Forum Settings
       
« Previous 1 2
Reply To Thread

VIRUS in Popsups again !!!Follow

#1 Oct 16 2005 at 8:10 AM Rating: Default
24 posts
Went to search a Item and got a message from my Virus-Scanner

Trojan Horse TR/Dltr.VB.FT.5 in my Cache

here screenshots of it

http://lr.hs-net.de/pic/allakhazam-virus.JPG
http://lr.hs-net.de/pic/allakhazam-virus2.JPG
http://lr.hs-net.de/pic/allakhazam-virus3.JPG

If it happens a 3rd time, you will lose many visitors

fix this ******** allready

Edited, Sun Oct 16 09:31:57 2005 by Holodmer

Edited, Sun Oct 16 09:33:03 2005 by Holodmer
____________________________
Holodmer
Orc Hunter of Last Resort
EU-Skullcrusher



#2 Oct 16 2005 at 10:06 AM Rating: Good
Scholar
****
6,318 posts
1) It would help if you could provide more source information.

2) They do not control what is put in the adds. Most likely, it was the ad server that was infected (again) and then started a trickle down effect.

3) Only one person here is allowed to demand that the powers that be "Fix this shi[b][/b]t", and it is still annoying when she does it. Stop being a demanding douche.
____________________________
Justice was right... details do make the girls sweat.

The Weekend Warriors - A WoW radio show, live every Thursday 10:30pm EST / 7:30pm PST
My UI | My UI Customization Guide
#3 Oct 16 2005 at 10:54 AM Rating: Default
24 posts
#1 What more Information ? the Screenshots show time, date, message from virus scanner and all popups that opened at the time.

If you looked at them you could see one popup had a active-x element, very likely that its that one

#2 why do you think I made screenshots of all seperate adds that opened ? of couse it came from a popup, still leads to the point that allakhazam is responsible, since the source of the popups is their website

#3 instead of "demanding" them to fix having posible thousend ppl lose their WoW Account and posible other damages (bank, cc cards and whatnot)
I could also have went to a local police station and pressed charges against allakhazam, because the conmpany owning a website is responsible for the content (yes, this includes popups) and that means if a virus infects someones PC, and the source of that virus is allakhazam, THEY are responsible for that and they have to prove it was not their fault (which is realy hard if it happened the 2nd time, its called wantonly negligent (sp?))

So come down and think before you post, asking or even "damanding" to fix it makes me anything but a douche
____________________________
Holodmer
Orc Hunter of Last Resort
EU-Skullcrusher



#4 Oct 16 2005 at 11:04 AM Rating: Excellent
***
2,553 posts
What I need is the source of the page which trigger such an event.

The source contains information allowing me to trace that the offending file a) was included by us, and b) which advertizer had it.
____________________________
--Illia
Fumus, draco magus incoluit mare.
Myrx - 70 Holy Priest, Myr - 70 Resto Shaman, Gryd - 70 Prot Warrior
#5 Oct 16 2005 at 12:02 PM Rating: Decent
***
2,186 posts
Quote:
I could also have went to a local police station and pressed charges against allakhazam, because the conmpany owning a website is responsible for the content (yes, this includes popups) and that means if a virus infects someones PC, and the source of that virus is allakhazam, THEY are responsible for that and they have to prove it was not their fault (which is realy hard if it happened the 2nd time, its called wantonly negligent (sp?))

Its not allas adds, its other sites. Alla has no controll what adds are shown here. If you are going to press charges you will have to track down the add service that hosted it.

Thoose pictures are imposible to read, I have no idea what the anti virus program says.

Get a popup blocker then, better yet dicth internet exploer and get a browser that actulay has security on it.

Edited, Sun Oct 16 13:25:02 2005 by SefanaPPO
____________________________
Sefana-Bard(Usually Gypsy)~Aliria-Wizard(Usually Channeler)~Seffana-NecromancerCastle Lightwolf
Sefana-Lich~Formerly Cryptic Souls~Proudpines Outpost

#6 Oct 16 2005 at 2:52 PM Rating: Default
24 posts
Quote:
What I need is the source of the page which trigger such an event.


take a look at the 2nd and 3rd screenshot, 3rd has a active-x element and it shows exact url of that popup, and it shows the time in my tasklist, timezone is GMT+1 and it was today 16th Oct

Quote:
Its not allas adds, its other sites. Alla has no controll what adds are shown here. If you are going to press charges you will have to track down the add service that hosted it.


yes they are their adds, they are launched from their website so they are responsible for the adds, even if they cant control what kind of adds come up, they are responsible for them.
the fact that even this popup supplier had a virus before and now again means allkhazam acted wantonly negligent (at least from german law point of view, which applies to me and my pc)

But I dont want to discuss about the laws here, I just want this situation fixed since I like this site

Quote:
Thoose pictures are imposible to read, I have no idea what the anti virus program says.


put them fullscreen and they are get sharp, it basically says in first pic "file .... Is the Trojan Horse blablabla" the points below are the options given by my virus scanner

Quote:
Get a popup blocker then


I didnt want to block allakhazam adds because I want them to earn some money, I have a popup blocker and could have blocked them all, but one of their main income sources are popups and I want to support the site as far as I can or feel like

Edited, Sun Oct 16 16:16:04 2005 by Holodmer
____________________________
Holodmer
Orc Hunter of Last Resort
EU-Skullcrusher



#7 Oct 16 2005 at 3:12 PM Rating: Decent
***
2,186 posts
Quote:
yes they are their adds, they are launched from their website so they are responsible for the adds, even if they cant control what kind of adds come up, they are responsible for them.
the fact that even this popup supplier had a virus before and now again means allkhazam acted wantonly negligent (at least from german law point of view, which applies to me and my pc)

This site is under US laws, not german laws.

Quote:
take a look at the 2nd and 3rd screenshot, 3rd has a active-x element and it shows exact url of that popup, and it shows the time in my tasklist, timezone is GMT+1 and it was today 16th Oct

Thats still doesnt show the source. GO to veiw-source to get the source code.
____________________________
Sefana-Bard(Usually Gypsy)~Aliria-Wizard(Usually Channeler)~Seffana-NecromancerCastle Lightwolf
Sefana-Lich~Formerly Cryptic Souls~Proudpines Outpost

#8 Oct 16 2005 at 4:02 PM Rating: Decent
24 posts
Quote:
This site is under US laws, not german laws.


as I said Im not here to discuss about laws, but "Cyber Crime agreement" and current active agreements of rigths tell me, my damage, german court

Quote:
Thats still doesnt show the source. GO to veiw-source to get the source code.


of course I dont have the original page/file anymore, jst the screenshots, but here pic3 again with a red marker where you can see the exact url of the popup

http://lr.hs-net.de/pic/allakhazam-virus3-blind.JPG
____________________________
Holodmer
Orc Hunter of Last Resort
EU-Skullcrusher



#9 Oct 16 2005 at 4:06 PM Rating: Decent
Scholar
****
4,400 posts
Get a pop up blocker, get Firefox, and shut up already.

There's nothing THEY can do about it with your silly screen shots. If you don't like it, get off.

Seriously, you need to stop *********
#10 Oct 16 2005 at 4:15 PM Rating: Decent
*****
11,539 posts
Holodmer wrote:
yes they are their adds, they are launched from their website so they are responsible for the adds, even if they cant control what kind of adds come up, they are responsible for them.


Reread that again. No they aren't. If you think the ads are launched from this site, you're wrong and if you think this site has any control over ensuring that the people forwarding ads through the site are running virus scans regularly, you're still wrong. You fail at the internet.

Holodmer wrote:
I didnt want to block allakhazam adds because I want them to earn some money, I have a popup blocker and could have blocked them all, but one of their main income sources are popups and I want to support the site as far as I can or feel like


Then why don't you get a paid subscription? You get to support the site AND don't get popups. You fail at logic.

Holodmer wrote:
Quote:
This site is under US laws, not german laws.


as I said Im not here to discuss about laws, but...


