Mobile menu

spyware? popup on proz (staff: 'likely to be on your end; please try malware removal program')
Thread poster: Buck

Buck
Netherlands
Local time: 08:12
Member (2007)
Dutch to English
Dec 2, 2007

Hi. I was just on and hadn't logged in yet, when I wanted to scroll more jobs. Suddenly, and this was not the first time, I get a strange popup that closes proz and opens another window that seems to be selling anti-crap software. Anyone else had this experience?

Direct link Reply with quote
 

Giovanni Guarnieri MITI, MIL  Identity Verified
United Kingdom
Local time: 07:12
Member (2004)
English to Italian
... Dec 2, 2007

http://www.proz.com/topic/90517

Direct link Reply with quote
 
Haiyang Ai  Identity Verified
United States
Local time: 01:12
English to Chinese
+ ...
My 2 cents Dec 2, 2007

I think ProZ.com should have its own dedicated server, rather than sharing with some others. And it is usually safer to users when it comes to spyware or malware. I think proz.com should be a trusted website.

Kind regards,
Haiyang


Direct link Reply with quote
 

Henry Dotterer
Local time: 02:12
SITE FOUNDER
This does not seem to be a problem on our end Dec 2, 2007

Haiyang Ai wrote:

I think ProZ.com should have its own dedicated server, rather than sharing with some others. And it is usually safer to users when it comes to spyware or malware. I think proz.com should be a trusted website.

We do. We have our own dedicated servers (about 40 of them), and the operating systems we use are not known to be susceptible to this sort of malware. This means that the most likely scenario is that this is a client-side issue. In other words, while the popup may be triggered by a visit to ProZ.com, it is almost certainly not coming from ProZ.com.

We have not yet replicated the problem reported. I wonder if someone who has had the problem could run a malware removal program and report to us what the software finds?

Andrew has posted a link to a step by step guide in the other forum thread: bleepingcomputer.com


Direct link Reply with quote
 
RobinB  Identity Verified
Germany
Local time: 08:12
German to English
blessedads Dec 2, 2007

Henry,

It's a "blessedads.com" pain in the whatever, and is probably linked to the banner ads. If any of the ads are linked in from another server (i.e. not your own server farm), that's probably the source of the problem.

Robin


Direct link Reply with quote
 

Dragana Molnar M.A.  Identity Verified
Italy
Local time: 08:12
Member (2007)
Italian to German
+ ...
Scanning report Dec 2, 2007

Henry D wrote:

I wonder if someone who has had the problem could run a malware removal program and report to us what the software finds?

Andrew has posted a link to a step by step guide in the other forum thread: bleepingcomputer.com


I followed the instructions at bleepingcomputer.com and scanned my computer with both programs, result: no threats detected. I also ran AVG, Spybot, AdAware...nothing on my end of the computer.

This afternoon the popup problem did't pop up again. I'm using Firefox 2, this mornig the browser was updated to the build 2.0.0.11, I don't know if this is important...

Regards, Dra


Direct link Reply with quote
 

Patricia Lane  Identity Verified
France
Local time: 08:12
French to English
+ ...
Clean here too Dec 3, 2007

I ran Panda Action Scan, PC Doctor, and HouseCall, in addition to my usual anti-virus package. Clean on my end as well.

Patricia



D. Molnar M.A. wrote:

Henry D wrote:

I wonder if someone who has had the problem could run a malware removal program and report to us what the software finds?

Andrew has posted a link to a step by step guide in the other forum thread: bleepingcomputer.com


I followed the instructions at bleepingcomputer.com and scanned my computer with both programs, result: no threats detected. I also ran AVG, Spybot, AdAware...nothing on my end of the computer.

This afternoon the popup problem did't pop up again. I'm using Firefox 2, this mornig the browser was updated to the build 2.0.0.11, I don't know if this is important...

Regards, Dra


Direct link Reply with quote
 

Buck
Netherlands
Local time: 08:12
Member (2007)
Dutch to English
TOPIC STARTER
Thanks so far, but Dec 3, 2007

Thanks for all the info, but it doesn't happen just at home. It happens on other computers I use as well.....

Direct link Reply with quote
 
Marcus Geibel
Germany
Local time: 08:12
English to German
The same with me! Dec 3, 2007

Buck wrote:

Thanks for all the info, but it doesn't happen just at home. It happens on other computers I use as well.....



That's just what is happening here. I posted this problem a couple of days ago and followed the advice given.
Result: Nothing - no problems reported on my side.

But just this morning the popup appeared on ALL my computers just when calling ProZ - and I had visited other sites before entering ProZ. It is all too obvious that the problem is in context with entering ProZ page.

And I must admit: I am getting a bit angry, as I just renewed membership - and having trouble from time to time calling the site. This is unacceptable!

Regards
Marcus


Direct link Reply with quote
 

Henry Dotterer
Local time: 02:12
SITE FOUNDER
Thanks, Robin. Hidden content was enbedded in an ad being run through the site. Dec 3, 2007

RobinB wrote:
It's a "blessedads.com" pain in the whatever, and is probably linked to the banner ads. If any of the ads are linked in from another server (i.e. not your own server farm), that's probably the source of the problem.

Thank you, Robin. This was it exactly.

To everyone: I apologize for my previous statement, and for wasting your time. We have been running advertisements supplied by a company that appears reputable, with some of the Internet's largest companies among their clients. However, that company allowed an advertisement (which they in turn had received from a large company one would think you could have trusted) to be sent to us, with hidden content. This ad ran on our site, and had the effect of redirecting users in certain areas, at certain times, to other sites.

There currently are no available tools to scan and detect this type of malicious code buried in certain types and forms of advertising - specifically Shock Wave Files. Until those tools are availble, ProZ.com will not run any Shock Wave File ads from anyone aside from reputable, known translation inductry clients, and will cease any advertising network ads from this source.

I am sorry to have passed along this garbage to you, members. I will see to it that we are more careful as a team in the future!

Thanks for all your help, and your time, in sorting this out. It must have been very frustrating.


Direct link Reply with quote
 
Marcus Geibel
Germany
Local time: 08:12
English to German
Three cheers! Dec 3, 2007

Henry D wrote:

RobinB wrote:
It's a "blessedads.com" pain in the whatever, and is probably linked to the banner ads. If any of the ads are linked in from another server (i.e. not your own server farm), that's probably the source of the problem.

Thank you, Robin. This was it exactly.

To everyone: I apologize for my previous statement, and for wasting your time. We have been running advertisements supplied by a company that appears reputable, with some of the Internet's largest companies among their clients. However, that company allowed an advertisement (which they in turn had received from a large company one would think you could have trusted) to be sent to us, with hidden content. This ad ran on our site, and had the effect of redirecting users in certain areas, at certain times, to other sites.

There currently are no available tools to scan and detect this type of malicious code buried in certain types and forms of advertising - specifically Shock Wave Files. Until those tools are availble, ProZ.com will not run any Shock Wave File ads from anyone aside from reputable, known translation inductry clients, and will cease any advertising network ads from this source.

I am sorry to have passed along this garbage to you, members. I will see to it that we are more careful as a team in the future!

Thanks for all your help, and your time, in sorting this out. It must have been very frustrating.



Cheers, Henry, good news!!

Thanks and regards
Marcus


Direct link Reply with quote
 


To report site rules violations or get help, contact a site moderator:


You can also contact site staff by submitting a support request »

spyware? popup on proz (staff: 'likely to be on your end; please try malware removal program')

Advanced search






Protemos translation business management system
Create your account in minutes, and start working! 3-month trial for agencies, and free for freelancers!

The system lets you keep client/vendor database, with contacts and rates, manage projects and assign jobs to vendors, issue invoices, track payments, store and manage project files, generate business reports on turnover profit per client/manager etc.

More info »
Across v6.3
Translation Toolkit and Sales Potential under One Roof

Apart from features that enable you to translate more efficiently, the new Across Translator Edition v6.3 comprises your crossMarket membership. The new online network for Across users assists you in exploring new sales potential and generating revenue.

More info »



All of ProZ.com
  • All of ProZ.com
  • Term search
  • Jobs