PPRuNe Forums

PPRuNe Forums (https://www.pprune.org/)
-   Computer/Internet Issues & Troubleshooting (https://www.pprune.org/computer-internet-issues-troubleshooting-46/)
-   -   By Great Deal (https://www.pprune.org/computer-internet-issues-troubleshooting/563135-great-deal.html)

Pelikal 17th Jun 2015 18:16

By Great Deal
 
I have no idea where this came from:

Whenever I hover over certain buttons this pops up. It isn't just PPrune, by the way. Happened on BBC Homepage, Photobucket. Something has crept in. Any ideas? :(


http://i1100.photobucket.com/albums/...psbdhfap4l.jpg

Saab Dastard 17th Jun 2015 18:25

It looks awfully similar to the deal-finder PUP, so perhaps the advice for getting rid of that will work for you.

Just search for "deal finder pop up" on google.

SD

Groucho 17th Jun 2015 18:33

Hmm - are you aware that clicking on your post takes me into your photobucket account?

Saab Dastard 17th Jun 2015 18:50


Hmm - are you aware that clicking on your post takes me into your photobucket account?
That was down to the OP entering the image location as a URL as well as an IMG. I have taken the liberty of correcting it.

SD

Pelikal 17th Jun 2015 18:57

Groucho, thanks. I believe you can only see my public albums (I think!).


SD just noticed your post, thanks. Not sure what I did wrong there.

Saab Dastard 17th Jun 2015 19:22

Pelikal,

I would surmise that you took the image details from photobucket as an [IMG]somephoto.jpg[/IMG] string, and put it into your post as a link:
[ URL]http://somephoto.jpg[IMG]somephoto.jpg[/IMG][/URL ], as that is how it ended up. Note that I had to insert spaces at the start and end of that string to show what's going on.

The net effect of which is to embed the URL, but with the desired image as the placeholder text for the URL. Hence, clicking on the picture is actually clicking on the link to your public photobucket.

Just pasting [IMG]somephoto.jpg[/IMG] simply embeds the image, not the link.

In the standard PPRune editor, the Insert Image icon is the yellow one with a mountain in, and the Link icon is the one with the globe and a... link. The former puts the IMG wrapper around selected text, the latter puts the URL wrapper around selected text.

SD

Pelikal 17th Jun 2015 20:10

SD, thanks again for response. I'll now try and address the original query!!

Tarq57 17th Jun 2015 20:26

Try adwcleaner to remove it, and any other undesirables (PUPs) that may be lurking.

Pelikal 18th Jun 2015 07:30

Tarq, thanks. Downloaded ADWCleaner. It found stuff but didn't get rid of the Great Deal bother. I'll look into it later. Cheers:ok:.

ShyTorque 18th Jun 2015 08:02

I can recommend installing the free version of "Superantispyware" for annoying stuff like that.

gemma10 18th Jun 2015 12:04

Hitman Pro from Bleeping Computer will eradicate it. Sorted. Its free for a trial period. However its so good I purchased it. Only 20 euros per year.:ok:

Pelikal 19th Jun 2015 16:22

Gawd, what a carry on. Before the two posted recommendations above appeared (thanks btw) I found some instructions to remove the Great Deal thingy.

1st instruction was to open programs and uninstall anything that one didn't recognise or was suspicious looking. I found something called YAC, Brazillian I think it was. So I thought, as I'm here, I'll uninstall that as I was pretty sure it shouldn't be there. Clicked uninstall and a window opened. The program looked like an anti-virus program which I didn't recognise and didn't install.

Started to uninstall, it reached 5% and went no further. Buggah, I'm thinking now this is a piece of malware in itself disguised as anti-malware and won't uninstall itself. I couldn't quit and close the window. I couldn't get anywhere so pulled the plug, so to speak. Upon restart, the machine was hopeless, couldn't do anything.

So forced it to start in Safe Mode which was ok. I had recently created a restore point so decided, rightly or wrongly, to revert to it (not something I had done before so I was a bit anxious). Well, it worked and the machine seemed to be behaving reasonably but YAC was still there. That wasn't the main concern as the whole point was getting rid of the Great Deal thing.

