TiVo Community
TiVo Community
TiVo Community
Go Back   TiVo Community > Forum Extras > Forum Operations Center
TiVo Community
Reply
Forum Jump
 
Thread Tools
Old 01-25-2013, 12:50 PM   #1
MikeAndrews
Registered abuser
 
MikeAndrews's Avatar
 
Join Date: Jan 2002
Location: Northern Illinois (Dn Nr WI)
Posts: 12,264
Malware pop up!

I got a pop-up message: "Are you sure you want to navigate away from this page and not chat with girls?" when I clicked on a thread.

This is with Chrome on Mac OS (with Ghostery blocking ads!)

I could come from another tab except it was a click here that triggered the pop up.

Methinks an ad server has some baddies on it.
__________________
1) Series 4 Premiere - Lifetime
2) Series 3 OLED - Lifetime.
2) Series 2 DT 500GB
Mac Mini NAS with 9 7 x 2TB drives.
UVerse and OTA

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
MikeAndrews is offline   Reply With Quote
Old 01-25-2013, 12:52 PM   #2
hbtaylor
Registered User
 
Join Date: Dec 2001
Location: McKinney, TX
Posts: 106
Quote:
Originally Posted by netringer View Post
I got a pop-up message: "Are you sure you want to navigate away from this page and not chat with girls?" when I clicked on a thread.

This is with Chrome on Mac OS (with Ghostery blocking ads!)

I could come from another tab except it was click here that triggered the pop up.

Methinks an ad server has some baddies on it.
I got the same thing. Went away after a refresh, but if it is a bad ad it might re-appear.
hbtaylor is offline   Reply With Quote
Old 01-25-2013, 12:57 PM   #3
CatScratchFever
Guest
 
Join Date: Apr 2011
Location: Prescott AZ
Posts: 886
Check out the girls, you won't be sorry you did!

then let us know what you find!
CatScratchFever is offline   Reply With Quote
Old 01-25-2013, 04:38 PM   #4
JustAllie
Number crunchin'
 
JustAllie's Avatar
 
Join Date: Jan 2002
Location: Arlington, VA
Posts: 32,385
I just saw the same pop-up.
__________________
Sheldon: You know, in difficult moments like this, I often turn to a force greater than myself.
Amy: Religion?
Sheldon: Star Trek.
JustAllie is offline   Reply With Quote
Old 01-25-2013, 05:18 PM   #5
supasta
Registered User
 
supasta's Avatar
 
Join Date: May 2006
Location: Colorado
Posts: 2,938
I got it this morning.
__________________
TiVo Roamio Pro Lifetime ∙ TiVo Mini Lifetime

XBOX LIVE: fiftyfootfang
supasta is offline   Reply With Quote
Old 01-25-2013, 05:43 PM   #6
dthmj
Hinky
 
dthmj's Avatar
 
Join Date: Mar 2002
Posts: 20,581
I got it this morning and this afternoon - I looked this morning for a thread here and there wasn't one - so I started one in HH to see if maybe it was just me...

I turned ads on and saw this ad on the right hand side - could this be it?


Attached Images
File Type: jpg hot girls.jpg (38.5 KB, 242 views)
__________________

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
- Gaming Blog

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
- Personal Blog
dthmj is offline   Reply With Quote
Old 01-25-2013, 05:46 PM   #7
Mike Lang
Super Moderator
 
Mike Lang's Avatar
 
Join Date: Nov 1999
Posts: 5,485
Same as here...

http://www.tivocommunity.com/tivo-vb...d.php?t=498982
Mike Lang is offline   Reply With Quote
Old 01-25-2013, 05:48 PM   #8
dthmj
Hinky
 
dthmj's Avatar
 
Join Date: Mar 2002
Posts: 20,581
Yeah - so much for the "family friendly" forum. Perhaps the site owners should remove that ad stream.
__________________

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
- Gaming Blog

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
- Personal Blog
dthmj is offline   Reply With Quote
Old 01-25-2013, 06:55 PM   #9
pianoman
:-|
 
pianoman's Avatar
 
Join Date: Jun 2002
Location: Metairie, LA
Posts: 3,667
Also just got the same popup. Not happy.
__________________
You inspired me, Pianoman! -- M82A1A
Pianoman, you have inspired me. -- hefe
Pianoman, that's not very inspiring. -- edhara
pianoman is offline   Reply With Quote
Old 01-25-2013, 07:11 PM   #10
Unbeliever
Random Nobody
 
Join Date: Feb 2001
Location: Altadena, CA
Posts: 4,083
I leave adblock plus off here, but use RemoveItPermanently on their subframes so that their frames/elements aren't displayed.

