[Not so] Subliminal advertising - Double underlined ad links

[TiMow]

Is anyone else experiencing this or has my laptop got gremlins?

Whilst viewing threads in a logged-off condition, computer-related words appear in blue and are double underlined (linked).

By just hovering the mouse over, gives a a pop-up Intel ad. with Kontera (?) on the top line - wont click on this.

Noticed this on these two threads:

Swissom DSL: 2 routers?

**Warning ** Inter Discount** Warning** (recent posts)

In the following post the bold words appeared linked (logged off viewing):

	Quote:	HippoPat
	As the others say, as long as you have enough signal to get your full internet speed, it probably isn't worth the effort. One thing you might find the second one useful for is if you have other devices (older computers/consoles/etc) that are not wi-fi capable and you can then plug in the 2nd router near to these devices, plug them into that and wireless communicate with the original box to get internet etc. I've got a similar-ish setup to that but it does require a little bit of geekery. (It required was to turn off the DHCP server on the second router and change its static LAN IP).

[Upthehatters2008]

	Quote:	TiMow
	Is anyone else experiencing this or has my laptop got gremlins? Whilst viewing threads in a logged-off condition, computer-related words appear in blue and are double underlined (linked). By just hovering the mouse over, gives a a pop-up Intel ad. with Kontera (?) on the top line - wont click on this. Noticed this on these two threads: Swissom DSL: 2 routers? **Warning ** Inter Discount** Warning** (recent posts) In the following post the bold words appeared linked (logged off viewing):

Have you installed any software recently that asked you to install another toolbar in your web browser or asked to install 3rd party software ?

It could be this or a Ad-Ware Trojan. Check the add -ins for you browser and remove/disable any you do not recognise.

A temporary work around is to block Kontera

Tools>Internet Options>Security>Restricted Zone>Site - Add http://www.us.intellitxt.com/, http://www.tacoda.net/, http://www.kontera.com/

Further reference

How to Manually RemoveKontera


To remove all Kontera files, you must kill all Kontera processes that are running in your computer's memory. To kill Kontera processes, press CTRL+ALT+DELETE to open the Windows Task Manager. Click on the Processes tab, search for Kontera, then right-click it and select End Process key.

You'll also need to remove Kontera registry keys. To remove Kontera registry keys, click on the Windows Start button and select Run to open Windows Registry Editor. A window will popup. Type regedit into the box, and click OK. Search for the registry key HKEY_LOCAL_MACHINE\Software\Kontera. Right-click it and select Delete.

Finally, you'll need to manually delete other files to clean your PC of Kontera. These Kontera can be in the form of EXE, DLL, LSP, TOOLBAR, BROWSER HIJACK, and/or BROWSER PLUGIN. For example, Kontera might create a file like
%PROGRAM_FILES%\Kontera\Kontera.exe. Locate and remove these files.

[Caleb]

You have the Kontera "application" (it's actually a sort of cookie) in your computer that allows 3rd party websites to analyze your browsing behavior. It pushes contextual advertising (inline text advertisements) on whatever page you're looking at. You can remove Kontera ads by blocking the root sites they are linked to. You do this by going to Tools (if you're using IE) > Options (or Internet Options in IE 8) > Security > Restricted sites, and add http//*.kontera.com/ to the restricted sites.

If you search for "remove Kontera" in google you will get a lot of easy ways to remove it, eg.:

"To remove all Kontera files, you must kill all Kontera processes that are running in your computer's memory. To kill Kontera processes, press CTRL+ALT+DELETE to open the Windows Task Manager. Click on the "Processes" tab, search for Kontera, then right-click it and select "End Process" key.

You'll also need to remove Kontera registry keys. To remove Kontera registry keys, click on the Windows "Start" button and select "Run" to open Windows Registry Editor. A window will popup. Type "regedit" into the box, and click "OK". Search for the registry key "HKEY_LOCAL_MACHINE\Software\Kontera." Right-click it and select "Delete."

Finally, you'll need to manually delete other files to clean your PC of Kontera. These Kontera can be in the form of EXE, DLL, LSP, TOOLBAR, BROWSER HIJACK, and/or BROWSER PLUGIN. For example, Kontera might create a file like
%PROGRAM_FILES%\Kontera\Kontera.exe. Locate and remove these files."

In order to

[TiMow]

Thanks guys.

No recent downloads .... and I always check for unwanted additions and toolbars, so I don't know where it came from.

Strange as the only place where it has appeared was on EF when viewed as a guest (not logged on). No problems on any other sites or EF when logged on.

Had a bit more time and Googled Kontera, and how to remove remedies .... but as usual they want you to download and pay for unneeded software.

Anyway as per methods outlined above, there was nothing to be found under TM processes or in the registry (under given path).

There was a cookie in Ff. for Kontera, and with a search a couple more disguised under different names - all removed, although the Kontera one did keep on reappearing, but only with double-underlines on this thread.

Also excluded cookie acceptance with Ff. (different procedure as outlined for IE), although this didn't stop it's reappearance.

Downloaded a free malware scanner (that I'm familiar with from my other laptop) and ran this ..... but it found nothing Kontera related (but did find a couple of other minor issues).

After all this, it had almost disappeared - only present in the word "browser" in UTH's post above, for some reason.

Finally ended up installing Adblock Plus add-on for Ff., which now seems to have fully eliminated it.

So ended up with another program and another add-on .... and I was being so careful on cluttering up this (relatively) new laptop.

[I still blame EF ]

Sorry, I meant to reply earlier today.

The double-underlined links are not any kind of malware.

Rather, they are deliberately installed contextual advertising provided via kontera.com.

As noted, they can be avoided by either logging in or by using the Google Chrome browser together with ChromeAdblock.com.