Remove ourinputdatastorage.com From Chrome, Firefox or Internet Explorer

This page shows how to remove ourinputdatastorage.com from Mozilla Firefox, Google Chrome and Internet Explorer.

Did you just see ourinputdatastorage.com in the status bar of your browser or in the network log and ponder where it came from? Or did ourinputdatastorage.com show up while you search for something on one of the major search engines, such as the Google.com search engine?

Here is a screen capture on ourinputdatastorage.com from my machine when it appeared in the network log:

ourinputdatastorage.com connection

 

The URL is http://app.ourinputdatastorage.com/monetization_campaigns/1823/rules.json?rnd=1425378832423

Here are some of the status bar messages you may see in your browser’s status bar:

  • Waiting for ourinputdatastorage.com…
  • Transferring data from ourinputdatastorage.com…
  • Looking up ourinputdatastorage.com…
  • Read ourinputdatastorage.com
  • Connected to ourinputdatastorage.com…

Does this sound like your experience, you probably have some adware installed on your machine that makes the ourinputdatastorage.com domain appear in your web browser. There’s no use contacting the owners of the website you currently were browsing. The ourinputdatastorage.com status bar messages are not coming from them. I’ll try help you with the ourinputdatastorage.com removal in this blog post.

I found ourinputdatastorage.com on one of the lab machines where I have some adware running. I’ve talked about this in some of the previous blog posts. The adware was installed on purpose, and from time to time I check if anything new has appeared, such as pop-up windows, new tabs in the web browsers, injected ads on site that usually don’t show advertisements, or if some new files have been saved to the hard-drive.

ourinputdatastorage.com was registered on 2014-02-18. ourinputdatastorage.com resolves to the 208.109.4.201 IP address and app.ourinputdatastorage.com to 69.16.175.42. I also noticed logs.ourinputdatastorage.com in the network log, and that resolves to 69.16.175.10. ourinputdatastorage.com is protected by Domains By Proxy LLC.

According to VirusTotal, the following subdomains has also been spotted in the wild:

  • js.ourinputdatastorage.com
  • update.ourinputdatastorage.com
  • dl.ourinputdatastorage.com

So, how do you remove ourinputdatastorage.com from your web browser? On the machine where ourinputdatastorage.com showed up in the status bar I had TornTV installed. I removed it with FreeFixer and that stopped the browser from loading data from ourinputdatastorage.com.

The problem with status bar messages like the one described in this blog post is that it can be caused by many variants of adware, not just the adware running on my computer. I think that many of the other CrossRider variants will use this domain. This makes it impossible to say exactly what you need to remove to stop the status bar messages.

Anyway, here’s my suggestion for the ourinputdatastorage.com removal:

  1. What software do you have installed if you look in the Add/Remove programs dialog in the Windows Control Panel? Something that you don’t remember installing yourself or that was recently installed?
  2. How about your add-ons that you have in your browser. Anything in the list that you don’t remember installing?
  3. If that didn’t solve the problem, I’d recommend a scan with FreeFixer to manually track down the adware. FreeFixer is a freeware tool that I’m working on that scans your computer at lots of locations, such as browser add-ons, processes, Windows services, recently modified files, etc. If you want to get additional details about a file in the scan result, you can click the More Info link for that file and a web page will open up with a VirusTotal report which will be very useful to determine if the file is safe or malware:

    FreeFixer More Info link example
    An example of FreeFixer’s “More Info” links. Click for full size.

Did you find any adware on your machine? Did that stop ourinputdatastorage.com? Please post the name of the adware you uninstalled from your machine in the comment below.

Thank you!