|
C'mon Afterdawn!
|
|
Admin
9 product reviews
|
11. March 2010 @ 03:48 |
Link to this message
|
Originally posted by KillerBug:
When firebug is installed, the problem stops, but I think that it is because of these error messages:
"Permission denied for <http://ad.doubleclick.net> to call method Location.toString on <http://forums.afterdawn.com>."
"Permission denied for <http://googleads.g.doubleclick.net> to call method Location.toString on <http://forums.afterdawn.com>."
Both those errors are "normal", and not related to this problem. The permission denied error appears when an external Flash tries to access the parent window's location information. Firebug just shows the error that would normally be hidden.
|
|
Advertisement
|
|
|
|
AfterDawn Addict
1 product review
|
11. March 2010 @ 08:05 |
Link to this message
|
Well then I guess I'm out of ideas...I'll just use a firebug'd firefox on the forums from now on. It is very odd that this is the only site this seems to happen on; while there are thousands of sites with google advertising. Perhapse it has something to do with all the instances of the words, "Spyware", "Virus", and "Malware".
Still, I would have loved to catch these bastards. I guess Symantec will get away with it...
|
Admin
9 product reviews
|
11. March 2010 @ 09:53 |
Link to this message
|
Originally posted by KillerBug:
Well then I guess I'm out of ideas...I'll just use a firebug'd firefox on the forums from now on. It is very odd that this is the only site this seems to happen on; while there are thousands of sites with google advertising. Perhapse it has something to do with all the instances of the words, "Spyware", "Virus", and "Malware".
Still, I would have loved to catch these bastards. I guess Symantec will get away with it...
Yeah, I hope we can get to the bottom of this eventually. Google has ruled out the possibility of the ad originating from their own services. They do serve 3rd party advertisements though, and are going through them to rule out the possibility it is coming from one of those.
Keep us posted!
|
|
donewell
Member
|
12. March 2010 @ 10:45 |
Link to this message
|
|
|
Moderator
|
12. March 2010 @ 11:11 |
Link to this message
|
I use AVG not MSE, and no such popups...
Main PC ~ Intel C2Q Q6600 (G0 Stepping)/Gigabyte GA-EP45-DS3/2GB Crucial Ballistix PC2-8500/Zalman CNPS9700/Antec 900/Corsair HX 620W
Network ~ DD-WRT ~ 2node WDS-WPA2/AES ~ Buffalo WHR-G54S. 3node WPA2/AES ~ WRT54GS v6 (inc. WEP BSSID), WRT54G v2, WRT54G2 v1. *** Forum Rules *** |
|
donewell
Member
|
12. March 2010 @ 11:22 |
Link to this message
|
Originally posted by creaky:
I use AVG not MSE, and no such popups...
Thats Good hopefuly it's gone for good!!
|
|
ddp
Moderator
|
12. March 2010 @ 11:37 |
Link to this message
|
same here with avg, no problems.
|
AfterDawn Addict
1 product review
|
13. March 2010 @ 06:13 |
Link to this message
|
Originally posted by creaky:
I use AVG not MSE, and no such popups...
I like the pop-ups; they let me know that I am being attacked. If it were not for the fact that I like afterdawn so much, I would be smart enough to never come back.
|
Moderator
|
13. March 2010 @ 06:55 |
Link to this message
|
Originally posted by KillerBug:
I like the pop-ups; they let me know that I am being attacked.
We all have popups, it's just that it's wise to suppress them.
Originally posted by KillerBug:
If it were not for the fact that I like afterdawn so much, I would be smart enough to never come back.
The thing to remember/realise is, is that out of the gazillions of members here, there's only one or two of you (that we know about, granted) that are having such problems.. it might be time to rethink those popups..
Main PC ~ Intel C2Q Q6600 (G0 Stepping)/Gigabyte GA-EP45-DS3/2GB Crucial Ballistix PC2-8500/Zalman CNPS9700/Antec 900/Corsair HX 620W
Network ~ DD-WRT ~ 2node WDS-WPA2/AES ~ Buffalo WHR-G54S. 3node WPA2/AES ~ WRT54GS v6 (inc. WEP BSSID), WRT54G v2, WRT54G2 v1. *** Forum Rules ***
This message has been edited since posting. Last time this message was edited on 13. March 2010 @ 07:09
|
|
donewell
Member
|
13. March 2010 @ 09:04 |
Link to this message
|
The thing to remember/realise is, is that out of the gazillions of members here, there's only one or two of you (that we know about, granted) that are having such problems.. it might be time to rethink those popups..
Believe me, it's not just two of us. when mirosoft puts this on their web site http://www.microsoft.com/security/portal...atid=2147609530
I have in the last two weeks reformated 4 of my friends computers because they fell for this. and they all got it from different sites not afterdawn. I have many friends that i have recomended afterdawn and cd freaks to, for info. Not all are getting this but some do. They do not belong or sign in, just vist to read the forms and learn, like i did for a long time.
