Ads/Script redirecting to Virus site?


Recommended Posts

2nd time this has happened to me now. I use inprivate mode at work so i'm not logged in but i'm on the neowin main page then start getting redirected to other site to land at:

 

post-698-0-85235300-1373561494.png

 

WARNING: Don't be a smarty and go to site below: :punch:

http://usdppvs.myftp.biz/index.php?....................... etc

 

I don't know if it's the same site as last time but it was the same fake Security Essentials thing.

 

It's only happened when not logged in so i'm guessing guests haven't been able to report it.

Link to comment
https://www.neowin.net/forum/topic/1164064-adsscript-redirecting-to-virus-site/
Share on other sites

Yes, I am not the only one that has seen the fake Security Essentials windows a few times now when I come to Neowin.  It seems like a bad advert in the rotation I am guessing and the link is different each time. 

 

Warning to not go to the link below!!

 

"http://thpfbez.myftp.biz/index.php?c=RaENOjEayDF925cOxP3ACC60zajgAjCTlcK0liAaKtvKheVQzm+YhzfWz1MPnw1S6zBdyf5PIpX2zaZzWwL95qmKyoM="

 

 

And this happens while I am logged in.

this is what i usually do if i get infected.

 

Malwarbytes

http://www.malwarebytes.org/

 

if you dont have it, download, install, update and then do a full system scan.

 

then once i have used my antivirus to scan (which takes about 2 days, since i have a huge amount of data and space!) and done a malware scan, i then use one or more of these:

 

(these are all online scanners, so do not require you to remove your existing antivirus software)

 

Trendmacro Housecall

http://housecall.trendmicro.com

 

panda active scan

http://www.pandasecurity.com/activescan/index/

 

Bit Defender

http://www.bitdefender.co.uk/scanner/online/free.html

 

Eset online scanner

http://www.eset.com/us/online-scanner/

 

and check startup items and running processes, if i suspect anything i submit it to this site, you can usually judge weather you need to get rid of the file or not

 

Virus total

https://www.virustotal.com/en/

I'm not infected.... pssht :p - I run clean shop over here. It's happened on work PC and my home machine which was formatted to install Windows 8.1 preview. SO it's as clean as a bell. Dunno though, haven't seen it yet today.

this is what i usually do if i get infected.

 

Malwarbytes

http://www.malwarebytes.org/

 

if you dont have it, download, install, update and then do a full system scan.

 

then once i have used my antivirus to scan (which takes about 2 days, since i have a huge amount of data and space!) and done a malware scan, i then use one or more of these:

 

(these are all online scanners, so do not require you to remove your existing antivirus software)

 

Trendmacro Housecall

http://housecall.trendmicro.com

 

panda active scan

http://www.pandasecurity.com/activescan/index/

 

Bit Defender

http://www.bitdefender.co.uk/scanner/online/free.html

 

Eset online scanner

http://www.eset.com/us/online-scanner/

 

and check startup items and running processes, if i suspect anything i submit it to this site, you can usually judge weather you need to get rid of the file or not

 

Virus total

https://www.virustotal.com/en/

Over kill to the maximum, even if it is better to be safe than sorry!

 

Malwarebytes and SuperAntiSpyware, are all I need. If those 2 programs haven't gotten everything, I'll use Malwarebytes anti rootkit, which I'm not even sure is any different that regular Malwarebytes! Usually, either of those first 2 programs get's those baddies.

 

Not even using an AV now. Have NEVER had one of those bloated programs block/find/remove anything!

Can someone please screenshot the advert that supposedly triggers this? It's quite serious and I need to be able to report it. Does it happen only on main or also in the forums?

Not sure which ad was doing it but it only happened to me on the main page and not the forums.

Couldn't screenshot it because it goes by too fast as I'm generally not paying attention to the ads either (:p) - I just go neowin.net then go to try click the login button and it starts going all over the place.

myftp.biz has been blocked here and at two ad providers that could possibly host such an ad, but it's confusing because we don't even allow popups; the only way we can truly get to the bottom of this is if I know exactly what ads are loaded on the page when the thing pops up.

2nd time this has happened to me now. I use inprivate mode at work so i'm not logged in but i'm on the neowin main page then start getting redirected to other site to land at:

 

attachicon.gifFake Virus.png

 

WARNING: Don't be a smarty and go to site below: :punch:

http://usdppvs.myftp.biz/index.php?....................... etc

 

I don't know if it's the same site as last time but it was the same fake Security Essentials thing.