I downloaded "Superantispyware", ran it and it picked up YAC and other items, deleted that and I haven't had the GD popup appear yet either, so perhaps sorted. Stuff running quite smoothly.

I decided to create a new restore point and I got the following message:

"The Volume Shadow Copy service used by System Restore is not working."
Web search tells me to run System File Checker (sfc /scannow). I can't open the CMD window as administrator! error:
"The service cannot be started, either because it is disabled or because it has no enabled devices associated with it".

So I can't open Command Prompt to try and get The Volume Shadow Copy service used by System Restore working again...

Advice appreciated!!

Saab Dastard 19th Jun 2015 16:48

Do you mean that you can't open a command prompt, or you can't open it as administrator?

If the former, can you open it directly from C:\Windows\System32 rather than from the shortcut?

If the latter, can you check the state of the Application Information Service (run services.msc)? It should be set to manual, not be disabled. Here's the description of the service:


Facilitates the running of interactive applications with additional administrative privileges. If this service is stopped, users will be unable to launch applications with the additional administrative privileges they may require to perform desired user tasks.
What version of Windows are you running?

SD

Pelikal 19th Jun 2015 16:59

SD. Ahh, yes I can open command prompt directly but I can't run as administrator. I don't know the difference..

Windows 7 Home Premium.

Saab Dastard 19th Jun 2015 17:02

Then the problem is likely to be with the service required to elevate privileges, possibly the one I added to my post above.

SD

Pelikal 19th Jun 2015 17:20

SD, this is very good of you, providing such responses. I don't understand:


If the latter, can you check the state of the Application Information Service (run services.msc)? It should be set to manual, not be disabled.
How would I do this?

Saab Dastard 19th Jun 2015 19:22

Start > Search programs and files > services.msc

That's what I meant by Run services.msc

It's to be found in %windir%\system32\services.msc

You will need to log on as the administrator to change anything, because elevating user privileges doesn't seem to be working for you.

Under normal circumstances you can also get to it by right-clicking "Computer" and selecting Manage - but that requires elevated privileges (it has the shield icon on it).

You may have to start in Safe Mode with Networking to get to the services console.

SD

Pelikal 19th Jun 2015 21:16

Latest:

I booted in Safe Mode with networking. Ran CMD prompt as Administrator and performed sfc /scannow.

Windows Resource Protection found corrupt files but was unable to fix some of them. Details in log (haven't found that yet).

Opened Service Console. Noticed 'Volume Shadow Copy' is set to automatic.

Still confused by Application Information Service. Sorry, I'm probably being a bit dumb here.Still can't create a restore point, I'm giving this a break for the night!:ugh:

Pelikal 21st Jun 2015 09:29

Sorted (he says reluctantly).
 
Finally able to create a restore point. Firstly was able to run services. Not sure what changed here but something nudged into action.

Original error message when trying to create a restore point:

The Volume Shadow Copy service used by System Restore is not working.

In Services, Volume Shadow Copy was set to Automatic but would not start.

What I found on the net was this:

I tried many solutions and the problem persisted. Then I stumbled across another important Service in Services.msc:
"Microsoft Software Shadow Copy Provider".
Properties: Automatic startup, apply and the Start. This finally fixed Volume Shadow Copy Service.


On my machine this service had clearly reverted to manual, probably with all the faffing about. Just thought I'd mention this fix.


Now if I had just used "Superantispyware" in the first instance. Or, of course, been more careful.:sad:

Bushfiva 21st Jun 2015 09:48

Pelikal, the owners of YAC were caught in March stealing MalwareBytes MBAM malware database. MBAM trapped them by putting a fake virus definition called "Spywera.ThievingBastards". YAC probably doesn't detect/clean a great deal, right now :O


All times are GMT. The time now is 22:40.


Copyright © 2024 MH Sub I, LLC dba Internet Brands. All rights reserved. Use of this site indicates your consent to the Terms of Use.