snopes.com Post new topic  Post a reply
search | faq | forum home

  next oldest topic   next newest topic
» Hello snopes.com » About This Site » Technical Questions » Winfixer Virus popping up (Page 2)

 - UBBFriend: Email this page to someone!   This topic comprises 2 pages: 1  2   
Author Topic: Winfixer Virus popping up
Llewtrah
Happy Xmas (Warranty Is Over)


Icon 1 posted      Profile for Llewtrah   Author's Homepage   E-mail Llewtrah   Send new private message       Edit/Delete post   Reply with quote 
Setting your firewall to block the IP addresses provided earlier in this thread will also keep the bugger out. I recommend it.

--------------------
Messybeast Cat Resource Archive
Llewtrah's Soapbox

Posts: 2040 | From: Chelmsford, Essex, England | Registered: Dec 2001  |  IP: Logged | Report this post to a moderator
Monza305
I'll Be Home for After Christmas Sales


Icon 1 posted      Profile for Monza305   E-mail Monza305   Send new private message       Edit/Delete post   Reply with quote 
A co-worker fell for that ad on another computer here at work. There's nothing like NSFW ads at work. [Frown] It was real annoying because it also hijacked IE so you couldn't go to Google, it would re-direct to their "security" web site. Part of the reason why I only use Firefox on my computers. Harder to hijack like that. Lucky for me it only took 10 minutes to get rid of the mal-ware.

--------------------
I've got a pen in my pocket does that make me a writer?
Standing on the mountain doesn't make me no higher.
Putting on gloves don't make you a fighter.
And all the study in the world doesn't make it science. -Paul Weller

Posts: 199 | From: Kalamazoo, MI | Registered: Oct 2005  |  IP: Logged | Report this post to a moderator
Em
Happy Holly Days


Icon 1 posted      Profile for Em   E-mail Em   Send new private message       Edit/Delete post   Reply with quote 
quote:
Originally posted by curlygirl:
I don't know how to do a screen cap to show what it looks like though.

Press the "prt scr" button. This copies an image of what is visible on your screen to the clipboard. Open a drawing program such as Paint and paste the image into a new drawing then save it as "annoying NFBSKing ad".

--------------------
What the NFBSK does YOMANK mean?

Posts: 1646 | From: Melbourne, Australia | Registered: Jul 2005  |  IP: Logged | Report this post to a moderator
Don Enrico
Happy Xmas (Warranty Is Over)


Icon 1 posted      Profile for Don Enrico   E-mail Don Enrico   Send new private message       Edit/Delete post   Reply with quote 
I'm getting this, too, and I'm at work, so I can't do anything about the firewall.

Is there any way to block this individually (IE 6.0)?

Don Enrico

--------------------
My spelling is Wobbly. It's good spelling, but it Wobbles, and the letters get in the wrong places. - Pooh Bear

Posts: 2209 | From: Hamburg, Germany | Registered: Oct 2004  |  IP: Logged | Report this post to a moderator
snopes
Return! Return! Return!


Icon 02 posted      Profile for snopes   Author's Homepage   E-mail snopes       Edit/Delete post   Reply with quote 
I still haven't been able to track this ad down. Based on what other webmasters with the same problem have been saying, the nasty pop-up is apparently being triggered by a completely unrelated ad (e.g., an ad for a travel site). If you see this pop-up again, please make note of what ads are displaying on the page that triggered it.

- snopes

Posts: 36029 | From: Admin | Registered: Feb 2000  |  IP: Logged | Report this post to a moderator
me, no really
We Wish You a Merry Giftmas


Icon 1 posted      Profile for me, no really   Author's Homepage   E-mail me, no really   Send new private message       Edit/Delete post   Reply with quote 
I just got it, and the ad at the top of the page was for a watch, which I have seen quite few times with no problems. I took some screen shots of the whole sequence. There were 4 screens which I closed down and then a fifth one that actually spawned a download - which I refused.

first one
second
third
fourth

me

--------------------
Check out my handmade pens
Check back often because the page changes often

Posts: 831 | From: Brisbane, Australia | Registered: Jun 2005  |  IP: Logged | Report this post to a moderator
Em
Happy Holly Days


Icon 1 posted      Profile for Em   E-mail Em   Send new private message       Edit/Delete post   Reply with quote 
I just got the popup again. I still haven't managed to get my filters to allow the legitimate ads through other than on a random basis, but by mousing over where the top-of-page ad should be, I got the url:
http://www.burstnet.com/ads/ad1874n-map.cgi/SZ=468X60A%7C728X90A/V=2.1S/BRC=85665/BCPG34054.56469.63067/
I also saw the "Bullshit detector" watch ads earlier in the day with no malicious pop-ups, so I don't think that's the culprit.

--------------------
What the NFBSK does YOMANK mean?

Posts: 1646 | From: Melbourne, Australia | Registered: Jul 2005  |  IP: Logged | Report this post to a moderator
Don Enrico
Happy Xmas (Warranty Is Over)


Icon 1 posted      Profile for Don Enrico   E-mail Don Enrico   Send new private message       Edit/Delete post   Reply with quote 
I didn't get the pop-up again since I put "amaena.com" as a blocked site under the IE "internet options". I don't know, though, whether these two facts are really related...

--------------------
My spelling is Wobbly. It's good spelling, but it Wobbles, and the letters get in the wrong places. - Pooh Bear

Posts: 2209 | From: Hamburg, Germany | Registered: Oct 2004  |  IP: Logged | Report this post to a moderator
Signora Del Drago
Angels Wii Have Heard on High


Icon 603 posted      Profile for Signora Del Drago     Send new private message       Edit/Delete post   Reply with quote 
This isn't the same thing, but I get it every time I log in.

--------------------
"This air we're breathing. Oxygen, isn't it?"~I’mNotDedalus, impersonating Vincent D’Onofrio.|"Sometimes trying to communicate can be like walking through a minefield."~wanderwoman
"Give people a break. It's not easy doing a life."~Joshua Halberstam

Posts: 4020 | From: Oklahoma | Registered: Nov 2005  |  IP: Logged | Report this post to a moderator
snopes
Return! Return! Return!


Icon 02 posted      Profile for snopes   Author's Homepage   E-mail snopes       Edit/Delete post   Reply with quote 
It looks to me like everyone who's getting this ad is a non-U.S. resident, so it's probably something geotargeted to areas that don't include the U.S. (which explains why I'm not seeing it).

- snopes

Posts: 36029 | From: Admin | Registered: Feb 2000  |  IP: Logged | Report this post to a moderator
Bach_girl
It Came Upon a Midnight Clearance


Icon 1 posted      Profile for Bach_girl   Author's Homepage     Send new private message       Edit/Delete post   Reply with quote 
quote:
Originally posted by me, no really:
I just got it, and the ad at the top of the page was for a watch, which I have seen quite few times with no problems. I took some screen shots of the whole sequence. There were 4 screens which I closed down and then a fifth one that actually spawned a download - which I refused.

first one
second
third
fourth

me

This is the one I was getting at work on IE.

Snopes- I am in the USA and was having problems with this same pop-up. Only on IE, not Firefox.

--------------------
"My Very Educated Mother Just Said Uh-oh! No...Pluto..."~ Steven Colbert

Posts: 3256 | From: Somewhere in Ohio | Registered: Apr 2004  |  IP: Logged | Report this post to a moderator
snopes
Return! Return! Return!


Icon 603 posted      Profile for snopes   Author's Homepage   E-mail snopes       Edit/Delete post   Reply with quote 
quote:
Snopes- I am in the USA and was having problems with this same pop-up. Only on IE, not Firefox.
Yes, but that's a different pop-up than the one that prompted this thread.

- snopes

Posts: 36029 | From: Admin | Registered: Feb 2000  |  IP: Logged | Report this post to a moderator
Llewtrah
Happy Xmas (Warranty Is Over)


Icon 1 posted      Profile for Llewtrah   Author's Homepage   E-mail Llewtrah   Send new private message       Edit/Delete post   Reply with quote 
The 2nd one on that list looks like a variant of the offending amaena ad.

Don Enrico - blocking amaena.com certainly does kill the varmint, I blocked them at my firewall.

--------------------
Messybeast Cat Resource Archive
Llewtrah's Soapbox

Posts: 2040 | From: Chelmsford, Essex, England | Registered: Dec 2001  |  IP: Logged | Report this post to a moderator
  This topic comprises 2 pages: 1  2   

Quick Reply
Message:

HTML is enabled.
UBB Code™ is enabled.

Instant Graemlins
   


Post new topic  Post a reply Close topic   Feature Topic   Move Topic   Delete topic next oldest topic   next newest topic
 - Printer-friendly view of this topic
Hop To:


Urban Legends Reference Pages

Powered by Infopop Corporation
UBB.classic™ 6.7.2