What adware is this?

  • Thread starter Thread starter Mark N.
  • Start date Start date
M

Mark N.

I've picked up some adware that takes random words in IE6 and makes them hot
links to www.adsrve.com servers. I've run Ad Aware and Symantec's Corporate
Antivirus and I've looked for recent directories and .exe files and I just
can't seem to find the culprit.

Does anybody have any suggestions for how I can rid myself of this nuisance?

Thanks,
Mark
 
Hi Mark,

It might be IEDriver. Try searching Google and Google groups for 'iedriver'.
 
Hi Mark,
It might be IEDriver. Try searching Google and Google groups for
Click to expand...
'iedriver'.

Thanks Sheila,

That was it! Nasty little bugger too - hidden folder with an entry in my
registry :-(

Thanks for your help!

Mark
 
Mark N. said:
I've picked up some adware that takes random words in IE6 and makes them hot
links to www.adsrve.com servers. I've run Ad Aware and Symantec's Corporate
Antivirus and I've looked for recent directories and .exe files and I just
can't seem to find the culprit.

Does anybody have any suggestions for how I can rid myself of this nuisance?

Thanks,
Mark
Click to expand...

Mark,
Try running the "Cool Web Search" shredder.
http://www.spywareinfo.com/~merijn/files/cwshredder.zip
Unzip, make sure that all instances of IE and OE are closed, hit the
executable and follow the prompts.

If no joy, run SpyBot Search & Destroy, info here:
http://mvps.org/winehlp2002/unwanted.htm

HTH

--

siljaline MS MVP IE/OE

(Please reply to group, as reply address is invalid, so that we can all benefit)


"Arguing with anonymous strangers on the Internet is a sucker's game
because they almost always turn out to be -- or to be indistinguishable from
-- self-righteous sixteen-year-olds possessing infinite amounts of free time."
- Neil Stephenson, _Cryptonomicon_
 
siljaline,
# [TurboDownload][PopKiller][IE Driver][Restricted Zone site]
127.0.0.1 adsrve.com
127.0.0.1 www.adsrve.com
127.0.0.1 www.kiriummedia.com
127.0.0.1 kiriummedia.com
127.0.0.1 www.turbodownload.net
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 10-07-03]
Please post replies to this Newsgroup, email address is invalid
--


Mark N. said:
I've picked up some adware that takes random words in IE6 and makes them hot
links to www.adsrve.com servers. I've run Ad Aware and Symantec's Corporate
Antivirus and I've looked for recent directories and .exe files and I just
can't seem to find the culprit.

Does anybody have any suggestions for how I can rid myself of this nuisance?

Thanks,
Mark
Click to expand...

Mark,
Try running the "Cool Web Search" shredder.
http://www.spywareinfo.com/~merijn/files/cwshredder.zip
Unzip, make sure that all instances of IE and OE are closed, hit the
executable and follow the prompts.

If no joy, run SpyBot Search & Destroy, info here:
http://mvps.org/winehlp2002/unwanted.htm

HTH

--

siljaline MS MVP IE/OE

(Please reply to group, as reply address is invalid, so that we can all
benefit)


"Arguing with anonymous strangers on the Internet is a sucker's game
because they almost always turn out to be -- or to be indistinguishable from
-- self-righteous sixteen-year-olds possessing infinite amounts of free
time."
- Neil Stephenson, _Cryptonomicon_
 
Mike Burgess said:
siljaline,
# [TurboDownload][PopKiller][IE Driver][Restricted Zone site]
127.0.0.1 adsrve.com
127.0.0.1 www.adsrve.com
127.0.0.1 www.kiriummedia.com
127.0.0.1 kiriummedia.com
127.0.0.1 www.turbodownload.net
Click to expand...

Darn,
I use HOSTS as a lookup and didn't find it.
Thanks :)

--

siljaline MS MVP IE/OE

(Please reply to group, as reply address is invalid, so that we can all benefit)


"Arguing with anonymous strangers on the Internet is a sucker's game
because they almost always turn out to be -- or to be indistinguishable from
-- self-righteous sixteen-year-olds possessing infinite amounts of free time."
- Neil Stephenson, _Cryptonomicon_
 
Back
Top