Page 1 of 2 12 LastLast
Results 1 to 15 of 19
  1. #1
    Ueee's Avatar
    Ueee is offline Blacksmith, Cabinetmaker, Machinist, Messmaker
    Join Date
    Dec 2011
    Location
    Canberra
    Age
    39
    Posts
    4,515

    Default Advertising Popups

    Hi,
    I have had a problem over the last few days with an advertising popup coming up when i click on something on the forum, it could be to open a thread, when i hit reply or any other click. I thought it may have been my PC but it happened on my android device this morning. Its not just the add shown below, but for lots of different things, i got a ucalaly site this morning.....
    I have not had it happen from any other site.
    Any one else or have i just managed to get the same spyware on my pc and phone?

    Cheers,
    Ew
    Attached Images Attached Images
    1915 17"x50" LeBlond heavy duty Lathe, 24" Queen city shaper, 1970's G Vernier FV.3.TO Universal Mill, 1958 Blohm HFS 6 surface grinder, 1942 Rivett 715 Lathe, 14"x40" Antrac Lathe, Startrite H225 Bandsaw, 1949 Hercus Camelback Drill press, 1947 Holbrook C10 Lathe.

  2. #2
    Join Date
    Apr 2011
    Location
    Dandenong, Vic
    Posts
    59

    Default

    Get avg free from here unless you already have a virus checker that is up to date.
    https://www.avg.com.au/products/avg-...FUFepQod6wEAQA

    Get malware antibytes from here
    Malwarebytes : Solve your malware problems with our help

    Get spybot from here
    Download Spybot | Spybot ©

    They are all free and you only need the free one, When you install they may prompt you to take the pro version free for a month and some ask to install the google toolbar or ask toolbar. turn all those off,
    If you run all 3 programs one after the other, And it may take a few runs thru, it should get rid of it.

    Looks like you have been hijacked.
    And under no conditions click on that add that wants to fix the virus. No web page should be able to detect if your local machine has a virus.
    This one puts a virus onto your machine, then asks you to pay money to have it removed.

    Good luck

  3. #3
    Join Date
    May 1999
    Location
    Tooradin,Victoria,Australia
    Age
    73
    Posts
    5,457

    Default

    I might add that it is on your computer, not generated by the forums.

  4. #4
    Join Date
    Jan 2010
    Location
    Bundoora, Melbourne.
    Posts
    212

    Default

    Quote Originally Posted by _fly_ View Post
    Get avg free from here unless you already have a virus checker that is up to date.
    https://www.avg.com.au/products/avg-...FUFepQod6wEAQA

    Get malware antibytes from here
    Malwarebytes : Solve your malware problems with our help

    Get spybot from here
    Download Spybot | Spybot ©
    Wow, all that? Just get a Mac
    -Scott

  5. #5
    Ueee's Avatar
    Ueee is offline Blacksmith, Cabinetmaker, Machinist, Messmaker
    Join Date
    Dec 2011
    Location
    Canberra
    Age
    39
    Posts
    4,515

    Default

    Well maybe I should have been more clear.....
    I have run every malware, spyware and antivirus I use, plus I sit behind 2 firewalls. I would not have posted if I was not 99% sure my system was clean.

    I'm not sure what tone robbo was meant to come across with, but it does not come across well to me, bit then he never has I guess.

    Fly, thanks for the suggestions, they may help others, but as I said above all that has been done.

    Scott, I don't like being in a jail, no matter how nice it looks inside.....
    1915 17"x50" LeBlond heavy duty Lathe, 24" Queen city shaper, 1970's G Vernier FV.3.TO Universal Mill, 1958 Blohm HFS 6 surface grinder, 1942 Rivett 715 Lathe, 14"x40" Antrac Lathe, Startrite H225 Bandsaw, 1949 Hercus Camelback Drill press, 1947 Holbrook C10 Lathe.

  6. #6
    Ueee's Avatar
    Ueee is offline Blacksmith, Cabinetmaker, Machinist, Messmaker
    Join Date
    Dec 2011
    Location
    Canberra
    Age
    39
    Posts
    4,515

    Default

    Sorry if that come across a bit rough Fly, Thanks for the suggestions.

    Since i posted this this morning i have not had one instance of the problem.....

    Ew
    1915 17"x50" LeBlond heavy duty Lathe, 24" Queen city shaper, 1970's G Vernier FV.3.TO Universal Mill, 1958 Blohm HFS 6 surface grinder, 1942 Rivett 715 Lathe, 14"x40" Antrac Lathe, Startrite H225 Bandsaw, 1949 Hercus Camelback Drill press, 1947 Holbrook C10 Lathe.

  7. #7
    Join Date
    Apr 2011
    Location
    Dandenong, Vic
    Posts
    59

    Default

    no troubles,

    Only other thing I can suggest is are your checkers up to date.

    And if your confident try "hijack this" Download HijackThis 2.0.4 - FileHippo.com

    then disable all the addons that are loaded in your browser.

  8. #8
    Join Date
    May 1999
    Location
    Tooradin,Victoria,Australia
    Age
    73
    Posts
    5,457

    Default

    I was just eliminating one cause.

  9. #9
    Join Date
    May 1999
    Location
    Grovedale (Geelong) Victoria
    Age
    74
    Posts
    6,487

    Default

    Quote Originally Posted by Ueee
    I'm not sure what tone robbo was meant to come across with, but it does not come across well to me, bit then he never has I guess.
    Robbo's a very busy, as am I and many of the moderators. Sometimes all that's required is a short honest response. Which is what you got. It was on your computer not the forums

    There is no way that popup (or any others you may have seen) came from these forums, they are as clean as a whistle. They could only have been generated from your end. Your computer and your phone. All you have to do is synchronise your phone with your computer, download a file from one to the other or visit the wrong place on both and hey presto synchronised spy-ware or similar.

    Have you had any more instances of these problems since Monday morning?

    I have seen instances of this type before and they always come from the members end not the forums. You have had some really good suggestions here and they should fix the problem if it persists. Not every protection program does what it's supposed to do and sometimes the nasty will get through.

    Cheers - Neil

  10. #10
    Ueee's Avatar
    Ueee is offline Blacksmith, Cabinetmaker, Machinist, Messmaker
    Join Date
    Dec 2011
    Location
    Canberra
    Age
    39
    Posts
    4,515

    Default

    Hi Neil

    I was referring to every time i have had replies to something from Robbo, be it mod related or general forum stuff. Even you have time to say Cheers....

    I know you all do a big job, that was never at question.

    I don't sync my phone with this PC......i don't even charge it off this PC

    The first instance of this since monday has just happened now, its telling me i can earn up to 600 p/w! Wow, what have i been doing wrong

    I try very hard to keep this PC clean, like i said above, 2 firewalls, Trend, Spybot, Malwarebytes.......I would say its as clean as a whistle....seems odd that the only website this is happening with is WWF. Any ideas on that?

    Cheers,
    Ew
    1915 17"x50" LeBlond heavy duty Lathe, 24" Queen city shaper, 1970's G Vernier FV.3.TO Universal Mill, 1958 Blohm HFS 6 surface grinder, 1942 Rivett 715 Lathe, 14"x40" Antrac Lathe, Startrite H225 Bandsaw, 1949 Hercus Camelback Drill press, 1947 Holbrook C10 Lathe.

  11. #11
    Ueee's Avatar
    Ueee is offline Blacksmith, Cabinetmaker, Machinist, Messmaker
    Join Date
    Dec 2011
    Location
    Canberra
    Age
    39
    Posts
    4,515

    Default

    Ok.... you have a script running from the site called yiedmanager.com This script is running the popups, and as i have Noscript allowing this it is not stopping the popup. Why is it allowed....not sure but at some stage i must have allowed it to get a site to run properly. This is the page source that the script runs.

    "http://ad.yieldmanager.com/st?ad_type=pop&ad_size=0x0&section=4828138&banned_pop_types=23&pop_times=1&pop_frequency=0"
    And its $600 per day

    Ew
    1915 17"x50" LeBlond heavy duty Lathe, 24" Queen city shaper, 1970's G Vernier FV.3.TO Universal Mill, 1958 Blohm HFS 6 surface grinder, 1942 Rivett 715 Lathe, 14"x40" Antrac Lathe, Startrite H225 Bandsaw, 1949 Hercus Camelback Drill press, 1947 Holbrook C10 Lathe.

  12. #12
    Ueee's Avatar
    Ueee is offline Blacksmith, Cabinetmaker, Machinist, Messmaker
    Join Date
    Dec 2011
    Location
    Canberra
    Age
    39
    Posts
    4,515

    Default

    Turns out not only is ad.yieldmanager a genuine advertising thing, it is used by spammers to do exactly what has happened to me. There are many walk throughs on how to get the malware off your PC once you get it......Only one problem, i don't have it. And I got a popup this morning after wiping my browsers clean with ccleaner, all cookies gone, history etc. I open firefox, go to WWF and the first thing i click on here is a popup.
    Malwarebytes has the latest update and it knows the malware and will remove it. I have searched through my registry and there is no sign of it. And again there is only one website it is happening with.

    Do you use yieldmanager for any of the advertising on the site?

    Ew
    1915 17"x50" LeBlond heavy duty Lathe, 24" Queen city shaper, 1970's G Vernier FV.3.TO Universal Mill, 1958 Blohm HFS 6 surface grinder, 1942 Rivett 715 Lathe, 14"x40" Antrac Lathe, Startrite H225 Bandsaw, 1949 Hercus Camelback Drill press, 1947 Holbrook C10 Lathe.

  13. #13
    Join Date
    May 1999
    Location
    Grovedale (Geelong) Victoria
    Age
    74
    Posts
    6,487

    Default

    G'day Ueee - We do not use yieldmanager or any other sort of viral, spam, or malware, etc on these forums. It will be coming from your end somewhere. As I said these forums are squeaky clean and rated as such.

