NFOrce.nl infected with Exploit.HTML.Mht?
Page 1 of 1
tycho55




Posts: 43

PostPosted: Fri, 14th Oct 2005 18:43    Post subject: NFOrce.nl infected with Exploit.HTML.Mht?
Has anyone else noticed recently that the NFOrce.nl main page is resulting in Exploit.HTML.Mht warnings? I run the latest definitions in Kaspersky Anti-Virus, and occasionally, and ONLY on NFOrce.nl, do I get warnings regarding Exploit.HTML.Mht. Can anyone else confirm? Thanks!
Back to top
[mrt]
[Admin] Code Monkey



Posts: 1342

PostPosted: Sat, 15th Oct 2005 11:28    Post subject:
Hmm...Its certainly not ourselfs. We'll check out the pages we link to. Someone's gonna lose a pinky if thats true, bah!


teey
Back to top
TheGame110011001
Banned



Posts: 3004
Location: HEHE
PostPosted: Sat, 15th Oct 2005 12:07    Post subject:
prolly those gay advertisers! nothing nforce can do about it....


Back to top
TheSaint
Dalai Lama



Posts: 6586
Location: Cook Islands
PostPosted: Sat, 15th Oct 2005 12:41    Post subject:
CRA$HH110011001 wrote:
prolly those gay advertisers! nothing nforce can do about it....


Thanks for the input.. Embarassed But it think mrt will find out what it is..
Back to top
TheGame110011001
Banned



Posts: 3004
Location: HEHE
PostPosted: Sat, 15th Oct 2005 12:43    Post subject:
TheSaint wrote:
CRA$HH110011001 wrote:
prolly those gay advertisers! nothing nforce can do about it....


Thanks for the input.. Embarassed But it think mrt will find out what it is..


trust me... I had the same problem with my website... the nice ads had some spyware/mallware in it... after I deleted it and replaced it with google ads evrything whas fine again Cool


Back to top
tycho55




Posts: 43

PostPosted: Sat, 15th Oct 2005 12:54    Post subject:
I appreciate it, mrt!
Back to top
SycoShaman
VIP Master Jedi



Posts: 24468
Location: Toronto, Canada
PostPosted: Sun, 16th Oct 2005 04:30    Post subject:
@Mr.T

its true dude...since Ive allowed Nforce popups through my browser, Ive gotten enough spyware/adware from the site ads. At first i didnt know where it was coming from, so what i did is changed my homepage to nforce, closed IE, cleaned all temp files, cookies, caches, virus's, spyware/adware etc then I loaded IE (directly to this site), let the site load and closed the browser...then I ran Adaware Pro 1.6 (the newest version, whatever that may be) and it found a few spyware apps
Alot of adds do that nowadays. Maybe u should put that in ur promoting clause - no spyware/adware infected ads


Back to top
[mrt]
[Admin] Code Monkey



Posts: 1342

PostPosted: Sun, 16th Oct 2005 11:04    Post subject:
We found the mole, TSX took care of it. We werent aware of any popups or malware, some ad's are region specific. We're sorry for any inconviniances.

If you get any kind of popups or forced downloads, let us know immediately along with the source URL of the ad (on the main page) and a screenshot (of the mainpage where the original ad is) of it aswell. We are strictly against that kind of advertising and well, some start to abuse it unfortunatley. So any help is much appreciated Smile


teey
Back to top
Kondor




Posts: 228
Location: Here
PostPosted: Mon, 17th Oct 2005 07:46    Post subject:
Well, I am glad that you guys are still anti-popup... Then I can mention that you have a few popups that are starting to get on my nerves. Two come to mind right of the top, "TagWorld" (http://www.tagworld.com/guest/World/SignUpshort.aspx) and some anti spyware popup that keeps trying to force you into scanning your system (are you sure?, are you really sure?)... Sad
Back to top
[mrt]
[Admin] Code Monkey



Posts: 1342

PostPosted: Thu, 20th Oct 2005 14:16    Post subject:
Please, i repeat, when you get jumped by a popup also take a screenshot of the main page and the source URL of the banner! (specifically the top-right banner thats showing on the main page and it's source URL). Then either post here or PM me.

Thanks! Smile


teey
Back to top
tycho55




Posts: 43

PostPosted: Fri, 21st Oct 2005 05:58    Post subject:
Thanks, mrt! The Exploit warnings have gone away, but I still get these pop-overs when I visit the site after clearing my cookies. Here's a screenshot, with the URL of the pop-over window when I right click on the white background and select Properties. If there's anything else you need, please don't hesitate to ask. I'm happy to help!

http://home.cfl.rr.com/tycho40/1.jpg
Back to top
tycho55




Posts: 43

PostPosted: Fri, 21st Oct 2005 21:16    Post subject:
Here's another one. This time, I've included the HTML source code of the pop-over window.

http://home.cfl.rr.com/tycho40/2.jpg
http://home.cfl.rr.com/tycho40/2.txt (Just click View Source)
Back to top
SycoShaman
VIP Master Jedi



Posts: 24468
Location: Toronto, Canada
PostPosted: Fri, 21st Oct 2005 22:22    Post subject:
tycho55 wrote:
Here's another one. This time, I've included the HTML source code of the pop-over window.

http://home.cfl.rr.com/tycho40/2.jpg
http://home.cfl.rr.com/tycho40/2.txt (Just click View Source)


aye, that one's a pain in the fuckin ass...leaves a tracker behind on ur sys...easily catchable with LavaSoft's product.


Back to top
Kondor




Posts: 228
Location: Here
PostPosted: Mon, 24th Oct 2005 05:14    Post subject:
Yup, I've seen both of those lately as well Sad
Back to top
PostPosted: Tue, 25th Oct 2005 12:01    Post subject:
Hello guys,

I have spoken with the guys who deliver the ads. One of their advertisers in the US has a bunch of banners that bring a popup with them (all the sudden). They dropped some of their clients already and will continue to hunt down all the popup displayers.

If in a week from now you still get popups let us know.
Back to top
SycoShaman
VIP Master Jedi



Posts: 24468
Location: Toronto, Canada
PostPosted: Tue, 25th Oct 2005 13:01    Post subject:
peerke wrote:
Hello guys,

I have spoken with the guys who deliver the ads. One of their advertisers in the US has a bunch of banners that bring a popup with them (all the sudden). They dropped some of their clients already and will continue to hunt down all the popup displayers.

If in a week from now you still get popups let us know.


Nice man Very Happy
Thanks alot and the work/effor is appreciated, for sure Very Happy


Back to top
Kondor




Posts: 228
Location: Here
PostPosted: Tue, 25th Oct 2005 23:54    Post subject:
Yes, very greatly apreciated... Smile
Back to top
[sYn]
[Moderator] Elitist



Posts: 8374

PostPosted: Wed, 26th Oct 2005 00:55    Post subject:
peerke wrote:
Hello guys,

I have spoken with the guys who deliver the ads. One of their advertisers in the US has a bunch of banners that bring a popup with them (all the sudden). They dropped some of their clients already and will continue to hunt down all the popup displayers.

If in a week from now you still get popups let us know.


Good work dude Smile
Back to top
nouseforaname
Über-VIP Member



Posts: 21306
Location: Toronto, Canada
PostPosted: Wed, 26th Oct 2005 02:10    Post subject:
Hey, if you use firefox ... this might help stopping some of the popups:

Quote:
It turns out that some clever people figured out that you could launch popups from Flash, getting around the Firefox default settings.

Fortunately, you can get around it:

1. Type about:config into the Firefox location bar.
2. Right-click on the page and select New and then Integer.
3. Name it privacy.popups.disable_from_plugins
4. Set the value to 2.

The possible values are:

* 0: Allow all popups from plugins.
* 1: Allow popups, but limit them to dom.popup_maximum.
* 2: Block popups from plugins.
* 3: Block popups from plugins, even on whitelisted sites.


asus z170-A || core i5-6600K || geforce gtx 970 4gb || 16gb ddr4 ram || win10 || 1080p led samsung 27"
Back to top
Page 1 of 1 All times are GMT + 1 Hour
NFOHump.com Forum Index - Site Feedback
Signature/Avatar nuking: none (can be changed in your profile)  


Display posts from previous:   

Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB 2.0.8 © 2001, 2002 phpBB Group