Anyway Hope this is the end of that, as i nolonger get it.
|
Senior Member
|
16. March 2010 @ 11:52 |
Link to this message
|
I normally use Opera and I visited the site today and wondered why it looked weird, so I checked it out in the latest version of IE only to get this: -
Which when clicked, redirects me to here and attempts to install malware: -
h**p://www1.firecure-forthis-pcnow.in/?p=p52dcWtkal%2FCj8bYbn2Ai1ik12qYVp%2FZatramleZm5qiw8KCd2xfqKygdW6Sk5idZ5Nla2ZtiqDWkaTboKCViaJ0WKrO1c%2Beb1qfnaSZdV%2FXlsndblaWpG9wmluUaF6XX5mSl1epl5yih9esb2VranBrbWyZX5iMpaNfcWNqmmWZZWOeX5eKxpR0eXg%3D
EDIT - BTW, I was also not able to get a screen shot of the offending ads because the page on Afterdawn closes when that pop-up appears. I have been able to get it to appear 3 times now by repeatedly refreshing the page in the Xbox 360 section.
The file that the site tries to download is only picked up by 4 out of 42 scanners at VirusTotal. It's another one of those fake anti-virus programs. Sophos is the only one that detects it as Mal/FakeAV-BW. 3 other scanners pick it up as suspicious and the other 38 don't pick it up at all.
Click HERE for up to date 360 tutorials that may help you! This message has been edited since posting. Last time this message was edited on 16. March 2010 @ 12:07
|
Admin
9 product reviews
|
16. March 2010 @ 12:09 |
Link to this message
|
Originally posted by funksoulb:
I normally use Opera and I visited the site today and wondered why it looked weird, so I checked it out in the latest version of IE only to get this: -
Which when clicked, redirects me to here and attempts to install malware: -
h**p://www1.firecure-forthis-pcnow.in/?p=p52dcWtkal%2FCj8bYbn2Ai1ik12qYVp%2FZatramleZm5qiw8KCd2xfqKygdW6Sk5idZ5Nla2ZtiqDWkaTboKCViaJ0WKrO1c%2Beb1qfnaSZdV%2FXlsndblaWpG9wmluUaF6XX5mSl1epl5yih9esb2VranBrbWyZX5iMpaNfcWNqmmWZZWOeX5eKxpR0eXg%3D
EDIT - BTW, I was also not able to get a screen shot of the offending ads because the page on Afterdawn closes when that pop-up appears. I have been able to get it to appear 3 times now by repeatedly refreshing the page in the Xbox 360 section.
Can you try and track IE traffic using FiddlerCap and instructions posted here? Since the advertisements are never shown over here in Finland, we rely in the information you can provide to get rid of this pest.
|
AfterDawn Addict
1 product review
|
16. March 2010 @ 23:43 |
Link to this message
|
When you turn on FiddlerCap or Firebug, you prevent these things from being loaded. It is only when you run without these apps that the problem shows up. From the Microsoft post, it seems that it is not just AD that gets these, but so far it has only happened on AD for me.
This malware is written very well, and I no longer think that it comes from Symantec...as they do not know how to write software that works this well.
|
AfterDawn Addict
1 product review
|
17. March 2010 @ 03:45 |
Link to this message
|
I keep getting this message from Flash...not sure if it helps or not:
"Error #2044: Unhandled securityError:. text=Error #2048: Security sandbox violation: http://img-cdn.mediaplex.com/0/711/93468..._template_id=71 cannot load data from http://dap.ebay.gslb.com:8080/dap?t=71f&...30395518852746.
at com.agency.ebay.oxfordLite.net::DAP3Loader/fetch()
at com.agency.ebay.oxfordLite.net::DAP3Loader/onConfigLoadParsed()
at flash.events::EventDispatcher/dispatchEventFunction()
at flash.events::EventDispatcher/dispatchEvent()
at com.agency.ebay.oxfordLite.data::DAP3Config$/parseData()
at com.agency.ebay.oxfordLite.net::DAP3Loader/onConfigLoadComplete()
at flash.events::EventDispatcher/dispatchEventFunction()
at flash.events::EventDispatcher/dispatchEvent()
at flash.net::URLLoader/onComplete()"
|
Admin
9 product reviews
|
17. March 2010 @ 07:41 |
Link to this message
|
Originally posted by KillerBug:
I keep getting this message from Flash...not sure if it helps or not:
"Error #2044: Unhandled securityError:. text=Error #2048: Security sandbox violation: http://img-cdn.mediaplex.com/0/711/93468..._template_id=71 cannot load data from http://dap.ebay.gslb.com:8080/dap?t=71f&...30395518852746.
at com.agency.ebay.oxfordLite.net::DAP3Loader/fetch()
at com.agency.ebay.oxfordLite.net::DAP3Loader/onConfigLoadParsed()
at flash.events::EventDispatcher/dispatchEventFunction()
at flash.events::EventDispatcher/dispatchEvent()
at com.agency.ebay.oxfordLite.data::DAP3Config$/parseData()
at com.agency.ebay.oxfordLite.net::DAP3Loader/onConfigLoadComplete()
at flash.events::EventDispatcher/dispatchEventFunction()
at flash.events::EventDispatcher/dispatchEvent()
at flash.net::URLLoader/onComplete()"
That looks like a benign advertisement code. Seems to run some type of eBay advertisement, but I'll have a closer look at it anyway. Thanks!
|
AfterDawn Addict
1 product review
|
17. March 2010 @ 22:47 |
Link to this message
|
|
Even if it isn't a malware, it is still worth fixing just to avoid the Flash Error pop-ups.
|
Moderator
|
17. March 2010 @ 22:52 |
Link to this message
|
I still don't suffer from any of these things, i use Firefox primarily.
