Forum Home Forum Home > Site News, Newbies, Help and Improvements > Help us improve the site
  New Posts New Posts RSS Feed - Malware Pop-upsite
  FAQ FAQ  Forum Search   Events   Register Register  Login Login

Topic ClosedMalware Pop-upsite

 Post Reply Post Reply Page  <1234 5>
Author
Message
chopper View Drop Down
Special Collaborator
Special Collaborator
Avatar
Honorary Collaborator

Joined: July 13 2005
Location: Essex, UK
Status: Offline
Points: 19965
Direct Link To This Post Posted: December 03 2007 at 17:03
Originally posted by Tuzvihar Tuzvihar wrote:

Originally posted by stonebeard stonebeard wrote:

The ads on PA are getting rediculous. I'll pay money to the site if this sh*t will just stop. Otherwise, I might leave. It's not worth it lately.


For Christ's sake, people! Get yourself Firefox with Adblock and NoScript and stop complaining! I did and I've never encountered any of the problems you mentioned.

I SEE NO ADS AT ALL!

Hug

This is what I use at home, so I have no problems there. Unfortunately, I also log in to PA at work (in my lunch hour, obviously) and there I have a locked down version of IE and I can't have ad blockers or anything similar. At the moment I can't risk using PA at work just in case something dodgy gets through the virus checker and I get the sack.
Back to Top
darkmatter View Drop Down
Forum Senior Member
Forum Senior Member
Avatar

Joined: November 23 2006
Location: New Jersey
Status: Offline
Points: 2760
Direct Link To This Post Posted: December 04 2007 at 11:30
I've gotten this pop-up three times from this site, and two other times on the main page it was about to switch to a different site but I closed the window before it happened.  I hope this is fixed soon.

Also (for what it's worth) I'd like to say again that this is not the only site I've seen this malware/spyware/whatever pop-up occur, a few weeks ago, I got it twice on mlb.com, but I haven't seen it since there.
Back to Top
M@X View Drop Down
Forum & Site Admin Group
Forum & Site Admin Group
Avatar
Co-founder, Admin & Webmaster

Joined: January 29 2004
Location: Canada
Status: Offline
Points: 4028
Direct Link To This Post Posted: December 04 2007 at 13:35
Hi guys,

thanks for reporting this since I dont experience it from my PC (Firefox or IE7).

It seems that we have 2 Virus Ads ?

- IPOD Winning
- Malware Detection


I'll check , but I think it's a Server Virus. Let's hope not.Unhappy

Thanks for your help.

Max
Prog On !
Back to Top
M@X View Drop Down
Forum & Site Admin Group
Forum & Site Admin Group
Avatar
Co-founder, Admin & Webmaster

Joined: January 29 2004
Location: Canada
Status: Offline
Points: 4028
Direct Link To This Post Posted: December 04 2007 at 13:39
Can someone send a Screenshot with the URL (if possible) of the Virus Ads ?

Thanks

Email: max @ progarchives . com
Prog On !
Back to Top
The T View Drop Down
Special Collaborator
Special Collaborator
Avatar
Honorary Collaborator

Joined: October 16 2006
Location: FL, USA
Status: Offline
Points: 17493
Direct Link To This Post Posted: December 04 2007 at 15:02
I always happens to me!!!
 
Who do I send the bill if my computer gets infected? LOLWinkTongue
Back to Top
The Doctor View Drop Down
Special Collaborator
Special Collaborator
Avatar
Honorary Collaborator

Joined: June 23 2005
Location: The Tardis
Status: Offline
Points: 8543
Direct Link To This Post Posted: December 04 2007 at 16:25
I just got redirected to the malware site again and it started downloading something to my computer.  If I get a computer virus I'm going to be Angry.
I can understand your anger at me, but what did the horse I rode in on ever do to you?
Back to Top
chopper View Drop Down
Special Collaborator
Special Collaborator
Avatar
Honorary Collaborator

Joined: July 13 2005
Location: Essex, UK
Status: Offline
Points: 19965
Direct Link To This Post Posted: December 04 2007 at 16:29
I have been getting the malware one at work but it didn't appear today.
Back to Top
Easy Livin View Drop Down
Special Collaborator
Special Collaborator
Avatar
Honorary Collaborator / Retired Admin

Joined: February 21 2004
Location: Scotland
Status: Offline
Points: 15585
Direct Link To This Post Posted: December 04 2007 at 16:57
The message reads "Do you want to install and run http://scanner2.malware-scan.com/setup/webinst.cab" signed by an unknown date/time and distributed by Sheby Group Ltd.
 
Publisher authenticity verified by UTN-USERFirst-Object. "
 
It offers a Yes/No/More info selection option.
 
 
It is all but impossible to stop it running, and pop up blockers do not seem to stop it.
Back to Top
bhikkhu View Drop Down
Special Collaborator
Special Collaborator
Avatar
Honorary Collaborator

Joined: April 06 2006
Location: A² Michigan
Status: Offline
Points: 5109
Direct Link To This Post Posted: December 04 2007 at 17:35
I've managed to block it on Safari.
Back to Top
Dean View Drop Down
Special Collaborator
Special Collaborator
Avatar
Retired Admin and Amateur Layabout

Joined: May 13 2007
Location: Europe
Status: Offline
Points: 37575
Direct Link To This Post Posted: December 04 2007 at 19:54
Originally posted by M@X M@X wrote:

Can someone send a Screenshot with the URL (if possible) of the Virus Ads ?

Thanks

Email: max @ progarchives . com
 
One I've just had does a leap-frog from:
 
 
to
 
 
.. the later doesn't display on IE7, so no screen-shot
What?
Back to Top
darkmatter View Drop Down
Forum Senior Member
Forum Senior Member
Avatar

Joined: November 23 2006
Location: New Jersey
Status: Offline
Points: 2760
Direct Link To This Post Posted: December 04 2007 at 19:57
^ I also saw that first one you listed twice, but I exited my window before anything happened.  
Back to Top
Wilcey View Drop Down
Forum Senior Member
Forum Senior Member
Avatar
VIP Member

Joined: August 11 2005
Location: United Kingdom
Status: Offline
Points: 2696
Direct Link To This Post Posted: December 05 2007 at 03:26
I've been getting these EVERYTIME I log in.......... for about 2 weeks, I use pop-up blockers but the darn thing just gets around them.
I closes all other windows or apps running and has scared the heebiejeeebies outta me, which is why I have been laying low, I try to log in every couple of days of so to see if it is gone yet..........
 
Yesterday I logged into the forums ok, but when I tried to pop back to the archives up it came.
 
Ad's do not other me at all lie I have said before, but this is worrying!
Not all PA users are as technically minded and aware as others (me being one of the dunces!)  and this kind of thing is pretty scary, it's ok say you need to run blah blah blah, but I have NO IDEA what you are talking about, and if I need to fiddle with my computer that much just to use  PA I wont bother.......... I should imagine there are a lot of folk out there that will feel the same!
 
Sorry!
 
R x
Back to Top
Jim Garten View Drop Down
Special Collaborator
Special Collaborator
Avatar
Retired Admin & Razor Guru

Joined: February 02 2004
Location: South England
Status: Offline
Points: 14693
Direct Link To This Post Posted: December 05 2007 at 03:29
According to the IT chaps where I work (which is where I usually log on from) this is completely harmless - irritating, yes, but harmless. Logged in from home last night & Norton picked it up & disposed of it tout-suite

M@X on to it now, so hopefully should go soon - in fact, thinking about it, I don't remember it happeining this morning...

Jon Lord 1941 - 2012
Back to Top
Ghandi 2 View Drop Down
Forum Senior Member
Forum Senior Member


Joined: February 17 2006
Location: United States
Status: Offline
Points: 1494
Direct Link To This Post Posted: December 05 2007 at 05:44
Originally posted by Tuzvihar Tuzvihar wrote:

Originally posted by stonebeard stonebeard wrote:

The ads on PA are getting rediculous. I'll pay money to the site if this sh*t will just stop. Otherwise, I might leave. It's not worth it lately.


For Christ's sake, people! Get yourself Firefox with Adblock and NoScript and stop complaining! I did and I've never encountered any of the problems you mentioned.

I SEE NO ADS AT ALL!

Hug
But it's not an ad, it's a forced redirect to a malicious website. It may not actually be a trojan, but it is intrusive and forces me to re-open IE because hitting the back button doesn't work.
 
Man-Erg, the worm could easily have been from an email or from someone directly attack your computer.
 
This is really terrible. I just got it so it's not gone yet.
Back to Top
chopper View Drop Down
Special Collaborator
Special Collaborator
Avatar
Honorary Collaborator

Joined: July 13 2005
Location: Essex, UK
Status: Offline
Points: 19965
Direct Link To This Post Posted: December 05 2007 at 07:26
Originally posted by chopper chopper wrote:

I have been getting the malware one at work but it didn't appear today.
It's back again today! It may be harmless but it's bloody annoying. I haven't noticed a thing at home with Firefox, Ad Blocker and pop-up blocker.
Back to Top
BardsGarden View Drop Down
Forum Groupie
Forum Groupie
Avatar

Joined: November 12 2006
Location: United States
Status: Offline
Points: 53
Direct Link To This Post Posted: December 05 2007 at 22:55
    Today after browsing these forums and getting the malware redirect I noticed a bit of odd behaviour. After some investigation I realized my DNS server had changed, where previous sessions it hadn't. This could potentially have real bad results, meaning instead of my provider's DNS server pointing me to the proper servers, I am sending requests to a rogue server pointing me to all sorts of badness.

    I am not sure if that specific malware site was responsible for the redirect since I was browsing other places, but I will have to keep checking in. I am curious if anyone else here had a change in dns.

    I won't bore you with a bunch of techy info but in general you should:
Check your router or ISP for the official DNS addresses
Compare that with the DNS address on your machine
Change it if needed and take any precautionary measures.
If anyone needs elaboration I will certainly do my best to help.
Back to Top
Fight Club View Drop Down
Prog Reviewer
Prog Reviewer


Joined: May 21 2006
Location: United States
Status: Offline
Points: 572
Direct Link To This Post Posted: December 05 2007 at 23:16
Here's the screenshot you requested, Max





I get this pretty often as well. I don't know how much this helps, I didn't give it a chance to go to a link.


Edited by Fight Club - December 05 2007 at 23:17
Back to Top
Wilcey View Drop Down
Forum Senior Member
Forum Senior Member
Avatar
VIP Member

Joined: August 11 2005
Location: United Kingdom
Status: Offline
Points: 2696
Direct Link To This Post Posted: December 06 2007 at 02:26

Well since yesterday morning's post here just 23 short hours ago, this is the first time I have been able to even get as far as the forums. It is more than annoying, it stops me getting here, I just cannot get passed the damn thing.

whether it's actually seriously bad news, or just an annoying obstacle is imaterial surely, if it stops people coming, if it makes people nervous about the using the site is it really doing us any favours?

Rx
 
Back to Top
VanderGraafKommandöh View Drop Down
Prog Reviewer
Prog Reviewer
Avatar

Joined: July 04 2005
Location: Malaria
Status: Offline
Points: 89372
Direct Link To This Post Posted: December 06 2007 at 02:38
I have had no problems my end... but I do feel sorry for you guys and girls.  It sounds like it's very annoying.

Let's hope it's sorted out as soon as possible.
Back to Top
Dean View Drop Down
Special Collaborator
Special Collaborator
Avatar
Retired Admin and Amateur Layabout

Joined: May 13 2007
Location: Europe
Status: Offline
Points: 37575
Direct Link To This Post Posted: December 06 2007 at 05:58
Just had the scanner2 Malware one, the full URL is:
 
 
I've tried tracking it back to find out how it attaches itself to the PA page, but with no luck so far.
What?
Back to Top
 Post Reply Post Reply Page  <1234 5>

Forum Jump Forum Permissions View Drop Down



This page was generated in 0.121 seconds.
Donate monthly and keep PA fast-loading and ad-free forever.