Prev: MVPS HOSTS File Update MAR-16-2010
Next: Spyware Blaster Database Update 10|26]2010
From: siljaline on 25 Mar 2010 20:50
Buffalo wrote:
> hXXp://electronics.pricegrabber.com/televisions/c/19/st=category/ was there
> just now.
>
> hXXp://flowers-gifts.pricegrabber.com/st=category/
> was just there when I
> clicked on Flowers and Gifts.

None of those ads flag on my end, let's see what Dave comes back with.
Good chance to ads have been rotated out, as these huge sites change the way
ads load and behave by the minute.

Good luck !

Silj

--
"Arguing with anonymous strangers on the Internet is a sucker's game
because they almost always turn out to be -- or to be indistinguishable from
-- self-righteous sixteen-year-olds possessing infinite amounts of free time."
- Neil Stephenson, _Cryptonomicon_

From: David H. Lipman on 25 Mar 2010 21:11
From: "siljaline" <spam(a)uce.gov>

| Buffalo wrote:
>> It was there several days ago and it was there a couple of hours ago and it
>> is there now, I just checked.

| Can you point to the URL of the offending ad, Buffalo ?

| Obfuscate it, obviously, as in, hXXp://www.google.ca

| Silj


Randy:

It is still ther, on THEIR page.

From INDEX.HTML I grabbed via WGET

http://www.virustotal.com/analisis/70dbfc98603d886ead5c286e11cc693557996d5babe606d8392427d119e6c246-1269558237




--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp


From: Buffalo on 25 Mar 2010 21:19


siljaline wrote:
> Buffalo wrote:
>> hXXp://electronics.pricegrabber.com/televisions/c/19/st=category/
>> was there just now.
>>
>> hXXp://flowers-gifts.pricegrabber.com/st=category/
>> was just there when I
>> clicked on Flowers and Gifts.
>
> None of those ads flag on my end, let's see what Dave comes back with.
> Good chance to ads have been rotated out, as these huge sites change
> the way ads load and behave by the minute.
>
> Good luck !
>
> Silj

Are you using free Avira 9 when viewing those links?
Almost everytime I click on them it gets caught by Avira.
Buffalo
PS: Though, one time when I clicked on it, it was clean.
Tey doing it several times.


From: Buffalo on 25 Mar 2010 21:24


siljaline wrote:
> Buffalo wrote:
>> hXXp://electronics.pricegrabber.com/televisions/c/19/st=category/
>> was there just now.
>>
>> hXXp://flowers-gifts.pricegrabber.com/st=category/
>> was just there when I
>> clicked on Flowers and Gifts.
>
> None of those ads flag on my end, let's see what Dave comes back with.
> Good chance to ads have been rotated out, as these huge sites change
> the way ads load and behave by the minute.
>
> Good luck !
>
> Silj

Well, it may well be rotating as sometimes I don't get alerted.
Good catch.
Buffalo


From: siljaline on 25 Mar 2010 22:36
David H. Lipman wrote:
> It is still ther, on THEIR page.
>
> From INDEX.HTML I grabbed via WGET
>
> http://www.virustotal.com/analisis/70dbfc98603d886ead5c286e11cc693557996d5babe606d8392427d119e6c246-1269558237

Noted, the agnitum .ru .fr. .co.uk index pages were triggering AV heuristics a while ago.

I'm done here.

Silj

--
"Arguing with anonymous strangers on the Internet is a sucker's game
because they almost always turn out to be -- or to be indistinguishable from
-- self-righteous sixteen-year-olds possessing infinite amounts of free time."
- Neil Stephenson, _Cryptonomicon_



First  |  Prev  |  Next  |  Last
Pages: 1 2 3 4
Prev: MVPS HOSTS File Update MAR-16-2010
Next: Spyware Blaster Database Update 10|26]2010