Tribes 2 Bots
« WEBSITE WARNING - Rogue Ads »

Welcome Guest. Please Login or Register.
Nov 17th, 2017, 7:05pm



« Previous Topic | Next Topic »
Pages: 1  Notify Send Topic Print
 thread  Author  Topic: WEBSITE WARNING - Rogue Ads  (Read 1132 times)
MetaDrax
Global Moderator
ImageImageImageImageImage


member is offline

Avatar




PM

Gender: Male
Posts: 279
xx WEBSITE WARNING - Rogue Ads
« Thread started on: Aug 23rd, 2014, 03:39am »

So using this forums with Linux, no issues.

Use a Windows 7 and Chrome, some links randomly redirect and start downloading a Java.exe automatically.

Something is really wrong, maybe that's why people aren't really visiting and trying to download stuff.

Never happened back when I was mapping, so it's something on the recent side.
User IP Logged

Fresh shrike roadkill everyday. Light, medium and heavy flavors.
Roberto
Bioderm
Administrator
ImageImageImageImageImage


member is offline

Avatar

Owrwrwrwrwr....


PM

Gender: Male
Posts: 265
xx Re: WEBSITE WARNING - Rogue Ads
« Reply #1 on: Aug 23rd, 2014, 04:15am »

Wow, really? I am using windows 7 64 bit and this doesn't happen to me. I use firefox with noscript and nothing autodownloads or redirects on me. Adblock edge is also present now to block suspicious ads.

We need to be sure on this as it sounds very serious and it's a big problem if it turns out that something on this site is infected. Are you absolutely sure it's not your pc? Maybe you already have malware on your windows install or weird toolbars installed. Maybe you misspelled the website name wrong?

« Last Edit: Aug 23rd, 2014, 04:41am by Roberto » User IP Logged

This site (short link):
www.tribes2bots.tk
Long link :
http://t2bots.conforums.com/
MetaDrax
Global Moderator
ImageImageImageImageImage


member is offline

Avatar




PM

Gender: Male
Posts: 279
xx Re: WEBSITE WARNING - Rogue Ads
« Reply #2 on: Aug 23rd, 2014, 04:35am »

Windows 7, Chrome, no add-ons or plug ins. Very stock but up to date.

OS itself has no toolbars, changed browser pages, runs clean with both Microsoft Security and Malware Bytes.

http://t2bots.conforums.com address and variants only.

I think it's the ads. The links usually work fine, but if I open the same one 5-6 different times, at least 1 will change to a redirect and attempt to download Java.exe automatically, only on Windows 7 and Chrome.

I normally use Linux for this site, so I don't notice any issues until now.

Edit: As long as you use adblock and noscript, you are fine. Anyone who doesn't though, will see what I see by random chance on Windows 7 and Chrome stock.

Corrupted ads tend to be the norm nowadays.
« Last Edit: Aug 23rd, 2014, 04:37am by MetaDrax » User IP Logged

Fresh shrike roadkill everyday. Light, medium and heavy flavors.
Roberto
Bioderm
Administrator
ImageImageImageImageImage


member is offline

Avatar

Owrwrwrwrwr....


PM

Gender: Male
Posts: 265
xx Re: WEBSITE WARNING - Rogue Ads
« Reply #3 on: Aug 23rd, 2014, 04:40am »

Well then, if it happens only sometimes it may indeed be some ad that's infected. We have two options, to try to report this to conforums and hopefully they will confirm that there is indeed some ad that redirects to malware and remove it. Or move to some other website with no ads.

If you have screenshots or the link that redirected you to the java.exe please send them to conforums and tell them what is happening.

If they won't do anything about it I'll just use SMF on some hosting website with no ads.
User IP Logged

This site (short link):
www.tribes2bots.tk
Long link :
http://t2bots.conforums.com/
MetaDrax
Global Moderator
ImageImageImageImageImage


member is offline

Avatar




PM

Gender: Male
Posts: 279
xx Re: WEBSITE WARNING - Rogue Ads
« Reply #4 on: Aug 23rd, 2014, 04:43am »

I reported it to Google, link and all. Kinda don't want to risk it again. I did cancel each time it downloaded, and nothing ever got to my download folder.

I'm on Linux right now, and no matter what I repeat click, only the ads change, but no sudden drive by download.

Expected since .exe don't work on Linux.

Also, its 2:42 am. Do not be surprised if I sleep.
« Last Edit: Aug 23rd, 2014, 04:43am by MetaDrax » User IP Logged

Fresh shrike roadkill everyday. Light, medium and heavy flavors.
Roberto
Bioderm
Administrator
ImageImageImageImageImage


member is offline

Avatar

Owrwrwrwrwr....


PM

Gender: Male
Posts: 265
xx Re: WEBSITE WARNING - Rogue Ads
« Reply #5 on: Aug 23rd, 2014, 04:47am »

Yeah, it's pretty late there. But thanks anyway for reporting the issue.

I'm not really sure if google will do something about it, and you do not need to risk going back to it again. You should have the link in your history, so just copy and paste it in the e-mail, do not enter it again.

Very weird thing though, I really didn't expect random redirects to exe files here. I guess I'm too used to blocking pretty much most of the scripts. Does the java.exe link redirect to the www.java.com or something suspicious?

And is the ad really from google? Maybe it's not from google so they won't respond.
User IP Logged

This site (short link):
www.tribes2bots.tk
Long link :
http://t2bots.conforums.com/
MetaDrax
Global Moderator
ImageImageImageImageImage


member is offline

Avatar




PM

Gender: Male
Posts: 279
xx Re: WEBSITE WARNING - Rogue Ads
« Reply #6 on: Aug 23rd, 2014, 04:54am »

Last post for the night. Hard to stay awake. You are 10 hours ahead of me.

I cleared all my PC history as a precaution after submitting the link to Google. It was to some weird address not related to Java or Google at all. Nothing in any shape or form.

I used https://www.google.com/safebrowsing/report_badware/ to report the bad link. Not a feature of Chrome.

Whether they do anything, who knows.

Good night.
User IP Logged

Fresh shrike roadkill everyday. Light, medium and heavy flavors.
Roberto
Bioderm
Administrator
ImageImageImageImageImage


member is offline

Avatar

Owrwrwrwrwr....


PM

Gender: Male
Posts: 265
xx Re: WEBSITE WARNING - Rogue Ads
« Reply #7 on: Aug 23rd, 2014, 05:06am »

Ok then, thanks for reporting that.

Apparently you are not the only one with that problem:

http://www.bleepingcomputer.com/forums/t/518073/fake-java-update-redirect/
http://www.bleepingcomputer.com/forums/t/519867/pop-ups-redirects-ads-to-unoffical-java-or-video-player-download/

And many more search results out there, I was thinking that you probably have an infected chrome install but that's probably not the case since you said you have a pretty clean chrome install and some antivirus running.

I won't risk disabling noscript on the .tk domain, but as I am posting right now javascripts are allowed to run on this link http://t2bots.conforums.com/ and I am still not getting redirects.

Probably adblock edge is blocking the infected ad, so I will continue to keep it enabled.

But I really need is another person to confirm that this is also happening on his PC since it's not happening on mine. If the problem is still here after a few days I'm afraid I might abandon this and move to some other site.
User IP Logged

This site (short link):
www.tribes2bots.tk
Long link :
http://t2bots.conforums.com/
MetaDrax
Global Moderator
ImageImageImageImageImage


member is offline

Avatar




PM

Gender: Male
Posts: 279
xx Re: WEBSITE WARNING - Rogue Ads
« Reply #8 on: Aug 23rd, 2014, 3:26pm »

Probably a new forum with no ads eventually.

I think I'll have to use DropBox or something for hosting files instead of MediaFire too.

So annoying.
User IP Logged

Fresh shrike roadkill everyday. Light, medium and heavy flavors.
Roberto
Bioderm
Administrator
ImageImageImageImageImage


member is offline

Avatar

Owrwrwrwrwr....


PM

Gender: Male
Posts: 265
xx Re: WEBSITE WARNING - Rogue Ads
« Reply #9 on: Aug 23rd, 2014, 3:42pm »

Well, I still have this one. I created it months ago because I also want to host content on the website itself. It's got about 15 GB of space if I remember so it's enough to host maps, mods, skins so people can download it.

Also it's using SMF for forums and as far as I know, the website has no ads. Sometimes it can go down for a few hours, but that doesn't happen often, and for a free hosting service I think it's good.

For the website
http://tribes2bots.yzi.me/
and for the forum
http://tribes2bots.yzi.me/forum/

If you want to register there, I'll make you an admin as soon as I see you registered, that is of course if you want to join that site.

Also, the home page is just a dummy page that I created in some website builder months ago, so it doesn't look so good. I can create a simple webpage now if needed using simple html. I'm not familiar with CSS yet.

User IP Logged

This site (short link):
www.tribes2bots.tk
Long link :
http://t2bots.conforums.com/
MetaDrax
Global Moderator
ImageImageImageImageImage


member is offline

Avatar




PM

Gender: Male
Posts: 279
xx Re: WEBSITE WARNING - Rogue Ads
« Reply #10 on: Aug 23rd, 2014, 6:22pm »

Registered on the forum, ready for admin.

I think we should set it up as our back up and slowly migrate over there. SLOWLY.
User IP Logged

Fresh shrike roadkill everyday. Light, medium and heavy flavors.
Roberto
Bioderm
Administrator
ImageImageImageImageImage


member is offline

Avatar

Owrwrwrwrwr....


PM

Gender: Male
Posts: 265
xx Re: WEBSITE WARNING - Rogue Ads
« Reply #11 on: Aug 23rd, 2014, 7:51pm »

Done. There's no hurry in moving everything there yet, because that will take some time... but at least there won't be weird ads there.

I don't expect lots of people in any way to register there or even download something lots of times, but the point is that if someone googles tribes 2 bots I want them to be taken to a page that doesn't have weird ads so they can safely download what they need.

I'll be checking that new forum more often now rather than this.

Anyway, I have to set up a FTP account for you there so you can upload your maps and your desired t2 mods/scripts/whatever.
User IP Logged

This site (short link):
www.tribes2bots.tk
Long link :
http://t2bots.conforums.com/
MetaDrax
Global Moderator
ImageImageImageImageImage


member is offline

Avatar




PM

Gender: Male
Posts: 279
xx Re: WEBSITE WARNING - Rogue Ads
« Reply #12 on: Aug 24th, 2014, 04:12am »

I've already made posts over there and did some organizing.
User IP Logged

Fresh shrike roadkill everyday. Light, medium and heavy flavors.
Pages: 1  Notify Send Topic Print
« Previous Topic | Next Topic »

Donate $6.99 for 50,000 Ad-Free Pageviews!

| |

This forum powered for FREE by Conforums ©
Sign up for your own Free Message Board today!
Terms of Service | Privacy Policy | Conforums Support | Parental Controls