Doubleclick.net

[billydc]

When clicking the back button on some web pages, I discovered several entries for ad,doubleclick.net and tags.bluekai.com. Would you please advise instructions on how to remove these entries?

 

I am using a HP Compaq NX9600, Win XP and IE8.

 

Thank you.

[caintry_boy]

These may be from cookies...you can get rid of them with this > http://www.majorgeeks.com/files/details/superantispyware_free.html

Would probably be a good idea to run this program too > http://www.majorgeeks.com/files/details/malwarebytes_anti_malware.html

Here's how to run MBAM:

Double Click mbam-setup.exe to install the application.    Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware andLaunch Malwarebytes' Anti-Malware, then click Finish.    If an update is found, it will download and install the latest version.    Once the program has loaded, select "Perform Quick Scan", then click Scan.    The scan may take some time to finish,so please be patient.    When the scan is complete, click OK, then Show Results to view the results.    Make sure that everything is checked, and click Remove Selected.    When disinfection is completed, a log will open in Notepad and you may beprompted to Restart.(See Extra Note)    The log is automatically saved by MBAM and can be viewed by clicking the Logstab in MBAM.    Copy&Paste the entire report in your next reply.    Extra Note:    If MBAM encounters a file that is difficult to remove,you will be presented with1 of 2 prompts,click OK to either and let MBAM proceed with the disinfectionprocess. If asked to restart the computer, please do so immediately.

[billydc]

I performed the recommended scans. The entries I mentioned in my post still occur. Please find my malwarebyte and superantispyware reports below.

 

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 7/7/2014
Scan Time: 6:28:44 AM
Logfile: mbam-log 2014-07-07.txt
Administrator: Yes

Version: 2.00.2.1012
Malware Database: v2014.07.07.02
Rootkit Database: v2014.07.03.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows XP Service Pack 3
CPU: x86
File System: NTFS
User: New name

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 248823
Time Elapsed: 8 min, 35 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Warn
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)

(end)

 

 

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 07/07/2014 at 06:17 AM

Application Version : 5.7.1026

Core Rules Database Version : 11353
Trace Rules Database Version: 9165

Scan type : Complete Scan
Total Scan Time : 00:10:11

Operating System Information
Windows XP Professional 32-bit, Service Pack 3 (Build 5.01.2600)
Administrator

Memory items scanned : 526
Memory threats detected : 0
Registry items scanned : 34589
Registry threats detected : 0
File items scanned : 9496
File threats detected : 1

Adware.Tracking Cookie
C:\Documents and Settings\New name\Cookies\08MK36SL.txt [ /ads.yahoo.com ]

[Juliet]

try this:

 

-AdwCleaner-by Xplode

 

Click on this link to download : ADWCleaner

Click on ONE of the Two Blue Download Now buttons That have a blue arrow beside them and save it to your desktop.

 

Do not click on any links in the top Advertisment.

 

 

• Close all open programs and internet browsers.
• Right click the AdwCleaner icon on the desktop, click Run as administrator and accept the UAC prompt to run AdwCleaner.

   

  *****

• Click the Scan button and wait for the scan to finish.
• After the Scan has finished the window may or may not show what it found and above the progress bar you will see Pending. Please uncheck elements you don't want to remove. Please don't delete anything at this time.
• Click the Report button to get the log
• Copy and Paste it into your next reply. This report is also saved to C:\AdwCleaner\AdwCleaner[R0].txt.
• Click the X in the upper right corner of the program or click the File menu and click Exit to close the program.
• NOTE: If you see AVG Secure Search being targeted for deletion, Here's Why and Here. You can always Reinstall it.

[billydc]

Please find AdwCleaner log.

 

# AdwCleaner v3.214 - Report created 07/07/2014 at 17:50:15
# Updated 29/06/2014 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : New name - MATRIXBK-PC
# Running from : C:\Documents and Settings\New name\Desktop\AdwCleaner.exe
# Option : Scan

***** [ Services ] *****

***** [ Files / Folders ] *****

***** [ Shortcuts ] *****

***** [ Registry ] *****

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702

-\\ Mozilla Firefox v2.0.0.14 (en-US)

[ File : C:\Documents and Settings\New name\Application Data\Mozilla\Firefox\Profiles\lqd0fod1.default\prefs.js ]

*************************

AdwCleaner[R0].txt - [840 octets] - [06/07/2014 09:53:59]
AdwCleaner[R1].txt - [740 octets] - [07/07/2014 17:50:15]
AdwCleaner[s0].txt - [902 octets] - [06/07/2014 10:05:41]

########## EOF - C:\AdwCleaner\AdwCleaner[R1].txt - [858 octets] ##########

[Juliet]

That should had showed us more then that.

 

I want you to start a new topic in this forum

http://forums.pcpitstop.com/index.php?/forum/25-have-i-been-hijacked/

 

Then

 

Scan with FRST in normal mode

 

Please download Farbar's Recovery Scan Tool to your desktop: FRST 32bit or FRST 64bit (If not sure which version: Start --> Computer (right click) --> properties)

(To use correct version for your system.....Which system am I using?)

• Run FRST.
• Don´t change one of the checkboxes and hit Scan.
• Logfiles are created on your desktop.
• Poste the FRST.txt
• The first time the tool is run it generates another log Addition.txt - Please also paste that along with the FRST.txt into your reply.

Post these logs in the other forum, someone will assist you soon.