Main PC ~ Intel C2Q Q6600 (G0 Stepping)/Gigabyte GA-EP45-DS3/2GB Crucial Ballistix PC2-8500/Zalman CNPS9700/Antec 900/Corsair HX 620W
Network ~ DD-WRT ~ 2node WDS-WPA2/AES ~ Buffalo WHR-G54S. 3node WPA2/AES ~ WRT54GS v6 (inc. WEP BSSID), WRT54G v2, WRT54G2 v1. *** Forum Rules ***
|
AfterDawn Addict
1 product review
|
17. March 2010 @ 22:57 |
Link to this message
|
That error only comes up with firefox...maybe I need to revert to an older version; I only upgraded because Firebug forced me to.
|
Moderator
|
17. March 2010 @ 23:02 |
Link to this message
|
|
Maybe try ABP, Flashblock & noscript..
..Saying that, this machine hasn't got noscript installed, and i do most of my surfing on it
Main PC ~ Intel C2Q Q6600 (G0 Stepping)/Gigabyte GA-EP45-DS3/2GB Crucial Ballistix PC2-8500/Zalman CNPS9700/Antec 900/Corsair HX 620W
Network ~ DD-WRT ~ 2node WDS-WPA2/AES ~ Buffalo WHR-G54S. 3node WPA2/AES ~ WRT54GS v6 (inc. WEP BSSID), WRT54G v2, WRT54G2 v1. *** Forum Rules ***
|
AfterDawn Addict
1 product review
|
18. March 2010 @ 06:11 |
Link to this message
|
|
Nevermind me, I was just trying to keep new users from running away after getting slammed with malware sites and flash error messages. These things are not a big problem for me...the Flash errors are only a bit annoying, and any kind of proxy (even a pseudo-proxy like Firebug or FiddlerCap) will prevent the forwards.
I'll stop trying...if things get too bad, I'll just jump ship with the rest of the users.
|
Admin
9 product reviews
|
19. March 2010 @ 08:44 |
Link to this message
|
Originally posted by KillerBug:
Even if it isn't a malware, it is still worth fixing just to avoid the Flash Error pop-ups.
Unfortunately it's, again, one of those things we have absolutely no control over. I run AfterDawn with Firebug all the time, and haven't come across the problem myself. Probably because that's yet another ad targeted at another market.
|
AfterDawn Addict
1 product review
|
19. March 2010 @ 22:47 |
Link to this message
|
Sounds like you have virtually no control over anything...and a bunch of whinny brats complaining every time something breaks. All well...like I said, I'll stick around as long as there are people here, and the site itself can be tamed. My main concern at this point is that if the AD gets to be more of a virus portal than the Pirate Bay, there will be no reason for anyone to come here.
I kind-a miss the old days when advertising was either a JPG or a GIF...now you can include malicious code in you advertising, and there is nothing anyone can do about it other than blocking all ads!
|
|
ddp
Moderator
|
19. March 2010 @ 23:16 |
Link to this message
|
|
i'm not getting any of that stuff except for the feedback tab on right side of screen.
|
|
donewell
Member
|
23. March 2010 @ 09:36 |
Link to this message
|
|
|
|
Advertisement
|
|
|
Admin
9 product reviews
|
23. March 2010 @ 10:14 |
Link to this message
|
Originally posted by donewell:
I'm Getting the same thing at this site http://software.informer.com/go/go.php?g...%3Dwindo&n=7307
I'm trying to get drivers for my dvd express and this blocks every thing there. I know it has nothing to do with afterdawn, but I just wanted to show it is happening elsewhere. the only ads there are theirs.
Thank you for reporting this. I've checked the site to see if there are any similarities to the problems reported here.
From what I've observed the site is trying to load a malware script from http://google-aqalytics.info/ directly in the source. That indicates that this isn't a problem with their advertisements but the site itself. Either the code is there on purpose or the pages have been hacked in some way.
Nevertheless the script is lightly encoded, and causes the page to be redirected to dragon4star.com , which in turn redirects to smart4-defence.com (both of these addresses need to be loaded with specific attributes to trigger malware load attempt). The last mentioned is a scam site that portrays a fake anti-virus scan and then attempts to start a download for a setup exe. Here is an analysis of the EXE file.
Here are screenshots of the process. I think it bears resemblance to the advertisements causing problems here:
This message has been edited since posting. Last time this message was edited on 23. March 2010 @ 10:25
|
