There's a new batch of ads going around that are from ad.yieldmanager.com.  I've contacted a few WMs, with screen shots.  But I'd suggest keeping an eye out.  If you see some, I'd suggest contacting the WM so they can remove the ads before they get banned.

Also, if you're an advertiser, I'd suggest holding off with ad.yieldmanager.com until they pull the offending stuff.   The WM I've heard from tried to opt out of adult material.

Doing a google awhile back ad.yeildmanager.com is a infection on your system. From my understanding of reading much of this comes from the lower bottom feeder ad sites. Which we all know many sites seem to be using and making excuses that it is not their fault but the 3rf party advertiser.

Oh don't get me started on this one. I had to delete my whole rant on the site's blaming 3rd party advertisers rather then being responsible for their own actions.





____________

~Owner: PecoMail~Blog: Freebies and More~

Are these the sites which pay you for banner impressions?

Actually yeildmanager is a platform in which many servers use their service. Right Media is one of the first from my understanding using the system. It is complicated to explain what it really is but perhaps this article by Click Z. It at least explains what yeildmanager is.

Quote:

Right Media likes to explain Yield Manager as akin to an auction marketplace, like eBay or Nasdaq, except instead of electronically facilitating the sale of merchandise or stocks, Yield Manager facilitates the sale of online advertising. In real time, Yield Manager allows the online advertising marketplace to compete for every ad impression based on the unique value of that impression to the buyer and seller. It moves the online ad marketplace from static, fixed pricing to dynamic, fluid pricing.

You can read the full article at the link below. It gives a better explanation of what yeildmanager is.

http://www.clickz.com/showPage.html?page=3565521

Digging through archives on blogs and forums many of the ad servers don't want to take responsibility for what pops up on their networks. Many have the attitude that the dating ads are not porn or borderline. Someone mentioned on another forum that most dating sites are for 18 and up wouldn't that make them adult ads? That to me is it in a nutshell.

Anyways I can dig some more but it is easy enough to put ad.yeildmanager.com or yeildmanager in google and do a search. It comes up with Results 1 - 10 of about 162,000 for yieldmanager Results. Pretty scarey to say the least. Most are discussing how to remove spyware, adware and garbage off their computers. If you dig you can find some relevant info on more to do with the platform and networks using the system.

I know I didn't answer your ad. I have no idea if it is sites per per banner but it is run on systems with banners. It could be any site that they are promoting banners from. Whether it be per impression or just for leads. I do know many of the PTP sites all are using the same ad networks which makes me think it is lower grade due to many of the better ad networks have banned PTR sites or incentive sites. A few were generous to grandfather in their honest advertisers.





____________

~Owner: PecoMail~Blog: Freebies and More~

Your site came up on a search for information on ad.yeildmanager.com.  My PC is currently infected with something that replaces a web page's native banners with others served up by ad.yeildmanager.com.  Look what it did to your Pecomail banner:



So far all attempts at removing this infection (ad-aware, spybot s&d, avast, avg, panda, and superantispyware in safe mode) have failed.  Reformatting and reinstalling XP may be my best option.

Before you do that you might try going to start<run<CMD<in the dos prompt put ipconfig/flushdns< Then go to start<run<msconfig<go to the services tab and click on that scroll down to dnsclient and uncheck it.  Let your computer restart.  That will get rid of all the cookies windows has stored on your computer.  Then go ahead and clean everything out again and run your disc cleanup.





____________
Want a break from PTP/PTR? Check out TheUnKnownZone. You can even get your very own folder for almost any topic you want. http://theunknownzone.us/smf/index.php

I did as you suggested and ran 4 different scans and disk cleanup.

It seemed to work at first, (I now see the Pecomail banner) but the banner swapping is continuing at sites like IMDb & CNN.  This infection seems realy fond of swapping google ads, and it is happening in both Firefox & IE. In the status bar I see data also being transfered from content.yieldmanager.edgesuite.net, 85.12.43.83, and several other suspicious looking addresses.  Many of the same addresses appear no matter which web site I visit.

Do you have the no script add on for Firefox?





____________
Want a break from PTP/PTR? Check out TheUnKnownZone. You can even get your very own folder for almost any topic you want. http://theunknownzone.us/smf/index.php

First off, thanks for your help.  I wasn't expecting it when I made my first post.  

I don't have the no script add on for Firefox.  I won't be happy with merely blocking this infection, I want to eradicate it.

My problems may go beyond the scope of this forum though.  My brother asked if I did the new scans in Safe mode.  I hadn't, but I now cannot boot into Safe mode.  On the screen that shows the loading of the drivers, the computer hangs after MUP.SYS.  A message is displayed to press Escape to stop loading d347bus.sys, but even I do, Safe mode does not load.  

Click on Start, choose RUN, write MSCONFIG and see some thing unusual running when you PC starts. Remove it and restart your machine. Also, check Installed Softwares through your control panel and see any program which makes no sense to you installed. Uninstall it.

Try doing a system restore. After you do a system restore make sure to turn off system restore and then try to go into safe mode to scan your pc. The bug you have is most likely on your latest restore so do a restore to an older date. But make sure to have it off when doing a scan in safemode. You can try a housecall run which is an online scanner.





____________

~Owner: PecoMail~Blog: Freebies and More~