If you're not here to "discuss laws", why do you keep bringing them up? Threatening legal action -always- gets you what you want. Right. You fail at life.
____________________________
[ffxisig]55836[/ffxisig]

Mikhalia: and FWIW, my posts are 95% helpful, informative, or funny.
Mikhalia: only 5% or less of my posts are utter crap.
Tyapex: 393 posts of utter crap...
Mikhalia: Sounds about right.
#11 Oct 16 2005 at 4:22 PM Rating: Default
24 posts
Quote:
Get a pop up blocker, get Firefox, and shut up already.

There's nothing THEY can do about it with your silly screen shots. If you don't like it, get off.

Seriously, you need to stop *********


so you say I should stop supporting allakhazam (yes using a popup blocker costs them money) and everyone that visits this site should change their browser because they decide they cant do anything about it ?

I didnt get infected because I have a updated virus scanner and a browser with all patches installed, but some ppl out there dont know enogth about computers and migth not be save, so you say they deserve to have all their bank account or their mmorpg account being stripped ?

If they cant do anything about this one popup from that company, shut down all from them and find someone else, a page with this number of visits shouldnt have a problem finding a serious company for popups

and about my "silly screenshots", I would expect someone that helps administrating a page of this size, to be able to open a jpg and put it to fullscreen to have it decent sized to read the information, it shows all information if you take a minute to look at it
____________________________
Holodmer
Orc Hunter of Last Resort
EU-Skullcrusher



#12 Oct 16 2005 at 4:33 PM Rating: Good
Guru
****
7,466 posts
Holodmer wrote:
and about my "silly screenshots", I would expect someone that helps administrating a page of this size, to be able to open a jpg and put it to fullscreen to have it decent sized to read the information, it shows all information if you take a minute to look at it


Expect for the fact that the url you listed probably doesn't match any of their ad providers. It is very easy to have a URL point to a different page. Also, there could have been other events leading to it rather then the pop-up. This is why the source code of the page is more important then any screens.
____________________________
In a distant land, sink into the darkness...
#13 Oct 16 2005 at 4:37 PM Rating: Good
**
500 posts
What they need is the source of the page that spawned the popup. To get the source of the page in IE, click here.

Alternately, if you want to never see popups ever again (while continuing to support Alla), click here.
#14 Oct 16 2005 at 4:44 PM Rating: Decent
Scholar
****
4,400 posts
You wrote:
so you say I should stop supporting allakhazam (yes using a popup blocker costs them money) and everyone that visits this site should change their browser because they decide they cant do anything about it ?


Illia wrote:
What I need is the source of the page which trigger such an event.

The source contains information allowing me to trace that the offending file a) was included by us, and b) which advertizer had it.


Basically, they can't do **** with the information you provded them, yet you still keep arguing the fact they can, and threaten to go to the local authorities. (And by the way, the local authorities would LAUGH at you.)
#15 Oct 16 2005 at 4:45 PM Rating: Default
24 posts
Quote:
If you're not here to "discuss laws", why do you keep bringing them up? Threatening legal action -always- gets you what you want. Right. You fail at life.


Please show me where I threated legal actions ? I didnt anywhere, I said I didnt want to I just want them to fix it and I was called a douche for tellting them about a virus in the popups so I wrote what I could have done instead

about discussing laws ... I was just showing that his statement wasnt totally true, If pointing out errors makes me "fail life" then so it be

Quote:
Then why don't you get a paid subscription? You get to support the site AND don't get popups. You fail at logic.


Quote:
Issue Subscription to Computer Gaming World. (U.S. & Canada Only).


there is your answer

Quote:
Basically, they can't do sh*t with the information you provded them, yet you still keep arguing the fact they can, and threaten to go to the local authorities. (And by the way, the local authorities would LAUGH at you.)


again please show me where I treath anyone about legal actions

Edited, Sun Oct 16 18:01:24 2005 by Holodmer
____________________________
Holodmer
Orc Hunter of Last Resort
EU-Skullcrusher



#16 Oct 16 2005 at 4:54 PM Rating: Default
24 posts
Quote:
Expect for the fact that the url you listed probably doesn't match any of their ad providers. It is very easy to have a URL point to a different page. Also, there could have been other events leading to it rather then the pop-up. This is why the source code of the page is more important then any screens.


well I dont have the source-code of the site because I closed it after I made screenshots

but they could just take the url, phone their add supplier and have them check that url, esp since they allready had problem with the adds and since the FBI is allready working on that case it shouldnt be a problem to take that add offline
____________________________
Holodmer
Orc Hunter of Last Resort
EU-Skullcrusher



#17 Oct 16 2005 at 5:02 PM Rating: Decent
***
2,186 posts
Wow I expected every one to know at least a little about the internet. Ive never used this term but you do fail at the internet.