 

It's only happened when not logged in so i'm guessing guests haven't been able to report it.

 

WOW, if MSE detects it just imagine how bad it really is....

 

Also Sandboxie FTW!

 

A good time to remind anyone who is reading this to keep their 3rd party applications and operating system up to date. It's more than likely what ever site it's redirecting to probably has an exploit kit.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • The AI data centers need it more than us so...let them gobble it all up at that price!
    • "CRAZIER than ever!" Crazy Taxi: World Tour is officially coming soon by Pulasthi Ariyasinghe Sega announced it is working on bringing back some of its classic franchises in 2023, and while it has taken some time, the company finally gave fans a look at one of these new projects at the Xbox Games Showcase today, which turned out to be a brand-new Crazy Taxi entry. Watch the debut trailer above, which has snippets of gameplay in between the cinematic bits while blasting a track from The Offspring. Dubbed Crazy Taxi World Tour, this installment is aptly being described as being "CRAZIER than ever!" The director behind the original, Kenji Kanno, is helming this new entry as well, which will come with access to five new cities to drive in, competitive multiplayer modes, a vehicle customization system, and more. Axel is returning as a protagonist as well, but this time a mystery driver is offering him the opportunity to take his adventures to the streets in other countries. This will involve Axel chasing down masked villains that have somehow stolen his taxi, which means even more extreme missions and challenges to overcome. "From transporting passengers at top speed to tackling unique side missions and odd jobs across dynamic maps, there are countless ways to drive crazy and rake in big money," says Sega about this new installment after over 20 years. "Perform outrageous drifts, catch insane air, and drive at crazy speeds across five different cities as you work to deliver passengers and complete a variety of missions and challenges." The studio has even confirmed an in-game Arcade Mode that players will be able to access containing the original games for plenty of nostalgic action. Crazy Taxi: World Tour is currently slated to release sometime in 2027 across PC, Xbox Series X|S, PlayStation 5, and Nintendo Switch 2.
    • This and Crazy Taxi are the two games that interested me the most from this showcase.
    • Good, because the nonstop chattering from the voices in her head made me quit the second game.
    • This new cabinet design lets you run AMD, Intel, and Nvidia PCs inside one case by Sayan Sen At Computex 2026 earlier this month, AMD announced a couple of new X3D processors for both sockets AM4 and AM5 as it confirmed the support extension of the latter till 2029. And although Intel didn't unveil any new desktop chips, the company's Core Ultra 200S Plus series is relatively new too. Let's say though that you want the best of both worlds simultaneously, and instead of running two different systems, you can have both running together side-by-side, or rather on top of one another. That's exactly what Thermaltake's CAPO X dual system is made for doing. While it's not exactly mandatory to run AMD with Intel, or vice versa, you get the idea. As you can see in the render above, it is essentially like a double-decker PC case that is capable of holding two microATX (mATX) motherboards. Even running just one discrete graphics card in a PC can get toasty, so you may be wondering how well the cooling is designed on the CAPO X, Thermaltake has confirmed, as is evident from the marketing promo image above, that the case supports up to two 360 mm AIO liquid coolers. 420mm is not supported. In total there is room for 13 120mm case fans. In terms of I/O (input/output) options for the two systems, there are naturally two places for those ports, one at the top and one at the very bottom of the chassis in the front panel. In terms of use cases, there are many possibilities. Thermaltake itself, for example, highlights how one system can be your main PC while the other could be the AI agent PC. Another example given is how it can be used to stream and game simultaneously with dedicated systems instead of hogging one with the entire load. Nothing regarding pricing or availability was said. Source: Thermaltake (YouTube, X)
  • Recent Achievements

    • Proficient
      Eric Biran went up a rank
      Proficient
    • Dedicated
      Conjor earned a badge
      Dedicated
    • Week One Done
      Windows Guy earned a badge
      Week One Done
    • Dedicated
      Mark Spruce earned a badge
      Dedicated
    • Collaborator
      conkir earned a badge
      Collaborator
  • Popular Contributors

    1. 1
      +primortal
      492
    2. 2
      PsYcHoKiLLa
      247
    3. 3
      Steven P.
      72
    4. 4
      +Edouard
      68
    5. 5
      ATLien_0
      67
  • Tell a friend

    Love Neowin? Tell a friend!