how can I find the adware javascript that's intercepting mouse clicks?
The latest copy of Super, a video encoder/converter, dumped jabuticaba adware crap all over my pc even though I had meticulously verified that all the selected 'extras' were not supposed to be added. An add-on popup blocker will show hundreds of popup blocks if java is enabled. FF will also be counting up the number of times it prevents 'the page' from redirecting. Several ad/spyware programs no no longer find any issues though hundreds were found. Mostly registry and cookies. I found a macromedia folder with numerous ad websites and these and dozens of others were added to the host file. Even though a new tab opens it has a 'can't connect' dialog, but the adware prevents me from making a normal mouse click selection. Where could this adware be located?
Modified by NoahSUMO
All Replies (7)
Hi drjeffreyo, see if you can find something useful here : http://malwaretips.com/blogs/ads-by-jabuticaba-removal/
thank you
Been there, done that-didn't help. Spybot S&D, malwarebytes, bitdefender, hitman, superantispyware, adware removal tool by tsa, adwcleaner, , pchunter, nothing is a solution. I've also 'tweaked' java settings to limit memory usage. I still need to locate the source of the javascript that firefox allows to run if java is enabled.
When the mouse pointer is over a clickable item, such as a 'next page' arrow, FF shows 'clkmon.com/adserve/banners...' as the address and all clicking does is get the addon popup blocker to tell me 'Firefox has prevented 'this site' from opening xxx popup windows'. Meanwhile I can't surf the net and FF slows to a crawl.
Sorry if I misled you, I'm aware of java/javascript and variants but I'm not a programmer. Well not unless you need something done in Fortran or Basic. On one web page FF blocked over 1,200 popup windows. Needless to say there's no browsing going on with javascript enabled. I need to find out how it's intercepting or redirecting what's on the page.
Did you check this?
You can check the connection settings.
- Tools > Options > Advanced > Network : Connection > Settings
- https://support.mozilla.org/kb/Options+window+-+Advanced+panel
If you do not need to use a proxy to connect to internet then try to select "No Proxy" if "Use the system proxy settings" or one of the others do not work properly.
See "Firefox connection settings":
Create a new profile as a test to check if your current profile is causing the problem.
See "Creating a profile":
- https://support.mozilla.org/kb/profile-manager-create-and-remove-firefox-profiles
- http://kb.mozillazine.org/Standard_diagnostic_-_Firefox#Profile_issues
If the new profile works then you can transfer files from a previously used profile to the new profile, but be cautious not to copy corrupted files to avoid carrying over problems.
I've tried almost everything up to creating a new profile and resetting FF. Tdsskiller finds no issues; hijackthis finds erroneous issues though the items it says 'must be fixed' are OEM Windows files that oddly are also marked as 'reported as safe' on hijackthis log analysis sites. Opera seems unaffected, and I haven't used IE since the 'ads by jabuticaba' popups started. Examining one of the popup windows yielded a link to a jabuticaba tech site where there's a jabuticabauninstaller.exe file; I haven't run this yet as it's flagged as a PUP by a few crud removal and/or malware scanners. If necessary I'll try it sandboxed first. I've also tried bitdefender's beta adware, old and new versions of adwcleaner, kaspersky, avg, mcaffee-all useless.