Advertising Popups

[Ueee]

Hi,
I have had a problem over the last few days with an advertising popup coming up when i click on something on the forum, it could be to open a thread, when i hit reply or any other click. I thought it may have been my PC but it happened on my android device this morning. Its not just the add shown below, but for lots of different things, i got a ucalaly site this morning.....
I have not had it happen from any other site.
Any one else or have i just managed to get the same spyware on my pc and phone?

Cheers,
Ew

[_fly_]

Get avg free from here unless you already have a virus checker that is up to date.
https://www.avg.com.au/products/avg-anti-virus-free/?gclid=CMmT3a-7iLkCFUFepQod6wEAQA

Get malware antibytes from here
Malwarebytes : Solve your malware problems with our help (http://www.malwarebytes.org/products/)

Get spybot from here
Download Spybot | Spybot © (http://www.safer-networking.org/dl/)

They are all free and you only need the free one, When you install they may prompt you to take the pro version free for a month and some ask to install the google toolbar or ask toolbar. turn all those off,
If you run all 3 programs one after the other, And it may take a few runs thru, it should get rid of it.

Looks like you have been hijacked.
And under no conditions click on that add that wants to fix the virus. No web page should be able to detect if your local machine has a virus.
This one puts a virus onto your machine, then asks you to pay money to have it removed.

Good luck

[RETIRED]

I might add that it is on your computer, not generated by the forums.

[Scott]

Get avg free from here unless you already have a virus checker that is up to date.
https://www.avg.com.au/products/avg-...FUFepQod6wEAQA (https://www.avg.com.au/products/avg-anti-virus-free/?gclid=CMmT3a-7iLkCFUFepQod6wEAQA)

Get malware antibytes from here
Malwarebytes : Solve your malware problems with our help (http://www.malwarebytes.org/products/)

Get spybot from here
Download Spybot | Spybot © (http://www.safer-networking.org/dl/)


Wow, all that? Just get a Mac :D

[Ueee]

Well maybe I should have been more clear.....
I have run every malware, spyware and antivirus I use, plus I sit behind 2 firewalls. I would not have posted if I was not 99% sure my system was clean.

I'm not sure what tone was meant to come across with, but it does not come across well to me, bit then he never has I guess.

Fly, thanks for the suggestions, they may help others, but as I said above all that has been done.

Scott, I don't like being in a jail, no matter how nice it looks inside.....

[Ueee]

Sorry if that come across a bit rough Fly, Thanks for the suggestions.

Since i posted this this morning i have not had one instance of the problem.....

Ew

[_fly_]

no troubles,

Only other thing I can suggest is are your checkers up to date.

And if your confident try "hijack this" Download HijackThis 2.0.4 - FileHippo.com (http://www.filehippo.com/download_hijackthis/)

then disable all the addons that are loaded in your browser.

[RETIRED]

I was just eliminating one cause.:D

[ubeaut]

I'm not sure what tone was meant to come across with, but it does not come across well to me, bit then he never has I guess.

's a very busy, as am I and many of the moderators. Sometimes all that's required is a short honest response. Which is what you got. It was on your computer not the forums

There is no way that popup (or any others you may have seen) came from these forums, they are as clean as a whistle. They could only have been generated from your end. Your computer and your phone. All you have to do is synchronise your phone with your computer, download a file from one to the other or visit the wrong place on both and hey presto synchronised spy-ware or similar.

Have you had any more instances of these problems since Monday morning?

I have seen instances of this type before and they always come from the members end not the forums. You have had some really good suggestions here and they should fix the problem if it persists. Not every protection program does what it's supposed to do and sometimes the nasty will get through.

Cheers - Neil :U

[Ueee]

Hi Neil

I was referring to every time i have had replies to something from , be it mod related or general forum stuff. Even you have time to say Cheers....

I know you all do a big job, that was never at question.

I don't sync my phone with this PC......i don't even charge it off this PC

The first instance of this since monday has just happened now, its telling me i can earn up to 600 p/w! Wow, what have i been doing wrong:D

I try very hard to keep this PC clean, like i said above, 2 firewalls, Trend, Spybot, Malwarebytes.......I would say its as clean as a whistle....seems odd that the only website this is happening with is WWF. Any ideas on that?

Cheers,
Ew

[Ueee]

Ok.... you have a script running from the site called yiedmanager.com This script is running the popups, and as i have Noscript allowing this it is not stopping the popup. Why is it allowed....not sure but at some stage i must have allowed it to get a site to run properly. This is the page source that the script runs.

"http://ad.yieldmanager.com/st?ad_type=pop&ad_size=0x0&section=4828138&banned_pop_types=23&pop_times=1&pop_frequency=0"
And its $600 per day:doh::D

Ew

[Ueee]

Turns out not only is ad.yieldmanager a genuine advertising thing, it is used by spammers to do exactly what has happened to me. There are many walk throughs on how to get the malware off your PC once you get it......Only one problem, i don't have it. And I got a popup this morning after wiping my browsers clean with ccleaner, all cookies gone, history etc. I open firefox, go to WWF and the first thing i click on here is a popup.
Malwarebytes has the latest update and it knows the malware and will remove it. I have searched through my registry and there is no sign of it. And again there is only one website it is happening with.

Do you use yieldmanager for any of the advertising on the site?

Ew

[ubeaut]

G'day Ueee - We do not use yieldmanager or any other sort of viral, spam, or malware, etc on these forums. It will be coming from your end somewhere. As I said these forums are squeaky clean and rated as such.

Below are results from Norton Safe Search

Norton Rating
Norton Safe Web has analyzed woodworkforums.com for safety and security problems.

Summary
Norton Safe Web found no issues with this site.



Computer Threats: 0
Identity Threats: 0
Annoyance factors: 0


Total threats on this site: 0
The Norton rating is a result of Symantec's automated analysis system.

Pretty sure you will eventually find the problem somewhere on your device(s). Won't be the first time or the last that this has happened and it always goes back to the users computer, not the forums.

If it were the forums there would be hundreds of people reporting the same problem(s).


_______________________________________________________



For the information of all.



The ads on these forums are either vetted by Google for their ads and by me for the side column ads which are a pure link back to the sponsors site and nothing more.
There is no html code allowed in the forums other than that used by Admin for notices, so no malware or viruses, etc can be placed into threads, posts or blogs.


If anyone has a problem with popups or any other advertising it will almost definitely be at their end and not here.

In the last 12 mths we have denied registration to over 206,400 known spammers. We are under constant attack from these scumbags. Occasionally the odd one gets through and puts spam on the forum which is almost always deleted within minutes. Once every blue moon one gets through and sends out a couple of emails which could have malware in them but even then they can only send out one or two before they are caught and banned. A further 2000+ have been automatically reported to authorities or banned and another 6473 spam posts have been automatically dealt with. To top this lot off the Moderators ban up to another 10 spammers per day and edit many more spammy posts.

These forums are clean and to the best of our ability the members are protected better than almost any other forum in the world.

Hope this clears up any misgivings that anyone might have about popups, spam, etc on these forums..

Cheers - Neil :U

[ubeaut]

Bit of information for anyone who thinks they may be infected with adyieldmanagercom

adyieldmanagercom is difficult to detect and remove. adyieldmanagercom is not likely to be removed through a convenient "uninstall" feature. adyieldmanagercom, as well as other spyware, can re-install itself even after it appears to have been removed.

You also run the risk of damaging your computer since you're required to find and delete sensitive files in your system such as DLL files and registry keys. It is recommended you use a good spyware remover to remove adyieldmanagercom and other spyware, adware, trojans and viruses on your computer.

Run a adyieldmanagercom scan/check (http://www.wiki-security.com/wiki/Download_spyhunter_malware_scanner/) to successfully detect all adyieldmanagercom files with the SpyHunter Spyware Detection Tool. If you wish to remove adyieldmanagercom, you can either purchase the SpyHunter spyware removal tool to remove adyieldmanagercom or follow the adyieldmanagercom manual removal method provided in the "Remedies and Prevention" section.


