ads1.revenue.net

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by DarcLucifer, Jun 8, 2009.

  1. DarcLucifer

    DarcLucifer Private E-2

    ok I work for a company working on their website and doing some IT stuff for them. They are currently using cs-cart system for their website and using hostmonster to host it. So the problem we are having is Friday and Saturday we did some changes to the website and everything was working fine then today when you go to the website you get a pop up from ads1.revenue.net the weird thing is it doesn't do it on the very first page just every other page. We have never had these pop ups until today???

    I have read up on ads1.revenue.net and every seems to say its on their computer but this seems like its attached to the website some how? I have surfed around and it doesn't do it on any other pages or any other websites?

    So how do I get this taken off so pop ups stop coming up? Where is this going on at? in the cookies? embed code some how? I am totally lost... it does the same thing on ie as firefox? but on firefox i have got different ads?

    If I didn't give all the needed info let me know.
     
  2. DarcLucifer

    DarcLucifer Private E-2

    If I am missing something I need to do first please let me know. This is my first time here and first post? I don't understand if this would be on my computer, since we have had the same error on other computers and other browsers, or if its sitting some where else?

    Please help me to understand what I can try or should do or at least an understanding of why this would be going on?

    would my hijack this report be in any help?
     
  3. DarcLucifer

    DarcLucifer Private E-2

    So now I got a call from my boss and I guess we got hacked and they add the code for the ads some where in our website. So I need to find an ftp software and be able to time stamp the new stuff that has been changed.

    I would still appreciate any help that anyone could offer or any suggestions I don't know if this is the right place for this post but if it needs move to a more better place so I could be helped it would be greatly appreciated!
     
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Major Geeks!

    Do you have access to the computer? If so, please run the below cleaning procedure on the PC that it is having the problem with popups. If you are 100% sure that the problem is cause by something embedded in your web page design, then you will need to debug your web page design to find the problem because the below will not find it and I would suspect that no other scanners would find it either since it would just be considered part of the web design.


    Please follow the instructions in the READ & RUN ME FIRST link given futher down and attach the requested logs when you finish these instructions.
    • If you have problems where no tools seem to run, please try following the steps given in the below and then continue on no matter what you find. You only need to try the TDSSserv steps if having problems getting scans in the Read & Run Me First. If TDSSserv is not found, just continue on with the READ & RUN ME.
    READ & RUN ME FIRST. Malware Removal Guide
    • If something does not run, write down the info to explain to us later but keep on going.
    • Do not assume that because one step does not work that they all will not.

    • After completing the READ & RUN ME and attaching your logs, make sure that you tell us what problems still remain ( if any still do )!
    Helpful Notes:
    1. If you run into problems trying to run the READ & RUN ME or any of the scans in normal boot mode, you can run the steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:
    2. If you have problems downloading on the problem PC, download the tools and the manual updates for SUPERAntiSpyware, Malwarebytes and Spybot ( links are given in the READ & RUN ME) onto another PC and then burn to a CD. Then copy them to the problem PC. You will have to skip getting updates if (and only if) your internet connection does not work. Yes you could use a flash drive too but flash drives are writeable and infections can spread to them.
    3. If you cannot seem to login to an infected user account, try using a different user account (if you have one) in either normal or safe boot mode and running only SUPERAntiSpyware and Malwarebytes while logged into this other user account. Then reboot and see if you can log into the problem user account. If you can then run SUPERAntiSpyware, Malwarebytes, ComboFix and MGtools on the infected account as requested in the instructions.
    4. To avoid additional delay in getting a response, it is strongly advised that after completing the READ & RUN ME you also read this sticky:
    Any additional post is a bump which will add more delay. Once you attach the logs, your thread will be in the work queue and as stated our system works the oldest threads FIRST.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds