Page 1 of 2 12 LastLast
Results 1 to 15 of 23
  1. #1
    Star Lounger
    Join Date
    Mar 2009
    Posts
    52
    Thanks
    6
    Thanked 1 Time in 1 Post

    How to get rid of ib.adnxs popup

    Only on Firefox do I get ib.adnxs.com pop up It comes as a blank white screen with that address. I run windows 7 64 bit. How do I get rid of this nuisance from constantly popping up Is there a way to remove it?

    thanks for any help

  2. Get our unique weekly Newsletter with tips and techniques, how to's and critical updates on Windows 7, Windows 8, Windows XP, Firefox, Internet Explorer, Google, etc. Join our 480,000 subscribers!

    Excel 2013: The Missing Manual

    + Get this BONUS — free!

    Get the most of Excel! Learn about new features, basics of creating a new spreadsheet and using the infamous Ribbon in the first chapter of Excel 2013: The Missing Manual - Subscribe and download Chapter 1 for free!

  3. The Following User Says Thank You to schonman For This Useful Post:

    kaybee (2014-03-06)

  4. #2
    Super Moderator RetiredGeek's Avatar
    Join Date
    Mar 2004
    Location
    Manning, South Carolina
    Posts
    6,235
    Thanks
    202
    Thanked 796 Times in 729 Posts
    Schonman,

    Try clearing your cache.
    May the Forces of good computing be with you!

    RG

    VBA Rules!

    My Systems: Desktop Specs
    Laptop Specs


  5. #3
    Plutonium Lounger Medico's Avatar
    Join Date
    Dec 2009
    Location
    USA
    Posts
    12,625
    Thanks
    161
    Thanked 931 Times in 852 Posts
    This appears to be an advertising pop up. Perhaps there is something that snuck into your FF installation. Check the extensions and plug-ins.

    FFAdd-ons.jpg
    BACKUP...BACKUP...BACKUP
    Have a Great Day! Ted


    Sony Vaio Laptop, 2.53 GHz Duo Core Intel CPU, 8 GB RAM, 320 GB HD
    Win 8 Pro (64 Bit), IE 10 (64 Bit)


    Complete PC Specs: By Speccy

  6. #4
    Star Lounger
    Join Date
    Mar 2009
    Posts
    52
    Thanks
    6
    Thanked 1 Time in 1 Post
    I have deleted and reinstalled Firefox and also checked the plugins and add-ons , I have also cleared the cache and it still keeps returning. Is there anything else I can do????

    Thanks for your replies before

  7. #5
    Super Moderator jwitalka's Avatar
    Join Date
    Dec 2009
    Location
    Minnesota
    Posts
    4,769
    Thanks
    67
    Thanked 548 Times in 496 Posts
    Try creating a new Firefox profile and run with that:
    https://support.mozilla.org/en-US/kb...refox-profiles

    Jerry

  8. #6
    Super Moderator
    Join Date
    Jun 2011
    Location
    New England
    Posts
    2,780
    Thanks
    84
    Thanked 343 Times in 309 Posts

  9. #7
    Star Lounger
    Join Date
    Mar 2009
    Posts
    52
    Thanks
    6
    Thanked 1 Time in 1 Post
    thanks to everyone but i still have the problem

  10. #8
    5 Star Lounger
    Join Date
    Dec 2009
    Location
    Slough, Berkshire UK
    Posts
    918
    Thanks
    52
    Thanked 52 Times in 50 Posts
    Try installing the Adblock plus add-on it may block it from launching or if does not there may be a tab with block on it which tells Adblock to block it.
    Clive

    All typing errors are my own work and subject to patents pending. Except errors by the spell checker. And that has its own patients.

  11. The Following User Says Thank You to curiousclive For This Useful Post:

    schonman (2012-08-28)

  12. #9
    Star Lounger
    Join Date
    Mar 2009
    Posts
    52
    Thanks
    6
    Thanked 1 Time in 1 Post
    installed adblock and that worked thanks

  13. #10
    Lounge VIP bobprimak's Avatar
    Join Date
    Feb 2009
    Location
    Hinsdale, IL, USA
    Posts
    2,311
    Thanks
    139
    Thanked 114 Times in 98 Posts
    I hope I'm not too late to this thread, but all the advice up to this point is dead wrong.

    It's a virus. This article describes it and does not offer much hope of completely removing it. Bleeping Computer has This Thread on the infection. It comes from an infected website or Facebook Page. And it is very difficult to remove, as it changes itself at least once a day. But you might try a frequently updated antivirus program in portable form, in Windows Safe Mode. Otherwise, you may be headed toward a Windows reinstall. Don't trust any recent backup images.

