Windows Security Tutorials - Herong's Tutorial Examples - v3.01, by Dr. Herong Yang
Google Ads Hijacked by "Scorpion Saver" Ads
This section provides an example of 'Scorpion Saver' ads hijacking Google ads and displayed next to Google ads. 'Scorpion Saver' ads are related malware 'Tube Dimmer'.
Another symptop of "Scorpion Saver" ads, which is associated with "Tube Dimmer" malware, is that Google ads get hijacked and injected with malware ads based on what I learned from my first-hand experience on an infected Windows 7 system.
1. On the infected Windows 7 system, I visited the home page of my website with Firefox.
2. I saw the Google ad got displaced and a malware ad is added above the Google ad:
3. I moved the mouse over the "About This Info" link below the malware ad and saw the link URL pointing to malware site scorpionsaver.com.
As I mentioned previously, "Scorpion Saver" ads are closed related to malware "Tube Dimmer".
Table of Contents
About This Windows Security Book
Windows 8: System Security Review
Windows 8: System Security Protection
Windows 8 Defender for Real-Time Protection
Windows 7: System Security Review
Windows 7: System Security Protection
Windows 7 Forefront Client Security
Norton Power Eraser - Anti-Virus Scan Tool
McAfee Virus and Malware Protection Tools
Spybot - Spyware Blocker, Detection and Removal
Keeping IE (Internet Explorer) Secure
Malware (Adware, Spyware, Trojan, Worm, and Virus)
HijackThis - Browser Hijacker Diagnosis Tool
IE Add-on Program Listing and Removal
"Conduit Search" - Malware Detection and Removal
►"Tube Dimmer", "Scorpion Saver" or "Adpeak" Malware
What Is Malware "Tube Dimmer"?
"Search Deals by Injekt" Ads on Google Pages
"Scorpion Saver" Floating Ad on Web Pages
"Scorpion Saver" Adpeak Proxy Attack
►Google Ads Hijacked by "Scorpion Saver" Ads
Yahoo! Ads Displaced in Yahoo! Email
"RocketTab Ads" Box on Google Pages
Diagnosis Results of Malware "Tube Dimmer"
ChromeHelper.exe, FirefoxHelper.exe, and IeHelper.exe
Removing Malware "Tube Dimmer"
Malware Manual Removal Experience
Vundo (VirtuMonde/VirtuMundo) - vtsts.dll Removal
Trojan and Malware "Puper" Description and Removal
VSToolbar (VSAdd-in.dll) - Description and Removal
PWS (Password Stealer) Trojan Infection Removal