Simviation Forum - Advertizing banner links to a serious virus site

Jun 1^st, 2010 at 7:30pm

Tech Diver Offline
Colonel
Concord, Massachusetts

Gender:
Posts: 196

One or more of the changing banner ads from the main page,
http://205.252.250.26/cgi-bin/yabb2/YaBB.pl
link to sites that have viruses.

This is the warning from TrendMicro (DO NOT CLICK ON THIS LINK!!!!):
http://ad-emea.doubleclick.net.1014.9007.302br.net/fw/adi/N884.adnetik/B3979051....
"This website is potentially unsafe because it contains spyware or malicious code,
is a fake website, or has a poor reputation level."

At one point I accidentally clicked on the ad and it did indeed start loading a virus onto my computer. Fortunately, TrendMicro recognized it and quarantined the files before it could do damage. Unfortunately, I no longer recall the precise name of the virus that it was trying to load, but it was of the type that collects credit card and personal information.

Please remove the ad(s) that link to the malicious site(s).

Peter

Back to top

IP Logged

Reply #1 - Jun 2^nd, 2010 at 10:28am

pete Offline
Admin
'That would be a network
issue'
Cloud Cuckoo Land

Posts: 8500

Tech Diver wrote on Jun 1^st, 2010 at 7:30pm:

One or more of the changing banner ads from the main page,
http://205.252.250.26/cgi-bin/yabb2/YaBB.pl
link to sites that have viruses.

This is the warning from TrendMicro (DO NOT CLICK ON THIS LINK!!!!):
http://ad-emea.doubleclick.net.1014.9007.302br.net/fw/adi/N884.adnetik/B3979051....
"This website is potentially unsafe because it contains spyware or malicious code,
is a fake website, or has a poor reputation level."

At one point I accidentally clicked on the ad and it did indeed start loading a virus onto my computer. Fortunately, TrendMicro recognized it and quarantined the files before it could do damage. Unfortunately, I no longer recall the precise name of the virus that it was trying to load, but it was of the type that collects credit card and personal information.

Please remove the ad(s) that link to the malicious site(s).

Peter

Hi These ads come from Google -- and Google is very straight about having harmless ads.

If occasionally a rogue ad slips through the Google approvals it will usually be deleted quickly , once someone complains -- Google ads are displayed among millions of sites. Google publishers have no control over the ads -- it is Google who controls them.

I very much doubt the ad contained a virus but if it contained any form of spyware, Google will remove it very quickly.

Think Global. It's the world we live in.

Back to top

IP Logged

Reply #2 - Jun 3^rd, 2010 at 8:49am

TRflyman01 Offline
Colonel
Hello!
united states

Gender:
Posts: 1193

Pete, as Peter said there must have been an ad with a virus. I went directly to Simviation after opening explorer a few days ago and must have clicked the ad by mistake myself. I got a pop-up saying that this sight, was still on simviation at the time, uses java do I want to continue. Immediaiely after that my computer went haywire. I started getting all kinds of warnings from microsoft security including an attack warning that one of the ports was trying to be used to receive data. The warning gave me an ip address and a username of ABANKFOX or something like that. I immediately pulled the internet cable from my computer when the attack warning popped up and denied access to the port. As you probably have figured out I was not running an antivirus program. I thought as long as I used the internet sensibly I would be ok. I will never make that mistake again. I am currently in the process of rebuilding after a reformat and Windows install. The sad thing is that I didn't have a lot of my FSX purchases and downloads backed up. It will take awhile to get it back to where I had it.

Mike

Back to top

IP Logged

Reply #3 - Jun 3^rd, 2010 at 9:00am

pete Offline
Admin
'That would be a network
issue'
Cloud Cuckoo Land

Posts: 8500

Without a link I will still doubt this has come from this site. Trojan horses can start popups, take over your PC, etc days, weeks or even months after your PC has been infected.

Clicking the link above (I would have no fear in doing it) brings up nothing for me --- Maybe it has beed deleted as I thought it would if it was a bad site)

If you can provide the advertiser I will investigate and if found to be a bad advertiser I will contact Google with the information.

Also .... PC Golden Rule no 2 is ALWAYS have an up to date anti virus running. Most viruses come from emails.

(PC Golden rule No1 is ALWAYS Back up important data )

We are not going to remove Google ads as the vast majority of them are 100% straight -- but if Google are not doing a proper job in approving their ads then we need to report these.

Think Global. It's the world we live in.

Back to top

IP Logged

	Search the archive: