Malware Pop-upsite |
Post Reply | Page <1234 5> |
Author | ||
chopper
Special Collaborator Honorary Collaborator Joined: July 13 2005 Location: Essex, UK Status: Offline Points: 20023 |
Posted: December 03 2007 at 17:03 | |
This is what I use at home, so I have no problems there. Unfortunately, I also log in to PA at work (in my lunch hour, obviously) and there I have a locked down version of IE and I can't have ad blockers or anything similar. At the moment I can't risk using PA at work just in case something dodgy gets through the virus checker and I get the sack. |
||
darkmatter
Forum Senior Member Joined: November 23 2006 Location: New Jersey Status: Offline Points: 2760 |
Posted: December 04 2007 at 11:30 | |
I've gotten this pop-up three times from this site, and two other times on the main page it was about to switch to a different site but I closed the window before it happened. I hope this is fixed soon.
Also (for what it's worth) I'd like to say again that this is not the only site I've seen this malware/spyware/whatever pop-up occur, a few weeks ago, I got it twice on mlb.com, but I haven't seen it since there. |
||
M@X
Forum & Site Admin Group Co-founder, Admin & Webmaster Joined: January 29 2004 Location: Canada Status: Offline Points: 4028 |
Posted: December 04 2007 at 13:35 | |
Hi guys,
thanks for reporting this since I dont experience it from my PC (Firefox or IE7). It seems that we have 2 Virus Ads ? - IPOD Winning - Malware Detection I'll check , but I think it's a Server Virus. Let's hope not. Thanks for your help. Max |
||
Prog On !
|
||
M@X
Forum & Site Admin Group Co-founder, Admin & Webmaster Joined: January 29 2004 Location: Canada Status: Offline Points: 4028 |
Posted: December 04 2007 at 13:39 | |
Can someone send a Screenshot with the URL (if possible) of the Virus Ads ?
Thanks Email: max @ progarchives . com |
||
Prog On !
|
||
The T
Special Collaborator Honorary Collaborator Joined: October 16 2006 Location: FL, USA Status: Offline Points: 17493 |
Posted: December 04 2007 at 15:02 | |
I always happens to me!!!
Who do I send the bill if my computer gets infected?
|
||
|
||
The Doctor
Special Collaborator Honorary Collaborator Joined: June 23 2005 Location: The Tardis Status: Offline Points: 8543 |
Posted: December 04 2007 at 16:25 | |
I just got redirected to the malware site again and it started downloading something to my computer. If I get a computer virus I'm going to be .
|
||
I can understand your anger at me, but what did the horse I rode in on ever do to you?
|
||
chopper
Special Collaborator Honorary Collaborator Joined: July 13 2005 Location: Essex, UK Status: Offline Points: 20023 |
Posted: December 04 2007 at 16:29 | |
I have been getting the malware one at work but it didn't appear today.
|
||
Easy Livin
Special Collaborator Honorary Collaborator / Retired Admin Joined: February 21 2004 Location: Scotland Status: Offline Points: 15585 |
Posted: December 04 2007 at 16:57 | |
The message reads "Do you want to install and run http://scanner2.malware-scan.com/setup/webinst.cab" signed by an unknown date/time and distributed by Sheby Group Ltd.
Publisher authenticity verified by UTN-USERFirst-Object. "
It offers a Yes/No/More info selection option.
The website which pops up is http://scanner2.malware-scan.com/12_swp/?tmn=null&aid=remain0r_ma12&lid=&affid=&ax=1&ed=2&mt_info=3958_0_11032
It is all but impossible to stop it running, and pop up blockers do not seem to stop it.
|
||
bhikkhu
Special Collaborator Honorary Collaborator Joined: April 06 2006 Location: A² Michigan Status: Offline Points: 5109 |
Posted: December 04 2007 at 17:35 | |
I've managed to block it on Safari.
|
||
Dean
Special Collaborator Retired Admin and Amateur Layabout Joined: May 13 2007 Location: Europe Status: Offline Points: 37575 |
Posted: December 04 2007 at 19:54 | |
One I've just had does a leap-frog from:
to
.. the later doesn't display on IE7, so no screen-shot
|
||
What?
|
||
darkmatter
Forum Senior Member Joined: November 23 2006 Location: New Jersey Status: Offline Points: 2760 |
Posted: December 04 2007 at 19:57 | |
^ I also saw that first one you listed twice, but I exited my window before anything happened.
|
||
Wilcey
Forum Senior Member VIP Member Joined: August 11 2005 Location: United Kingdom Status: Offline Points: 2696 |
Posted: December 05 2007 at 03:26 | |
I've been getting these EVERYTIME I log in.......... for about 2 weeks, I use pop-up blockers but the darn thing just gets around them.
I closes all other windows or apps running and has scared the heebiejeeebies outta me, which is why I have been laying low, I try to log in every couple of days of so to see if it is gone yet..........
Yesterday I logged into the forums ok, but when I tried to pop back to the archives up it came.
Ad's do not other me at all lie I have said before, but this is worrying!
Not all PA users are as technically minded and aware as others (me being one of the dunces!) and this kind of thing is pretty scary, it's ok say you need to run blah blah blah, but I have NO IDEA what you are talking about, and if I need to fiddle with my computer that much just to use PA I wont bother.......... I should imagine there are a lot of folk out there that will feel the same!
Sorry!
R x
|
||
Jim Garten
Special Collaborator Retired Admin & Razor Guru Joined: February 02 2004 Location: South England Status: Offline Points: 14693 |
Posted: December 05 2007 at 03:29 | |
According to the IT chaps where I work (which is where I usually log on from) this is completely harmless - irritating, yes, but harmless. Logged in from home last night & Norton picked it up & disposed of it tout-suite
M@X on to it now, so hopefully should go soon - in fact, thinking about it, I don't remember it happeining this morning... |
||
Jon Lord 1941 - 2012 |
||
Ghandi 2
Forum Senior Member Joined: February 17 2006 Location: United States Status: Offline Points: 1494 |
Posted: December 05 2007 at 05:44 | |
But it's not an ad, it's a forced redirect to a malicious website. It may not actually be a trojan, but it is intrusive and forces me to re-open IE because hitting the back button doesn't work.
Man-Erg, the worm could easily have been from an email or from someone directly attack your computer.
This is really terrible. I just got it so it's not gone yet.
|
||
chopper
Special Collaborator Honorary Collaborator Joined: July 13 2005 Location: Essex, UK Status: Offline Points: 20023 |
Posted: December 05 2007 at 07:26 | |
It's back again today! It may be harmless but it's bloody annoying. I haven't noticed a thing at home with Firefox, Ad Blocker and pop-up blocker.
|
||
BardsGarden
Forum Groupie Joined: November 12 2006 Location: United States Status: Offline Points: 53 |
Posted: December 05 2007 at 22:55 | |
Today after browsing these forums and getting the malware redirect I noticed a bit of odd behaviour. After some investigation I realized my DNS server had changed, where previous sessions it hadn't. This could potentially have real bad results, meaning instead of my provider's DNS server pointing me to the proper servers, I am sending requests to a rogue server pointing me to all sorts of badness.
I am not sure if that specific malware site was responsible for the redirect since I was browsing other places, but I will have to keep checking in. I am curious if anyone else here had a change in dns. I won't bore you with a bunch of techy info but in general you should: Check your router or ISP for the official DNS addresses Compare that with the DNS address on your machine Change it if needed and take any precautionary measures. If anyone needs elaboration I will certainly do my best to help. |
||
Fight Club
Prog Reviewer Joined: May 21 2006 Location: United States Status: Offline Points: 572 |
Posted: December 05 2007 at 23:16 | |
Here's the screenshot you requested, Max
I get this pretty often as well. I don't know how much this helps, I didn't give it a chance to go to a link. Edited by Fight Club - December 05 2007 at 23:17 |
||
|
||
Wilcey
Forum Senior Member VIP Member Joined: August 11 2005 Location: United Kingdom Status: Offline Points: 2696 |
Posted: December 06 2007 at 02:26 | |
Well since yesterday morning's post here just 23 short hours ago, this is the first time I have been able to even get as far as the forums. It is more than annoying, it stops me getting here, I just cannot get passed the damn thing. whether it's actually seriously bad news, or just an annoying obstacle is imaterial surely, if it stops people coming, if it makes people nervous about the using the site is it really doing us any favours? Rx
|
||
VanderGraafKommandöh
Prog Reviewer Joined: July 04 2005 Location: Malaria Status: Offline Points: 89372 |
Posted: December 06 2007 at 02:38 | |
I have had no problems my end... but I do feel sorry for you guys and girls. It sounds like it's very annoying.
Let's hope it's sorted out as soon as possible. |
||
|
||
Dean
Special Collaborator Retired Admin and Amateur Layabout Joined: May 13 2007 Location: Europe Status: Offline Points: 37575 |
Posted: December 06 2007 at 05:58 | |
Just had the scanner2 Malware one, the full URL is:
I've tried tracking it back to find out how it attaches itself to the PA page, but with no luck so far.
|
||
What?
|
||
Post Reply | Page <1234 5> |
Forum Jump | Forum Permissions You cannot post new topics in this forum You cannot reply to topics in this forum You cannot delete your posts in this forum You cannot edit your posts in this forum You cannot create polls in this forum You cannot vote in polls in this forum |