invasive program - REPORT POP-UPS/REDIRECTS

xenocrisis0153 · Posted: Wed Jan 16, 2008 12:38 pm Post subject:

twice in one day, one two different computers >___<

http://deuscleaneronline.com/9/?lid=intl&affid=&ag=1&xx=1&end=1&g=2&aid=limerickit_dscl9&mt_info=4106_0_11940

kill it!!! kill it!! kill it!!! kill it!! kill it!!! kill it!! kill it!!! kill it!! kill it!!! kill it!! kill it!!! kill it!! kill it!!! kill it!! kill it!!! kill it!! kill it!!! kill it!! kill it!!! kill it!! kill it!!! kill it!! kill it!!! kill it!! kill it!!! kill it!! kill it!!! kill it!!
_________________

GTX: Great Teacher Xeno... my daily blog about teaching in an elementary and middle school in Japan (see right-menu)

Lucifer · Posted: Wed Jan 16, 2008 5:56 pm Post subject:

I got a mail from another user who claims that he gets a pop up window saying his computer is infected by spyware, everytime when he's browsing the manga section.

This seems to be affecting only U.S. users?
_________________
What's yours is mine, what's mine is still mine.

v-boi2002 · Posted: Thu Jan 17, 2008 3:20 am Post subject:

I got a redirect. Scared the crap outta me.

http://scanner2.malware-scan.com/9_swp/?aid=limerickit_ma9_mb1t&lid=intl&ax=1&ed=2&mt_info=5067_3235_13640

http://scanner2.malware-scan.com/14_swp/scan.php?aid=limerickit_ma14_mb1t&lid=intl&ax=1&ed=2&mt_info=5067_3235_13641
_________________

Xelloss · newbie! Joined: Jan 18, 2008 Posts: 1

I have gotten that one more than once. I have to kill the thread from task manager, in my experience those sites are actually malware set to infect your machine, and give you pop ups asking for you to pay for mal-ware removal software.

They usually are also part of a botnet.

Nasty, nasty stuff - I recommend axing that advertiser ASAP, before lots of people become infected.

Also, yes I am in the USA so if your using IP based advertising its the USA version thats propogating it, I am not the only user who has seen it - guildmates also in the US get it as well.

Lucifer · Posted: Fri Jan 18, 2008 6:38 pm Post subject:

It's not our wish to trouble users. Please help us narrow down the culprit by providing more information, such as your version of web browser and which ads you actually get.
_________________
What's yours is mine, what's mine is still mine.

jikap · newbie! Joined: Apr 01, 2007 Posts: 3

While I've been getting these adverts and redirects at seemingly random websites before, i don't think I've got it here at anime-source yet... but i don't really keep track of where i get them either >.>
But if it's a US problem, then i really shouldn't get any, cause I'm a Norwegian...

Doomsought · Posted: Sun Jan 20, 2008 8:35 pm Post subject:

you can get back quick quick by closing the window and puling down the back button menu when it re-directs, try to hit the stop button befor it finishes loading if you can.
_________________
If violence isn't the answer, you didn't use enough.
Most people operate under a fundamental misconception:
they believe most if not all people are good
It is saddly verry much not so.

Mekkjock · newbie! Joined: Mar 27, 2004 Posts: 1

I just got a redirect to Deuscleaneronline.com where it did a "scan" and informed me of infected files.
A search on google: Another Rogue Security application which looks similar to Drive Cleaner Application; The site uses the scare scan tactics to scare the user into purchasing the rogue application. The site registrar is ESTDOMAINS and it uses the IP 24.244.171.69 which is used by other malicious sites.

1ce · Posted: Tue Jan 22, 2008 6:08 pm Post subject:

I received that pop up, but I live in Toronto, ON.
I don't know what else to say except i've seen it once before as well at another website (crunchyroll.com). So how can it be stopped?

ninenines · Posted: Tue Jan 22, 2008 10:24 pm Post subject:

Got a Trojan detected while browsing your forums:

Here's the apparent bad link:
http://newbieadguide.com/swf/gnida.swf?campaign=limerickit&u=1196961750//Swf2Swc

Was browsing with Firefox 2.0011 on Vista.

i guess the culprit would be the campaign called "limerickit"
_________________
[img:100:69:fe0eceb8dc]http://www.ninenines.net/ninesblog/wp-content/uploads/2006/10/fight1.gif[/img:fe0eceb8dc]
www.ninenines.net

1ce · Posted: Tue Jan 22, 2008 11:48 pm Post subject:

I also have pop ups from Party Poker.com
Is that also normal?

