Wednesday, October 23, 2013

Remove Ib.adnxs.com Popup Virus from Browsers

Variants of Ib.adnxs.com Popup Virus

  1. Nym1.ib.adnxs.com
  2. ams1.ib.adnxs.com
  3. lax1.ib.adnxs.com

Report from victims:


‘Somehow this malware has invaded my machine and I keep getting popups and enhanced text esp on yahoo and facebook sites. It's from some company called App Nexus and the ads have nym1.ib.adnxs.com as the adress. Pop up blocker will not stop them.’

FAQ: Why ib.adnxs.com popup virus is dangerous?

Ib.adnxs.com is a popup virus that will insert its executable file, which is always appearing as a folder, under C: Windows. That’s the reason why none of the trustworthy anti-virus programs will detect ib.adnxs.com while it is causing numerous troubles:

﹡popping up blank boxes or commercial advertisements randomly.
﹡slowing down page loading speed.
﹡causing a sluggish computer.
﹡triggering search redirect problems periodically.

It has been found after a long-term survey that ib.adnxs.com is capable of injecting system’s database, which could result in vulnerability to weaken the computer and make it under attacks by other virus. To stop ib.adnxs.com popup virus from prejudicing your cherished computer and regain the perfect surfing and operating experience, it is wise to choose manual way to remove ib.adnxs.com popup virus quickly without expecting its coming back.

 

Step-by-step Guide to Remove Ib.adnxs.com Popup Virus


Step1: Reset browser to remove ib.adnxs.com popup virus.
> Internet Explorer
  1. Open Internet Explorer.
  2. Click on the Tools menu and then select Internet Options.
  3. In the Internet Options window click on the Advanced tab. Then click on the Restore Defaults button and then press OK.

> Firefox
  1. Click on the Firefox button
  2. Select Help
  3. Click Troubleshooting information.
  4. Locate a box containing ‘Reset Firefox’ button on the left uppers corner of the web page.

> Google Chrome
  1. Choose ‘Customize and Control Google Chrome’ menu.
  2. Select ‘Options’.
  3. Click ‘Under the Hood’ tab on ‘Options’ window.
  4. Click ‘Reset to Defaults’ button.

If ib.adnxs.com popup virus still gives out endless ads, one should manually manage browser settings.


> Firefox
  1. At the top of the Firefox window, click on the Tools menu.
  2. Manage Add-on.
  3. Modification should be made under Extensions tab and Plugins tab respectively.
> Google Chrome
  1. Click on ‘Customize and control’ Google Chrome icon.
  2. Select ‘Settings’.
  3. Manage ‘Extension’.
  4. Select ‘manage search engine’.

> Internet Explorer users to follow up:
  1. Go to Tools.
  2. Choose ‘Manage Add-ons’.
  3. Find and click on something useless including ib.adnxs.com popup virus in ‘Toolbars and Extensions’, ‘Search Providers’ respectively.
  4. Click ‘Disable’/ ‘Remove’ to remove ib.adnxs.com popup virus.

Step2: Launch build-in popup blocker to stop ib.adnxs.com virus from popping up.

> Mozilla Firefox
  1. Open Mozilla Firefox.
  2. Click Tools.
  3. Click Options.
  4. Click the Web features button on the left hand side of the Options window.
  5. Remove ib.adnxs.com popup virus there.
> Microsoft Internet Explorer
  1. Open Internet Explorer.
  2. Click Tools.
  3. Click Options.
  4. Click the Privacy tab.
  5. Locate pop-up Blocker section at the bottom of the Privacy tab.
  6. Check "Block pop-ups" option to remove ib.adnxs.com popup virus.
> Google Chrome
  1. Use Google Toolbar that includes a free popup blocker to remove ib.adnxs.com popup virus.

Step3: Show hidden files and folders before find out and delete any item associated with ib.adnxs.com popup virus in Drive C.

> Windows 8
  1. Open Windows Explorer by clicking on Windows Explorer application from Start Screen.
  2. Select View tab on Windows Explorer window.
  3. Tick ‘File name extensions’ and ‘Hidden items’ options.

> Windows 7/XP/Vista
  1. Open ‘Control Panel’ from Start menu and search for ‘Folder Options’.
  2. Under View tab to tick ‘Show hidden files and folders and non-tick Hide protected operating system files (Recommended)’ and then click ‘OK’.

Step4. Empty out all Temp folders in under System32.

  1. Double click on Temp folder under System 32.
  2. Press Ctrl and A key together.
  3. Right click on one of the selected items.
  4. When a drop down list shows, press Shift and D key together.
  5. A box comes up for confirmation.
  6. Press Enter key.
  7. Restart the infected computer.

If error message prompts up after reboot to tell that files cannot be found, it is telling you that there still are registry keys being modified by ib.adnxs.com popup virus. Since the modification depends on which code the backdoor helps to receive and transmit as well as what programs installed onto the computer, it is hard to give out the exact place where the modification is. To get solution pertaining to your concrete situation, feel free to consult here.


No comments: