ИOT2BЯÖKE2FiX
New Member
- Reaction score
- 1
- Location
- Raleigh, NC
Hello,
This is a really really nice forum you guys have here! Love the user-friendly toolbar at the top - what a nice bonus! Thanks for letting me join your community.
Got a real head-scratcher here. Offers4u is a well-known, established bit of adware that's been floating around the internet for years. I know it goes back at least 2 years, not sure exactly how far back. In the past it would be installed via piggy-backing on internet freeware installers and possibly other means. Now it appears to be working via clever browser scripts and cookies.
I have this adware currently plaguing my Firefox browser and I've not been able to remove it through any known means so far. Research typically leads to instructions for removing software via various means, but there is no software - hidden or not - on this computer for offers4u.
I began my investigation first with research and then with various utilities I have at my disposal: Adwcleaner, PC Decraptifyer, and CCleaner. Through these programs, lots of junk was wiped from my PC, as you could very well imagine - cookies, invalid registry entries, browser histories, temporary files, temporary internet files, and lots of other things. I finally fired the main cannon and got Malwarebytes involved, but it has not found any trace of this in its scans.
The result was that offers4u seems to have grown and propagated to even more web pages than before in the 4 hours I've been tinkering with all this. What began as an intrusion to my amazon.com web pages has now moved to tomsguide.com, imdb.com and other pages. It's not everywhere - here, for example. Not at mailchimp.com nor google.com.
I've a feeling that if I could track down what ip addresses are being used to fuel offers4u I could simply block them and be done with it. But not being able to remove this adware is disturbing, as I do this type of thing for clients all the time. If anyone knows what's going on and what to do about it, I'd be very grateful for you to share you knowledge with me.
This is a really really nice forum you guys have here! Love the user-friendly toolbar at the top - what a nice bonus! Thanks for letting me join your community.
Got a real head-scratcher here. Offers4u is a well-known, established bit of adware that's been floating around the internet for years. I know it goes back at least 2 years, not sure exactly how far back. In the past it would be installed via piggy-backing on internet freeware installers and possibly other means. Now it appears to be working via clever browser scripts and cookies.
I have this adware currently plaguing my Firefox browser and I've not been able to remove it through any known means so far. Research typically leads to instructions for removing software via various means, but there is no software - hidden or not - on this computer for offers4u.
I began my investigation first with research and then with various utilities I have at my disposal: Adwcleaner, PC Decraptifyer, and CCleaner. Through these programs, lots of junk was wiped from my PC, as you could very well imagine - cookies, invalid registry entries, browser histories, temporary files, temporary internet files, and lots of other things. I finally fired the main cannon and got Malwarebytes involved, but it has not found any trace of this in its scans.
The result was that offers4u seems to have grown and propagated to even more web pages than before in the 4 hours I've been tinkering with all this. What began as an intrusion to my amazon.com web pages has now moved to tomsguide.com, imdb.com and other pages. It's not everywhere - here, for example. Not at mailchimp.com nor google.com.
I've a feeling that if I could track down what ip addresses are being used to fuel offers4u I could simply block them and be done with it. But not being able to remove this adware is disturbing, as I do this type of thing for clients all the time. If anyone knows what's going on and what to do about it, I'd be very grateful for you to share you knowledge with me.