Method of Infection There are many ways your computer could get infected with adyieldmanagercom. adyieldmanagercom can come bundled with shareware or other downloadable software.
Another method of distributing adyieldmanagercom involves tricking you by displaying deceptive pop-up ads that may appear as regular Windows notifications with links which look like buttons reading Yes and No. No matter which "button" that you click on, a download starts, installing adyieldmanagercom on your system. adyieldmanagercom installs on your computer through a trojan and may infect your system without your knowledge or consent.
If you think you may already be infected with adyieldmanagercom, use this SpyHunter Spyware dectection tool (http://www.wiki-security.com/wiki/Download_spyhunter_malware_scanner/) to detect adyieldmanagercom and other common Spyware infections. After detection of adyieldmanagercom, the next advised step is to remove adyieldmanagercom with the purchase of the SpyHunter Spyware removal tool.



Symptoms adyieldmanagercom may attempt to change your computer's desktop, hijack your browser, monitor your Internet browsing activities, change system files, and can do this without your knowledge or permission. Therefore, it is strongly recommended to remove all traces of adyieldmanagercom from your computer.


Remedies and Prevention adyieldmanagercom, as well as other Spyware, are constantly evolving and becoming more advanced to avoid detection. adyieldmanagercom along with its variants can install in different locations and even when you try to uninstall it you find they reappear when you reboot your computer.

SpyHunter Spyware dectection tool (http://www.wiki-security.com/wiki/Download_spyhunter_malware_scanner/) may not run on Internet Explorer so you may need to use a different browser like Firefox or Chrome.

Neil :U

[Ueee]

do not download spyhunter. Don't do it....not till I work out what it has done to k pc.

[Ueee]

Ok, back on the PC. After running the test with spy hunter, and finding only a bunch of bad cookies and nothing else, my system would not respond at all....i had to crash it and restart, luckily no damage. Spyhunter seems to be a good program, but i'm not sure what happened after it finished testing, other then it wanting $40 from me so it could fix the problems (delete cookies, i think i can do that manually....:) )

So no Adyieldmanager that it could find....

Ew

[JOHN MEMBREY]

I had this happening in my computer and looking at addons through firefox I found one that stops these adds popping up.

[steven]

Hi,
I have had a problem over the last few days with an advertising popup coming up when i click on something on the forum, it could be to open a thread, when i hit reply or any other click. I thought it may have been my PC but it happened on my android device this morning. Its not just the add shown below, but for lots of different things, i got a ucalaly site this morning.....
I have not had it happen from any other site.
Any one else or have i just managed to get the same spyware on my pc and phone?

Cheers,
Ew

Hi there

That looks like some sort of spyware from ad.yieldmanager.com. You can find removal instructions here;

How to Remove Ad.yieldmanager.com Pop up Ads?(Adware Removal Guide)- AnviSoft (http://forums.anvisoft.com/viewtopic-57-5768-0.html)

Or do a google search on the topic if the above link doesn't help.

In regard to protecting your PC, make sure all OS and application software is up to date. A free anti virus package is Microsoft Security Essentials, it doesn't interfere with your computer as much as others can Microsoft Security Essentials - Microsoft Windows (http://windows.microsoft.com/en-au/windows/security-essentials-download) If you're not running anything its quite good (tho not perfect because it relies on file definitions being released rather than file behavour), otherwise I would suggest purchasing one of the big name AV packages.

cheers

[Ueee]

Thanks Steven,
I had already tried a few of those, all had not found a thing. I finally tried one that ran several different programs and i now seem to to free of it. Certainly not as easy as removing a sus program from the installed program list!
I run full Trend security, spybot and malwarebytes, still i manged to catch this. Last thing i installed was well before it started, although i think there was a java update the day it started.....

Cheers
Ew