cancel
Showing results for 
Search instead for 
Did you mean: 

Malware puts advertising at the bottom of the Firefox window.

SOLVED
Highlighted
New User

Malware puts advertising at the bottom of the Firefox window.

My Firefox installation has banner ads at the bottom of the Firefox window I know do not belong to the websites I visit. My Firefox installation, and possibly my computer, is infected. The advertisement changes to different ones automatically, and eventually rotate back to begin at the first one again. When I scroll the webpage the advertisement banner remains at the bottom. The advertisements are animated to make them difficult to ignore.

It is also converting selected phrases in the text of the website I visit into links. When I put the cursor over these links advertising pops up.

The banners at the bottom of the screen say things such as:

 "Your PC performance is Poor."
 "Make your PC run Faster!"
 "Problems have been detected with your Flash Player version."
 "To view the video you need to upgrade Adobe Flash Player"
 "Catch the Roach for an opportunity to win an iPad 2!"

I need help removing this malware. I hope I will not have to reinstall the operating system.

I have done a scan using the Microsoft Security Essentials and Safety Scanner. This did not eliminate the problem.

1 ACCEPTED SOLUTION

Accepted Solutions
Regular User

Re: Malware puts advertising at the bottom of the Firefox window.

I would recommend starting with Adwcleaner : http://www.bleepingcomputer.com/download/adwcleaner/, which should detect majority of browser - impacting adware. If problems continue, run Hitman Pro ( broad range and scanning with 5 AV engines) and Spybot S&D. Malwarebytes and SuperSpyware, on the other hand, is not really effective against adware in my opinion, but might help if there is trojan.

3 REPLIES
Support Forum Moderator

Re: Malware puts advertising at the bottom of the Firefox window.

Install, update, and run these programs in this order. They are listed in order of efficacy.
(Not all programs detect the same Malware, so you may need to run them all to solve your problem.)
These programs are all free for personal use, but some have limited functionality in the "free mode" - but those are features you really don't need to find and remove the problem that you have.
Note: If your Malware infection is bad enough and you are mis-directed to URL's other than what is posted, you may have to use a different PC to download these programs and use a USB stick to transfer them to the afflicted PC.

Malwarebytes' Anti-Malware - http://www.malwarebytes.org/mbam.php
SuperAntispyware - http://www.superantispyware.com/
AdAware - http://www.lavasoftusa.com/software/adaware/
Spybot Search & Destroy - http://www.safer-networking.org/en/index.html
Windows Defender: Home Page - http://windows.microsoft.com/en-US/wi.../windows-defender
Also, if you have a search engine re-direct problem, see this:
http://deletemalware.blogspot.com/2010/02/remove-google-redirect-virus.html

If these don't find it or can't clear it, post in one of these forums for specialized malware removal help:
http://www.spywarewarrior.com/index.php
http://forum.aumha.org/
http://www.spywareinfoforum.com/
http://bleepingcomputer.com

Regular User

Re: Malware puts advertising at the bottom of the Firefox window.

I would recommend starting with Adwcleaner : http://www.bleepingcomputer.com/download/adwcleaner/, which should detect majority of browser - impacting adware. If problems continue, run Hitman Pro ( broad range and scanning with 5 AV engines) and Spybot S&D. Malwarebytes and SuperSpyware, on the other hand, is not really effective against adware in my opinion, but might help if there is trojan.

New User

Re: Malware puts advertising at the bottom of the Firefox window.

I ran AdwCleaner first. It found many registry keys. It also found these folders:

  • C:\Program Files (x86)\OApps
  • C:\Program Files (x86)\SaveValet

In the OApps directory was the file: dler.exe

Then I ran Malwarebytes Anti-Malware which found: D2M-Precheck[1].exe (Trojan.MSIL)

All of the above were missed by Microsoft's Security Essentials.

The malware that was was putting the banner in the webpages I viewed was SelectionLinks. It is a FireFox plugin that was sneakily installed.

I am certain the above infections happened because of free software I had downloaded. I do not know which of them it was. I suspect one or more of them was downloaded from other than the official site for them.

I thank you for your help. I had some serious infections, especially dler.exe.