Jump to content

Invasive, non-cancelable javascript virus scan pops up automatically


john_wilson10

Recommended Posts

I'm getting a bogus javascript dialog box when I view this page:

http://www.photo.net/bboard/q-and-a-fetch-msg?msg_id=00Ov1V&unified_p=1

 

I'm assuming it's from an ad. It looks like a Javascript alert box and

says "NOTICE: If your computer has been running slower than normal, it may be

stored with Adwares, Spywares or Malwares. AntiSpywareDeluxe can perform a

quick and completely FREE scan of your system for malicious software. Download

AntiSpywareDeluxe FREE now!" If I click cancel, it pops up a CSS frame over

top of the photo.net page, and starts either scanning or pretending to scan a

mess of DLLs on my system. If I click back, I get the pop up dialog box

again. Same thing happens if I close the alert box without clicking cancel.

Again, I hit the back button and the CSS frame pops up over the page (I can

only see this because of the resolution I'm running on my monitor.) I have not

clicked "yes" to download, but I can't quit Internet Explorer without clicking

yes.

Link to comment
Share on other sites

I was able to make it happen on Windows IE. But not on my Mac with Firefox. I have the ad people chasing the issue down.

 

Oddly enough, I haven't seen the adserver loading problems this morning myself. At least not the ones where the adserver causes the page to not load.

Link to comment
Share on other sites

The ad gurus are tracking this down, it was as much of a surprise to them as it was to all of us. Thanks to everyone who brought it to our attention.

 

Also, I do highly suggest that everyone give their machines a run through Adaware and Spybot to make sure that nothing more than annoyance was passed along.

Link to comment
Share on other sites

Not seeing this particular problem on my PC.

 

PIII running WinME.

 

Firefox 2.0.0.12

 

No problems running an IE tab within Firefox or IE ver. 6x either.

 

I might be running some blocking or spyware/malware utility in the background that I've forgotten about but when I disable the utilities I'm aware of I'm still not seeing this particular problem.

Link to comment
Share on other sites

Josh,

If you read the Wired article linked above, you are in good company .. meaning many major sites have had this issue. It is hard to detect because

"The malware is apparently being disguised as a Flash file that has a redirect function encrypted in the file, so that when publishers upload the ad file the malware is not detectable. Once deployed on a site, the Flash file launches the malicious redirects, perhaps triggered at certain times or in certain locations."

 

good luck nailing it

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...