Virus? 'Unable to download jstag from uk-ads.openx.net' pop up when web browsing

Viruses and worms
1

Hi,

I am getting this pop up while web browsing on Google Chrome. Just started happening this morning.

http://i.imgur.com/7UIFadp.png

I googled for solutions. Found this site, followed the site’s suggestions to remove it but no luck.

A user actually made a post on gamefaqs regarding the same issue (post was made ~13 hours ago), no beneficial replies.

https://www.gamefaqs.com/boards/916373-pc/73691113

Has anyone seen this before and if you are aware of a possible solution. Thanks.

For those who cannot open imgur, this is the pop up:

[Web Browser]

Unable to download jstag from uk-ads.openx.net.
Unable to open this Internet site. The requested site is either unavailable or cannot be found. Please try again later.

2

Hi what browser does this occur in ?

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

[*]Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
[*]Select additions at the bottom
[*]Press Scan button.

https://dl.dropboxusercontent.com/u/73555776/frst.JPG

[*]It will produce a log called FRST.txt in the same directory the tool is run from.
[*]Please attach both logs generated.

3

Google Chrome - Hi what browser does this occur in ?

I ran the Farbar Recovery Scan. Is there a way to attach the text files?

4
I ran the Farbar Recovery Scan. [b]Is there a way to attach the text files?[/b]

Below the box you write in … Attachments and other options

5

Thanks Pondus.

FRST.txt and Additional.txt are attached.

6

Could you let me know if this stops it

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

CreateRestorePoint: FF user.js: detected! => C:\Users\GGDagger07\AppData\Roaming\Mozilla\Firefox\Profiles\6cs7s0p6.default-1375111287492\user.js [2013-10-23] FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wtu-secure-search.xml [2016-04-12] FF Extension: Ebates Cash Back - C:\Users\GGDagger07\AppData\Roaming\Mozilla\Firefox\Profiles\6cs7s0p6.default-1375111287492\extensions\{35d6291e-1d4b-f9b4-c52f-77e6410d1326}.xpi [2016-02-27] CHR Extension: (Ebates Cash Back) - C:\Users\GGDagger07\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\chhjbpecpncaggjpdakmflnfcopglcmi [2016-04-30] FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\firefox.cfg [2013-07-24] <==== ATTENTION 2014-04-19 11:06 - 2014-09-03 22:28 - 0000000 _____ () C:\Program Files (x86)\Mozilla Firefoxwtu-secure-search.xml Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f RemoveProxy: EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG

Run FRST and press Fix
On completion a log will be generated please post that

THEN

Please download AdwCleaner by Xplode onto your desktop.

[*]Close all open programs and internet browsers.
[*]Double click on AdwCleaner.exe to run the tool.
[*]Click on Scan.
[*]After the scan is complete click on “Clean”
[*]Confirm each time with Ok.
[*]Your computer will be rebooted automatically. A text file will open after the restart.
[*]Please post the content of that logfile with your next answer.
[*]You can find the logfile at C:\AdwCleaner[S0].txt as well.

7

Essexboy,

Thanks a bunch. Please see the attached files.

Edit: Not sure if it stopped the pop up yet. I will keep my Google Chrome open and will update asap.