    AdBlock may only be masking a deeper infection, and these types of viruses tend to download other stuff every time you go online. Don't just paper it over -- remove it.
    Last edited by bobprimak; 2012-09-06 at 14:18.
    -- Bob Primak --

  14. #11
    Super Moderator
    Join Date
    Jun 2011
    Location
    New England
    Posts
    2,780
    Thanks
    84
    Thanked 343 Times in 309 Posts
    Quote Originally Posted by bobprimak View Post
    I hope I'm not too late to this thread, but all the advice up to this point is dead wrong.

    It's a virus. This article describes it and does not offer much hope of completely removing it. Bleeping Computer has This Thread on the infection. It comes from an infected website or Facebook Page. And it is very difficult to remove, as it changes itself at least once a day. But you might try a frequently updated antivirus program in portable form, in Windows Safe Mode. Otherwise, you may be headed toward a Windows reinstall. Don't trust any recent backup images.

    AdBlock may only be masking a deeper infection, and these types of viruses tend to download other stuff every time you go online. Don't just paper it over -- remove it.
    Many amateur sites like the one you found would like you to think it's a virus because they want your money to remove it. It's really an AppNexus adserver.

    Bruce

  15. #12
    Lounge VIP bobprimak's Avatar
    Join Date
    Feb 2009
    Location
    Hinsdale, IL, USA
    Posts
    2,311
    Thanks
    139
    Thanked 114 Times in 98 Posts
    Quote Originally Posted by BruceR View Post
    Many amateur sites like the one you found would like you to think it's a virus because they want your money to remove it. It's really an AppNexus adserver.

    Bruce
    You may have been confused by a Google or Who Is link which leads here. This is NOT what we are talking about in this thread.

    In most cases like this one, I'd agree totally with your post, Bruce. BUT... in this case:

    Spybot S&D's Forum says MSE doesn't flag this adware as malicious, but Spybot and ESET do. This means that at least some legitimate antispyware programs consider this to be more than simple adware. The Spybot Forum did not immediately advise to buy and use Spybot S&D (which has a free version as well) to remove this adware.

    Facebook has a posted Note on removing this malware. So even they are taking this as more than just simple adware. They even offer their own removal tool. To the best of my knowledge, this is an official Facebook Note.

    It seems that legitimate antispyware programs and Facebook itself have been flagging this as more than just adware. Apparently, they seem to think it's a Trojan Horse, which morphs frequently and may be capable of downloading other malicious components. And it is a bit worrisome that this unwanted adware may be installed as a drive-by download, without user interactions. That's a red flag right there. Removal may not be as difficult as the Bleeping Computer site says, but there could be more going on here than meets the eye.

    Bleeping Computer is NOT an amateur site -- they have been in the business of helping users remove unwanted software for longer than practically anyone, and the site has a great deal of respect here in The Lounge. They DO NOT charge money to remove anything, and usually only recommend free removal tools when there are adequate free tools available.

    I would sooner trust Bleeping Computer's researched answers when backed up by several security companies and Facebook itself, than an undocumented personal opinion posting here in The Lounge -- no personal disrespect intended.

    Zimbio.com does push a paid product, so I only took the description from there. I only believe such descriptions at advertising websites when a legitimate and unbiased site like Bleeping Computer confirms the threat and offers free advice on how to use free methods to remove the threat. My only issue with Bleeping Computer is that they often advise manual methods when effective automated removal is possible with free or paid commercial products.

    This may be the case here, but I would still advise complete removal of this adware. And that requires more than uninstalling something or using an ad blocker. I would think that in spite of its variability, this adware can be removed completely with Malwarebytes or Super Antispyware, which may contradict my previous post. Follow up with a simple cleanup operation (CCleaner), but do discard any System Restore Points which might have been created while the adware was present. The same goes for System Images which may include the adware.

    Both Zimbio and Bleeping Computer tend to be alarmist and tend to offer advice not to use automated removal methods. That type of advice is simply ridiculous in most cases. Not amateurish, but self-serving if you ask me. But I repeat, Bleeping Computer does NOT charge for its services. Both sites do know better than what they advise, in my opinion.
    Last edited by bobprimak; 2012-09-07 at 13:42.
    -- Bob Primak --

  16. #13
    Super Moderator
    Join Date
    Jun 2011
    Location
    New England
    Posts
    2,780
    Thanks
    84
    Thanked 343 Times in 309 Posts
    Quote Originally Posted by bobprimak View Post
    You may have been confused by a Google or Who Is link which leads here. This is NOT what we are talking about in this thread.
    No confusion. That IS what we are talking about in this thread.


