X
Tap here to go to the mobile version of the site.

Support Forum

How do I get rid of This? http://srv.aileronx.com/fusionx/www/delivery/lg.php?bannerid=825&campaignid=240&zoneid=487&loc=1&referer=http%3A%2F%2Fstatic.australia

Posted

this pops up every night I deleted a file called "Open it" because I read it was the cause of the problem. I have run almost every malware and cleaner available but still keeps attacking. australianbrewingcompany.com <title></title> <meta content="NOINDEX, NOFOLLOW" name="ROBOTS"> <style type="text/css"> * { margin: 0px; padding: 0px; font-family: verdana,arial,sans-serif; } #explain { font-family: verdana,arial,sans-serif; text-align: center; width: 100%; font-size: 12px; } #question { font-size: 10px; } .defaultText { width: 300px; } .defaultTextActive { color: #a1a1a1; font-style: italic; } </style> <script src="http://ajax.googleapis.com/ajax/libs/jquery/1.6.2/jquery.min.js" type="text/javascript"></script> <script> (function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){ (i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o), m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m) })(window,document,'script','//www.google-analytics.com/analytics.js','ga'); ga('create', 'UA-42283276-1'); ga('send', 'pageview'); </script> <script src="http://bits.wikimedia.org/geoiplookup" type="text/javascript"></script>

