The new forums will be named Coin Return (based on the most recent vote)! You can check on the status and timeline of the transition to the new forums here.
The Guiding Principles and New Rules document is now in effect.

Weird history entries in my browser (yieldmanager?)

TetraNitroCubaneTetraNitroCubane Not Angry...Just VERY Disappointed...Registered User regular
edited December 2008 in Help / Advice Forum
Today I was rooting through the history file on my webbrowser (Opera 9.63) when I noticed something very peculiar. I've never had popups break through on Opera, and lately I have not noticed anything that I would call indicative of malware infection (constant popups, redirects to unwanted sites, changing my homepage). For the most part, everything has been pretty smooth, and I've been running NOD32 and Spybot S&D to keep things hopefully clean.

But when I looked at my history file, over the last two days most of the websites I've visited are peppered with entries to 'ad.yieldmanager.com' websites. I've never seen this before, it's only started in the last two or so days according to the history file. On top of that, I never actually see this webpage pop up, even though the history logs it as opening in the middle of my browsing sessions. Now, other embedded ads have never put an entry into my history file, so I'm inclined to believe that something is trying to contact these sites through my browser? Does that even make sense? I'm rather dense about this stuff.

I can't find anything on my system with NOD, Spybot, or Hijackthis. Fsecure blacklight and rootkit revealer didn't turn anything up either.

Does anyone have any idea what's going on here, and any inclination about if it's malicious or not? Any help or advice would be much appreciated. Thanks.

TetraNitroCubane on

Posts

  • capnricocapnrico Registered User regular
    edited December 2008
    Give malwarebytes antimalware a shot, it seems to pick up stuff other programs don't. Also, run your scans on a safe mode reboot.

    capnrico on
  • urahonkyurahonky Cynical Old Man Registered User regular
    edited December 2008
    It could be a link that is being used from another website? I know when I frequent yahoo mail I get stuff like ad.uselessboringshit.net and stuff.

    urahonky on
  • capnricocapnrico Registered User regular
    edited December 2008
    Quick google brings up:
    ad.yieldmanager.com Description
    ad.yieldmanager.com is a spyware cookie that Tracks your personal information and browsing habits, as you surf the web. This information can be retrieved by the parent company. http://www.yieldmanager.com/

    Sounds like a relatively harmless cookie, but feel free to nuke it.

    capnrico on
  • TetraNitroCubaneTetraNitroCubane Not Angry... Just VERY Disappointed...Registered User regular
    edited December 2008
    urahonky wrote: »
    It could be a link that is being used from another website? I know when I frequent yahoo mail I get stuff like ad.uselessboringshit.net and stuff.

    That might be it, but that's odd that I'm only seeing it recently. Nevertheless it sounds pretty accurate, and google seems to implicate Yahoo.
    capnrico wrote: »
    Give malwarebytes antimalware a shot, it seems to pick up stuff other programs don't. Also, run your scans on a safe mode reboot.

    Thanks for the advice. Malwarebytes antimalware turned up nothing, even in a thorough safe-mode scan, so I guess it is just a harmless cookie. I've never had a cookie show up a connection in my history file before.

    I blocked the addresses in Opera and manually nuked the cookie. I haven't seen an instance since, but it's early yet.

    TetraNitroCubane on
Sign In or Register to comment.