Share via

ads.pubmatic.com weirdness

Anonymous
2016-01-29T15:31:18+00:00

Hi everyone, I've got a doozy for you.

So, I've become pretty familiar with the "ads.pubmatic.com" malware, after what seems to be a persistent infection, but I've never seen anyone talking about what I'm experiencing with it, either. I'm not suffering any deleterious effects from it, it's just that periodically I'll get an unrequested pop-up window for a failed download of "pug from image2.pubmatic.com." It's always a failed download, but I can't find the download location to figure out what's up, and obviously I'm a little concerned about what, exactly, this means.

Here's the thing though: all the usual virus scanning options are coming up all clear. Malwarebytes gives me zero infection, Avast initially found something but after deleting and rescanning (all clear now) I'm still getting the message. Hitmanpro doesn't find anything but tracking cookies, adwarecleaner and Junkware Removal Tool find nothing, nor does tdsskiller, and all of thse are newly updated. Even resetting my browser doesn't fix it! From what I can see, there's nothing infecting my computer, and yet I still get these occasional error messages- that don't disrupt any programs, they just come and then go- that make me wonder what's up.

What the heck do I do now?

Windows for home | Previous Windows versions | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

Answer accepted by question author

  1. Anonymous
    2016-01-29T18:18:24+00:00

    Next time it occurs open Task Manager and see if you can find the “file” that is running.  If you can determine where it is you may want to manually remove it.

    Check the startup menu – see if there’s anything running in it that might be causing the popup.  If so, disable it.

    You might also try Autoruns: https://technet.microsoft.com/en-us/sysinternals/bb963902.aspx

    Good luck...

    0 comments No comments

4 additional answers

Sort by: Most helpful
  1. Anonymous
    2016-03-31T20:23:07+00:00

    I had same problem found cause to be utorrent

    7 people found this answer helpful.
    0 comments No comments
  2. Anonymous
    2016-05-16T07:00:44+00:00

    I. (Potential) Fix: detect the adware's hidden folder; use some advanced uninstall tool or adware cleaner to force it to go

    1. learn how to make the best of WTM (see the suggestion from Le Boule)
    1. Check out your browser's properties (erase pubmatic-related URL in it)

    ![](https://learn-attachment.microsoft.com/api/attachments/87ce6602-c39a-426c-8875-79b75aa82d54?platform=QnA)

    Don't miss out the following system settings: Schedule (check out the Active Tasks), said Startup (filesystem & registry).

    ![](https://learn-attachment.microsoft.com/api/attachments/1484a063-d273-46f1-8d1f-82920c9f8626?platform=QnA)

    Meantime, the workaround is to replace that URL with your preferred domain.

    ![](https://learn-attachment.microsoft.com/api/attachments/98b2ca32-2184-49ef-998b-8019cb4c2b08?platform=QnA)

    So, BTW, what's the hijacked browser? IE, FF and/or Chrome?

    1. Search and delete all (hidden) items that associated with pubmatic. You can unhide Windows' protected items, search... clean any related items (in Safe Mode w/ Networking - recommended). Moreover, you update your MBAM and/or other virus protection to the latest version, perform a full scan later or in your free time.

    ![](https://learn-attachment.microsoft.com/api/attachments/b01882d7-d463-40fd-8943-ad024ceb731a?platform=QnA)

    1. Please contact/chat a valid tech help like <ad for Norton chat removed> , if you still can't fix it for yourself.

    II. Preventive measures

    Apparently, the mentioned URL is a browser hijackware, not malware. It could frequently installed along with some sponsored installation package, from bloated freeware to adware powered exe and to downware/ custom installer.

    Take the said uTorrent as an example here, an inexperienced user would get the following junkware even hijackware installed: Conduit Protect, µTorrent Browser Bar, and more

    ![](https://learn-attachment.microsoft.com/api/attachments/48a73b51-d3f5-413e-97ef-c9675179b277?platform=QnA)

    ![](https://learn-attachment.microsoft.com/api/attachments/501ff85d-70a0-406b-88c9-3adcc1e317f1?platform=QnA)

    Users might consider paying $4.95/year to avoid those partners from uTorrent. Or, you can also learn avoid installing bloatware, adware and/or riskware in the internet.

    To keep foistware, riskware even true malware at bay, you must be very careful when surfing the web, installing any other 3rd-party downloads. Because even some legit computer program like Bing Desktop could change your browser settings.

    PS: Hit here and read related discussion.

    0 comments No comments
  3. Anonymous
    2016-05-16T05:30:11+00:00

    same utorrent

    0 comments No comments
  4. Anonymous
    2016-05-06T20:19:50+00:00

    Este problema é causado por UTORRENT. Quando se tenta atualizar os anúncios, mas impede que alguém (geralmente é o firewall, mas pode causado por programas que bloqueiam IPs e sites como o Malwarebytes)

    Usei Google tradutor

    0 comments No comments