Thread: REPORT BAD ADVERTISEMENTS: AUDIO, POPUPS, SHADY

Originally Posted by DancingCorpse

Originally Posted by DancingCorpse

I'll try to copy paste the alert for you next time. Or copy it by hand, if nothing else.

From AVG resident shield alert, had to copy by hand:

File name: C:\Users\USERNAME\AppData\Roaming\Mozilla\Firefox\ Profiles\pfypqh79.default\cookies.splite

Threat name: Found Tracking cookie.Atdmt
Detected on open.



Whenever I am getting this alert I get logged out of TTP when the browser opens.

NVM bigdog, you were right and it was on my end, somehow the option to scan for tracking cookies was turned on in my resident shield and that was picking up every cookie I got as a threat. My bad.

good to know. We see users report stuff like this often. Now we have yet another specific reason for them to check.

Thanks for helping us figure out what's up.

I'm getting it using Slimbrowser however my back up E2 Browser starts to show a pop up then shuts it down. On Slimbrowser I have to go through task manager to shut down the browser to avoid the winalert pop up. (As far as I know both Slimbrowser and E2 browser are ie based.)

Originally Posted by XecutiveNoob

So just curious on this virus doctor thing..... are we in consensus that the popup is something on our end or TTPs advertising end?

If its on our end, anyone recommend the a antvirus/spyware/etc program that picks it up?

I scanned w/ AVAST home edition and did not pick up anything.

From what I can see and everyone else can, it is coming from TTP, but it is only affecting a certain number of people. One person has reported that the right after a reformat the first website they connected to was TTP and they got the Virus Doctor thing.

For the people getting this, do what dues has told us to in a private forum.

Originally Posted by DeusInnomen

In Firefox, have the window active and try hitting Ctrl-U to get the source of the ad. The URL should be in the title of the Source Viewer window.

For the IE crowd, pressing Alt-V then 'C' should get you the source on any window, however you don't get the URL like you do in Firefox.

Report the URL you get, it is better than nothing and it will help bigdog ban the networks ass that is doing this to us.

Avira busted this virus as I was switching to the TTP page. It didn't happen on any other page BUT when I went back to the TTP forums page.
[img width=700 height=437]http://i124.photobucket.com/albums/p15/Arvala/Virus.jpg[/img]
Zoom in to see it... However, in my haste, I forgot to take screenshots of all the ads on my page... Sorry.

Originally Posted by Allane

Avira busted this virus as I was switching to the TTP page. It didn't happen on any other page BUT when I went back to the TTP forums page.
[img width=700 height=437]http://i124.photobucket.com/albums/p15/Arvala/Virus.jpg[/img]
Zoom in to see it... However, in my haste, I forgot to take screenshots of all the ads on my page... Sorry.

Remember to get links of those ads.

Had the same thing to me. Reported all the ads & links in the SiteMod forum. My guess is one of our ad providers servers got hacked. It'd explain this and the VirusDoctor popups we've been experiencing over the last week or so.

Originally Posted by WileECyte

Had the same thing to me. Reported all the ads & links in the SiteMod forum. My guess is one of our ad providers servers got hacked. It'd explain this and the VirusDoctor popups we've been experiencing over the last week or so.

Doesn't explain why only a select number of our community is getting it, I have a goodish number of page views every day and I have never seen the Virus Doctor ads.