3 Replies Latest reply on Feb 8, 2011 3:47 PM by talchu Branched from an earlier discussion.

    How to remove PUP (Cookie Eyeblaster)?

      I'm using McAfee Enterprise, and I see that the Cookie-Eyeblaster is deleted almost everyday, while I visit only legit websites (gmail, msn, facebook).

      Any idea why it keeps coming back? what does it originate from?


      Here is a log excerpt:

      ...\Windows\Cookies\Low\{myUsername}@bs.serving-sys[2].txt\00000000.ie Cookie-Eyeblaster (Potentially Unwanted Program)

      08/02/2011 10:40:45 Deleted {computer name}\{myUsername} C:\Program Files\Internet Explorer\iexplore.exe C:\Users\{myUsername}\AppData\Roaming\Microsoft\Windows\Cookies\Low\{myUsername }@serving-sys[3].txt\00000000.ie Cookie-Eyeblaster (Potentially Unwanted Program)


      Thank you,

        • 1. Re: How to remove PUP (Cookie Eyeblaster)?
          Peter M

          Moved from Home > SecurityCenter 10 to Malware Discussion > Corporate User Assistance for better attention.



          Message was edited by: Ex_Brit on 08/02/11 5:47:28 EST AM
          • 2. Re: How to remove PUP (Cookie Eyeblaster)?

            For a general cookie FAQ, see http://www.aboutcookies.org/Default.aspx?page=5. As a bonus, there's also a special section giving a genuine (edible) cookie recipe, for anyone who arrives there by mistake  :-)


            For specific types of cookie I found a detailed explanation of cookie policy on the BBC website which identifies a number of the cookies which McAfee blocks, including atdmt, EyeBlaster, and Omniture :

            Google Analytics

            The BBC News App uses Google Analytics, a web analytics service provided by Google, Inc. Google Analytics sets a cookie in order to evaluate your use of the News App and compile reports for us on activity on the News App.


            Google stores the information collected by the cookie on servers in the United States. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. By using the News App, you consent to the processing of data about you by Google in the manner and for the purposes set out above.


            For more information on the cookie set by Google Analytics, including information on how to opt out please go to: http://www.google.com/intl/en/privacypolicy.html


            2) The following cookies are set ONLY for users outside the UK who will be visiting the international version of the website:

            Ad Serving (non-targeted)


            The advertisements seen by international users of the site are served by a number of third party ad serving providers, including DoubleClick, Advertising.com (AOL), Adviva.net (Specific Media), AdRevolver (BlueLithium-Yahoo!), 247realmedia.com, Atlas (atdmt), Mediaplex (ValueClick) and MediaMind (Eyeblaster), amongst others. The cookies accompanying the ads allow them and their advertisers to monitor the effectiveness of the ads (e.g. by using statistical analysis cookies) and make the ads more relevant to you (e.g. if you use our sites from outside of the UK, you may get ads from your local country).


            If you would like more information about the cookies used by the providers listed above, please see their privacy policies at:










            Ad Serving (targeted) - AudienceScience Inc. (formerly Revenue Science, Inc.)


            This company uses cookies to discover general information about the pages on "bbc.com" that you visit and it also processes IP addresses to collect other non-personally identifiable information in order to place you in a "market segment". This includes data about the country, city or region where you are located and your domain name (e.g. what ISP you use). It then places advertisements onto "bbc.com" which it believes people in your market segment will find relevant. If you would like more information about the cookies used by AudienceScience and how to opt out, please see their Privacy Policy at: http://audiencescience.com/privacy.asp.


            Information (IP addresses and information in other cookies on our sites) that AudienceScience collects is transferred to them in the United States of America, and BBCW confirm that AudienceScience satisfies the EU's data protection requirements through its registration with the US Department of Commerce's "safe harbor" framework. Data is sometimes shared with AudienceScience's sub-contractors in India who also contractually satisfy the EU's data protection requirements.


            Analytics - Omniture (Visual Sciences)


            This company provides anonymised statistical information to BBC Worldwide Limited ("BBCW"), about users outside of the UK only. They process IP addresses and information from other cookies used on "bbc.com", BBCW's international online service for users outside of the UK, so BBCW know how many page views it has, the number of international users, what browsers international users are using (so BBCW can target resources in the right way to maximise compatibility for the majority of international users) and in which country, city or region international users are located. Omniture is also used to provide similar information for the BBC News App for overseas users.


            This statistical information also allows BBCW to determine how much it should charge for advertising, and if it is hitting its target audience. Information (IP addresses and information in other BBC cookies) that Omniture (Visual Sciences) collects is transferred to them in the United States of America. BBCW confirms that Omniture (Visual Sciences) satisfies the EU's data protection requirements.


            That's a lot of information, but as far as I know no-one here has ever gone into the cookie question in detail. Certainly, I have often wondered where these cookies come from, and now (for some of them) I know.



            Message was edited by: Hayton on 08/02/11 16:24:43 GMT
            • 3. Re: How to remove PUP (Cookie Eyeblaster)?

              I see... so advertisers & 3rd party cookies are the reason.

              Thanks a lot!


              So from now on, I'll start to ignore the number of detections McAfee reports