Stop noisy popup by Adobe Flash Player

For a long time my laptop pc has been plagued by a noisy popup by Adobe Flash Player. They are advertising some goods/services from Acer which I don't have any desire to use! I did some changes to flash player settings, but that did not help. For days I have been checking the flash player website for help... was told to check their community forum, but found it very difficult to send a message to them.

Would be very thankful for any help with this matter. It is a nuisance and it slows fown my pc.

Beach Boy

 

Have you done any malware scans with programs like Malware Bytes, or Windows Defender?

 

Well I have Microsoft Security Essentials which I run every day for a full scan. Windows Defender is also installed but it is automatically stopped from working once Microsoft Security Essentials is being used.

 

Windows Defender is part of Microsoft Security Essentials, so that is the reason Defender is disabled. Install Malware Bytes, update it, and let it scan your system. If it finds any malware, copy and paste the results in your next post.

 

OK, downloaded Malwarebytes and there were a number of findings... pasting the copy below:




Malwarebytes Anti-Malware (Trial) 1.75.0.1300
www.malwarebytes.org

Database version: v2013.11.29.03

Windows Vista Service Pack 2 x86 NTFS
Internet Explorer 9.0.8112.16421
King's son :: KINGSSON [administrator]

Protection: Enabled

11/29/2013 8:48:05 AM
MBAM-log-2013-11-29 (07-11-49).txt

Scan type: Full scan (C:\|D:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 346951
Time elapsed: 1 hour(s), 21 minute(s), 53 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 19
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0} (Trojan.Vundo) -> No action taken.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0} (Trojan.Vundo) -> No action taken.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} (PUP.Optional.FunWebProducts.A) -> No action taken.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} (PUP.Optional.FunWebProducts.A) -> No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} (PUP.Optional.FunWebProducts.A) -> No action taken.
HKCU\SOFTWARE\DataMngr_Toolbar (PUP.Optional.DataMngr.A) -> No action taken.
HKCU\Software\DataMngr (PUP.Optional.DataMngr.A) -> No action taken.
HKCU\Software\AppDataLow\SProtector (PUP.Optional.SProtector.A) -> No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00A6FAF1-072E-44cf-8957-5838F569A31D} (Trojan.BHO) -> No action taken.
HKCR\CLSID\{00A6FAF1-072E-44cf-8957-5838F569A31D} (Trojan.BHO) -> No action taken.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{00A6FAF1-072E-44CF-8957-5838F569A31D} (Trojan.BHO) -> No action taken.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF1-072E-44CF-8957-5838F569A31D} (Trojan.BHO) -> No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{07B18EA1-A523-4961-B6BB-170DE4475CCA} (Trojan.BHO) -> No action taken.
HKCR\CLSID\{07B18EA1-A523-4961-B6BB-170DE4475CCA} (Trojan.BHO) -> No action taken.
HKCR\TypeLib\{07B18EA0-A523-4961-B6BB-170DE4475CCA} (Trojan.BHO) -> No action taken.
HKCR\Interface\{07B18EAA-A523-4961-B6BB-170DE4475CCA} (Trojan.BHO) -> No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyWebSearch bar Uninstall (Trojan.BHO) -> No action taken.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{07B18EA1-A523-4961-B6BB-170DE4475CCA} (Trojan.BHO) -> No action taken.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA1-A523-4961-B6BB-170DE4475CCA} (Trojan.BHO) -> No action taken.

Registry Values Detected: 1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|My Web Search Bar Search Scope Monitor (PUP.Optional.MindSpark) -> Data: "C:\PROGRA~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe" /m=2 /w /h -> No action taken.

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 4
C:\Users\King's son\AppData\Roaming\Babylon (PUP.Optional.Babylon.A) -> No action taken.
C:\Program Files\FunWebProducts\Installr (PUP.Optional.FunWebProducts.A) -> No action taken.
C:\Program Files\FunWebProducts\Installr\1.bin (PUP.Optional.FunWebProducts.A) -> No action taken.
C:\Program Files\FunWebProducts\Installr\1.bin\chrome (PUP.Optional.FunWebProducts.A) -> No action taken.

Files Detected: 6
C:\Program Files\Optimizer Pro\OptimizerPro.exe (PUP.Optional.OptimizePro.A) -> No action taken.
C:\Windows\System32\f3PSSavr.scr (Trojan.Agent) -> No action taken.
C:\Users\King's son\AppData\Roaming\Babylon\log_file.txt (PUP.Optional.Babylon.A) -> No action taken.
C:\Program Files\MyWebSearch\bar\1.bin\M3SRCHMN.EXE (PUP.Optional.MindSpark) -> No action taken.
C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL (Trojan.BHO) -> No action taken.
C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL (Trojan.BHO) -> No action taken.

(end)

 

Well, you didn't delete any of the several things that it found. You will continue to have problems. It says No action taken. You have to make sure there is a check in ALL the boxes and then delete them then reboot. You need to do another scan but first update MBAM as they do update the program every day and sometimes several times a day. Then post the log in the MALWARE section for Broni to see. He is good at what he does.

 

Thanks... will scan again and delete as you have advised..

 

I did a full scan again and had all the findings deleted. About 15 minutes the deletion, the popup started right back again. it has 2 small sections asking to Allow or Deny and I always click Deny.

Now I am no expert, but I have always felt that this popup is done by the Acer company... they are the manufacturer of my laptop. I call it a popup but that is probably not the correct name for it.

Before I first posted, I did a long search on this site to see whether anyone else was plagued by this same "programme ". I came across a post which stated that a number of Services provided by Acer were not really needed and can be un-installed. The site administratr was not too keen about it and said that its probably best to leave those services alone, as un-installing them may cause some other problem such as not being able to download needed software, etc. But the person who proposed the un-install still maintained that getting rid of them would be all right.

I am wondering if getting rid of them, or some of them, could stop this noisy Acer programme from affecting my pc. A couple days ago I reported the popup to Acer by email as well but have not heard from them.

 

http://www.laptop-forums.com/threads/how-do-i-disable-aspire-one-splash-screen.16185/

Post #9 suggests a cure to stop Acer Splash Screen. Neil.

 

Quote from Neil's link...

Wonder if one could rename it Acer.old?

 

Sorry, but I don't seem to understand what to do in these last 2 postings... Please help

 

Provided you can locate C:\WINDOWS\Web\Wallpaper\Acer.bmp, you'll have make the file extension viewable by clicking on Tools > Folder Options > View and uncheck the box that says, "Hide extensions for known file types ". Next, look for Acer.bmp and rename it to something like acer.old.

Renaming the file to .old will allow you to delete it, or let a file cleaner do it for you.

EDIT: If you want to, you can copy the acer.bmp to a safe place before renaming it. (In case you change your mind, or start to have problems)

 

http://tim.id.au/laptops/acer/aspire 4715z 4315.pdf

This the link for your Acer 4315 Service Manual 144 pages in pdf. Download.
Gives a lot of useful info like Beep Codes - How to Reset if you forget BIOS password etc.

In the BIOS you can Disable the Acer Logo Display.
Well worth having a look at. Neil.

 

There is no Folder options when I click on Tools on my inbox or on my internet explorer page... and I don't seem to be able to find C:\Windows\Web....etc. so I am still at a loss as to what to do..

 

Hi Beach Boy, Start button > Right click Computer > Open > Right click Volume C: > Open > Left pane scroll down to Windows > Expand (left click) > scroll down to Web > Expand(left click) > Wallpapers > click on Wallpapers > look for Acer.bmp

Hope this helps. Neil.

 

Thanks Neil..

I reached the wallpaper window, which has quite a number of small pictures with names under them, but none with Acer.bmp. Don't know why I could not find it..

.

 

You won't find it in those locations.

You have to open a page in Windows Explorer to find the tools menu. Check this out if the menu bar is missing...

Windows Explorer Menu Bar In Windows Vista

I see where you followed Neil's directions and came up empty. Use Vista's search function (should be on the start menu) and look for acer.bmp. Here's a link if you need help...

How do I search for files in Windows Vista?

 

Still can't find Acer.bmp, I read where someone said that they found it in the Registry and simply deleted it and that solved the problem... no more flash screen. How safe do you thinlk this is and can you give any details how it can be done? Thank you.

 

I know the registry. Post a link to that fix so I can look at it.

 

Looking back at your Malware Bytes log, it would pay to let Broni take a look at you machine as was suggested by MrBill in post # 6 in the malware & virus removal forum after lj50 assists you.

Be sure to read the following before you post in that forum...


http://www.windowsbbs.com/malware-virus-removal/announcements.html