The ads still get fetched, but RIP keeps them from rendering on screen. Unfortunately, because the ads are still fetched, the JS in them still runs and I got the "You're trying to leave this page" JS popup a few times this morning.

Edit: If TCF doesn't screen their ads, I'll turn ABP back on.

--Carlos "Full width/height TCF" V.

Last edited by Unbeliever : 01-25-2013 at 07:18 PM.
Unbeliever is offline   Reply With Quote
Old 01-26-2013, 11:02 AM   #11
justen_m
Registered User
 
justen_m's Avatar
 
Join Date: Jan 2004
Location: Boise Idaho
Posts: 6,554
I haven't seen it either. Maybe because I've used ABP to remove a bunch of the subframes on this site that have advertising.

TCF gods, I DO have the ABP option of "Allow some non-intrusive advertising" enabled. Maybe you could just find some advertising that fits the bill? Like, TEXT ONLY and NO STUPID SEX ADS.
justen_m is offline   Reply With Quote
Old 01-26-2013, 01:18 PM   #12
Gunnyman
Super FunBall
 
Gunnyman's Avatar
 
Join Date: Jul 2003
Location: Greenville SC
Posts: 29,681
I got it just Now on Safari with ad block enabled
__________________
It's a sociological cornucopia of silliness.
Gamertag: GGwallen
Gunnyman is offline   Reply With Quote
Old 01-26-2013, 08:11 PM   #13
Peter Redmer
Administrator
 
Peter Redmer's Avatar
 
Join Date: Jan 2008
Posts: 312
Thanks everyone for the heads up--this is definitely not intended and we'll get rid of it ASAP, although I'm not sure exactly where (or from which server/company) it's coming from.

I'll pop back in once we stomp it out.
__________________
Peter Redmer
Administrator, Capable Networks
Peter Redmer is offline   Reply With Quote
Old 01-26-2013, 08:16 PM   #14
Peter Redmer
Administrator
 
Peter Redmer's Avatar
 
Join Date: Jan 2008
Posts: 312
Also -- please PM me with any URL's that you see loading in your browser. I'm seeing a few in IE on the computer I'm on now (not at home or in office) but anything will be helpful, so we can add them to restriction lists on our ad serving companies and what not.
__________________
Peter Redmer
Administrator, Capable Networks
Peter Redmer is offline   Reply With Quote
Old 01-27-2013, 07:33 AM   #15
unitron
Registered User
 
unitron's Avatar
 
Join Date: Apr 2006
Location: semi-coastal NC
Posts: 13,718
Quote:
Originally Posted by dthmj View Post
I got it this morning and this afternoon - I looked this morning for a thread here and there wasn't one - so I started one in HH to see if maybe it was just me...

I turned ads on and saw this ad on the right hand side - could this be it?

I'm pretty sure I've seen that ad on the right on this site (XP, Firefox, Flashblock on), but I haven't gotten the pop-up.
__________________
(thisismysigfile)


"I am altering the deal. Pray I don't alter it any further."

Darth TiVo, 14 February, 2011
unitron is offline   Reply With Quote
Old 01-27-2013, 01:43 PM   #16
Peter Redmer
Administrator
 
Peter Redmer's Avatar
 
Join Date: Jan 2008
Posts: 312
Ok, yesterday we blocked ads from the advertiser that appears to be running the offending ads. Is anyone still seeing them?

The pop up message is a separate issue which I have been investigating. Is anyone still seeing it with any consistency? I saw it today, but only once, and have not been able to reproduce it (Win8 and Chrome)

If you see it, please take a screengrab and let me know what you did right before it popped up, OS and browser version -- you can send via PM.

Thanks everyone for your help!
__________________
Peter Redmer
Administrator, Capable Networks
Peter Redmer is offline   Reply With Quote
Old 01-27-2013, 01:49 PM   #17
justen_m
Registered User
 
justen_m's Avatar
 
Join Date: Jan 2004
Location: Boise Idaho
Posts: 6,554
Peter, have you tried what I said above about carlsjr.com? I know, it isn't about this site, but I am asking for you expertise about how to fix it.
justen_m is offline   Reply With Quote
Old 01-28-2013, 02:34 AM   #18
RickStrobel
Registered User
 
RickStrobel's Avatar
 
Join Date: Jan 2000
Posts: 9,334
Just got this tonight.

