Virus attack after log in
- Thread starter JCAUPS1
- Start date
drknstrmyknight
Addicted Member
Google's in a tough spot, and AK is helpless as it's exsistence relies on revenue from Google.
Google gets an ad that looks OK which pulls something from another server. It goes into rotation and the authors change the third party content. We log in and blammo!
Note this is probably a very small percentage of AK users and they would encounter the same content on any site that uses Google ads.
Grab as much into as you can and pass it along to the mods so they can communicate with Google. What ad is in the Google frame, any info from your security software, etc.
Google gets an ad that looks OK which pulls something from another server. It goes into rotation and the authors change the third party content. We log in and blammo!
Note this is probably a very small percentage of AK users and they would encounter the same content on any site that uses Google ads.
Grab as much into as you can and pass it along to the mods so they can communicate with Google. What ad is in the Google frame, any info from your security software, etc.
drknstrmyknight
Addicted Member
ha - malwarebytes just throw this:
16:21:52 IP-BLOCK 178.17.163.189 (Type: outgoing, Port: 52070, Process: iexplore.exe)
16:21:52 IP-BLOCK 178.17.163.189 (Type: outgoing, Port: 52070, Process: iexplore.exe)
fotno
Lunatic Member
This bears repeating. If/When you encounter these problems, every piece of information is important. If you can write it down, take a screen shot, anything that enhances our knowledge of what's going on will help us to stop it.
spartanmanor
Lunatic Member
Folks take my advice and block this sh*t before it hits your computer. I have and had everything up to date and it still f'd me over.
I had the impression (perhaps wrong) that NoScript was for Macs, but so many people say they are loading it that I'm starting to think it works on PCs too. I will have to check it out.
On that subject I was not sure what settings in IE to check. One of these threads said to set this or that but I didn't find those exact terms in my security settings checkboxes.
On that subject I was not sure what settings in IE to check. One of these threads said to set this or that but I didn't find those exact terms in my security settings checkboxes.
dewdude
High on resolution.
Is this uncommon? No.
The problem is the scammers are buying ad-space as a legitimiate company. They get caught, no biggie. New shell corp, new ad exploit, back out it goes.
Ad-networks can't...or likely...won't...undertake the effort to scan each ad. Very likely, its not google's fault. Google fights them like crazy and builds protection in to Chrome against these drive-by infections.
My advice, switch to Chrome. I did...and I haven't gotten a scamware infection since.
Sent from my Samsung Intercept with Tapatalk
The problem is the scammers are buying ad-space as a legitimiate company. They get caught, no biggie. New shell corp, new ad exploit, back out it goes.
Ad-networks can't...or likely...won't...undertake the effort to scan each ad. Very likely, its not google's fault. Google fights them like crazy and builds protection in to Chrome against these drive-by infections.
My advice, switch to Chrome. I did...and I haven't gotten a scamware infection since.
Sent from my Samsung Intercept with Tapatalk
Running Chrome & Norton 360 here, no infections, no alerts, all scans completed without problems, Java is enabled/active.
I also installed MSE - so they are both running and seem to co-exist without problems.
In a recent scan MSE detected something called 'PowerRegScheduler' and quarantined it.
The only thing I do notice is that I lost AK completely for several minutes on a few occasions recently, this happened before the MSE install as well. On one occasion I got the "server busy, try again later" message.
That is all.
I also installed MSE - so they are both running and seem to co-exist without problems.
In a recent scan MSE detected something called 'PowerRegScheduler' and quarantined it.
The only thing I do notice is that I lost AK completely for several minutes on a few occasions recently, this happened before the MSE install as well. On one occasion I got the "server busy, try again later" message.
That is all.
spartanmanor
Lunatic Member
I am running Firefox on Windows 7. Using NoScript 2.2.3
petehall347
the brandy coffee man
if i run windows i refuse to run i.e better to run chrome or firefox .. in my view they are more secure and easier to operate .. i know for sure no script works on firefox i used to use it
spartanmanor
Lunatic Member
It is like playing Russian roulette hit on the right ad and bingo! Like I said I am on this site often so my odds are and were up higher than others.
petehall347
the brandy coffee man
i have had the server busy ,,guess that's just a bandwidth issue or whoever does the it was having to change something
I think i got the answer to my question, found a YouTube video while looking at the NoScripts one linked earlier in this thread. NoScripts appears to be designed for Firefox.
In IE you can select Custom security in the Options which allows turning off and on a huge list of items. Scripting is one of them.
I've thought about changing browsers, I'm just slow to adapt and don't want to go to the trouble. I loaded Chrome but it didn't seem to have any controls! Weird looking.
petehall347
the brandy coffee man
on chrome left click on the spanner top right to find the settings ...under the bonnet /content settings
I'm seeing a side benefit to running NoScript, both this site and hotmail run faster & hotmail hasn't gotten hung up trying to run a script that's stopped, which was a chronic PITA if I left the PC logged in there for any length of time.
Getting a new laptop at work next week, and will install NoScript for sure. Here's hoping they also locate that year's missing data in server backups.
John
Getting a new laptop at work next week, and will install NoScript for sure. Here's hoping they also locate that year's missing data in server backups.
John
Mr. Lin
Lunatic Member
I second that. Plus, it's faster than IE or Firefox, the latter being my previous browser.
There were complaints about Google doing its big brother thing and spying on all your browsing if you used Chrome, but I don't hear anyone complaining now. :scratch2: 
Last edited:
petehall347
the brandy coffee man
There were complaints about Google doing its big brother thing and spying on all yoru browsing if you used Chrome, but I don't here anyone complaining now. :scratch2:
yes they send ads what they think is relevant to you .. if your clear cookies and cache it confuses them ..then its just the regular ads ..
bob06
Addicted Member
I have not been Infected. I have Norton 360 and it has been stopping it. But last week every day it tryed to get in. Since Sunday nothing.
Similar threads
