Random audio ads playing

[imdyinhere]

Hello,

I am having a problem with my computer randomly playing audio ads even when there are no programs running. I have Malwarebytes installed and it consistantly shows that it is blocking a svchost.exe program, but the audio still plays. I have tried reinstalling windows 7 but that didnt help. Any ideas what might be causing this issue and how to stop it?

Imdy

 

[queeniereg]

Thank you again and again! What a lifesaver it worked for me.

 

[Randman01]

My wife picked this trojan browsing a query to movie trivia on her laptop. I've spent three nights (after work) trying to get rid of this thing. First, MS Security Essentials, then AdAware, SpyBot and finally Norton's security suite via Comcast. None of them picked it up.

After downloading the tdsskiller.exe, it ran in less than one minute, asked for a reboot, and voila, the bot is gone. In the future I guess i'm going to google bot/virus behavior before spending nights trusting that these commercial virus scanners will do what they're supposed to do.

Thanks for the suggestion!

 

[Francis Scallatino]

Download & run Kaspersky's TDSSKILLER. You will most likely find a rootkit (Rootkit.Boot.Pihar.c). It is what keeps creating the fake svchost.exe file.

You mileage may vary, of course. This allowed me to properly remove the rogue svchost file.

 

[Francis Scallatino]

Is this a free download. If so, can you give me a link to the download. Having trouble finding and actual download.

 

[Justin Winter]

i tried the TDSSKILLER, found zero threats and still have random audio ads playing every once in a while. i go into services and shut down everything and then monitor it. nothing new comes up, no programs running, no windows for internet open... nothing. i can see when it starts to load with my data meter (bitmeter) but it doesn't have anything to source what's using the data.

 

[Coastalzipcode]

This solved my problem too, thanks so much. So annoying and very frustrating trying to find a solution...so thankful for your help!
BTW, I found the free download on CNET by Google searching TDSSKILLER

 

[alphastorm1941]

Wow! TDSSKILLER worked! After having so many other things not work is great to have a quick solution!

 

[Vodoochild81]

Hi guys, I have this exact problem! I tried Kapersky's Tdss killer but it found nothing. Is there something I should try in the settings? Or did it work for everyone in the standard scan? Is everyone doing this in safe mode?

 

[jshep500]

Hi all, I have this same issue. Like VoodooChild81, I have run Tdss killer and it found nothing. More background: I have run MBAM, SuperAntiSpyware, and a full sacwith my Virus protection (AVG free). I have run these in Safe mode and normal mode. Only tracking issues were found and I had all results removed. My investigation has found that the resource playing the ads is "SVCHOST.exe (DCOM Launch)". When I go into "Resource Monitor" and end this SVCHOST process the ad stops and will not start again until I reboot my PC. Also Note - when I end this process I get a error popup stating "Windows must be restarted, DCOM has an unexpected error" (the exact error message is slightly different). I have read that a utility called Far Bar Recovery Scan Tool will resolve this problem. I have been unable to download it, probably due to all the programs I have removed trying to clean up my issues.

So if anyone has a suggestion on how I can resolve my problem.. I would appreciate it...

Thanks

John

 

[violagurl117]

My computer has the same problem that Jshep mentioned right above me...TDSS killer doesn't work and we are getting the dcom launch thing too. Also tried AVG full scan and MBAM

 

[jshep500]

Update on my issue: I was able to download Far Bar Scan tool and I went through the process to run the fix in recovery mode (command prompt) but the scan did not find any problems to correct. Ultimately (and should have been my first step) I just restored my PC to a 12/31/13 restore point and my problem is resolved. I will monitor this forum in case other fixes for this are recommended for my future reference. Hopefully someone can post solutions to help others who still have this issue. Thanks for reading!

 

[jdz5]

None of these utilities worked until I ran rkill. You can get it from bleepingcomputer.com (http://www.bleepingcomputer.com/download/rkill/). It seems to deactivate any running malware to allow the scanners to work. After I ran it, tdsskiller found all kinds of goodies to attack. I'm now enjoying the sound of silence (S&G song reference) - qlol - quietly laughing out loud... shhhhh...

UPDATE: I couldn't get rid of rpcss.dll but the scans kept pointing to this file. I renamed it but the pc hung on reboots. HitmanPro finally got it right.

 

[ExtraMike]

You can't just rename or delete rpcss.dll as your system needs it to boot all the way in to windows. If you delete it, you will get the black screen of death. (You'll have to do a system restore to boot your computer to windows again.)

Replace rpcss.dll in the c:\windows\system32 folder. Note that if you're putting it on a Win 7 Pro 32 bit machine, it needs to come from a 32 bit machine, the file is different for 64 bit.

 

[pyaaari]

I just installed TDSSKILLER. And no more stupid radio playing. I love this silence.. ahhhhh!
I will post if in case the radio comes back! I really hope not

 

[charlie hill]

Hello,

I am having a problem with my computer randomly playing audio ads even when there are no programs running. I have Malwarebytes installed and it consistantly shows that it is blocking a svchost.exe program, but the audio still plays. I have tried reinstalling windows 7 but that didnt help. Any ideas what might be causing this issue and how to stop it?

Imdy

 

[charlie hill]

Do you have WiFi if so click it off

 

[frustratedcompuser]

You can't just rename or delete rpcss.dll as your system needs it to boot all the way in to windows. If you delete it, you will get the black screen of death. (You'll have to do a system restore to boot your computer to windows again.)

Replace rpcss.dll in the c:\windows\system32 folder. Note that if you're putting it on a Win 7 Pro 32 bit machine, it needs to come from a 32 bit machine, the file is different for 64 bit.

So I ran this as directed above and when tdsskiller asked about that rpcss file I marked skip, ran it and now I'm getting that black screen. Am I screwed and have I lost everything on my harddrive? Help?

 

[Elias Timberlake]

Download & run Kaspersky's TDSSKILLER. You will most likely find a rootkit (Rootkit.Boot.Pihar.c). It is what keeps creating the fake svchost.exe file.

You mileage may vary, of course. This allowed me to properly remove the rogue svchost file.

TDSSKILLER didn't find anything for me, any suggestions?

 

[shellabella]

I am having the same problem. I am going to try to shut wifi and Internet off and run with both malawarebytes and Kaspersky. I run with AVG and have NEVER had a problem. What is this virus? I just fully replaced thus hard drive. I don't even know how to reinstall. HELP!!!!


I have 3 detected objects through Mala so far - fingers crossed!

 

[drazon1]

I have been experiencing the same problems with Random Audio Ads , in English and French, and could not detect or remove it by the conventional Anti-Virus. All applications failed to remove it , until...
I ran Combofix and immediately after ran the regular Anti-malware and TDSSKiller !
That was the only way I succeeded to solve the problem and killed the virus .
Thanks for all the guidance and assistance in here.