Comments on: ABC Search Affiliate Browser Hijack using abcjmp.com advertising

By: horatiox

horatiox — Fri, 28 Aug 2009 04:37:45 +0000

Some new nasty malware attacks have recently appeared, along the lines of ” Your computer is at severe risk!”, with the pseudo-windows security icon, and the orders to download their malware removal app. ASAP. Actually they have been around for a couple of years–but now they are penetrating firewalls and anti-spyware programs. One–”Advanced virus removal” (imagine, like a fire-sqaud, ese)– appeared on one of my boxes, walked through latest Win Pro firewall, around my trusty Spybot (updated as well), AND PC-Tools (and disabled ‘em as well). Back to the battlezone.

By: JoeDuck

JoeDuck — Thu, 09 Jul 2009 17:56:38 +0000

No resolution yet for me on this. I switched to Chrome which is showing no signs of the infection.

By: Another Victim

Another Victim — Thu, 09 Jul 2009 14:35:22 +0000

Any resolution? I got hit a few days ago when I used IE for the first time in weeks. Now

Google returns many instances of the abcjmp redirect but I’m unable to find any directions on how to fix it. Of course, to view the search results I have to paste the URL in a new window because clicking on the Google link takes me to one of the abcjmp spam websites.

I ran Ad Aware and two antivirus programs but nothing fixes it. Were you able to find the fix or does it require wiping the entire system?

By: Anonymous

Anonymous — Sun, 05 Jul 2009 12:29:28 +0000

Give an IP address to a site that I barely find legit? I think not.

By: Customer Service

Customer Service — Tue, 30 Jun 2009 21:35:56 +0000

Hi Joe,
Thank you for the posting, unfortunately you have willingly/unwillingly installed a software that is redirecting your web requests.
We share your frustration. ABCSearch is a large network of publishers and there are a few bad apples out there that are accessing our advertiser feed against our terms and conditions. We have no affiliation with the source of the software, they choose to send their traffic to a variety of sources of which we are just one of them. However, we are actively taking measures to identify the source(s).

It is a high priority of ABCSearch.com to ensure a positive user experience. If you feel you have been receiving unwanted advertising through a distribution partner, if possible, please send us the the following information:
-Your IP address (http://www.whatismyip.com/).
-The full URL string with abcjmp.com ie: http://www.abcjmp.com/search/?affiliate=index0001&Terms=shoes&x=0&y=0, screenshots.
-Any other details you can share about your experience.

For removal, we recommend visiting the Cnet Download Security Center: http://www.download.com/windows/security-software/2001-2023_4-0.html?tag=rb_content;contentNav
Cnet.com is a very reputable company offering a collection of free removal tools.

Please let us know if any particular program works so that we may share it with other users. You may contact us at support@abcsearch.com.

Thank you,
Customer Support
ABCSearch.com

By: JoeDuck

JoeDuck — Mon, 29 Jun 2009 22:23:51 +0000

Thanks all three of you for the advice – I’ll follow up when the problem is gone. Google Chrome does not seem to have any problems with it but both FF and IE remain infected.

By: horatiox

horatiox — Mon, 29 Jun 2009 21:33:42 +0000

Run your malware-removal app. after a bit of Firefoxing, and quite a few noxious sites pop up (including ABC search I believe). My experience suggests that not as many malware/trojans pop up on IE. Firefox has other flaws (too busy and cluttered, really).

By: glenn

glenn — Mon, 29 Jun 2009 19:21:45 +0000

The new Microsoft Security Essentials should catch it. Msoft this time around really did a tremendous job with that FREE product.

Horatiox what problems are you having with Firefox? What version are you on…you shouldn’t be attracting so much malware with it? I develop on all the browsers and Firefox doesn’t seem to attract anymore or any less than the others.

By: FoolsGold

FoolsGold — Mon, 29 Jun 2009 17:27:30 +0000

It seems rather obvious that the Advertising Company is probably a front for the spammers. The advertising company may have some legitimate clients but the advertising company is clearly too friendly with the spammers. The levels of corporate shells and co-conspirators are probably quite high.
There are often tricks. In Manhattan real estate there are often a half dozen shell corporations but the lawyers know to check the elevator permit so as to get on the trail of the real owner of the property. In the world of spam I don’t know what can be done, but following the money trail usually works best, though it will probaby only lead you to some corporate shell located in Encino, California, Newport Beach,CA or Boca Raton, FL.

By: horatiox

horatiox — Mon, 29 Jun 2009 15:50:29 +0000

Spy-bot probably has fix for ABC malware–I run spy-bot weekly with MS/IE firewall (square, I realize), and haven’t had any problems for over two years. Also, I don’t advise firefox. I tend to get malware after an hour or so with that freak browser. Not sure with Chrome, but I don’t care for the chrome layout overly much.

IMHO the Spy-bot wizard offers the best anti-malware/spam/trojan/virus currently available (it’s on Major Geeks, a few other sites). I wager some vegass/mafia sorts of hackers or Mozilla creepos got a hit out on Mr. Spy-bot.