    Quote Originally Posted by bobprimak View Post
    In most cases like this one, I'd agree totally with your post, Bruce. BUT... in this case:

    Spybot S&D's Forum says MSE doesn't flag this adware as malicious, but Spybot and ESET do. This means that at least some legitimate antispyware programs consider this to be more than simple adware. The Spybot Forum did not immediately advise to buy and use Spybot S&D (which has a free version as well) to remove this adware.
    Well, at least you've switched to calling it adware instead of a virus. But please read carefully; no one at Spybot S&D's Forum confirmed anything about ib.adnxs.com at all.


    Quote Originally Posted by bobprimak View Post
    Facebook has a posted Note on removing this malware. So even they are taking this as more than just simple adware. They even offer their own removal tool. To the best of my knowledge, this is an official Facebook Note.
    You must try to differentiate between "Facebook" and "some person using Facebook". That's just another link to a scam site and nothing official whatsoever.


    Quote Originally Posted by bobprimak View Post
    It seems that legitimate antispyware programs and Facebook itself have been flagging this as more than just adware. Apparently, they seem to think it's a Trojan Horse, which morphs frequently and may be capable of downloading other malicious components. And it is a bit worrisome that this unwanted adware may be installed as a drive-by download, without user interactions. That's a red flag right there.
    That's all from scam sites. No info from any legitimate sites.


    Quote Originally Posted by bobprimak View Post
    Removal may not be as difficult as the Bleeping Computer site says, but there could be more going on here than meets the eye.
    No one there said it was difficult. They ran Combofix and reset Firefox. "Gringo" didn't even say what had been removed.


    Quote Originally Posted by bobprimak View Post
    Bleeping Computer is NOT an amateur site -- they have been in the business of helping users remove unwanted software for longer than practically anyone, and the site has a great deal of respect here in The Lounge. They DO NOT charge money to remove anything, and usually only recommend free removal tools when there are adequate free tools available.
    I was referring to the Zimbio article as being amateur, but the virus-busters at Bleeping Computer aren't professionals either, are they?


    Quote Originally Posted by bobprimak View Post
    I would sooner trust Bleeping Computer's researched answers when backed up by several security companies and Facebook itself, than an undocumented personal opinion posting here in The Lounge -- no personal disrespect intended.
    What makes you think Bleeping Computer researched anything in this case? Please show me some backup from several security companies. The Facebook entry is a scam.


    Quote Originally Posted by bobprimak View Post
    Zimbio.com does push a paid product, so I only took the description from there. I only believe such descriptions at advertising websites when a legitimate and unbiased site like Bleeping Computer confirms the threat and offers free advice on how to use free methods to remove the threat. My only issue with Bleeping Computer is that they often advise manual methods when effective automated removal is possible with free or paid commercial products.
    Bleeping Computer didn't confirm any threat. They may have removed something, but no one knows what (because they did use automated methods).


    Quote Originally Posted by bobprimak View Post
    This may be the case here, but I would still advise complete removal of this adware. And that requires more than uninstalling something or using an ad blocker.
    How do you know that?


    Quote Originally Posted by bobprimak View Post
    I would think that in spite of its variability, this adware can be removed completely with Malwarebytes or Super Antispyware, which may contradict my previous post. Follow up with a simple cleanup operation (CCleaner), but do discard any System Restore Points which might have been created while the adware was present. The same goes for System Images which may include the adware..
    Variability based on a scam site?


    Quote Originally Posted by bobprimak View Post
    Both Zimbio and Bleeping Computer tend to be alarmist and tend to offer advice not to use automated removal methods. That type of advice is simply ridiculous in most cases. Not amateurish, but self-serving if you ask me.
    Zimbio is an entertainment news site: www.Zimbio.com


    Quote Originally Posted by bobprimak View Post
    But I repeat, Bleeping Computer does NOT charge for its services. Both sites do know better than what they advise, in my opinion.
    Which makes them amateur.


    Bruce
    Last edited by BruceR; 2012-09-07 at 21:00.

