Need help with lijit.com adware

Status
Not open for further replies.

cc321

New Member
Thread author
Aug 1, 2022
5
Since July 27, whenever I go to some sites I regularly visit, AVG keeps notifying me of aborting a connection to "ap.lijit.com" and "ce.lijit.com", and I'm also seeing a lot of ads on those sites when I never did before.

The steps I've done so far but nothing has changed:
  • Restore Google Chrome settings
  • "Clean up computer" from Google Chrome
  • Reinstall Google Chrome
  • I have not downloaded a new software recently (except for the 4 below) but did check Programs and Features just in case
  • Run a Malwarebytes scan: no threats detected
  • Run a HitmanPro scan: no threats detected, deleted a lot of cookies from sites I've never heard of but then they show up again when I do another later
  • Run a AdwCleaner scan: no threats detected
  • Run FRST scan
  • Restarted my PC after the scans
I'm not good at this kind of stuff, I don't know what else to do...
 

Attachments

  • Screenshot_10.png
    Screenshot_10.png
    129.3 KB · Views: 7
  • HitmanPro_20220802_1720.log
    10.5 KB · Views: 3
  • FRST.txt
    50.3 KB · Views: 17
  • Addition.txt
    59.9 KB · Views: 17

nasdaq

Moderator
Verified
Staff member
Nov 5, 2019
838
Hello, Welcome to MalwareTips.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the FRST.txt log you have submitted.

Run FRST and click Fix only once and wait.

The Computer will restart when the fix is completed.

It will create a log (Fixlog.txt) please post it to your reply.
===

If the problem persists and Chrome is Synced with other Devices reset it.



Execute the suggested fix.

Restart the computer normally.
===========

Please post the Fixlog.txt and let me know what problem persists.
 

Attachments

  • Fixlist.txt
    8.3 KB · Views: 16

cc321

New Member
Thread author
Aug 1, 2022
5
Hi nasdaq,

I turned off sync in Chrome and ran the fixlist.txt

I don't think I'm getting the "aborting connection to ad.lijit.com" notification anymore but I'm still seeing ads on websites when I didn't used to.
 

Attachments

  • Fixlog.txt
    19.8 KB · Views: 16

nasdaq

Moderator
Verified
Staff member
Nov 5, 2019
838
Hi,

I'm still seeing ads on websites when I didn't used to.

Can you give me more information.

A link where you are getting these ads may help.
 

cc321

New Member
Thread author
Aug 1, 2022
5
A link where you are getting these ads may help.

I have adblock and did not used to see ads on these sites until the lijit.com problem happened. These were also the sites that would make AVG say "aborted connection to ap.lijit.com"

hxxp://dnd5e.wikidot.com
hxxps://5e.tools
hxxps://paimon.moe/wish

various fandom.com wiki sites like
hxxps://genshin-impact.fandom.com/wiki/Genshin_Impact_Wiki
hxxps://stardewvalley.fandom.com/wiki/Stardew_Valley_Wiki

The attached screenshots are also what I see in the bottom left of Chrome when I go to those sites
 

Attachments

  • Screenshot_18.png
    Screenshot_18.png
    2.1 KB · Views: 4
  • Screenshot_17.png
    Screenshot_17.png
    1.7 KB · Views: 5
  • Screenshot_14.png
    Screenshot_14.png
    1.9 KB · Views: 5
  • Screenshot_13.png
    Screenshot_13.png
    1.5 KB · Views: 5
  • Screenshot_11.png
    Screenshot_11.png
    6.4 KB · Views: 5
Last edited by a moderator:

nasdaq

Moderator
Verified
Staff member
Nov 5, 2019
838
Hi,

Try this fix.

Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the FRST.txt log you have submitted.

Run FRST and click Fix only once and wait.

The Computer will restart when the fix is completed.

It will create a log (Fixlog.txt) please post it to your reply.
===



Please post the Fixlog.txt and let me know if the problem persists.
 

Attachments

  • Fixlist.txt
    1.3 KB · Views: 19

cc321

New Member
Thread author
Aug 1, 2022
5
Hi,

I ran the fixlist.txt but it doesn't feel like anything changed.
Chrome is still making connections to those weird websites and I'm still getting ads on websites that never showed ads before.

I forgot to say thank you for the very first fix, that one helped a lot :)
 

Attachments

  • Screenshot_27.png
    Screenshot_27.png
    2.5 KB · Views: 1
  • Screenshot_74.png
    Screenshot_74.png
    2.5 KB · Views: 1
  • Screenshot_35.png
    Screenshot_35.png
    3.7 KB · Views: 1
  • Screenshot_34.png
    Screenshot_34.png
    1.9 KB · Views: 1
  • Screenshot_29.png
    Screenshot_29.png
    44.3 KB · Views: 1
  • Fixlog.txt
    1.9 KB · Views: 16

nasdaq

Moderator
Verified
Staff member
Nov 5, 2019
838
Hi,

Try this.
If the problem persists and Chrome is Synced with other Devices reset it.



Execute the suggested fix.

Restart the computer normally.
===========
 

cc321

New Member
Thread author
Aug 1, 2022
5
Hi nasdaq,

I'm sorry, the problem still persists... 😞

Here is what I've done:
  • Turn off sync on all my devices
  • Clear sync on all devices
  • Restore Chrome settings to default
  • Run Fixlist.txt
  • Restarted computer
  • Check the same websites BEFORE turning sync on any devices
 

Attachments

  • Fixlog.txt
    1.9 KB · Views: 13
  • HitmanPro_20220806_0903.log
    14.3 KB · Views: 4

nasdaq

Moderator
Verified
Staff member
Nov 5, 2019
838
Hi,

Follow the directives on the link below to block thescookies in bold.


Block third party cookies in Incognito.
Block third-party cookies.
If you block third-party cookies, all cookies and site data from other sites are blocked, even if the site is allowed on your exceptions list.

You can also look at the other options that you can used to accept of denied them.
 
Status
Not open for further replies.