Breaking News

Thursday, December 1, 2016

Malware removal: liveadexchange,, smartnewtab, cpmofferconvert

Keywords: removal, removal, removal, removal, removal, removal


Web browser randomly (almost on every mouse click) being redirected to a different site. When infected with this mal(ad)ware, advertising banners are injected with advertisement hyperlinks, browser popups appear which recommend fake updates, AdBlocker(plus) or other addons does not work.

Took me a while (~an hour) but finally nailed it.

Quick steps (if in a hurry, and tired of looking around!)

  1. Start-->run-->Regedit (admin mode) 
  2. File menu-->Edit-->Find 
  3. Find what: 
  4. Look at (checkbox): Data 
  5. Click on Find next button (or F3) 
  6. Delete whatever you find; I found 4/5 locations. 
Once done, under internet options (control panel)-->connections tab, remove all proxy/settings.

Interesting detail

  1. Its hidden in hex so you wouldn’t really (usually) look at that. 
  2. Keys to look at: 
  • DefaultConnectionSettings, 
  • SavedLegacySettings 
  • Folder: ManualProxies 
  • AutoConfigProxy 
  • AutoConfigUrl 
  • Value: 0 (Did you notice, that url starts with a zero?) 
  1. Popular redirects 
  • a. 
  • b. http://get.easyvpn. biz/jdmnXmaN8QM%2Bkr1eeMy/JnzjvCMv8eo%3D 
  • c. http://www.smartnewtab. com/watch?key=0cdb16b7667982280fbb05007a35eb39 
  • d. http://cpmofferconvert. com/out?zoneId=968177&htatb=1 
  • e. http://trk.servedbytrackingdesk. om/579722c14a90a4640e4b6e7d/go?t=01580d5b47e8088f01000001&


Have a happy day!


  1. Needed to compose one little word yet thanks again for the suggestions that you are contributed here...
    Best Online Software Training Institute | Salesforce CRM Training

  2. Appreciation for really being thoughtful and also for deciding on certain marvelous guides most people really want to be aware of.

    Spark Training in Chennai
    Spark with Scala Training in Chennai


  3. D-Link Login is a private IP address (sometimes it could be mistyping to 192.168.o.1 or 192.168.0.l ), familiar to every router-user, who is setting up LAN-network

  4. This idea is good, I think it is very novel.
    launceston escorts

  5. I appreciate that you produced this wonderful article to help us get more knowledge about this topic.
    I know, it is not an easy task to write such a big article in one day, I've tried that and I've failed. But, here you are, trying the big task and finishing it off and getting good comments and ratings. That is one hell of a job done!

    Selenium training in bangalore
    Selenium training in Chennai
    Selenium training in Bangalore
    Selenium training in Pune
    Selenium Online training

  6. Cool site nifty best slots cool interior a bunch of positive reviews about the casino and the findings. There are a lot of slots and slot machines, I have already withdrawn my first game))28) Cool site nifty best slots cool interior a bunch of positive reviews about the casino and the findings. There are a lot of slots and slot machines, I have already withdrawn my first game))

  7. As for a beginner, transparency and simplicity are important to me superior best slots come in and get killed

  8. It has been simply incredibly generous with you to provide openly what exactly many individuals would’ve marketed for an eBook to end up making some cash for their end, primarily given that you could have tried it in the event you wanted.
    linux Training in Chennai | Best linux Training in Chennai
    Unix Training in Chennai | Best Unix Training in Chennai
    Sql Training in Chennai | Best Sql Training in Chennai
    Oracle Training in Chennai | Best Oracle Training in Chennai
    Digital Marketing Training in Chennai | Best Digital Marketing Training in Chennai


Designed By Published.. Blogger Templates