yes
World Start Name: possumpaw
|
Post by possumpaw on Jan 11, 2018 19:21:36 GMT -5
Thanks for responding J.
I don't remember anything showing up on MB or SA. But I'm going to check for past runs and will get back to you.
|
|
possumpaw
Member
Posts: 83
Former World Start Member: Yes
World Start Name: possumpaw
|
Post by possumpaw on Jan 11, 2018 19:41:43 GMT -5
Nothing at all showed up on Superanti spyware. With MB it shows on Nov 6 it quarantined a PUP.Optional... C:Windows\INSTALLER\10a4aaf.msi and nothing since then. Last time I ran it was on Jan 3
|
|
|
|
Post by Everton on Jan 11, 2018 20:06:04 GMT -5
I have occasionally had the blank box issue. Pressing f5 on the keyboard usually resolves it by refreshing the desktop.
The question marks could be a text encoding problem but I do t know how that could be corrected. Perhaps someone else will.
|
|
|
|
Post by Everton on Jan 11, 2018 20:23:55 GMT -5
Also try exiting the notification message by right clicking on the avira icon .. I do not use avira so not sure of the process but there is probably an option to view or delete notifications there ?
|
|
|
|
Post by jholland1964 on Jan 11, 2018 20:52:56 GMT -5
Also try exiting the notification message by right clicking on the avira icon .. I do not use avira so not sure of the process but there is probably an option to view or delete notifications there ? The only way to close the slide up is to "X" it out. Right clicking on the Avira Icon will open the program options. Attachments:
|
|
possumpaw
Member
Posts: 83
Former World Start Member: Yes
World Start Name: possumpaw
|
Post by possumpaw on Jan 11, 2018 21:18:31 GMT -5
Everton, the F5 did nothing and as J. posted, neither did right clicking.
Judy, not sure if I should run the Adcleaner.
|
|
|
|
Post by jholland1964 on Jan 11, 2018 22:26:27 GMT -5
Everton, the F5 did nothing and as J. posted, neither did right clicking. Judy, not sure if I should run the Adcleaner. It is Not Adcleaner, it is AdwCleaner. Why shouldn't you run AdwCleaner? It is an excellent program, highly recommended by reputable forums for many years and it DOES work. I recommended it for many years at WS and the other forums where I helped with malware removal. Please tell me what the problem is with AdwCleaner? |
|
possumpaw
Member
Posts: 83
Former World Start Member: Yes
World Start Name: possumpaw
|
Post by possumpaw on Jan 11, 2018 22:49:08 GMT -5
Everton, the F5 did nothing and as J. posted, neither did right clicking. Judy, not sure if I should run the Adcleaner. It is Not Adcleaner, it is AdwCleaner. Why shouldn't you run AdwCleaner? It is an excellent program, highly recommended by reputable forums for many years and it DOES work. I recommended it for many years at WS and the other forums where I helped with malware removal. Please tell me what the problem is with AdwCleaner? Oops, looks like I've managed to get us both confused. I have no problem with AdwCleaner, I just thought I was to run it if the other two programs found anything. Will let ya know what I find.. |
|
|
|
Post by jholland1964 on Jan 11, 2018 22:58:03 GMT -5
Please do because that is not normal behavior for Avira
|
|
possumpaw
Member
Posts: 83
Former World Start Member: Yes
World Start Name: possumpaw
|
Post by possumpaw on Jan 11, 2018 23:10:47 GMT -5
Please do because that is not normal behavior for Avira Here are the results # AdwCleaner 7.0.6.0 - Logfile created on Fri Jan 12 04:05:17 2018 # Updated on 2017/21/12 by Malwarebytes # Running on Windows 10 Home (X64) # Mode: clean # Support: www.malwarebytes.com/support***** [ Services ] ***** No malicious services deleted. ***** [ Folders ] ***** Deleted: C:\Users\All Users\Documents\Downloaded Installers Deleted: C:\Users\Public\Documents\Downloaded Installers ***** [ Files ] ***** Deleted: C:\Users\Default\AppData\gacutil.exe Deleted: C:\Users\Default\AppData\gacutil Deleted: C:\Users\Default User\AppData\gacutil.exe Deleted: C:\Users\Default User\AppData\gacutil Deleted: C:\Users\DefaultAppPool\AppData\gacutil.exe Deleted: C:\Users\DefaultAppPool\AppData\gacutil ***** [ DLL ] ***** No malicious DLLs cleaned. ***** [ WMI ] ***** No malicious WMI cleaned. ***** [ Shortcuts ] ***** No malicious shortcuts cleaned. ***** [ Tasks ] ***** Deleted: gacutil Deleted: gacutil Deleted: gacutil ***** [ Registry ] ***** Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{4B9BCCE8-A70B-402A-A7E1-DB96831EE26F} Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\324B4B70AD4E1D7438725B98BEB4BE85 Deleted: [Key] - HKLM\SOFTWARE\Classes\Installer\Features\324B4B70AD4E1D7438725B98BEB4BE85 Deleted: [Key] - HKLM\SOFTWARE\Classes\Installer\Products\324B4B70AD4E1D7438725B98BEB4BE85 Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1672163f-8651-4c0d-9c05-4ba941123972} Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{61db39d5-034c-45c0-8bb2-daf857edcf3b} Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CAE9BEC8-4723-4347-AFC6-25EE3326BA5B} Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{90E4CD0C-426F-4207-805B-7885AB32D43F} ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries deleted. ***** [ Chromium (and derivatives) ] ***** No malicious Chromium entries deleted. ************************* ::Tracing keys deleted ::Winsock settings cleared ::Additional Actions: 0 ************************* C:/AdwCleaner/AdwCleaner[S0].txt - [2479 B] - [2018/1/12 4:4:44] ########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt ########## |
|
|
|
Post by jholland1964 on Jan 11, 2018 23:39:28 GMT -5
Now please run another Threat Scan with Malwarebytes'3.
|
|
possumpaw
Member
Posts: 83
Former World Start Member: Yes
World Start Name: possumpaw
|
Post by possumpaw on Jan 11, 2018 23:47:12 GMT -5
Now please run another Threat Scan with Malwarebytes'3. Done, All is clean.. |
|
|
|
Post by jholland1964 on Jan 11, 2018 23:53:50 GMT -5
Now please run another Threat Scan with Malwarebytes'3. Done, All is clean.. Ok. Since the AdwCleaner scan and reboot has the slide up happened? |
|
possumpaw
Member
Posts: 83
Former World Start Member: Yes
World Start Name: possumpaw
|
Post by possumpaw on Jan 12, 2018 0:05:09 GMT -5
Oh Yes, It's still there in all it's glory.
|
|
|
|
Post by jholland1964 on Jan 12, 2018 0:09:23 GMT -5
Oh Yes, It's still there in all it's glory. What version of Avira Free are you running? Edit: To find out the version open Avira Dashboard and then open Avira Free Antivirus. When that opens at the Top Right Corner there is a question mark. If you click that you get three choices; Help, License Management, About. Click About. That will give you the version number. Also do this; Open CCleaner, on the Left Side click Tools. When that opens click on the Startup Button. When that opens click on Scheduled Tasks. There should only be TWO Avira tasks there. If there is more than two disable any others except the two that show in my attachment. See my attachment. Attachments:
|
|
possumpaw
Member
Posts: 83
Former World Start Member: Yes
World Start Name: possumpaw
|
Post by possumpaw on Jan 12, 2018 0:49:24 GMT -5
Oh Yes, It's still there in all it's glory. What version of Avira Free are you running? Edit: To find out the version open Avira Dashboard and then open Avira Free Antivirus. When that opens at the Top Right Corner there is a question mark. If you click that you get three choices; Help, License Management, About. Click About. That will give you the version number. Also do this; Open CCleaner, on the Left Side click Tools. When that opens click on the Startup Button. When that opens click on Scheduled Tasks. There should only be TWO Avira tasks there. If there is more than two disable any others except the two that show in my attachment. See my attachment. 15.0.34.17 After trying everything I could think for clearing the popup I tried reinstalling Avira (versopm #15.0.34.17 ) on Jan 4. Didn't make a difference. Checking the CCleaner showed just two Avira entries just like yours. |
