Windows 10: What is "logger.js"?

Hi writerperson and welcome to Tenforums.
You may want to run the scans mentioned in post # 6 as well, to get it off your system. *Smile

 

I removed that post because I didn't notice it was a pay version and I was hoping you didn't use it.

Jeff.. I should have and next time I will edit the post and explain why I did.

 

Thank you very much simrick! I carefully followed your instructions and voila, no more haso.pubmatic.com. Probably cleaned a lot of other junk too. Thanks again.

 

Hi Gjoo and welcome to Tenforums.
Thanks for creating an account and letting us know that worked for you. Cheers! *Thumbs

 

Thanks Jeff. Yeah, you've got to be careful with some of these generic "malware removal sites", as they can be just as bad as the malware. *Wink

 

100% agree!!!!!! *Thumbs*Thumbs*Thumbs*Thumbs*Thumbs

 

simrick, Computiac,
Due to a change in my work load, I can not start on this yet. I have taken your warning to heart, however, and I will resolve it ASAP (by this weekend, if not sooner). I will post any logs I find. Thanks again!

BunnyJ,
Ref: Pay version - No harm done & most of it seemed pretty reasonable. I appreciate the effort.

Gjoo,
Thanks for showing us it works.

 

Okay.

 

AFAIK, this appears to have originally been developed as a logger program used by a group of advertisers, supposedly to track their "click-through" rate and thereby confirm their revenue.

Unfortunately, it appears to have been spoofed by another group registered out of Panama, who may be using the keyboard logging for more nefarious purposes.

The best prevention I've been able to find is to keep the spoofed domain blocked in every one of my browsers' "blacklists".

To me, any covert downloading of executable code, rather than of cookies, is "black-hat" hacking. I'll do whatever I can to keep my system clean.

 

Using OpenDNS servers on your NICs will also help prevent access to known bad sites. *Smile

 

Hi, simrick

I found the time earlier this week to do the cleanup per your excellant instructions. As far as I can tell, the problem is gone. Everything went straightforward and almost every step found at least a few more things to remove. ADWClearner found 22 items to delete, which impressed me until I got to CCleaner - it found and removed 3.75 GB (not MB) of stuff, including 2,042 cookies (which included a “pub----.com” cookie - see last image). I've been using this computer since 2009, but I did not realize it was dragging such a burden along with it.

I have attached snips of the various logs (the numbers indicate the matching step in your instructions). My next step will be to make sure my Java is up to date.

Thank you again for your help, and thanks to the others on this site for all the support.

-

(UPDATE: Changed the JPEGs to PNGs for better viewing. Thanks for the tip, eLPuSHeR)

 

A small suggestion Ron. Try using PNG as format for those screen captures. Those JPEG are really hurting my eyes.

 

Good to hear Ron. Glad we got you fixed up.
(Looks like that TMGA driver is for a steering wheel.) Please mark the thread as solved. Cheers! *Thumbs

 

Done - Marked as solved.

BTW, my Java was so old (Java 8 Update 51) that I had to uninstall it before I could load the Update 101.

 

Congrats Ron, great work on getting it cleaned up. *Thumbs