Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Locked thread
spog
Aug 7, 2004

It's your own bloody fault.
Problem description: I seem to get this pop up about once every couple of weeks. It seems to appear when I am using Firefox (though, as I usually have a FF window open, that may just be coincidence.



Attempted fixes: Run Defender, Malware Bytes and SuperAntiSpyware. Nothing detected. No odd extensions in FF found, nothing unusual in Installed Software

Recent changes: No
Operating system: Win 10 Pro x64
System specs: n/a
Location: UK
I have Googled and read the FAQ: Yes. Solutions all seem to hinge on finding something nasty using the above methods.

I also found the following log file in the temp folder where this runs from:

code:
<O605/151626:ERROR:setup_main_class.cpp(238)] Failed to create Temp directory C:\Program Files (x86)\html\div\Temp: Access is denied. (0x5)
[0605/211043:ERROR:setup_main_class.cpp(238)] Failed to create Temp directory C:\Program Files (x86)\html\div\Temp: Access is denied. (0x5)
[0607/194535:WARNING:setup_main_class.cpp(1708)] Command Line: "C:\Users\css\AppData\Local\Temp\CR_FDC6F.tmp\setup.exe" --install-archive="C:\Users\css\AppData\Local\Temp\CR_FDC6F.tmp\div.PACKED.7Z" --multi-install --div --verbose-logging --do-not-launch-div --system-level /installerdata="C:\Windows\TEMP\guiF6C2.tmp"
[0607/194535:WARNING:setup_main_class.cpp(1710)] multi install is 1
[0607/194535:WARNING:setup_main_class.cpp(1713)] system install is 1
[0607/194535:WARNING:installer_state_class.cpp(119)] Install distribution: html div
[0607/194535:WARNING:installer_state_class.cpp(156)] Install distribution: html div binaries
[0607/194535:WARNING:install_util_class.cpp(272)] Windows NT 6.1 SP1
[0607/194535:WARNING:setup_main_class.cpp(790)] Installing to C:\Program Files (x86)\html\div\Application
[0607/194535:WARNING:setup_main_class.cpp(624)] Created path C:\Program Files (x86)\html\div\Temp
[0607/194535:WARNING:setup_main_class.cpp(1427)] Installing div from compressed archive C:\Users\css\AppData\Local\Temp\CR_FDC6F.tmp\div.PACKED.7Z
etc, etc (200,000 char in total)

Adbot
ADBOT LOVES YOU

Zogo
Jul 29, 2003

Try scans using these three:

http://www.bleepingcomputer.com/download/tdsskiller/
http://www.bleepingcomputer.com/download/junkware-removal-tool/
http://www.bleepingcomputer.com/download/adwcleaner/

spog
Aug 7, 2004

It's your own bloody fault.

Ta.

Tried them all. All clean, except adwcleaner that found some registry entries:

Key Found: HKLM\SOFTWARE\Classes\Interface\{FA7B2795-C0C8-4A58-8672-3F8D80CC0270}
Key Found: HKLM\SOFTWARE\Classes\Interface\{47A1DF02-BCE4-40C3-AE47-E3EA09A65E4A}
Key Found: HKLM\SOFTWARE\Classes\TypeLib\{1112F282-7099-4624-A439-DB29D6551552}
Key Found: HKU\S-1-5-21-472343283-xxxxxxxxxx-xxxxxxxxx-xxxx\Software\ForumerIT (I've censored this one)
Key Found: HKCU\Software\ForumerIT
Key Found: [x64] HKCU\Software\ForumerIT

I can't see anything related to this on the net, but I guess I might as well delete it, just for the hell of it. That SID is for an admin, so could be something nasty.

joebuddah
Jan 30, 2005
Try removing all extensions and deleting your history and cookies.

  • Locked thread