Holodmer wrote:
as I said Im not here to discuss about laws, but "Cyber Crime agreement" and current active agreements of rigths tell me, my damage, german court

The german court cant do anything to this site based in the US.

YOu need the source code, youve been told that several times, not a screen shot.

Holodmer wrote:
(yes using a popup blocker costs them money)

Explain to me how that works...


Edited, Sun Oct 16 18:27:02 2005 by SefanaPPO
____________________________
Sefana-Bard(Usually Gypsy)~Aliria-Wizard(Usually Channeler)~Seffana-NecromancerCastle Lightwolf
Sefana-Lich~Formerly Cryptic Souls~Proudpines Outpost

#18 Oct 16 2005 at 5:12 PM Rating: Good
Guru
****
7,466 posts
In no preticular order:

Quote:
I could also have went to a local police station and pressed charges against allakhazam, because the conmpany owning a website is responsible for the content (yes, this includes popups) and that means if a virus infects someones PC, and the source of that virus is allakhazam, THEY are responsible for that and they have to prove it was not their fault (which is realy hard if it happened the 2nd time, its called wantonly negligent (sp?))


Boom, there is your threat with legal action.

Quote:
Issue Subscription to Computer Gaming World. (U.S. & Canada Only).
Quote:
there is your answer


You DO realize that the subscription is just a BONUS and it doesn't mean that you can't still subscribe right?

Quote:
(yes using a popup blocker costs them money)
Quote:
Explain to me haw that works...


Truthfully, it does actually. See, Alla (and all sites) make money through Ads as you know. However, they get money when they get hits to the sites (iirc) so, by either not clicking the banners or blocking the pop-ups, they don't get a hit on the page, hence they don't get as much money from the ads.
____________________________
In a distant land, sink into the darkness...
#19 Oct 16 2005 at 5:27 PM Rating: Good


I am sure he makes a point to regularly click on ads.

#20 Oct 16 2005 at 5:57 PM Rating: Default
24 posts
Quote:
Boom, there is your threat with legal action.


I just wanted to show the guy that called me a douche what I could have taken as action, and instead of heading over and cause trouble I decided to post here and supplie them with the information I believe are enogth

I didnt want to threat anyone, you have to look at it in context as a reply

If it sounded like a threat I apologize, it wasnt meant as one

Quote:
You DO realize that the subscription is just a BONUS and it doesn't mean that you can't still subscribe right?


I dont understand what you mean :/ If I want to subscribe to avoid banners I click on "Sucscribe Button" in the navigation bar, and the first thing that shows tells me its US/Kanada only, so nothing for EU

as far as needing sourcecode ... there are other ways to track down that banner

as far as I understand allakhazam has a general redirection to their popup supplier and they redirect to the popups from the companies that pay for it.
certain algorytm (sp?) decides which popup is loaded (like dependend on language of the client, as my popups showup in german ie.)

#1 take my IP (you can take my IP of that time from the very first post)
#2 phone your popup supplier and tell them about the problem
#3 tell them about the popup url and have them check if they know who it is (and shut down that popup), if its not as easy goto #4
#4 get a list with the popups from my IP in the timeframe (after the past problems Im sure they have logfiles up the roof)
#5 go though the list and compare the popups from my IP with the ones showed in Screenshot, if found tell the popup provider and have them shut it down

but since you want the source-code of the html file supplied to me I would guess you generate the popup directly from your server (with some sort of script that decides whichever popup shows), then it wont be hard to have said script make log entries with IP addresses ... and again you have a list of popups and my IP address to compare

there is allways a way to track down such things in one or another way if you have enogth logfiles

Quote:
I am sure he makes a point to regularly click on ads.


I dont click on adds, but them loading should give alla some money allready

Edited, Sun Oct 16 19:11:41 2005 by Holodmer

Edited, Sun Oct 16 19:13:12 2005 by Holodmer
____________________________
Holodmer
Orc Hunter of Last Resort
EU-Skullcrusher



#21 Oct 16 2005 at 6:17 PM Rating: Default
****
9,352 posts
Quote:
I dont understand what you mean :/ If I want to subscribe to avoid banners I click on "Sucscribe Button" in the navigation bar, and the first thing that shows tells me its US/Kanada only, so nothing for EU




What's meant by this is you can still have premium but you wont receive computer gaming world in the mail. There are premium members who post here from Europe.
____________________________
10k before the site's inevitable death or bust

The World Is Not A Cold Dead Place.
Alan Watts wrote:
I am omnipotent insofar as I am the Universe, but I am not an omnipotent in the role of Alan Watts, only cunning


Eske wrote:
I've always read Driftwood as the straight man in varus' double act. It helps if you read all of his posts in the voice of Droopy Dog.
#22 Oct 16 2005 at 6:33 PM Rating: Excellent
Avatar
******
29,913 posts
The problem is that we have more than one banner ad supplier. At last count I believe it is somewhere in the hundreds of individual suppliers. We have an ad script that randomly loads an ad by one of those suppliers, who themselves randomize their ads. Some suppliers submit the ads to more than one distributor, and some ads also load different content based on load location. We have no control over that portion of it. The only way we can track them down is by knowing which ad provider the ad came from, and which ad number. To find that information, we need the source code of the allakhazam page you were viewing when you got the banner ad that loaded the popup. That source code contains the advertiser and advertisement ID. Without that there are literally thousands of ads to try and track it down in.

Since it loaded several times for you, i'd imagine it should not be that hard to get it to load again from your end. I have not had any luck getting it to load on my end, so it may be geoencoded.

As to legal liability, any legal liability would lie with our banner ad providers, who have agreements not to serve damaging content to this site. We would still need the source code of the page that loaded the banner ad before we can take any action on that front either.

We are the only people that activly record your IP address, and even then, only when you post. the ad companies do not record any IP information unless they load tracking cookies or spyware. They log that an ad file was downloaded, but most of them do not log by who. It would slow their ad serving system down too much.

As to blocking the Pop ups go for it. We get paid based on banenr ad loads, and even with most pop-up/banner ad blockers the ad still loads enough for it to count as a page load. firefox has a good blocker module, as does the avant browser interface for internet explorer.

Finally, to the last part about subscriptions, our subscription service for the site is worldwide. The only part that is not available over in europe is the 12 issues of the paper copy of Computer Gaming World magazine.
http://news.allakhazam.com/Premium_Chart.html
That will not be delivered overseas, but everything else is available to Europeans. we have many current european members, most from the U.K., but a fair amount from Deutschland as well.

If you have any questions, or need translation into german, I do speak some german, though it may be a bit rusty
____________________________
Arch Duke Kaolian Drachensborn, lvl 95 Ranger, Unrest Server
Tech support forum | FAQ (Support) | Mobile Zam: http://m.zam.com (Premium only)
Forum Rules
#23 Oct 16 2005 at 6:49 PM Rating: Good
Guru
****
7,466 posts
The L0rd of the Pumpkins has spoken. Head thy words, for he is wise.
____________________________
In a distant land, sink into the darkness...
#24 Oct 16 2005 at 7:22 PM Rating: Decent
Scholar
***
2,405 posts
EU based premium user right here.
#25 Oct 16 2005 at 9:35 PM Rating: Excellent
The man who started it all!
***
1,635 posts
Are you still getting that? Researching what you posted, it looks kind of like a German version of Gator (in other words it won't steal anything but will spam you with annoying ads instead -- either way an ad we don't want to run). Since it seems to only try to download on German accounts, we can't recreate it. It looks like it is a tribal fusion ad you are showing. Tribal fusion is one of the nets largest and most respected ad providers. I need to have an actual page source to be able to show them to get it shut off.

____________________________
[wowsig]1855[/wowsig]
« Previous 1 2
Reply To Thread

Colors Smileys Quote OriginalQuote Checked Help

 

Recent Visitors: 0 All times are in CDT