JinJo · Conscript Joined: Sep 19, 2007 Posts: 119

I've been getting that scanner2.malware-scan site as well. I couldn't figure out what it was and it always came from this site. I'm using Maxthon browser which is basically internet explorer and I live in the US.

v-boi2002 · Posted: Wed Jan 30, 2008 7:40 pm Post subject:

http://scanner2.malware-scan.com/3_swp/scan.php?aid=limerickit_ma3_mb1t&lid=intl&ax=1&ed=2&mt_info=5067_3235_13646
_________________

v-boi2002 · Posted: Mon Feb 04, 2008 3:09 pm Post subject:

http://blessedads.com/?cmpid=mebiennial&adid=intl
_________________

HeyZeus

i couldnt remember where the thread was so i searched my name and found it as a sticky thread....

Anywho....
I was reading the newest manga and had the page open in a new window because i was using and closing too many tabs in my other window.
Its was open for a good hour maybe 2 but i hadnt used the window yet.
after i finished what i was doing i returned and after 2 or 4 page changes i got another thing like my original post.
This time i got all the information i could with the least danger possible.
sadly that is only the exact text on the popup and what i can remember from a glimpse of the page that opened when i closed it....

What happened was that the window closed suddenly and a windows system box like those you might find when closing multiple tabs on firefox and the warning box pops up or if there is an error and your computer asks you if you want to send the report.

It was located at the bottom right of my screen about two inches to the left above my toolbar. it occupied its own tab on my toolbar unlike most/many Windows system templates. like my first time it happened when i was in the mangas section and it was a warning i was infected or might be and asked me if i wanted to use or get some program to clean my computer. last time though i think it said something to the effect of RUN THIS NOW YOUR IN DANGER! rather than what i'm about to paste from where i typed it in.

this is the top bar where if your reading this and using firefox you would see Anime-Source.Com - Mozilla Firefox at the top of your window
VVV
The page at http://filterprogram.com says:

*((there was some symbol here))
*NOTICE: If your computer is infected, you could suffer data loss, erratic PC behavior, PC freezes and crashes.

Detect and remove viruses before they activate themselves on your PC to prevent all these problems.

Do you want to install FilterProgram to scan your computer for malware now? (Recommended)

OK Cancel

Then as with last time when i closed the window with the Actually available close window x button, It opened up something... last time i think there were pop ups... am checking my post now...
hmm seems last time it was mild at first till i closed something.
this time after closing it it opened a window with the products name and some flash script was running a loading percentage image in the top middle of the page and there was some sort of confirmation button above it and some caption above that using the product name.
i immediately closed the window and received no further problems.
last time it seems the window was still there and once i closed the 'popup' it forced a change in that window and further problems you can read back to. anyways it was milder this time a little bit.

Mostly what i read from this thread is that it comes from the manga section and involves popups.

i wonder if everyone is getting those partial format browser popups that are what this site uses for the musics for animes. or if there more like the ones ive gotten or both...
now that i think about it i cant remember if the window it opened this time was a pop-up or a full window since i was hurried in closing it.

this last comment has nothing to do with the topic but i would like to bring it up because i dont post much...
I noticed a few months ago in some other forum that my I"'s quote was a little off. my eyes are huge with the O_O but Itchitaka Seto kun's were much more like slits with his under eye cheek muscles pushed up. that said i can figure out an easy way to change the signature to be more correct and still look right... any suggestions?
for referral go to volume two chapter 11 page 69, or the 4th chapter of the second book. its the box in the lower left...... oh and i was spelling jigolo with a g Sad

lastly this post was started before my last one and only took me an hour Very Happy

_________________
DO THESE LOOK LIKE THE EYES OF A JIGOLO O_O !?

" I"'s "

-----Thank you VERY much Admins For having this sight! its very much appreciated-------