"Pornware" Ad - PlanetSide Universe
PSU Social Facebook Twitter Twitter YouTube Steam TwitchTV
PlanetSide Universe
PSU: I have this sudden urge...
Home Forum Chat Wiki Social AGN PS2 Stats
Notices
Go Back   PlanetSide Universe > General Forums > Site Feedback / Support

Reply
 
Thread Tools Search this Thread Display Modes
Old 2013-02-18, 11:04 AM   [Ignore Me] #1
NewSith
Contributor
Brigadier General
 
NewSith's Avatar
 
"Pornware" Ad


In short I just opened your site and got a redirection to some pfdskghnkjghnxskdljgh.com saying that my computer is in danger and I need to install an update "OMGDODATNAAAOAOAOAOOW!, press ok to download an absolutely NOT malicious file to have it ANYTHING BUT making a java registry edit, allowing your browser to automatically download viruses via java. My name is Nikolai, very safe!". Since it's not my first day on the internetz, I know exactly what this thing is, and I reported it via the browser report function.



However, what I mean to say is that you need to find a more trustworthy ad host, Hamma and the team.
__________________

Originally Posted by CutterJohn View Post
Shields.. these are a decent compromise between the console jockeys that want recharging health, and the glorious pc gaming master race that generally doesn't.

Last edited by NewSith; 2013-02-18 at 11:15 AM.
NewSith is offline  
Reply With Quote
Old 2013-02-18, 12:19 PM   [Ignore Me] #2
Hamma
PSU Admin
 
Hamma's Avatar
 
Re: "Pornware" Ad


Did you get the actual information about what this is about? We can remove ads, but if I don't know which ad it is we can't.

The most trustworthy host in terms of advertisements is Google Adsense and they banned us years ago for reasons they won't even reveal to me or SOE for that matter. We have to take what we can get.
__________________

PlanetSide Universe - Administrator / Site Owner - Contact @ PSU
Hamma Time - Evil Ranting Admin - DragonWolves - Commanding Officer
Hamma is offline  
Reply With Quote
Old 2013-02-18, 01:52 PM   [Ignore Me] #3
NewSith
Contributor
Brigadier General
 
NewSith's Avatar
 
Re: "Pornware" Ad


Originally Posted by Hamma View Post
Did you get the actual information about what this is about? We can remove ads, but if I don't know which ad it is we can't.

The most trustworthy host in terms of advertisements is Google Adsense and they banned us years ago for reasons they won't even reveal to me or SOE for that matter. We have to take what we can get.
I don't know what the ad is, since after I opened your site, it redirected me instantaneously. (And I was logged in for that matter)
__________________

Originally Posted by CutterJohn View Post
Shields.. these are a decent compromise between the console jockeys that want recharging health, and the glorious pc gaming master race that generally doesn't.
NewSith is offline  
Reply With Quote
Old 2013-02-18, 02:07 PM   [Ignore Me] #4
Hamma
PSU Admin
 
Hamma's Avatar
 
Re: "Pornware" Ad


Ok cool - I'll report it to our advertiser.
__________________

PlanetSide Universe - Administrator / Site Owner - Contact @ PSU
Hamma Time - Evil Ranting Admin - DragonWolves - Commanding Officer
Hamma is offline  
Reply With Quote
Old 2013-02-18, 04:06 PM   [Ignore Me] #5
Hamma
PSU Admin
 
Hamma's Avatar
 
Re: "Pornware" Ad


When you say "pornware" is that what it was called? More description about what it was trying to do may help us track it down.
__________________

PlanetSide Universe - Administrator / Site Owner - Contact @ PSU
Hamma Time - Evil Ranting Admin - DragonWolves - Commanding Officer
Hamma is offline  
Reply With Quote
Old 2013-02-19, 06:54 AM   [Ignore Me] #6
NewSith
Contributor
Brigadier General
 
NewSith's Avatar
 
Re: "Pornware" Ad


Originally Posted by Hamma View Post
When you say "pornware" is that what it was called? More description about what it was trying to do may help us track it down.
As I wrote, this opens up a site (usually saying "your computer is in danger, download the updates now) with java overlay window on it asking if "you want to allow this page to do something". If you press ok, it'll modify your java registry and it will download a blocker virus onto your PC. What it does is after you restart your PC, your windows screen will get locked (alt-ctrl-del and alt-tab don't work, since the malware itself replaces the explorer.exe file as a startup program in the registry) with a message saying "you tried to access some extremely explicit content (like children pornography) and you should now send an SMS costing 300$ to unlock windows".


The trick about this malware is that it actually adds a line to your java registry that DOES NOT go away unless you completely reinstall java with removal of ALL associated regedit entries. The malware itself is easily disposed of, but it leaves a backdoor on your PC so everytime you visit that site you download the malware without your browser asking if you actually want to do that.
__________________

Originally Posted by CutterJohn View Post
Shields.. these are a decent compromise between the console jockeys that want recharging health, and the glorious pc gaming master race that generally doesn't.

Last edited by NewSith; 2013-02-19 at 06:56 AM.
NewSith is offline  
Reply With Quote
Old 2013-02-19, 11:19 AM   [Ignore Me] #7
Hamma
PSU Admin
 
Hamma's Avatar
 
Re: "Pornware" Ad


Yes but I need some key words of what specifically it was rather than what it was trying to do to help make sure we get it removed.
__________________

PlanetSide Universe - Administrator / Site Owner - Contact @ PSU
Hamma Time - Evil Ranting Admin - DragonWolves - Commanding Officer
Hamma is offline  
Reply With Quote
Old 2013-02-19, 12:29 PM   [Ignore Me] #8
Ghryphen
PSU Code Monkey
 
Ghryphen's Avatar
 


Hehe, now you know what malware is Hamma!
__________________

Twitter | Dragon Wolves

Last edited by Ghryphen; 2013-02-19 at 12:30 PM.
Ghryphen is offline  
Reply With Quote
Old 2013-02-20, 11:47 AM   [Ignore Me] #9
NewSith
Contributor
Brigadier General
 
NewSith's Avatar
 
Re: "Pornware" Ad


DON'T PRESS OK

Just happened again, near instantaneous redirect to: http://zj7hkync.s8.sihegso.ru/
__________________

Originally Posted by CutterJohn View Post
Shields.. these are a decent compromise between the console jockeys that want recharging health, and the glorious pc gaming master race that generally doesn't.
NewSith is offline  
Reply With Quote
Old 2013-02-20, 12:13 PM   [Ignore Me] #10
Binkley
Sergeant
 
Re: "Pornware" Ad


I just got a banner ad that was very suspicious. It was a fake video player showing nothing and a box next to it that said something like "you lack the plugin to view this video, click here to upgrade [upgrade button]". Needless to say, I did not "upgrade" to malwareville.
Binkley is offline  
Reply With Quote
Old 2013-02-20, 10:16 PM   [Ignore Me] #11
Hamma
PSU Admin
 
Hamma's Avatar
 
Re: "Pornware" Ad


Thanks guys.

Do you know the destination of that banner Binkley?
__________________

PlanetSide Universe - Administrator / Site Owner - Contact @ PSU
Hamma Time - Evil Ranting Admin - DragonWolves - Commanding Officer
Hamma is offline  
Reply With Quote
Reply
  PlanetSide Universe > General Forums > Site Feedback / Support

Bookmarks

Discord

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -5. The time now is 09:07 PM.

Content © 2002-2013, PlanetSide-Universe.com, All rights reserved.
PlanetSide and the SOE logo are registered trademarks of Sony Online Entertainment Inc. © 2004 Sony Online Entertainment Inc. All rights reserved.
All other trademarks or tradenames are properties of their respective owners.
Powered by vBulletin
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.