01-08-2013 11:35 AM
Somehow this malware has invaded my machine and I keep getting popups and enhanced text esp on yahoo and facebook sites. It's from some company called App Nexus and the ads have nym1.ib.adnxs.com as the adress. Pop up blocker will not stop them. I've searched the internets for solutions but there are a lot of them out there. This appears to be a common scourge.
I use Trend Micro Titanium Internet Security 2012. Windows 7 64bit. Browser IE9
Here's the Hijack this log (OTL logs attached):
Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 1:52:44 PM, on 1/8/2013 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v9.00 (9.00.8112.16457) Boot mode: Normal
Running processes: C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe C:\Users\Merrill\AppData\Local\Google\Update\1.3.2
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/USCON/1 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int
-- End of file - 15585 bytes
Solved! Go to Solution.
01-08-2013 02:52 PM
Follow Step 1, 2, and 3 (under Removal Process) in this malware removal guide:
If you have any questions about the instructions, just ask. Let me know if this helps you.
04-27-2013 11:30 AM - edited 04-27-2013 11:31 AM
What you have is not malware but adware or PUP, read this: http://deletemalware.blogspot.com/2013/04/how-to-r
What you have to do is remove adware apps that likely came bundled with recently installed freeware. Or you can simply scan your computer with AdwCleaner.
And on more thing, you can opt-out adnxs ads/tracking cookies here http://appnexus.com/platform-policy#choices
07-17-2014 01:46 PM
didn't see anything there to opt out
but PCH sent me email stating that it came from here but I don't agree:
The ad you are seeing is coming from CPX (an advertising network) and is called a pop-under ad. Unfortunately CPX cannot control the popunders on a user by user basis. The only way to prevent this from occurring is to install a pop-up/pop-under blocker onto your browser. We apologize for any concern this may have caused
it is as you said from adnxs and think I cleared it but want to make sure. if I would opt out doubt it would be trust worthy.