Forums: Dropzone.com: Error and Bug Reports:
Popups and Trojans

 

First page Previous page 1 2 3 Next page Last page  View All

jceman  (D 19212)

Dec 12, 2008, 8:24 PM
Post #1 of 56 (5332 views)
Shortcut
Popups and Trojans Quote | Reply

The attached report came from Avast AV software while accessing the forums tonight -- the affected connection from the offending ad has been blocked and now I have to repeatedly refresh until it rotates out or I only get blank areas in the center of the page. (Head, foot and side banners still display).

This was accompanied by a pop-up of a purported people finder.

This is unacceptable.
Attachments: dzcom.txt (0.25 KB)


tdog  (D 28800)

Dec 12, 2008, 8:44 PM
Post #2 of 56 (5298 views)
Shortcut
Re: [jceman] Popups and Trojans [In reply to] Quote | Reply

Yes, it is linked to the Coors add.

I got all sorts of popups and weird stuff...


Premier PhreeZone  (D License)
Moderator
Dec 12, 2008, 8:45 PM
Post #3 of 56 (5298 views)
Shortcut
Re: [jceman] Popups and Trojans [In reply to] Quote | Reply

Which ad was it for? This info is needed to get it out of the ad rotation.

This is an exploit of a PDF vulnerability. The site hosting the ads has been compromised in all likelihood.


stratostar  (Student)

Dec 12, 2008, 9:08 PM
Post #4 of 56 (5294 views)
Shortcut
Re: [PhreeZone] Popups and Trojans [In reply to] Quote | Reply

The fucking Coors light ad on the left side banner. Total BS!


Squeak  (E 1313)

Dec 13, 2008, 1:31 AM
Post #5 of 56 (5284 views)
Shortcut
Re: [jceman] Popups and Trojans [In reply to] Quote | Reply

i had a JS/exploited shell.gen Trojan from this site, it was cleaned by my AV software every time i opened Dizzy.
it also stopped any of the forum tables from appearing. I enabled add blocker and the Coors add disappeared and everything else returned to normal


Amazon  (D License)

Dec 13, 2008, 8:00 AM
Post #6 of 56 (5260 views)
Shortcut
Re: [PhreeZone] Popups and Trojans [In reply to] Quote | Reply

Yup the Coors add.. anytime the fjeking.com came up it caused anything on the forums window to lock. a repeated refresh would usually cause it finally to load.

It gave me a popup wanting to install and I shut it down.

I have now turned off the My Stuff and it got rid of the popups over there.... and everything is loading as it is supposed to.


markovwgti  (D 29993)

Dec 13, 2008, 8:09 AM
Post #7 of 56 (5255 views)
Shortcut
Re: [Amazon] Popups and Trojans [In reply to] Quote | Reply

same thing on basejumper.com


Premier PhreeZone  (D License)
Moderator
Dec 13, 2008, 8:37 AM
Post #8 of 56 (5246 views)
Shortcut
Re: [markovwgti] Popups and Trojans [In reply to] Quote | Reply

Management is aware and they are trying to contact the people that can remove that ad.


grannyinthesky  (D 30311)

Dec 13, 2008, 9:50 AM
Post #9 of 56 (5221 views)
Shortcut
Re: [Amazon] Popups and Trojans [In reply to] Quote | Reply

Thanks, Turnomg pff My Stuff worked great.


j_ung

Dec 13, 2008, 2:58 PM
Post #10 of 56 (5164 views)
Shortcut
Re: [grannyinthesky] Popups and Trojans [In reply to] Quote | Reply

Ok, all ads should now be gone, or they will be in a few minutes. I do not know what happened, but I will post back Monday sometime with a complete explanation and a plan to make sure it never happens again. First guess -- and this is just from what I'v been told -- is that the network from which those ads come was compromised.

I posted in the BF thread earlier from my phone, but I was not in a good reception area and it was problematic, to say the least. ddt has been working tirelessly all day from the west coast since around 7 am his time and we've finally managed to get with the Gossamer folks.

I'm going to direct traffic from that thread here.


j_ung

Dec 13, 2008, 3:07 PM
Post #11 of 56 (5158 views)
Shortcut
Re: [j_ung] Popups and Trojans [In reply to] Quote | Reply

The Bonfire thread:

http://www.dropzone.com/...421639;post=3421883;


j_ung

Dec 13, 2008, 3:15 PM
Post #12 of 56 (5152 views)
Shortcut
Re: [j_ung] Popups and Trojans [In reply to] Quote | Reply

In the meantime, please enjoy an ad-free rest of the weekend.


CSpenceFLY  (D 25252)

Dec 13, 2008, 4:09 PM
Post #13 of 56 (5129 views)
Shortcut
Re: [j_ung] Popups and Trojans [In reply to] Quote | Reply

In reply to:
In the meantime, please enjoy an ad-free rest of the weekend.


Ad a much faster Dropzone.com


j_ung

Dec 13, 2008, 4:11 PM
Post #14 of 56 (5129 views)
Shortcut
Re: [j_ung] Popups and Trojans [In reply to] Quote | Reply

I'm getting reports on Rockclimbing.com that the following works for what the rogue ad leaves behind (if your own anti-viral didn't stop it). The trojan may be called Extra Antivir. Click below and scroll down just a bit. If that looks familiar to you, follow the instructions.

http://www.bleepingcomputer.com/...remove-extra-antivir


(This post was edited by j_ung on Dec 13, 2008, 4:12 PM)


Pokerstar  (A 61661)

Dec 13, 2008, 5:06 PM
Post #15 of 56 (5114 views)
Shortcut
Re: [stratostar] Popups and Trojans [In reply to] Quote | Reply

Thanks to everyone for figuring this out so quickly!

And, just one more reason not to drink COORS LIGHT.


ltdiver  (D 20506)

Dec 13, 2008, 5:24 PM
Post #16 of 56 (5109 views)
Shortcut
Re: [j_ung] Popups and Trojans [In reply to] Quote | Reply

In reply to:

Hey, that link has been deleted. I'd like to read what others have experienced with this.

My Mac was slow, but not compromised. Seems that Mac's using Safari weren't affected?

ltdiver


j_ung

Dec 13, 2008, 5:26 PM
Post #17 of 56 (5105 views)
Shortcut
Re: [Pokerstar] Popups and Trojans [In reply to] Quote | Reply

In reply to:
Thanks to everyone for figuring this out so quickly!

And, just one more reason not to drink COORS LIGHT.

Before today, I didn't think my opinion of Coors Light could be any lower. <sigh> Those were the days.


j_ung

Dec 13, 2008, 5:31 PM
Post #18 of 56 (5101 views)
Shortcut
Re: [ltdiver] Popups and Trojans [In reply to] Quote | Reply

In reply to:
In reply to:

Hey, that link has been deleted. I'd like to read what others have experienced with this.

My Mac was slow, but not compromised. Seems that Mac's using Safari weren't affected?

ltdiver

No, it's still there. I locked it to keep the discussion contained in a single thread. There's a little info from users on Rockclimbing.com, too:

http://www.rockclimbing.com/...um.cgi?post=2037976;


ltdiver  (D 20506)

Dec 13, 2008, 5:33 PM
Post #19 of 56 (5100 views)
Shortcut
Re: [j_ung] Popups and Trojans [In reply to] Quote | Reply

In reply to:
In reply to:
In reply to:

Hey, that link has been deleted. I'd like to read what others have experienced with this.

My Mac was slow, but not compromised. Seems that Mac's using Safari weren't affected?

ltdiver

No, it's still there. I locked it to keep the discussion contained in a single thread. There's a little info from users on Rockclimbing.com, too:

http://www.rockclimbing.com/...um.cgi?post=2037976;

May be there for you, but not for me. <see attachment to view what I see when your dz.com link is clicked>

ltdiver
Attachments: Picture 5.png (44.2 KB)


tdog  (D 28800)

Dec 13, 2008, 5:41 PM
Post #20 of 56 (5095 views)
Shortcut
Re: [j_ung] Popups and Trojans [In reply to] Quote | Reply

In reply to:
In the meantime, please enjoy an ad-free rest of the weekend.

This site is like 100 times faster now!


SuFantasma  (D 26267)

Dec 13, 2008, 5:57 PM
Post #21 of 56 (5092 views)
Shortcut
Re: [j_ung] Popups and Trojans [In reply to] Quote | Reply

In reply to:
In reply to:
In reply to:

Hey, that link has been deleted. I'd like to read what others have experienced with this.

My Mac was slow, but not compromised. Seems that Mac's using Safari weren't affected?

ltdiver

No, it's still there. I locked it to keep the discussion contained in a single thread. There's a little info from users on Rockclimbing.com, too:

http://www.rockclimbing.com/...um.cgi?post=2037976;

Thanks! Unfortunately, it's part of doing business in the Internet... thanks for working with us ... and thanks for a great website !


CSpenceFLY  (D 25252)

Dec 13, 2008, 6:16 PM
Post #22 of 56 (5083 views)
Shortcut
Re: [j_ung] Popups and Trojans [In reply to] Quote | Reply

In reply to:
In reply to:
Thanks to everyone for figuring this out so quickly!

And, just one more reason not to drink COORS LIGHT.

Before today, I didn't think my opinion of Coors Light could be any lower. <sigh> Those were the days.

I don't think you can blame this on Coors Light.


j_ung

Dec 13, 2008, 6:54 PM
Post #23 of 56 (5075 views)
Shortcut
Re: [CSpenceFLY] Popups and Trojans [In reply to] Quote | Reply

In reply to:
In reply to:
In reply to:
Thanks to everyone for figuring this out so quickly!

And, just one more reason not to drink COORS LIGHT.

Before today, I didn't think my opinion of Coors Light could be any lower. <sigh> Those were the days.

I don't think you can blame this on Coors Light.

No, I certainly can't. I can blame myself, and that's about it.


porpoishead  (B 30018)

Dec 13, 2008, 6:56 PM
Post #24 of 56 (5074 views)
Shortcut
Re: [ltdiver] Popups and Trojans [In reply to] Quote | Reply

one of my machines went for the ride..i was running firefox 3 but the ad blocker wasn't setup correctly

it ended up with the extra-anti virus and 2 gay porn desktop icons

the extra-anti virus looked like a windows boot up screen appearing like windows was rebooting and recommending you install the fake anti-virus for a fee kept doing the fake reboot every 5 minutes then it kept prompting error tabs from the task bar as if it were your windows security to get you to reconnect to the web to download and scan with the AGV anti-virus.

the real antivirus program is AVG so I recognized it as fake right away..also during the fake windows reboots it would never prompt me to type my user password. so I figured it wasn't really windows.

the gay porn desktop icons were a fucked up twist to the virus. they were read only so I couldnt figure out where they came from. i would delete them and they would pop back up within seconds. had me laughing my ass off.

machine is clean now all updates and patches..

crazy stuff...

Laugh

coors light rocks!!! no love lost for the john waynes


j_ung

Dec 13, 2008, 6:57 PM
Post #25 of 56 (5073 views)
Shortcut
Re: [j_ung] Popups and Trojans [In reply to] Quote | Reply

Okay, ads will be up sometime tomorrow, minus the culprit. I'm going to spend some more time following up on things, and then get some sleep. I'll be back online all day tomorrow to make sure things go smoothly.


First page Previous page 1 2 3 Next page Last page  View All

Forums : Dropzone.com : Error and Bug Reports

 


Search for (options)