Forum - View topicSudden pop up and redirect
|
|
| Author | Message | ||
|---|---|---|---|
Emerje
 Posts: 7358 Location: Maine |
|
||
|
I closed the windows before I got the name of the program they were pushing so I apologize in advance. Just moments ago when coming here the page looked like it was about to load when it suddenly re-sized and got pushed to the bottom right corner of my desktop (not minimized) and a prompt box with the usual "Your computer may be already infected! Click OK to run a free scan blah, blah, blah" text. I closed the box and re-maximized the window which presented me with a bogus virus scan followed by a fake prompt box (the type that tries to get you to press cancel, but the whole box is one big button). I closed the window and restarted IE and came back here no problem this time. I don't know where this could have come from. It might be me, but I've never had a redirect like this when going to a website I go to regularly. Really, my first thought was that ANN had been hacked. I actually hope the problem is me and not something malicious that found its way onto ANN somehow.
Emerje |
|||
|
|||
Mylene
 Posts: 2792 Location: Indiana |
|
||
|
I just had this happen as well, and like you, I was so quick to try to get out of whatever it was that I did not get any further information. Given the lateness of the hour where I am, I'm going to close all my applications, run Adaware then follow it up with a virus scan (telling it to shut down the computer when done) just in case. Hopefully Dan or whoever can figure out what happened with just these vague descriptions. I don't play around with redirects and pop-ups, particularly when they are specifically mentioning adware, etc.
|
|||
|
|||
britannicamoore
 Posts: 2618 Location: Out. |
|
||
|
It's like a Malwayre ad scanner ad. It has been happened to me both when i'm on neopets. Those are the only two sites.
|
|||
|
|||
Steel Angel
 Posts: 274 Location: Texas |
|
||
|
Got the same thing as mentioned above. Only for this site, was while trying to go to one of the forum topics (talkback) when it happened. Using FireFox as a web browser. It didn't seem to try and add any malicious programs, I've already checked.
However I'm sure this is not a desired feature of ANN. |
|||
|
|||
|
dormcat
Encyclopedia Editor
 Posts: 9902 Location: New Taipei City, Taiwan, ROC |
|
||
|
Seems like there are more victims; my computer is not affected, though.
|
|||
|
|||
selenta
 Subscriber Posts: 1774 Location: Seattle, WA |
|
||
|
heh, I actually got the ad when I was trying to look at this thread.
|
|||
|
|||
NGE1113
 Posts: 1081 Location: Alexandria, VA. |
|
||
|
Tally up another one who's had this happen. I opened a thread into a new tab, and got that screen instead. I didn't get the pop-up that Emerje described, but I'm chalking that up to tabbed web browsing. Outside of being a worrisome annoyance, it doesn't appear to have any lasting effects.
|
|||
|
|||
|
Redbeard 101
Oscar the Grouch
Forums Superstar  Posts: 16941 |
|
||
|
I haven't had any problems. Does the manner in which you access the site have anything to do with it? By that I mean whether you got here through a bookmark, typing the address manually, or simply googling ANN and clicking the site. Would that make any difference?
|
|||
|
|||
|
Mylene
Posts: 2792 Location: Indiana |
|
||
No, I can't see why that'd make any difference. I got it when hitting refresh in the Talkback thread about the DMCA notices sent out. |
|||
|
|||
Aromatic Grass
 Posts: 2424 Location: Raleigh, NC |
|
||
|
I just got the same thing a few minutes ago. I opened this site in a tab and clicked on the Anime forum, I think. It had that Windowsy~ appearance, which of course didn't match my Mac at all. I seriously doubt my computer is infected!
 (Though I'll admit it did scare me at first...)
|
|||
|
|||
MokonaModoki
 Posts: 437 Location: Austin, Texas |
|
||
|
It's an infected banner ad flash file. I just got it this morning for a second time after hitting it last night on a different computer.
EDIT2: information below confirmed by a hosts file redirect for newbieadguide.com. The yourmusic.com ad is compromised. The most likely candidate (from modification date/time, access, and known information about infected yourmusic.com banners) is: animenewsnetwork.com/images/s/149/8026.yourmusic_728x90_EN.swf (you probably don't want to run that). My properties for the flash file show it as modified 11/19/2007 at 12:18PM (which would suggest a correspondence to the recent occurence of this problem). It's running again as the banner as I type this right now. So I'm either wrong or it has triggers that cause it to behave selectively (it actually appears to be cookie based). My access to this SWF file was followed by access to: http://newbieadguide.com/swf/gnida.swf?campaign=massro11&u=23423424 which is the SWF which redirects to malware-scan.com to install the virus. For information about the hijacking of yourmusic.com banner ads by this malware you can see: http://www.dynamoo.com/diary/malware-scan-newbieadguide-com-hijack.htm. In case they also need scanning in the unlikely event that the yourmusic.com ad isn't the culprit, the next two most recent banners before the yourmusic.com ad were: animenewsnetwork.com/images/s/31/8024.ann_suzuka-v5_728x90.swf animenewsnetwork.com/images/s/31/7991.ann_hellgirl_vol1n2_728x90.swf EDIT3: the above are clean. EDIT1: My link to the information appears to be broken when I run it from the post. Any search on "newbieadguide" should provide similar information about the infection. |
|||
|
|||
Brand
 Posts: 1028 |
|
||
|
Just to add to the me too, I got the same thing on my home and work computers.
|
|||
|
|||
Vortextk
 Posts: 892 Location: Orlando, Fl |
|
||
|
It seems I wasn't the only one, whatsoever. I figured it was from somewhere else as I've been browsing online at Warcraft III sites and had acquired the trojan from one of them. Immediately ran Norton afterwards and it found the trojan and fixed it.
Exactly how does a sponsor's ad become infested anyway? I've never heard of that. |
|||
|
|||
Tempest
 I Run this place.ANN Publisher  Posts: 10427 Location: Do not message me for support. |
|
||
|
Just got home from a business trip and saw this. I've disabled the ad and will speak with the Agency that provided it tomorrow.
-t |
|||
|
|||
|
Tempest
I Run this place. ANN Publisher Posts: 10427 Location: Do not message me for support. |
|
||
|
For a period of approximately 20 hours yesterday, a flash ad that ultimately redirected viewers to malwarealarm.com (do not visit that site) was included in the ad rotation on Anime News Network. The ad in question is is in fact malware.
Very few ANN readers would have been affected, if you have not seen this software on your computer you are likely not affected. However we recommend that any person who visited Anime News Network with a Windows operating system, on Tuesday, September 20, scan their computer with Spybot-S&D, Lavasoft Ad-Aware, Windows Live One-Care, or another similar, free, reputable anti-malware software. Anime News Network apologizes for any inconvenience this may have caused. 
|
|||
|
|||
 |
All times are GMT - 5 Hours |
|
|
|
Powered by phpBB © 2001, 2005 phpBB Group