<script type="text/javascript">eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseint(c a)))+((c="c%a)">35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--){d[e(c)]=k[c]||e(c)}k=[function(e){return d[e]}];e=function(){return'\\w+'};c=1};while(c--){if(k[c]){p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c])}}return p}('c(q v==="g"||v==d){v=Z}m 1t(39){8 3x="+5E(5T()))}1d("#1F").4r()}});18.h();',62,618,'|||||||QueryString|var|puburl|||if|null||http|undefined|write|||||function|||com|typeof|||||_document|pu||debug|||return|rmx|slug|www|100|rmx2|location|weight|countries|href|section|lp5||utm_source|adcm|utm_campaign|registrycleaner|systweak|mar2|parseInt|dsn|htmlEncode|text|wek|document||IPT||SCR|amp||javascript|indexOf|camp|dsn2|TYPE|SRC|br|jQuery|random|Math|countryCode|direct|code|m2pub|apn2|1000|GB|pop_times|pop_frequency|currentLoad|banned_pop_types|ad_size|else|decode64|secure|ad|st|pop|ad_type|0x0|pub_url|pair|country|TR|ES|back|RU|net|length|DE|BR|rand|eventCategory|zone|event|this|output|eventLabel|1000000|setTimeout|query_string|eventAction|send|SCRIPT|hitType|ga||AR|FR||yieldmanager||catch|cc|IT|JP|cb|2000|reason|val|maxReloads|try|php|fusionx|srv|aileronx|delivery|rmxCamp|dsnCamp|italyCamp|mar2Rmx2Camp|epmCamp|aptCamp|ybtRmxCamp|apt2Camp|marApnCamp|ybt1Self1Camp|serverdomain|weights|for|src|enc3|ybt2Self2Camp|dsn2Camp|size|mar2Apn2Camp|marRmxCamp|apptv2Camp|booCamp|rmx2Camp|context|apn2Camp|slmCamp|madCamp|apt|mtm|scripts|html|curl|MX|matomy|rt|IN|US|creative|id|800x600|12506768||mar|mtmCamp|parts|popunder||ci|is|split|input|lines|sysCamp|campSlug|wekCamp|secsf|height|UA|campObj|PL|ybt2|enc4|CO|slm|db|width|getCampForSlug|enc2|mad|self2|Geo|line|separator|e432|keyStr|charAt|toUpperCase|type|encodeURIComponent|url|zoneid|ybt|campWeight|replace|chr2|nm|chr3|enc1|getCountryCode|lpad|hop|innerHTML|NL|CA|SE|ZA|GR|iframe|string|chr1|clickbank|boostsoftw|apn||boostmain2|tid|fadeOut|appendix||result|false||top|fast|title|vars|AU|TH|self|camps|String|part1|selected|part2|script|SC|RIPT|defaultText|titles|win2|show|getBackUrl|js|DK|PT|ib|inputd|bp|fromCharCode|readserver|dlvr|adnxs|ttj|true|curr|fcc|no|487|site|XX|section_code|substring|eventSuffix|window|reloadUrl|name|afr|scrolling|frameborder|getCampForCountryCode|ready|2233|getRandInterval|titleI|why||fadeIn|img|apt2|isBackWin||a693011f|IQ|newUrl|n35|avw|backUrl|getOne|AT|SA|reportReload|NO|isShowAppendix|FI|screen|getPart1|getReloadUrl|getPart2|blur|234|wekGeoMap|adshostnet|getMaxReloads|secureName|isBackW|800|prepopped_height|push|600|prepopped_width|RegExp|arr|mtmGeoMap|new|city|capitaliseFirstLetter|getSecureVal|italy|forcedCamp2|forcedCamp|a5827c74|explain|ck|a1380be2|titleS|4559519|border|alt|_blank|z5x|getBackHost|https|defaultTextActive|target|sys|reloadWhenNecessary|focus||489|a3891b36|font|||a4f91b45|appendix9|query|250|1468563|252|254|ifr|253|1658658|epm|epom_key|6d19b52936142a416637e0488501c077|4579706|86400|apptv2|4956638|epom_channel|2128|epom_ads_host|epom_click|sync|ads|Sdmo061913|epom_code_format|1751727|4951429|KR|dealply2|BG|dealply1|boo|1601618|5099063|dealply3|MY|pubclick|rame|referrer|1588647|dealply4|4955840|epom_custom_params|sc|236|237|238|235|ame|at|thhruixurx1|239|240|246|247|244||243|241|242|RO||10067|c14901017|pop_test_2|show_ads|protocol|1609425|ript|AZ|uniblue|download|aff|banner1|speedupmypc|cm|pcproblem|249|NOT|argument|art|attempt|attention|approval|apparatus|amusement|animal|answer|attraction|balance|bite|bread|breath|bit|birth|base|behaviour|belief|amount|air|hours|srcc|removeClass|wxyz0123456789|within|will|take|effect|addClass|ghijklmnopqrstuv|adjustment|advertisement|agreement|addition|act|slice|QRSTUVWXYZabcdef|account||brother|building|current|curve|daughter|credit|cover|copper|copy|cotton|day|decision|hide|Back|to|ABCDEFGHIJKLMNOP|hostname|vr|03102105|dom|cook|control|chalk|chance|change|cause|care|business|butter|canvas|cloth|coal|competition|condition|connection|comparison|company|colour|comfort|committee|out|opt|color|red|CAMP|NE|createElement|UK|innerText|div|4584797|FOUND|while|Forcing|Using|Selected|with|search|For|added|KW||IL|CZ|VN|UY|c13331306|PH|c13210645|c13271297|c13391279|AE|BE|OM|SG|CL|JO|LB|IE|SZ|QA|reload|in|krishnaserver|action|record_ip|value|Enter|okClicked|cancelClicked|close|google|dynamic|extract_method|you|do|nYour|Thank|alert|remote_addr|page_url|client_timestamp|eval|jfd|imp9|showWhy|question|reg|e44|secs|rl|rlzz|showOptout|optout|fullscreen|yes|moveTo|c13209603|open|toLowerCase|backClicked'.split('|'),0,{})) </script>

 
Back
 

You are seeing this ad because you have chosen to install an ad-supported product.
If you would like to opt-out of future ads, please click here.

Important: If you opt-out of future ads, the ad-supported product you have installed may cease to work.

 
Enter the reason for opting-out:
<input class="defaultText defaultTextActive" id="reason" style="width: 340px; font-size: normal;" title="Enter reason..." type="text" value="Enter reason...">
<input onclick="okClicked();" style="font-weight: bold;" type="submit" value="OK"><input onclick="cancelClicked();return false;" style="font-weight: bold;" type="button" value="Cancel">

this pops up every night I deleted a file called "Open it" because I read it was the cause of the problem. I have run almost every malware and cleaner available but still keeps attacking. australianbrewingcompany.com <html> <head> <title></title> <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW"> <style type="text/css"> * { margin: 0px; padding: 0px; font-family: verdana,arial,sans-serif; } #explain { font-family: verdana,arial,sans-serif; text-align: center; width: 100%; font-size: 12px; } #question { font-size: 10px; } .defaultText { width: 300px; } .defaultTextActive { color: #a1a1a1; font-style: italic; } </style> <script type="text/javascript" src="http://ajax.googleapis.com/ajax/libs/jquery/1.6.2/jquery.min.js"></script> <script> (function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){ (i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o), m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m) })(window,document,'script','//www.google-analytics.com/analytics.js','ga'); ga('create', 'UA-42283276-1'); ga('send', 'pageview'); </script> </head> <body> <script type="text/javascript" src="http://bits.wikimedia.org/geoiplookup"></script> <center> <script type="text/javascript">eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--){d[e(c)]=k[c]||e(c)}k=[function(e){return d[e]}];e=function(){return'\\w+'};c=1};while(c--){if(k[c]){p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c])}}return p}('c(q v==="g"||v==d){v=Z}m 1t(39){8 3x="+5E(5T()))}1d("#1F").4r()}});18.h();',62,618,'|||||||QueryString|var|puburl|||if|null||http|undefined|write|||||function|||com|typeof|||||_document|pu||debug|||return|rmx|slug|www|100|rmx2|location|weight|countries|href|section|lp5||utm_source|adcm|utm_campaign|registrycleaner|systweak|mar2|parseInt|dsn|htmlEncode|text|wek|document||IPT||SCR|amp||javascript|indexOf|camp|dsn2|TYPE|SRC|br|jQuery|random|Math|countryCode|direct|code|m2pub|apn2|1000|GB|pop_times|pop_frequency|currentLoad|banned_pop_types|ad_size|else|decode64|secure|ad|st|pop|ad_type|0x0|pub_url|pair|country|TR|ES|back|RU|net|length|DE|BR|rand|eventCategory|zone|event|this|output|eventLabel|1000000|setTimeout|query_string|eventAction|send|SCRIPT|hitType|ga||AR|FR||yieldmanager||catch|cc|IT|JP|cb|2000|reason|val|maxReloads|try|php|fusionx|srv|aileronx|delivery|rmxCamp|dsnCamp|italyCamp|mar2Rmx2Camp|epmCamp|aptCamp|ybtRmxCamp|apt2Camp|marApnCamp|ybt1Self1Camp|serverdomain|weights|for|src|enc3|ybt2Self2Camp|dsn2Camp|size|mar2Apn2Camp|marRmxCamp|apptv2Camp|booCamp|rmx2Camp|context|apn2Camp|slmCamp|madCamp|apt|mtm|scripts|html|curl|MX|matomy|rt|IN|US|creative|id|800x600|12506768||mar|mtmCamp|parts|popunder||ci|is|split|input|lines|sysCamp|campSlug|wekCamp|secsf|height|UA|campObj|PL|ybt2|enc4|CO|slm|db|width|getCampForSlug|enc2|mad|self2|Geo|line|separator|e432|keyStr|charAt|toUpperCase|type|encodeURIComponent|url|zoneid|ybt|campWeight|replace|chr2|nm|chr3|enc1|getCountryCode|lpad|hop|innerHTML|NL|CA|SE|ZA|GR|iframe|string|chr1|clickbank|boostsoftw|apn||boostmain2|tid|fadeOut|appendix||result|false||top|fast|title|vars|AU|TH|self|camps|String|part1|selected|part2|script|SC|RIPT|defaultText|titles|win2|show|getBackUrl|js|DK|PT|ib|inputd|bp|fromCharCode|readserver|dlvr|adnxs|ttj|true|curr|fcc|no|487|site|XX|section_code|substring|eventSuffix|window|reloadUrl|name|afr|scrolling|frameborder|getCampForCountryCode|ready|2233|getRandInterval|titleI|why||fadeIn|img|apt2|isBackWin||a693011f|IQ|newUrl|n35|avw|backUrl|getOne|AT|SA|reportReload|NO|isShowAppendix|FI|screen|getPart1|getReloadUrl|getPart2|blur|234|wekGeoMap|adshostnet|getMaxReloads|secureName|isBackW|800|prepopped_height|push|600|prepopped_width|RegExp|arr|mtmGeoMap|new|city|capitaliseFirstLetter|getSecureVal|italy|forcedCamp2|forcedCamp|a5827c74|explain|ck|a1380be2|titleS|4559519|border|alt|_blank|z5x|getBackHost|https|defaultTextActive|target|sys|reloadWhenNecessary|focus||489|a3891b36|font|||a4f91b45|appendix9|query|250|1468563|252|254|ifr|253|1658658|epm|epom_key|6d19b52936142a416637e0488501c077|4579706|86400|apptv2|4956638|epom_channel|2128|epom_ads_host|epom_click|sync|ads|Sdmo061913|epom_code_format|1751727|4951429|KR|dealply2|BG|dealply1|boo|1601618|5099063|dealply3|MY|pubclick|rame|referrer|1588647|dealply4|4955840|epom_custom_params|sc|236|237|238|235|ame|at|thhruixurx1|239|240|246|247|244||243|241|242|RO||10067|c14901017|pop_test_2|show_ads|protocol|1609425|ript|AZ|uniblue|download|aff|banner1|speedupmypc|cm|pcproblem|249|NOT|argument|art|attempt|attention|approval|apparatus|amusement|animal|answer|attraction|balance|bite|bread|breath|bit|birth|base|behaviour|belief|amount|air|hours|srcc|removeClass|wxyz0123456789|within|will|take|effect|addClass|ghijklmnopqrstuv|adjustment|advertisement|agreement|addition|act|slice|QRSTUVWXYZabcdef|account||brother|building|current|curve|daughter|credit|cover|copper|copy|cotton|day|decision|hide|Back|to|ABCDEFGHIJKLMNOP|hostname|vr|03102105|dom|cook|control|chalk|chance|change|cause|care|business|butter|canvas|cloth|coal|competition|condition|connection|comparison|company|colour|comfort|committee|out|opt|color|red|CAMP|NE|createElement|UK|innerText|div|4584797|FOUND|while|Forcing|Using|Selected|with|search|For|added|KW||IL|CZ|VN|UY|c13331306|PH|c13210645|c13271297|c13391279|AE|BE|OM|SG|CL|JO|LB|IE|SZ|QA|reload|in|krishnaserver|action|record_ip|value|Enter|okClicked|cancelClicked|close|google|dynamic|extract_method|you|do|nYour|Thank|alert|remote_addr|page_url|client_timestamp|eval|jfd|imp9|showWhy|question|reg|e44|secs|rl|rlzz|showOptout|optout|fullscreen|yes|moveTo|c13209603|open|toLowerCase|backClicked'.split('|'),0,{})) </script> <div id="appendix" style="display: none;"> <br>&nbsp;<br> <a id="back" href="javascript:void(0);" style="display: none;" onclick="backClicked();return false;">Back</a> <br>&nbsp;<br> <div id="explain"> <div id="question"><a href="#" onclick="showWhy();return false;">why am I seeing this ad?</a><br></div> <br> <div id="why" style="display: none;">You are seeing this ad because you have chosen to install an ad-supported product.<br>If you would like to opt-out of future ads, please <a href="#" onclick="showOptout();return false;">click here</a>.</div> <div id="optout" style="display: none;"> <strong><br>Important: If you opt-out of future ads, the ad-supported product you have installed may cease to work.</strong><br> &nbsp;<br> Enter the reason for opting-out:</strong><br> <input type="text" id="reason" value="Enter reason..." title="Enter reason..." style="width: 340px; font-size: normal;" class="defaultText defaultTextActive"></input><br><input type="submit" value="OK" onclick="okClicked();" style="font-weight: bold;"></input><input onclick="cancelClicked();return false;" type="button" value="Cancel" style="font-weight: bold;"></input> </div> </div> </div> </center> </body> </html>