    Below are results from Norton Safe Search

    Norton Rating

    Norton Safe Web has analyzed woodworkforums.com for safety and security problems.

    Summary
    Norton Safe Web found no issues with this site.


    • Computer Threats: 0
    • Identity Threats: 0
    • Annoyance factors: 0


    Total threats on this site: 0
    The Norton rating is a result of Symantec's automated analysis system.

    Pretty sure you will eventually find the problem somewhere on your device(s). Won't be the first time or the last that this has happened and it always goes back to the users computer, not the forums.

    If it were the forums there would be hundreds of people reporting the same problem(s).

    _______________________________________________________


    For the information of all.


    • The ads on these forums are either vetted by Google for their ads and by me for the side column ads which are a pure link back to the sponsors site and nothing more.
    • There is no html code allowed in the forums other than that used by Admin for notices, so no malware or viruses, etc can be placed into threads, posts or blogs.


    If anyone has a problem with popups or any other advertising it will almost definitely be at their end and not here.

    In the last 12 mths we have denied registration to over 206,400 known spammers. We are under constant attack from these scumbags. Occasionally the odd one gets through and puts spam on the forum which is almost always deleted within minutes. Once every blue moon one gets through and sends out a couple of emails which could have malware in them but even then they can only send out one or two before they are caught and banned. A further 2000+ have been automatically reported to authorities or banned and another 6473 spam posts have been automatically dealt with. To top this lot off the Moderators ban up to another 10 spammers per day and edit many more spammy posts.

    These forums are clean and to the best of our ability the members are protected better than almost any other forum in the world.

    Hope this clears up any misgivings that anyone might have about popups, spam, etc on these forums..

    Cheers - Neil

  14. #14
    Join Date
    May 1999
    Location
    Grovedale (Geelong) Victoria
    Age
    74
    Posts
    6,487

    Default

    Bit of information for anyone who thinks they may be infected with adyieldmanagercom

    adyieldmanagercom is difficult to detect and remove. adyieldmanagercom is not likely to be removed through a convenient "uninstall" feature. adyieldmanagercom, as well as other spyware, can re-install itself even after it appears to have been removed.

    You also run the risk of damaging your computer since you're required to find and delete sensitive files in your system such as DLL files and registry keys. It is recommended you use a good spyware remover to remove adyieldmanagercom and other spyware, adware, trojans and viruses on your computer.

    Run a adyieldmanagercom scan/check to successfully detect all adyieldmanagercom files with the SpyHunter Spyware Detection Tool. If you wish to remove adyieldmanagercom, you can either purchase the SpyHunter spyware removal tool to remove adyieldmanagercom or follow the adyieldmanagercom manual removal method provided in the "Remedies and Prevention" section.


    Method of Infection

    There are many ways your computer could get infected with adyieldmanagercom. adyieldmanagercom can come bundled with shareware or other downloadable software.
    Another method of distributing adyieldmanagercom involves tricking you by displaying deceptive pop-up ads that may appear as regular Windows notifications with links which look like buttons reading Yes and No. No matter which "button" that you click on, a download starts, installing adyieldmanagercom on your system. adyieldmanagercom installs on your computer through a trojan and may infect your system without your knowledge or consent.
    If you think you may already be infected with adyieldmanagercom, use this SpyHunter Spyware dectection tool to detect adyieldmanagercom and other common Spyware infections. After detection of adyieldmanagercom, the next advised step is to remove adyieldmanagercom with the purchase of the SpyHunter Spyware removal tool.



    Symptoms

    adyieldmanagercom may attempt to change your computer's desktop, hijack your browser, monitor your Internet browsing activities, change system files, and can do this without your knowledge or permission. Therefore, it is strongly recommended to remove all traces of adyieldmanagercom from your computer.


    Remedies and Prevention

    adyieldmanagercom, as well as other Spyware, are constantly evolving and becoming more advanced to avoid detection. adyieldmanagercom along with its variants can install in different locations and even when you try to uninstall it you find they reappear when you reboot your computer.

    SpyHunter Spyware dectection tool may not run on Internet Explorer so you may need to use a different browser like Firefox or Chrome.

    Neil

  15. #15
    Ueee's Avatar
    Ueee is offline Blacksmith, Cabinetmaker, Machinist, Messmaker
    Join Date
    Dec 2011
    Location
    Canberra
    Age
    39
    Posts
    4,515

    Default

    do not download spyhunter. Don't do it....not till I work out what it has done to k pc.
    1915 17"x50" LeBlond heavy duty Lathe, 24" Queen city shaper, 1970's G Vernier FV.3.TO Universal Mill, 1958 Blohm HFS 6 surface grinder, 1942 Rivett 715 Lathe, 14"x40" Antrac Lathe, Startrite H225 Bandsaw, 1949 Hercus Camelback Drill press, 1947 Holbrook C10 Lathe.

Page 1 of 2 12 LastLast

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •