+- Too Many Message Boards (https://tmmb.co.nz/forums)
+-- Forum: PC World Forums (https://tmmb.co.nz/forums/forumdisplay.php?fid=86)
+--- Forum: PressF1 (https://tmmb.co.nz/forums/forumdisplay.php?fid=87)
+--- Thread: Chrome mmrtb.com redirect (/showthread.php?tid=3786)
Chrome mmrtb.com redirect - Excalibur - 15-02-2025
Having trouble getting rid of mmrtb.com. I believe its called a browser redirect. Lost a few hours chasing this over some weeks already, but it keeps coming back.
Defender overheats CPU so I've been reluctant to complete a full scan. Online ESET didn't find anything either as did Malwarebytes.
Deleted all extensions.
Is Spyhunter safe enough? It has a free trial.
Scanned registry for mmrtb: nothing.
Searched "This PC" :nothing
Thanks.
Chrome is up to date
Version 133.0.6943.99 (Official Build) (64-bit)
Windows 10 22h2
RE: Chrome mmrtb.com redirect - king1 - 15-02-2025
try adwcleaner
https://toolslib.net/downloads/viewdownload/1-adwcleaner/
and have a close look at your browser extensions, usually redirects are triggered by dodgy ones. You could test if it is an extension by using incognito mode
RE: Chrome mmrtb.com redirect - Excalibur - 15-02-2025
OK, thanks. Ran that program. It found a pup. Hoping that's the end of it, thanks.
RE: Chrome mmrtb.com redirect - Excalibur - 17-02-2025
Didn't last long, mmrtb.com came back.
The site can't be reached, shows a blank page.
Rerun Adwarecleaner, this time found nothing.
Here's the address string:
https://mmrtb.com/bonus/com-nz-6709/lp1.php?c=52z8e8gxz6mz1&k=043465404787ded44bfe0d5262776dec&country_code=NZ&carrier=Spark&country_name=New%20Zealand®ion=Wellington&city=Porirua&isp=Spark%20New%20Zealand%20Trading%20Ltd.&lang=en&ref_domain=parcelsapp.com&os=Windows%2010&osv=&browser=Chrome&browserv=133&brand=Desktop&model=Desktop&marketing_name=Desktop&tablet=4&rheight=768&rwidth=768&t1=18fba6a030e2c218&t2=parcelsapp.com&t3=usfo-admozart-cpm-rtb-bn&t4=222.153.253.251&t5=chrome&t6=windows&t7=&t8=NZ&t9=1j7f3d9t7x6b8e6w6c7f9d6v2&t10=342-s25529&t11=parcelsapp.com_9ad5fb6a&t12=7ce0117475080e930a3fbb08a26bed6a&t13=2||parcelsapp.com||parcelsapp.com&t14=pop&t15=&et1=&et2=750x280&et3=&et4=&et5=&e=5
I note parcelsapp.com is there. This is a site I use frequently.
Thanks.
RE: Chrome mmrtb.com redirect - king1 - 17-02-2025
try incognito mode and see if it still pops up
RE: Chrome mmrtb.com redirect - Excalibur - 18-02-2025
Figured out some things.
It does pop up in incognito mode. Both this and regular mode it does so once every about 10 attempts.
It hijacks Parcelsapps webpage one out of every 10 or so times. I can see it start to open Parcelsapp but at the last second it diverts to mmrtb.com
I found 2 folders called parcelsapp.com deep in AppData/local/Google/Chrome/...
RE: Chrome mmrtb.com redirect - Wainuitech - 19-02-2025
It seems there's more to it than simply running one program. You have to dig into the settings of Browsers ( as it's an add-on) and possibly even edit the registry.
A Couple of articles on how to remove it.
https://howtoremove.guide/remove-mmrtb-com/ and https://malwaretips.com/blogs/mmrtb-com/
If you get to the point of Needing Group Policy Editor, and you only have the home versions of Windows, there is a free way to install gpedit
https://www.majorgeeks.com/content/page/enable_group_policy_editor_in_windows_10_home_edition.html#google_vignette
Have to install that on some W11 PC's if the filesharing errors of no passworded sharing folders are on LAN computers.
RE: Chrome mmrtb.com redirect - Excalibur - 02-03-2025
Did some of the guides. Some of that was way complicated.
Additionally I stopped using parcelsapp.com site
So far no redirects after 10 days.
Thanks