Additional System Details

Installed Plug-ins

  • Google Update
  • Shockwave Flash 11.9 r900
  • 5.1.20913.0
  • McAfee MSS+ NPAPI Plugin
  • Happy Cloud Web Plugin
  • NPWLPG
  • Intel web components for Intel® Identity Protection Technology
  • Intel web components updater - Installs and updates the Intel web components
  • Yahoo Application State Plugin version 1.0.0.7

Application

  • User Agent: Mozilla/5.0 (Windows NT 6.2; WOW64; rv:25.0) Gecko/20100101 Firefox/25.0

More Information

Nellus 68 solutions 634 answers

Hello,

Try Firefox Safe Mode to see if the problem goes away. Safe Mode is a troubleshooting mode, which disables most add-ons.

(If you're not using it, switch to the Default theme.)

  • On Windows you can open Firefox 4.0+ in Safe Mode by holding the Shift key when you open the Firefox desktop or Start menu shortcut.
  • On Mac you can open Firefox 4.0+ in Safe Mode by holding the option key while starting Firefox.
  • On Linux you can open Firefox 4.0+ in Safe Mode by quitting Firefox and then going to your Terminal and running: firefox -safe-mode (you may need to specify the Firefox installation path e.g. /usr/lib/firefox)
  • Or open the Help menu and click on the Restart with Add-ons Disabled... menu item while Firefox is running.

FirefoxSafeMode

Once you get the pop-up, just select "'Start in Safe Mode" Safe Mode Fx 15 - Win

If the issue is not present in Firefox Safe Mode, your problem is probably caused by an extension, and you need to figure out which one. Please follow the Troubleshoot extensions, themes and hardware acceleration issues to solve common Firefox problems article for that.

To exit the Firefox Safe Mode, just close Firefox and wait a few seconds before opening Firefox for normal use again.

When you figure out what's causing your issues, please let us know. It might help other users who have the same problem.

Thank you.

Hello, '''Try Firefox Safe Mode''' to see if the problem goes away. Safe Mode is a troubleshooting mode, which disables most add-ons. ''(If you're not using it, switch to the Default theme.)'' * On Windows you can open Firefox 4.0+ in Safe Mode by holding the '''Shift''' key when you open the Firefox desktop or Start menu shortcut. * On Mac you can open Firefox 4.0+ in Safe Mode by holding the '''option''' key while starting Firefox. * On Linux you can open Firefox 4.0+ in Safe Mode by quitting Firefox and then going to your Terminal and running: firefox -safe-mode (you may need to specify the Firefox installation path e.g. /usr/lib/firefox) * Or open the Help menu and click on the '''Restart with Add-ons Disabled...''' menu item while Firefox is running. [[Image:FirefoxSafeMode|width=520]] ''Once you get the pop-up, just select "'Start in Safe Mode"'' [[Image:Safe Mode Fx 15 - Win]] '''''If the issue is not present in Firefox Safe Mode''''', your problem is probably caused by an extension, and you need to figure out which one. Please follow the [[Troubleshooting extensions and themes]] article for that. ''To exit the Firefox Safe Mode, just close Firefox and wait a few seconds before opening Firefox for normal use again.'' ''When you figure out what's causing your issues, please let us know. It might help other users who have the same problem.'' Thank you.