<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<div>
<div style="FONT-SIZE: 11pt; FONT-FAMILY: Calibri,sans-serif">Try booting into safe-mode and then try to uninstall the thing from configuration screen. Then for the browser there should be a safe-mode also (load without any add-ons. And then try to disable
the toolbar..<br>
<br>
Goto http://sysinternals.com/ download the suite, extract it, then run the autoruns.exe it Will scan your pc for anything that would start automaticly. In the options of that program check the verify signature. And then refresh.<br>
<br>
Anything suspisious should turn out in reddish color, and you can rightclick those and then delete them.<br>
<br>
Restart computer after that, and again boot into safe-mode. And repeat the above.<br>
<br>
Hope this helps<br>
<br>
Sent from my Windows Phone</div>
</div>
<div dir="ltr">
<hr>
<span style="FONT-SIZE: 11pt; FONT-FAMILY: Calibri,sans-serif; FONT-WEIGHT: bold">Van:
</span><span style="FONT-SIZE: 11pt; FONT-FAMILY: Calibri,sans-serif"><a href="mailto:nightly-testers-request@mozilla.org">nightly-testers-request@mozilla.org</a></span><br>
<span style="FONT-SIZE: 11pt; FONT-FAMILY: Calibri,sans-serif; FONT-WEIGHT: bold">Verzonden:
</span><span style="FONT-SIZE: 11pt; FONT-FAMILY: Calibri,sans-serif">12-1-2014 21:00</span><br>
<span style="FONT-SIZE: 11pt; FONT-FAMILY: Calibri,sans-serif; FONT-WEIGHT: bold">Aan:
</span><span style="FONT-SIZE: 11pt; FONT-FAMILY: Calibri,sans-serif"><a href="mailto:nightly-testers@mozilla.org">nightly-testers@mozilla.org</a></span><br>
<span style="FONT-SIZE: 11pt; FONT-FAMILY: Calibri,sans-serif; FONT-WEIGHT: bold">Onderwerp:
</span><span style="FONT-SIZE: 11pt; FONT-FAMILY: Calibri,sans-serif">Nightly-testers Digest, Vol 42, Issue 3</span><br>
<br>
</div>
<div class="BodyFragment">
<div class="PlainText">Send Nightly-testers mailing list submissions to<br>
nightly-testers@mozilla.org<br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
<a href="https://mail.mozilla.org/listinfo/nightly-testers">https://mail.mozilla.org/listinfo/nightly-testers</a><br>
or, via email, send a message with subject or body 'help' to<br>
nightly-testers-request@mozilla.org<br>
<br>
You can reach the person managing the list at<br>
nightly-testers-owner@mozilla.org<br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than "Re: Contents of Nightly-testers digest..."<br>
<br>
<br>
Today's Topics:<br>
<br>
1. Hint of what happen to me with adware invasion. (Rex)<br>
2. Re: Fw: Tell me how to remove the malware. (dmccunney)<br>
<br>
<br>
----------------------------------------------------------------------<br>
<br>
Message: 1<br>
Date: Sun, 12 Jan 2014 12:18:57 -0500<br>
From: "Rex" <robert.rex.edwards@outlook.com><br>
To: "Nightly Testers" <Nightly-testers@mozilla.org>, "Edward Hinds"<br>
<edward.hinds@gmail.com><br>
Subject: Hint of what happen to me with adware invasion.<br>
Message-ID: <BAY170-DS14093CDEB14A5D9309DEC2DDBD0@phx.gbl><br>
Content-Type: text/plain; charset="iso-8859-1"<br>
<br>
My sister downloaded a video of her daughter and the ad on the screen falsely stated she had to install their player to see it.<br>
This was called a SCAREWARE ad.<br>
She installed the player by EXPRESS install instead of CUSTOM install.<br>
Thus, not only was the player installed (which did not work on a Win XP Pro, but also install 2 other things.<br>
A toolbar that redirected every new tab to an ad and not the item you wanted<br>
And, an adware program that got on every web page that came up on the screen.<br>
<br>
I recorded some of the errors and traced it back to the source and now they are eliminated.<br>
I also found a link that turned off my AV suite.<br>
So, be warned it is a New Year but we are still plagued by ADWARE, SCAREWARE, and RANSOMWARE attacks and some come by 3rd party installs done in EXPRESS mode not CUSTOM mode.<br>
Be safe use only CUSTOM mode and know where they went.<br>
<br>
Rex<br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="http://mail.mozilla.org/pipermail/nightly-testers/attachments/20140112/55ebfa59/attachment-0001.html">http://mail.mozilla.org/pipermail/nightly-testers/attachments/20140112/55ebfa59/attachment-0001.html</a>><br>
<br>
------------------------------<br>
<br>
Message: 2<br>
Date: Sun, 12 Jan 2014 12:24:10 -0500<br>
From: dmccunney <dennis.mccunney@gmail.com><br>
To: Rex <robert.rex.edwards@outlook.com><br>
Cc: Edward Hinds <edward.hinds@gmail.com>, Nightly Testers<br>
<Nightly-testers@mozilla.org><br>
Subject: Re: Fw: Tell me how to remove the malware.<br>
Message-ID:<br>
<CAF4AJDx53nSL0hLHoJHJbwV+a7eoTep1HssL91vQNWDQ7Q6RgA@mail.gmail.com><br>
Content-Type: text/plain; charset=ISO-8859-1<br>
<br>
On Sun, Jan 12, 2014 at 1:55 AM, Rex <robert.rex.edwards@outlook.com> wrote:<br>
<br>
> The opt-out is just a scam. need to block akamaihd.net out.<br>
<br>
Absolutely not.<br>
<br>
Akamaihd.net is owned by Akamai Technologies. They are a major<br>
Content Distribution Network. They have servers all over the world,<br>
and sites contract with Akamai to mirror their content, so that when a<br>
user accesses the site, the content is actually served from an Akamai<br>
server geographically close to them. Akamai carries between 15 and<br>
20% of all Internet traffic. See<br>
<a href="http://en.wikipedia.org/wiki/Akamai_Technologies">http://en.wikipedia.org/wiki/Akamai_Technologies</a><br>
<br>
The site you are having problems with is one mirrored by Akamai, but<br>
not part of Akamai, which is why the response came from someone else.<br>
<br>
You did not specify what the malware was, but the site causing you a<br>
problem is part of an outfit that offers ad supported software.<br>
Instead of buying the software, you can use it free, in exchange for<br>
agreeing to be served ads relevant to what the software is doing.<br>
Those outfits generally install a program on your machine that serves<br>
the ads, To get rid of the ads, you uninstall the program. Uninstall<br>
the program, and the ad supported software no longer works. I<br>
suspect what you consider malware is actually that program. It<br>
shouldn't be all that hard to figure out which is is and unstall it,<br>
but you'll need to find something else to do whatever the ad supported<br>
program was doing. (When you installed the ad supported software, you<br>
agreed to the installation of the ad server program.)<br>
<br>
> Rex<br>
______<br>
Dennis<br>
<a href="https://plus.google.com/u/0/105128793974319004519">https://plus.google.com/u/0/105128793974319004519</a><br>
<br>
<br>
------------------------------<br>
<br>
Subject: Digest Footer<br>
<br>
_______________________________________________<br>
Nightly-testers mailing list<br>
Nightly-testers@mozilla.org<br>
<a href="https://mail.mozilla.org/listinfo/nightly-testers">https://mail.mozilla.org/listinfo/nightly-testers</a><br>
<br>
<br>
------------------------------<br>
<br>
End of Nightly-testers Digest, Vol 42, Issue 3<br>
**********************************************<br>
</div>
</div>
</body>
</html>