I'm seeing a new kind of ad.

reply to post by SkepticOverlord


I think I found the source of the problem. I believe that one of the ads we saw either on this site or another had implemented malware to our computer. Today, while viewing my email through yahoo, I was redirected to another page, with the same layout as the ones I experienced by being redirected to this site (with the "please click here to go back" timer on top of the page).

My solution to anyone still having this problem is to run spybot S&D or lavasoft ad-aware to delete them from your computer. My computer received the spyware file, while using firefox.

[edit on 19-7-2008 by DJMessiah]

Originally posted by DJMessiah
reply to post by SkepticOverlord

 

I experienced by being redirected to this site (with the "please click here to go back" timer on top of the page).
]

Traced to "Peer 1 Network Inc." whatever that is

Peer1 is simply a hosting service. I'm using Firefox and I was still getting the pop-ups last night after checking Yahoo mail and earlier in the day after visiting TitanTV. Suspecting an infection, I ran tools but Spybot, AdAware, VundoFix, Windows malicious software removal tool, a visit to Trend Housecall, RootKitRevealer, reviewed firewall logs, nor AVG antivirus found anything. I can only surmise it's either hiding very well or it's just being triggered by advertising on a page..

This started for me this past week with the Sears and Snickers ads moving on to others and most recently the blueapplreresearch smoking poll.

Registrant:
Top Notch Media, Inc
1735 Market St. Suite A
PMB 416
Philadelphia, PA 19103
US

Domain Name: BLUEAPPLERESEARCH.COM

Administrative Contact, Technical Contact:
Top Notch Media, Inc [email protected]
1735 Market St. Suite A
PMB 416
Philadelphia, PA 19103
US
800-620-3774

Record expires on 13-May-2009.
Record created on 13-May-2008.

Here's another source for those BlueApple redirectors:

http://72.51.37.167/n31892405l/h.html

http://afe.specificclick.net/?l=1088453805&sz=728x90&wr=j&t=j&u=http%3A//adserver.
abovetopsecret.com/728_b.php&r=http%3A//www.abovetopsecret.com/forum/myats.php

Date: Sun, 20 Jul 2008 15:17:31 GMT
http://adserver.abovetopsecret.com/adlog.php?bannerid=4&clientid=8&zoneid=32&source=&
block=0&capping=10&cb=7ed1ec561a1b3dc2b83dc7373add0aa3

[edit on 20-7-2008 by Ian McLean]

I just got my first one. grabbed a quick screen cap...

img247.imageshack.us...

[edit on 20-7-2008 by baked]

Originally posted by baked
img247.imageshack.us...

That one appears to be launching from a different URL than ATS, judging by the URL in the bottom status bar.

reply to post by silverking


I do not use IE. It is waaay too easy to hijack. Within minutes of using it, I am whisked off on a whirlwind tour of porn sites. Same thing with windows messenger. Nonstop solicitation from prostitutes.


[edit on 7-20-2008 by groingrinder]

I clicked on this thread and ended up here. I use the latest version of Firefox.

The problem is ongoing.

[edit on 7/20/08 by Sleuth]

Originally posted by SkepticOverlord

Originally posted by baked
img247.imageshack.us...

That one appears to be launching from a different URL than ATS, judging by the URL in the bottom status bar.

nah, I had my cursor over the high times link at the top of my browser when I capped it.

Originally posted by Sleuth
The problem is ongoing.

The problem looks to be a rouge advertiser running a 728x90... I've alerted the ad provider (we're not supposed to get these types of ads from them), and have disabled all 728x90 ads from them until the issue is corrected.

Originally posted by SkepticOverlord
The problem looks to be a rouge advertiser running a 728x90... I've alerted the ad provider (we're not supposed to get these types of ads from them), and have disabled all 728x90 ads from them until the issue is corrected.

SO, thanks for the help. Those dang rogue advertisers!