New pop-ups (unders?)

Discussion in 'The Lounge' started by RexNoctis, Sep 23, 2004.

  1. RexNoctis

    RexNoctis Corporal

    Hi all, just wondering what you were using for the new pop-ups, they come up on two of my machines with EVERY click, Opera sees them as "requested", and Mozilla doesn't block them.

    Normally I don't mind pop-ups on this site because I know Tim & Jim need to make a living out of it. But opening a window in the background on every click is a bit over the top.

    On a second note, it seems fishy that it is an 0800 (free in the UK) number, is this going to be diverting to a premium rate number without telling me?

    Just wondering...
     
    RexNoctis, Sep 23, 2004
    #1
  2. RexNoctis

    RexNoctis Corporal

    I've run ad-aware on one of the machines, I will try the other one as well. It seemed strange that it was happening on both the machines I have here, but it's possible I have something. I'll run another full scan on both and let you know.

    I thought the pop-unders were removed about a year ago, this is why I mentioned it.
     
    RexNoctis, Sep 23, 2004
    #2
  3. glennk721

    glennk721 MajorGeek

    Abby, Same on my Dads computer sent him to the MG site a few days ago, and he told me he recieved pop up after pop up,,,have installed adaware , and also spyware scan came back clean,,, a few days before I sent him here, ,I have never once recieved a pop up..I use a blocker,,,so I never get ANY pop ups,,,interesting,,,he on his laptop winxp I just installed for him,,,has no pop ups occuring,,,so maybe could it be OS causing ??? just wondering,,Dad's PC is win98,,,,and a olded P3 unit,,,that recieves these adds,,Look forward to hearing from you ,Glenn,,,


    using IE as browser
     
    Last edited: Sep 23, 2004
    glennk721, Sep 23, 2004
    #3
  4. RexNoctis

    RexNoctis Corporal

    OK, Ad-aware SE is scanning both machines at the moment, the thing that made me think it was MG, is that the pop-ups only come while browsing MG, I'm also on the hospital intranet site, BBC news and gmail, no pop-ups on any of those.

    The pop up ads are the same as the ones at the top of the screen, "YOU HAVE WON A FREE CRUISE, PLEASE CALL ....."
     
    RexNoctis, Sep 23, 2004
    #4
  5. Freddy

    Freddy Sergeant

    Noticed yesterday that the popups started again. Not a bother tho.

    Hey, the guy's got to make a living.
     
    Freddy, Sep 23, 2004
    #5
  6. Vonnie

    Vonnie Sergeant

    No pops here with IE or FF.
    I dont run popup blocker either.
     
    Vonnie, Sep 23, 2004
    #6
  7. Boccemon

    Boccemon First Sergeant

    Interesting...Here at work we get deluged with pop-ups (no blockers) on almost every site, including MG. I am sure this box is full of malware and they will let us do nothing as the company Guru denies their existence. I get no pop-ups at home (lots of protection). I do not think that it is MG. There are plenty of rascals out there these days.:(
     
    Boccemon, Sep 23, 2004
    #7
  8. Major Attitude

    Major Attitude Co-Owner MajorGeeks.Com Staff Member

    We are popup free, your first indication is

    When we ran pops, it was one per day, per ip, plus one on the download page. My guess is some sort of spyware or adware program running. For example, running Flashget will get you random popup ads. This is hard to track, but it is not from us. Thank to your loyalty, we were able to remove them hopefully never to return.
     
    Major Attitude, Sep 23, 2004
    #8
  9. RexNoctis

    RexNoctis Corporal

    Is it possible that spyware could also change the inline banner ads shown at the top of the page?

    Again, just wondering, I didn't think that was possible?
     
    RexNoctis, Sep 23, 2004
    #9
  10. goldfish

    goldfish Lt. Sushi.DC

    I'm getting it as well... I think one of your ads in the rotation has put a <script> tag in their inline ad. Sneaky biznatches.

    Here is the code!:

    Code:
    <script language=javascript><!--
document.write('<scr'+'ipt language=javascript src="http://a.tribalfusion.com/j.ad?site=MajorGeekscom&adSpace=MessageBoard&size=468x60&pop=0&requestID='+((new Date()).getTime() % 2147483648) + Math.random()+'"></scr'+'ipt>');
//-->
</script>
    Looks like their "link" is actually a script code... and they got around it by putting a '+' in the middle to fool the code-checker.

    They (TF) need to have that ad pulled immediatley, as it is probably breaking their TOC if they have to confuddle the script tag.
     

    Attached Files:

    goldfish, Sep 23, 2004
    #10
  11. Ken3

    Ken3 MajorGeek

    I had only one popup yesterday (even with the Google toolbar using IE) when coming into the forum - surprised me. The same one Rex reported. After that no further popups. This particular one most likely happened because of the particular source of the ad at the top of the page, not necessarily from MG - assuming it can happen like this. I've scanned and came clean as well. I trust what you're saying MA, since I've been around when y'all had them. :)

    edit: Looks like, I was right, since Goldie posted his results while I was writing mine up.
     
    Ken3, Sep 23, 2004
    #11
  12. goldfish

    goldfish Lt. Sushi.DC

    This is what is giving the popup
    Code:
    <script language=javascript src="http://a.tribalfusion.com/j.ad?site=MajorGeekscom&adSpace=MessageBoard&size=468x60&pop=0&requestID=7384975970.7113475534731305"></script>
     
    goldfish, Sep 23, 2004
    #12
  13. goldfish

    goldfish Lt. Sushi.DC

    and, therefore, this:
    Code:
    document.write('<center>\r\n<BODY bgColor=#65616b leftMargin=0 topMargin=0 marginwidth="0" marginheight="0" background="../redstar/images/blue3.jpg">\r\n<DIV align=center>\r\n<TABLE borderColor=#ff0000 height=60 cellSpacing=0 cellPadding=0 width=468 border=1 bgcolor="#000000">\r\n<TBODY>\r\n<TR>\r\n<TD vAlign=top width="711">\r\n<center>\r\n<EM \r\n      style="FONT-STYLE: normal"><FONT face=Tahoma color=#3333ff>\r\n<a href="http://a.tribalfusion.com/h.click/ESLLQJEHLHOKIJHQGVOSLCPLROLYNOLOWUHBIMNMSTQKQKHOLKJVHMGBBAKPUXEMTMRIPKCFK/http://www.brilliantholiday.com/ukland/12070L.htm" target=_blank><b>\r\n<font style="font-size: 11pt">YOU HAVE WON \r\nA FREE<span style="text-decoration: none">&nbsp; </span></font></b></a></FONT>\r\n<a href="http://a.tribalfusion.com/h.click/ESLLQJEHLHOKIJHQGVOSLCPLROLYNOLOWUHBIMNMSTQKQKHOLKJVHMGBBAKPUXEMTMRIPKCFK/http://www.brilliantholiday.com/ukland/12070L.htm" target=_blank>\r\n<FONT face=Tahoma color=#00ffff style="font-size: 11pt">3 Days 2 Night \r\nALL-INCLUSIVE BAHAMAS CRUISE HOLIDAY<br>\r\n</FONT>\r\n<span style="text-decoration: none">\r\n<font face="Tahoma" style="font-size: 11pt" color="#FF0000">RING FREE</font><FONT face=Tahoma \r\n      color=#ff0000 style="font-size: 11pt">! </FONT>\r\n<span style="font-weight: 700">\r\n<FONT face=Tahoma \r\n      color=#FFFFFF style="font-size: 11pt">0</FONT></span><FONT \r\n      style="FONT-WEIGHT: 700; FONT-SIZE: 11pt" face=Tahoma \r\n      color=#ffffff>800-091-0042&nbsp; </FONT></span><B><SPAN \r\n      style="FONT-SIZE: 11pt">\r\n<FONT \r\n      face=Tahoma color=#3333ff>Claim# </FONT>\r\n<FONT \r\n      face=Tahoma color=#3333FF>12070L</FONT></SPAN></B></a></EM></P></TD></TR></TBODY></TABLE></DIV></BODY></HTML>\r\n</center>\r\n<script type="text/javascript"><!--\r\nvar TF_PopUrl=\'http://a.tribalfusion.com/p.media/ESLLQJEHLHOKIJHQGVOSLCPLROLYNOLOWUHBIMNMSTQKQKHOLKJVHMGBBAKPUXEMTMRIPKCFK/210246/pop.html\';\r\nvar TF_PopWidth=720;\r\nvar TF_PopHeight=300;\r\n//--></script>\r\n<script type="text/javascript" src="http://cdn1.tribalfusion.com/media/210246/pop-tf3.js"></script>');

    And again.. therefore
    Code:
    var wx=window;var pu=wx.TF_PopUrl;var wh=wx.TF_PopWidth?wx.TF_PopWidth:750;var ht=wx.TF_PopHeight?wx.TF_PopHeight:550;var pp='width='+wh+',height='+ht;if(parseFloat(navigator.appVersion)>=4){sw=screen.width;sh=screen.height;pp=pp+',top=3000,left=3000,resizable=0,menubar=0,location=0,scrollbars=0';}else{sw=800;sh=600;}pl=wx.TF_PopLeft?wx.TF_PopLeft:sw/2-wh/2;pt=wx.TF_PopTop?wx.TF_PopTop:sh/2-ht/2;wx.onerror=_onEr;var pw=null;if(!wx.opera)pw=wx.open("",'_blank',pp,true);var TF_linksSet=false;var md=false;setTimeout("_doPop()",50);function _doPop(){if(pw==null)setTimeout("_doMod()",50);else{pw.location=pu;pw.blur();self.focus();pw.moveTo(pl,pt);if(pw.closed||pw.screenLeft<-1000||pw.screenTop<-1000)setTimeout("_doMod()",200);}}function _doMod(){if(md)return;md=true;if(wx.showModelessDialog){var dlgOptions="help:0;center:0;dialogWidth:1;dialogHeight:1;dialogLeft:4000;dialogTop:4000";var args=new Array;args.pp=pp;args.origWin=wx;args.location=pu;args.left=pl;args.top=pt;pw=wx.showModelessDialog('1',args,dlgOptions);pw.execScript('saveWin=window; args=dialogArguments; args.pwn=window.open("", "_blank", args.pp); if (args.pwn) { args.origWin.focus(); args.pwn.opener=args.origWin; args.pwn.location=args.location; args.pwn.blur(); saveWin.close(); args.pwn.moveTo(args.left,args.top); } ');self.focus();}else setTimeout("_setClks()",200);}function _setClks(){TF_linksSet=true;ls=document.links;var i;for(i=0;i<ls.length;i=i+1){if(!ls[i]._TF_link&&(ls[i].target==null||ls[i].target=="")){ls[i]._TF_link=true;if(ls[i].onclick!=null)ls[i]._TF_onclick=ls[i].onclick;ls[i].onclick=_lkClk;}}fs=document.forms;for(i=0;i<fs.length;i=i+1){if(!fs[i]._TF_form&&(fs[i].target==null||fs[i].target=="")){fs[i]._TF_form=true;if(fs[i].onsubmit!=null)fs[i]._TF_onsubmit=fs[i].onsubmit;fs[i].onsubmit=_lkClk;}}wx.onerror=null;}function _clrClks(){if(!TF_linksSet)return;TF_linksSet=false;links=document.links;var i;for(i=0;i<links.length;i=i+1){if(links[i]._TF_link){links[i]._TF_link=false;if(links[i]._TF_onclick)links[i].onclick=links[i]._TF_onclick;else links[i].onclick=null;}}fs=document.forms;for(i=0;i<fs.length;i=i+1){if(fs[i]._TF_form){fs[i]._TF_form=false;if(fs[i]._TF_onsubmit)fs[i].onsubmit=fs[i]._TF_onsubmit;else fs[i].onsubmit=null;}}wx.onerror=null;}function _lkClk(){_clrClks();wx.onerror=_onEr;pw=wx.open("",'_blank',pp,true);pw.location=pu;pw.blur();self.focus();pw.moveTo(pl,pt);wx.onerror=null;return true;}function _onEr(msg,url,linenum){if(md){if(!TF_linksSet){setTimeout("_setClks()",200);}}else setTimeout("_doMod()",200);return true;}
    Oh yes and this will only happen when the ad is rotored to display, I.e in a specific timeframe. So not everyone will get this popup.
     
    goldfish, Sep 23, 2004
    #13
  14. glennk721

    glennk721 MajorGeek

    Thanks Goldie tha would explain the multible pop ups,,,knew dads PC was clean,,,,,Glenn

    I have not recieved any from my software protection,
     
    glennk721, Sep 23, 2004
    #14
  15. sizjam

    sizjam Specialist

    I noticed this too, and im runing Firefox, and ive never had a popup before.
     

    Attached Files:

    • ads.jpg
      ads.jpg
      File size:
      79.1 KB
      Views:
      41
    sizjam, Sep 23, 2004
    #15
  16. goldfish

    goldfish Lt. Sushi.DC

    It would only explain it if that was the only one that was coming up... if you are getting others (so not the CONGRATULATIONS on) then look for spyware more thoroughly..
     
    goldfish, Sep 23, 2004
    #16
  17. glennk721

    glennk721 MajorGeek

    Goldie at Dads now LOL ran scan ,spyware free,,,not a pop up now as you said would be random,,,Dad said when he closed that one everyone is displaying, another opened
    he's not here now nor do I have a pop up at the moment, Glenn
     
    glennk721, Sep 23, 2004
    #17
  18. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    Yep I'm getting the same one as you guys from Tribal Fusion.... on nearly every click.... yes I check for spyware ( Ad-Aware, SpySweeper and HijackThis ) and ran AV checks, as you say Glenn its random and on logging into MGs I got 3 on the first page I clicked.. then 2 more and then none upto now.

    I was going to say is this aimed at UK IPs but as Glenn is in the US that theory goes flying out of the window.
     
    DavidGP, Sep 23, 2004
    #18
  19. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    DavidGP, Sep 23, 2004
    #19
  20. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    Cheers Abby :)


    hey check your PMs... I have sent a few dunno if you have recieved them?
     
    DavidGP, Sep 23, 2004
    #20
  21. glennk721

    glennk721 MajorGeek

    You bet Abby, LOL I even ran around town making sure;) ,,total sign of a true geek LOLOL:p :p :p
     
    glennk721, Sep 23, 2004
    #21
  22. Ken3

    Ken3 MajorGeek

    I'd say that earns a new title for you Glenn :D:D "Run around town Geek"
     
    Ken3, Sep 23, 2004
    #22
  23. glennk721

    glennk721 MajorGeek

    Not bad enough Im Staph Infection,,,and have a click at it thanks to thanks to one of OUR Mod's LOL:p :p :rolleyes: :rolleyes: :p :p
     
    glennk721, Sep 23, 2004
    #23
  24. Corporal Punishment

    Corporal Punishment Head of Software Shenanigans Staff Member

    I’d like to extend our apologies --- seems there was a bug on tribal fusions ad server that let 900 of those get through this morning.
     
    Corporal Punishment, Sep 23, 2004
    #24
  25. goldfish

    goldfish Lt. Sushi.DC

    Weard...

    Okay who forgot to put the ! into the conditional branching?

    :p

    (you have no idea how many times I've done that... hmm, its doing the exact opposite of what I wanted it to do... DOH! I forogt the !)
     
    goldfish, Sep 23, 2004
    #25

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds