Possible Infection

[Bazza]

I hope somebody can help me. When I go into internet explorer and load a website I keep getting the following message on my screen: "Do you want to open or save tags.js from tags.expo9.exponential.com" - what does this mean? Has my pc been infected and if so how do remove this from my pc? Any help would be appreciated Thanks

[Starbuck]

Hi Bazza,

 

Does this happen for all sites?

Are other browsers working ok? (do you have Firefox installed)

Do you have Avast installed?

From what i read it seems to be generated by some of the Ads from Tribalfusion.

Edited September 25, 2013 by Starbuck

[Bazza]

It only seems to appear when I watch a video clip on sites like you tube on IE. When using Firefox it does not appear. I have run Malwarebytes Anti-Malware this morning and it found some 15 PUP files with little green bugs. It has now quarantined and removed these items . I checked by running it again and the items did not reappear - Was this the cause? I have Norton Internet Security 2013 and Malwarebytes on my PC. I used to have ATF Cleaner and Super Antispyware on my old PC. I have not loaded these onto my new pc as I was not sure whether they are compatible with Windows 7 64 bit operating system. I do not have Avast on my PC. Are the messages that appear the some form of tracking cookie embedded into the file to track your movements online? Can they be blocked ?

[Starbuck]

Hi Bazza,

 

It only seems to appear when I watch a video clip on sites like you tube on IE.

Makes sense.

This is coming from one or more of the Ads on the page. ( normally from the TribalFusion server.... it's related to the coding of the ad)

It's not malicious ... just annoying.

Filtering out the ads will sort this once and for all.

Firefox is better at filtering out ads.

For good measure you should also add the AdBlock Plus addon.

Seems there's now a version for IE.

 

Firefox:

https://adblockplus.org/en/firefox

 

IE:

https://adblockplus.org/en/internet-explorer

 

Obviously you will have to use the correct browser for each link.

 

Give this a try and see if this cures the problem.

 

I used to have ATF Cleaner and Super Antispyware on my old PC. I have not loaded these onto my new pc as I was not sure whether they are compatible with Windows 7 64 bit operating system

 

ATF Cleaner

I can't find a definitive answer to this.... information seems very patchy.

So say it is compatible, some say it's not.

Whether it now works with Google Chrome browser, i'm not sure.

Either try it.... http://www.techsupportall.com/download/tools/atfcleaner.exe

 

or go for something that is definitely compatible:

TFC by OldTimer

As with all Win7 programs.... right-click on the file and choose Run As Administrator)

• It will close all programs when run, so make sure you have saved all your work before you begin.
  
• Click the Start button to begin the process. Depending on how often you clean temp files, execution time should be anywhere from a few seconds to a minute or two. Let it run uninterrupted to completion.
  
• Once it's finished it should reboot your machine. If it does not, please manually reboot the machine yourself to ensure a complete clean.

No need to select anything...... just click the Start button ( so easy).

 

SuperantiSpyware

SUPERAntiSpyware is compatible with 2000, XP Home/Professional, 2003, Server 2008, Vista, Windows 7 and Windows 8.

SUPERAntiSpyware is provided as a native 32-bit application and a native 64-bit application. The installer will install the proper version for your operating system.

http://www.superantispyware.com/

[Bazza]

Thanks for this - I will install these and see if this cures the problem - I will let you know the results.

[Starbuck]

Ok, let me know how it all goes.

[Bazza]

I have installed the software over the weekend and all seems ok thus far. Thanks for all your help. Will let you know if it happens again.

[Starbuck]

Will let you know if it happens again.

Ok, thanks .... we'll be here.