Antivirus XP 2010 -- a gift from Flash Ads

[Olliv]

Hi Rook!

Did you often play a game which uses the Ctrl key?

Ollivier

[UserOfPure]

Thats because that "malicious code " is making them millions of dollars a year (collectively), much more than "something genuinely usefull" would.

True. The love of money is the root of all evil.

[SFSxOI]

So, I decided to become a better person. Make something of my life. Which is why I've set my eyes on a less controversial occupation, an ambition that would not only bring statisfaction but even greater rewards than being a spammer or a virus creator. Something that definitely will change the world.

Ahhh.... another person without money then...

[LuCiFeR[SD]]

Ahhh.... another person without money then...

Sounds a lot like me too

[Olliv]

« when the man will have cut the last tree, polluted the last straw, the last animal killed and the last fish caught, then he will realize that money is not edible. » (Mohawk indian proverb)

[Rook Zimbabwe]

I cannot run sandboxie as I have to use the web for both a vpn and a remote desktop to connect to the server in Atlanta and in LA... I hate clearview (our process system) and possibly I hate Citrix more.

But the only thing open was one instance of IE and that was to the forums! I am not being paranoid...

It was a nokia phone ad that uploaded the script... I had it shut down in 3 minutes. I had it clean in about 39 using malwarebytes... BUT STILL!!!

I see this happening all over the net now. I had to request dispatch to send out more than 40 techs for exactly the same issue all over the country this week! This is getting silly!

Yes... it is crud that this comes up to me after I cleaned my buddys system.

Oh, and the first link up in google on my laptop set up my laptop for the same bomb!

[Joakim Christiansen]

It was a nokia phone ad that uploaded the script...

I have never heard about google ads containing viruses... And they are very careful with which ads they allow, so until I hear other reports about this I will have a hard time believing you.

Oh, and the first link up in google on my laptop set up my laptop for the same bomb!

What do you mean with the first "link up" btw?
So a google ad has now infected both your computers...

My father once had a trojan which redirected requests to google's ad server to another server (hijacking the ads) enabling them to replace them with whatever they wanted. Maybe that could have happened and then the malicious ads would seem to be from google but in reality be from someone else. Or maybe even your DNS was hijacked.

I see this happening all over the net now. I had to request dispatch to send out more than 40 techs for exactly the same issue all over the country this week! This is getting silly!

Are you sure it is the same thing?

Before throwing claims like these try to collect some evidence maybe?
Not just say that the nokia ad did something because it was showing in internet explorer at the same time, but instead show proof that it did something.

[rsts]

I've got the PB forums opened on my computer 24x7 and have never experienced anything like this.

I wonder why it seems to happen to just you, or are any of the others being infected by the google ads too?

cheers

[SFSxOI]

It was a nokia phone ad that uploaded the script...

I have never heard about google ads containing viruses... And they are very careful with which ads they allow, so until I hear other reports about this I will have a hard time believing you.

Oh, and the first link up in google on my laptop set up my laptop for the same bomb!

What do you mean with the first "link up" btw?
So a google ad has now infected both your computers...

My father once had a trojan which redirected requests to google's ad server to another server (hijacking the ads) enabling them to replace them with whatever they wanted. Maybe that could have happened and then the malicious ads would seem to be from google but in reality be from someone else. Or maybe even your DNS was hijacked.

I see this happening all over the net now. I had to request dispatch to send out more than 40 techs for exactly the same issue all over the country this week! This is getting silly!

Are you sure it is the same thing?

Before throwing claims like these try to collect some evidence maybe?
Not just say that the nokia ad did something because it was showing in internet explorer at the same time, but instead show proof that it did something.

The google ads themselfs don't contain viruses, but, there have been cases where the ad's link to compromised web sites which contain scripts that are not all that "legitimate" which either cause or force covert or overt applications to be installed on systems which are not properly protected but thats rare if the sites are mainatined properly and the admins have any brains at all (especially corporate sites) (and I can tell you right now MalWareBytes ain't cutting it Rook, dump it and get a real product for protection). The main problem with ad's is that although they are them selfs legitimate, depending on how the site is configured that the ad eventually points to and the forwading involved if any its possible that an ad link can be hijacked and pointed to a malicious end point if the site the ad points to has been compromised in some way. So its possible for a legitimate ad to cause a problem while the ad its self is legitimate. We investigate these types of things all the time here at work, you'd be suprised at the pitfalls involved with ad's. Based purely upon what Rook posted (which was no where descriptive enough from an investigative standpoint to discover the true cause), although there is some legitimacy in his theory in certain aspects, I doubt that Rook's original issue is the result of a google ad its self being shown here at PureBasic. My first stop in investigating this, if it were me, would have been to investigate for hijacking caused by hidden trojans or other malware such as malicious scripts running from java applets for example.

My father had a trojan once too, and nine months later I was born.

[Olliv]

I add Google often changes its ads. Yesterday, I discover the head of Sarah Palin in the bottom of the page, or how to vote against Obama ( ). However, I am not concerned...

[Joakim Christiansen]

My father had a trojan once too, and nine months later I was born.

Sure you don't mean mother? Then it would make sense; a trojan (you) in her womb. Or did the trojan spread from your father into your mother? If so she should have worn a firewall...

[SFSxOI]

My father had a trojan once too, and nine months later I was born.

Sure you don't mean mother? Then it would make sense; a trojan (you) in her womb. Or did the trojan spread from your father into your mother? If so she should have worn a firewall...

Thats pretty funny Joakim, I like that, firewall LoL

A 'Trojan" is a brand name for a condom also, "My father had a trojan...", and computer trojans fool you...... get it? OK, I give up, its no fun if you have to explain a joke.

[Joakim Christiansen]

My father had a trojan once too, and nine months later I was born.

Sure you don't mean mother? Then it would make sense; a trojan (you) in her womb. Or did the trojan spread from your father into your mother? If so she should have worn a firewall...

Thats pretty funny Joakim, I like that, firewall LoL

A 'Trojan" is a brand name for a condom also, "My father had a trojan...", and computer trojans fool you...... get it? OK, I give up, its no fun if you have to explain a joke.

Didn't know trojan was a condom brand

If I were a girl I wouldn't trust anyone with it...

[LuCiFeR[SD]]

Glad to see people are practising Safe Hex

[Blood]

...I shut down IE

I think i've found your problem.