|
|
|
Post by jholland1964 on Jan 12, 2018 0:54:16 GMT -5
It is very late. I am signing out for the day. I recommend that you completely UNINSTALL Avira Free. Go to Programs and Features and Uninstall EVERY listing for Avira. There should be only be two listings, one says Avira and the other says Avira Antivirus. If you have more than that then you have installed some of the unnecessary Extras offered by Avira. None of those are needed. But ALL Avira listings should be uninstalled.Reboot the Computer. Then go to www.avira.com/en/free-antivirus-windowsand download a brand new copy. That is the Only place to get the download for a new version. If you have an old copy of an install file DELETE it. Never save them. Use a brand new one every time. |
|
possumpaw
Member
Posts: 83
Former World Start Member: Yes
World Start Name: possumpaw
|
Post by possumpaw on Jan 12, 2018 1:00:03 GMT -5
Thank you Judy for your help.. It's late for me so you must be exhausted as you have been up two hour longer. I'll work on this when I get home tomorrow.
Thank you again, I really appreciate it.
|
|
possumpaw
Member
Posts: 83
Former World Start Member: Yes
World Start Name: possumpaw
|
Post by possumpaw on Jan 12, 2018 20:33:12 GMT -5
I uninstalled everything I could find of Avira... And guess what, the white box vanished. Yes!! Reinstalled Avira and everything is up and running fine. Thank you again for all your help. I'm a "happy camper"  |
|
|
|
Post by jholland1964 on Jan 12, 2018 20:45:48 GMT -5
I uninstalled everything I could find of Avira... And guess what, the white box vanished. Yes!! Reinstalled Avira and everything is up and running fine. Thank you again for all your help. I'm a "happy camper" I am very glad. What happened with the previous removal/reinstall is likely that the program was not fully removed. |
|
possumpaw
Member
Posts: 83
Former World Start Member: Yes
World Start Name: possumpaw
|
Post by possumpaw on Jan 12, 2018 21:03:31 GMT -5
That is so true, Judy. I uninstalled the antivirus part but neglected the other half. Can't believe how simple it turned out and would have been had I taken care of when it first happened.. What a Duh. Thanks again.
|
|
|
|
Post by jholland1964 on Jan 12, 2018 21:20:48 GMT -5
That is so true, Judy. I uninstalled the antivirus part but neglected the other half. Can't believe how simple it turned out and would have been had I taken care of when it first happened.. What a Duh. Thanks again. Something to remember when uninstalling programs is that many programs have more than one portion. If you want to do a full removal then all listings must be gone. Also, I don't know if you first used an old install file or not but whenever you are doing a reinstall of a program with a problem then using a brand new install file will give you the best option of having a clean install without the old problems. |
|
possumpaw
Member
Posts: 83
Former World Start Member: Yes
World Start Name: possumpaw
|
Post by possumpaw on Jan 12, 2018 23:23:29 GMT -5
That is so true, Judy. I uninstalled the antivirus part but neglected the other half. Can't believe how simple it turned out and would have been had I taken care of when it first happened.. What a Duh. Thanks again. Something to remember when uninstalling programs is that many programs have more than one portion. If you want to do a full removal then all listings must be gone. Also, I don't know if you first used an old install file or not but whenever you are doing a reinstall of a program with a problem then using a brand new install file will give you the best option of having a clean install without the old probl |
|
possumpaw
Member
Posts: 83
Former World Start Member: Yes
World Start Name: possumpaw
|
Post by possumpaw on Jan 12, 2018 23:27:16 GMT -5
Good info and it will be a long time before I forget it.. It should have been a given. Mistakes are such a good learning tool. Have a good evening and thanks again.
|
|