  17. #14
    Lounge VIP bobprimak's Avatar
    Join Date
    Feb 2009
    Location
    Hinsdale, IL, USA
    Posts
    2,311
    Thanks
    139
    Thanked 114 Times in 98 Posts
    @BruceR -- All I see in your Post #13 is continued undocumented name-calling. You have a habit in The Lounge of using name-calling as a last resort when you cannot prove your points. I will not respond further to this sort of behavior.

    You still take the easy way out instead of presenting verifiable facts and valid, relevant web references.

    The Facebook Note does not have anyone's username on it. It is official.

    The adware in question is in fact a Trojan Horse which is a virus, and it originates as a drive-by download at places not limited to Facebook. Facebook does offer a removal tool. The mere fact that the popup also involves a browser redirect should be taken as a sign of the truth of these claims.

    Threads like this one at the Mozilla Forums are not helpful in this case. No one in that thread actually researched the issue to determine why the redirect was occurring.

    According to this thread, there was at least a Toolbar found which had to be removed using a special (free) script. This was apparently the equivalent of editing the Windows Registry, so there definitely was more in there than merely an ad or a cookie. And yes, this is yet another "amatuer" website. It appears no one was paid for the advice nor for the script or the ESET online scan (often used at that site, but maybe not in this particular thread).

    Whatever people do in this case, a full system scan with two or more antispyware applications would not be a bad idea. Nor a waste of time. If anything shows up, it should be removed with the program which did the scan. Malwarebytes and Super Antispyware are two such scanners.

    But I must add that in several help threads at various forums, many times the most popular AV/AS programs did not catch this virus. I don't have an easy answer to that mystery, except that this is reported to be a variable virus (it morphs itself).
    Last edited by bobprimak; 2012-09-08 at 06:50.
    -- Bob Primak --

  18. #15
    Super Moderator
    Join Date
    Jun 2011
    Location
    New England
    Posts
    2,780
    Thanks
    84
    Thanked 343 Times in 309 Posts
    Quote Originally Posted by bobprimak View Post
    @BruceR -- All I see in your Post #13 is continued undocumented name-calling. You have a habit in The Lounge of using name-calling as a last resort when you cannot prove your points. I will not respond further to this sort of behavior.
    ALL you see? Are you referring to the single word "amateur" as applied to people who don't charge for their services?


    Quote Originally Posted by bobprimak View Post
    You still take the easy way out instead of presenting verifiable facts and valid, relevant web references.
    There are no valid, relevant web references on this virus/trojan because it doesn't exist.


    Quote Originally Posted by bobprimak View Post
    The Facebook Note does not have anyone's username on it. It is official.
    It says "by Delete Spyware" right under the title. Click on the username Delete Spyware and you can review 10 more posts by that user all using scare tactics to direct traffic to his site www.delete-spyware.com where they would like to sell you their magic cure-all.


    Quote Originally Posted by bobprimak View Post
    The adware in question is in fact a Trojan Horse which is a virus, and it originates as a drive-by download at places not limited to Facebook. Facebook does offer a removal tool. The mere fact that the popup also involves a browser redirect should be taken as a sign of the truth of these claims.
    In fact, you're basing this on the statements of one guy on Facebook with an ulterior motive.


    Quote Originally Posted by bobprimak View Post
    Threads like this one at the Mozilla Forums are not helpful in this case. No one in that thread actually researched the issue to determine why the redirect was occurring.
    Not helpful in supporting the existence of a virus perhaps. But three people there solved all their issues with adblock.


    Quote Originally Posted by bobprimak View Post
    According to this thread, there was at least a Toolbar found which had to be removed using a special (free) script. This was apparently the equivalent of editing the Windows Registry, so there definitely was more in there than merely an ad or a cookie. And yes, this is yet another "amatuer" website. It appears no one was paid for the advice nor for the script or the ESET online scan (often used at that site, but maybe not in this particular thread).
    What was actually removed which is relevant to this issue?


    Quote Originally Posted by bobprimak View Post
    Whatever people do in this case, a full system scan with two or more antispyware applications would not be a bad idea. Nor a waste of time. If anything shows up, it should be removed with the program which did the scan. Malwarebytes and Super Antispyware are two such scanners.
    Never a bad idea, but possibly a waste of time in this case if the problem has been solved by adblock.


    Quote Originally Posted by bobprimak View Post
    But I must add that in several help threads at various forums, many times the most popular AV/AS programs did not catch this virus. I don't have an easy answer to that mystery, except that this is reported to be a variable virus (it morphs itself).
    No mystery. It's not a virus, if you only believe reputable sources.


    Bruce

Page 1 of 2 12 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •