AdWare AlertYesterday an important information has been posted by Kellie Stevens of Affiliate Fair Play in the 5StarAffiliatePrograms’ forum. Her alert is about a fairly newly created contextual adware that operates according to a model similar to Zango, Clicksor, or MediaTraffic. As an advertiser, you may buy traffic on DirectCPV.com which will be driven to you through their LoudMo adware. LoudMo also has a pay-per-install affiliate program (paying affiliates $1.25/install) to spread their downloadable software to Internet users. Once the adware is installed, it will display DirectCPV’s advertisers’ ads based on competitors’ URLs or relevant keywords, and do so right on the original website. LoudMo is different from Zango in the following:

Their adware has the ability to deliver interstitial ads. So the end user is browsing a site and suddenly they are shown a page to another site in the same browser window. …the page is loaded in frames, so the URL in the address box remains the same for the site that was previously being viewed by the end user. Even though the browser is titled LoudMo and there is a link to “skip” the ad …this can be confusing for some end users as to where the ad is really coming from. This also has implications with regards to the http referrer information.

The software also delivers inline ads. …sometimes these links look very similar to the legitimate links on the targeted web site, again potentially causing confusion for the end user. [more here]

Per Kellie Stevens, DirectCPV is now marketing their services especially aggressively. Watch out for them coming through/on the social media too (in forms of applications suitable for Facebook, etc):

LoudMo adware alert by Kellie Stevens

Both e-tailers and affiliates should be aware of LoudMo. The majority of affiliate networks (not to be confused with so-called “CPA networks”*) prohibit adware use, and justly so.

Read more in Kellie’s thread here.

____________________
* The CEO of DirectCPV is also a VP at RevenueGateway CPA network

Tags: , , , , ,

24 Responses to “Parasite Alert: DirectCPV / LoudMo Contextual Adware”

  1. Kevin Roche says:

    Why do these loud mo ads come up on my computer. I have no interest in any of them and wish to block them. Can you be of help. I do not know of ever subscribing. Also I am Wired keeps popping up when I go to call up the Google search engine. Can you be of assistance in advising who it is and how it can take over like this? Is this a virus or something?

  2. Geno says:

    Kevin, they have removal instructions on their website at loudmo.com/networks/flvdirect (see point #2).

    Let me know if this doesn’t work.

  3. Geno,

    No luck here. The program is not listed in installed programs. (I’ll try Windows remove utility next).

  4. Geno says:

    Interesting. Let me know what removes it (if anything).

  5. Radovan says:

    Uninstall LoudMo Contextual Ad Assistant.

  6. Big says:

    Find setupv.exe file in C/User/?/AppData/Local/Temp/SETUPV.EXE and delete this file, then it will be deleted Loudmo will be listed in installed programs.At least it worked on my PC. GL

  7. Robert Hammer says:

    Geno:
    THANKS! These removal instructions worked under Vista. Any clue as to where this crap is coming from? I will make an effort not to visit any sites that use them.

  8. Geno says:

    Glad to hear it’s removable. It looks like you’ve installed it on your computer at some point, Robert (see my original post).

  9. Guest says:

    Thanks Geno and Big,
    Seems to work under XP(SP3) as well…At least at my own PC it works just like you guys described.
    On my girlfriends laptop however i can delete the setupv.exe file but loudmo does not show up on installed program list. Im not sure the problem is solved on her system but since she created the problem by installing “The Fall Trilogy” from isohunt…its just her problem now…Maybe if shes going to be really sweet ill look into it a little more.

  10. Guest says:

    Well seems to be still my problem…
    The blank pop-up page with “advertise here” on the left and “skip this ad” seems to be gone. But the little pop-up in the center at the top keeps comming back when im on a commercial website…

  11. Hi guys,

    Geno asked me to pop by & respond to the removal questions.

    I NEVER recommend anyone just start deleting files if they have an adware/spyware/malware problem that isn’t taken care of by the acceptable Remove Software through Control Panel. Doing so can result in mucking up essential operating files with some applications.

    You should go to one of the many free support forums run by security guys to help you resolve your problem.

    You can google “spyware removal forums” or “hijackthis forums” for many options. A few reputable places are also:

    http://forums.majorgeeks.com/s.....hp?t=35407
    http://forums.techguy.org/54-m.....this-logs/
    http://forums.malwarebytes.org.....howforum=7

    Be sure to read the Sticky Notes that lets you know the procedure for each individual forum before posting your issue (this will expediate resolving your issue).

    Good luck and remember to be safe online!

  12. Geno says:

    Thank you for chiming in, Kellie. Much appreciated.

  13. Guest says:

    Finally i found a solution, at least with firefox:

    “Try this:

    First let’s get rid of the trojan.
    Then go to C:\Program Files\Mozilla Firefox\extensions look into each folder and open the install.rdf with a text editor.
    Look for the LoudMo Contextual Ad Assistant tag. If you don’t know the extension, delete the whole folder.
    After that clear the cache and it should run fine again.”

    http://support.mozilla.com/en-.....e&as=q

  14. Bleep says:

    I found the quick fix to stop the re-install of ldm1.exe and setupv.exe was to simply disable the startup app “esport2″ via msconfig/startup.

  15. Kevin– I was able to eliminate via disabling the LoudMo Contextual Ad Assistant plugin in FireFox.

    I got this via running the FLVPlayer installer– no warning. Are they incorporated in the US? Class action, anyone?

  16. Amit M. says:

    Great tip from the guest… I didn’t have an add/remove programs entry, so finding the extensions folder with “loudmo” and IE add-on “zugo toolbar” did it for me

  17. Sam says:

    It doesn’t worked for me. I have tried all ideas but it comes again. I even blocked the website, Hijacked, uninstalled, but it opens again. It is more worrying in FireFox because it opens adult movies. Help needed here guys.

  18. Guest says:

    This is an absolute invasion of one’s privacy. Not only is it morally unsound, but it is criminal. It uses the trademarked names of the website YOU were viewing in many of the advertisements it displays. Granted, they didn’t create the advertisement content but they created, lease, and manage the proprietary distribution platform through which they are being displayed. Class action should certainly be considered.

  19. Dr Sarah says:

    Thank you so much for this! I’m hugely relieved to know that at least the problems weren’t due to a virus.

    In my case, I know exactly where it came from: I downloaded the Babelfish programme available at Babelfish.com (having confused it with the one available on-line at Yahoo, which was the one I actually wanted), and this little nugget of joy came with it. At least that meant I could uninstall it easily as there was an ‘uninstall’ option on the control panel. I’ve done so, and, so far, everything seems OK. Is there anywhere where I can/should post a warning about downloading Babelfish?

  20. Isidro Lopez says:

    I got this crap from my cousin. He downloaded some crappy program… Now I have BING as my homepage and I get redirected to crappy ad pages… My internet freezes. This is so f&%$ annoying…

    I found the Loud MO Contextual Ad aware and the Search Toolbar (BING TOOLBAR) I uninstalled both of them. But they f%&(# installed themselves back…

  21. James Lee says:

    Thanks for the heads up. Loudmo has been pissing me off for some time now, and now thanks to this thread I have got rid of it

  22. Ivan says:

    Yeah, the program keeps re installing themselves in my case. Any help? I used to uninstall them from add/remove program. Well, it worked for 12 hours… and then, they popped up again installing themselves

  23. Chase says:

    I’m generally pretty careful when it comes to defending myself against these sorts of things. I can’t even remember the last time I had adware/malware of any sort much less something as annoying as this Loudmo thing.

    It took me several hours of aggravation, but I think I’ve finally managed to completely get rid of it. Here’s my recommendation:
    - Look under Program Files\Mozilla Firefox\extensions and delete any folder that contains any mention of loudmo.
    - Go to your Users\[Your Username]\AppData\Local\Temp and delete everything in there (most notably ldm1.exe and setupv.exe).
    - Go to Add/Remove programs and uninstall LoudMo Contextual Ad Assistant and Search Toolbar completely.
    - Open both Firefox and IE and delete the newly added bing.zumo.com search engines. Also check the Add-ons menus in IE and Firefox and delete anything that references LoudMo.
    - Download, Install, and Run both Spybot:Search and Destroy and MalwareBytes Anti-Malware and remove anything that they find in their scans.
    - Download, Install, and Run CCleaner. Run the cleaner to clear all of your internet cache and the registry cleaner to remove any errors (there were several references to SearchToolbar in there that I suspect are from LoudMo).
    - Check the Start>Programs>Startup folder and delete anything that you don’t recognize in there. I found a program called “kav7.0.1.325en.exe” that I believe is what was reinstalling this crap every time I thought I had gotten rid of it.
    - Also go to Start>Run and run “msconfig”. Check the startup tab and again check that there is nothing you don’t recognize in there (specifically a file called “kav7.0.1.325en.exe”).
    - Restart and hope for the best! Good luck to anyone unfortunate enough to snag this malware.

  24. Kris says:

    This crap should be illegal. I’m so sick and tired of it screwing with my computer. Just found it, and am removing it.

Leave a Reply

You can use these tags: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

« Back to text comment