I believe it is a malware infection .. would appreciate help

All looks good there, searches still redirected?

hey cypher

Id just like to restate that its not searches that are redirecting .... Adverts just open on my browser ... a new tab or window will pop up ... the two websites will flash on (ib.adnxs.com and seth.avazutracking.net) and then im redirected onto an advertisement.

aside from the three pop ups 10 mins ago, there havent been any more .... but they come in randomly.

do you think it would help if I uninstalled firefox and removed all firefox entries from the registry .... rebooted and reinstalled?

Hi,

do you think it would help if I uninstalled firefox and removed all firefox entries from the registry .... rebooted and reinstalled?

This appears to be affecting both FireFox and Internet Explorer.
Out of interest run FireFox in safe mode for a while, then let me know if you still see the adverts.

Click on Start > All programs > Accessories > Run.

• Enter the following command:
  

  firefox.exe -safe-mode

• Then hit OK
• In the open window, select Start in Safe mode.

Hey

Will do .... I have also disabled cookies on firefox ..... the adnxs and avazu cookies keep reappearing, in additiong to the advertisement website cookie

I wanna know if this is coming in from a website i am frequenting or something on my pc

"MrWhitefolks" wrote:I wanna know if this is coming in from a website i am frequenting or something on my pc

It could of come from a site you visited, but it is something on your PC.
Let me know how it goes in safe mode.

Hello Cypher

Its been several hours of running firefox in safe mode, and there haven't been any redirects thus far.

Ill give you another update in like 10 hours ...

Thank you again for your efforts ... I really appreciate it

Hi,

Thank you again for your efforts ... I really appreciate it

You're most welcome.

Its been several hours of running firefox in safe mode, and there haven't been any redirects thus far.

Good.
I need you to upload a file for me to get it tested.

Set Your Computer to Show All Files/Folders.

• Click Start.
• Open Computer.
• Press the ALT key.
• Select the Tools menu and click Folder Options.
• Select the View Tab.
• Under the Hidden files and folders heading select Show hidden files and folders.
• Uncheck the Hide protected operating system files (recommended) option.
• Click Yes to confirm.
• Click OK.

Next.

• Please click on the following [url]LINK[/url]. A new window will open.
• Please copy/paste the text inside the codebox below into the box marked Link to topic where this file was requested:[code][/code]
• Click the Browse button and navigate to the folder:
  
• There should be a file there named
• Select the file and click Open
• In the Leave any comments... box, please put:
  

• Finally click SendFile
• let me know in your next post if the upload was successful.

Hello again Cypher

the upload was successful

Malware Submission

Your file was successfully submitted. Please let the user helping you know that you have submitted the file.


Incidentally, id also like to report that using firefox in safe mode appears to stop the adverts.
Additionally, Ive blocked cookies and told firefox to warn me when web pages are trying to reload or redirect, and it also appears to have stopped the adverts.

Hi,

the upload was successful

Good work, bear with me while the file gets tested and i will get the results.

Incidentally, id also like to report that using firefox in safe mode appears to stop the adverts.

It looks like we may have found the cause of the problem, i will get back to you later.

Alright .. thats fantastic

thanks again

Hi,
Ok i would like you to boot Firefox back in normal mode, and then disable these add-ons.
If you don't know how to disable the add-ons let me know.

Easy YouTube Video Downloader 6.5 <- may not be named
Hotspot Shield Helper (Please allow this installation)

Once done try using FireFox normal mode, then let me know if you get any redirects/pop-up adverts.

Hello Cypher

Ok .... Would you like me to allow cookies and redirects?

I should tell you that I havent had any redirects today ...

"MrWhitefolks" wrote:Ok .... Would you like me to allow cookies and redirects?

No, not just now.

alright .... Ive disabled the two add-ons ....

Will give it a few hours to see if any pop-ups occur, and will report back

"MrWhitefolks" wrote:Will give it a few hours to see if any pop-ups occur, and will report back

Ok