Using Google Chrome Version 24.0.1312.56 m, Windows 7 Utlimate.

Note that I don't do much browsing on this computer. Any browsing was with FF or IE. Just trying out Chrome occasionally. Had been to a few sites prior to visiting, trying to learn about recording Minecraft games with FRAPS and posting to Youtube.

I visit TCF many times per day from many computers. This is the first time in a long time that I've had to log in - because I'm coming from a different browser that I've never visited with before. Glad someone had posted a thread in the Happy Hour or I would have thought my computer had a bug.


RickStrobel is offline   Reply With Quote
Old 01-28-2013, 08:22 AM   #19
jcondon
Registered User
 
Join Date: Jul 2003
Posts: 20,580
Just got the same popup that RickStrobel's attachment shows. Win7 Pro 32bit this time. Win 8 Pro 64-bit home on Friday afternoon.

Chrome browser.
__________________
PSNID - jimbo8574

Last edited by jcondon : 01-28-2013 at 09:05 AM.
jcondon is offline   Reply With Quote
Old 01-28-2013, 11:04 AM   #20
Peter Redmer
Administrator
 
Peter Redmer's Avatar
 
Join Date: Jan 2008
Posts: 312
I found what might be the culprit. In doing some searches, it seems we aren't the only board to be "attacked" with this; it doesn't seem to have anything to do with the ad servers, but we're still looking into it.

Let me know if anyone sees it from here on out within 30 mins or so (to give the changes I made a chance to take.) In the interest of trying to narrow down where this is coming from, I'm not going to change anything else until I know if this fixes it
__________________
Peter Redmer
Administrator, Capable Networks
Peter Redmer is offline   Reply With Quote
Old 01-28-2013, 01:23 PM   #21
waynomo
My One Time
 
waynomo's Avatar
 
Join Date: Nov 2002
Location: Fairfax, VA
Posts: 6,126
I just got it for the first time. Call it 1:15 PM EST.

Don't know if this matters, but Chrome was restarted last night with TCF thread in one tab. And this was my first time doing anything on the forums since the restart. (I hit the "New Posts" tab.)
waynomo is online now   Reply With Quote
Old 01-29-2013, 01:19 PM   #22
Peter Redmer
Administrator
 
Peter Redmer's Avatar
 
Join Date: Jan 2008
Posts: 312
FYI for everyone -- we've added some filters with our ad providers that weren't previously available (or that were not enabled for some reason) to help prevent "sensitive" ads from appearing. That should help or eliminate the problems with the banner ads also mentioned in this thread, and may be connected to the popup.

If anyone sees the popup from here on out, please let me know via PM with the details of your browser/system.

@Waynomo - not sure if the state of the browser had anything to do with it; e.g., maybe it had an old cached page. I'm still not 100% certain of the origin of the popup though, so hard to say. Information from anyone who sees it, if it shows up again, will be helpful in sniffing it out.
__________________
Peter Redmer
Administrator, Capable Networks
Peter Redmer is offline   Reply With Quote
Old 01-29-2013, 01:44 PM   #23
timckelley
TCFer
 
timckelley's Avatar
 
Join Date: Oct 2002
Location: Austin, TX
Posts: 25,764
I cry shenanigans and false advertising. We were promised hot girls. Where are they?
__________________

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
- Tracy

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
- slydog75

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
- Bryanmc
timckelley is offline   Reply With Quote
Old 01-29-2013, 02:02 PM   #24
MikeAndrews
Registered abuser
 
MikeAndrews's Avatar
 
Join Date: Jan 2002
Location: Northern Illinois (Dn Nr WI)
Posts: 12,264
If I ever see the pop-up again I'll try to view source on it.
__________________
1) Series 4 Premiere - Lifetime
2) Series 3 OLED - Lifetime.
2) Series 2 DT 500GB
Mac Mini NAS with 9 7 x 2TB drives.
UVerse and OTA

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
MikeAndrews is offline   Reply With Quote
Reply
Forum Jump




Thread Tools


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Advertisements

TiVo Community
Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
vBulletin Skins by: Relivo Media

(C) 2013 Magenium Solutions - All Rights Reserved. No information may be posted elsewhere without written permission.
TiVoŽ is a registered trademark of TiVo Inc. This site is not owned or operated by TiVo Inc.
All times are GMT -5. The time now is 11:26 AM.
OUR NETWORK: MyOpenRouter | TechLore | SansaCommunity | RoboCommunity | MediaSmart Home | Explore3DTV | Dijit Community | DVR Playground |