Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Anyone heard of the "TidyNetwork" virus/malware? Is it possible to determine the origin of the ad that is created on web pages by Tidy by inspecting the element using developer tools? I am using chrome.

or, of anyone knows of it, do you know to remove it?

share|improve this question

closed as off topic by Rory Alsop Apr 6 '13 at 22:40

Questions on Information Security Stack Exchange are expected to relate to Information security within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about reopening questions here.If this question can be reworded to fit the rules in the help center, please edit the question.

I mean, I don't want to be a jerk here but you leave me no choice.

share|improve this answer

Based on this analysis of TidyNetwork (or Win32/Paidemet.A how Microsoft and some other Antivirus software vendors decided to name this adware trojan), it is capable of updating its database with new advertising sources, so that identification of the origin or adverts that you're interested in might not be as easy as simply inspecting their source and target locations. Some companies do however track link associations and collate data that identifies network neighborhoods, and that can be used to determine to some degree of certainty, if an advert's source/target location is a part of the same TidyNetwork scheme. However, even this (or other similar) list is a subject to change.

As for removal, it isn't a particularly pesky visitor, and you shouldn't have problems neither detecting it, nor later removing it with antivirus tools from pretty much any major vendor. Just make sure you don't fall for another scheme by following instructions on some suspicious looking page, luring new victims into downloading and running a too convenient to be true, one click solves it all .exe file, and end up installing a new bunch of viruses instead. If you're not sure, go for solutions from trusted vendors.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.