Spyware or ELR?

Ive only had one minor redirect from recipes, like @daath said it was a rogue ad, it happens.

@daath have you looked at Amazon affiliate advertising or paid advertising for vendors? Might be worth your while :wink:

2 Likes

I’ll tell you like I tell my kids phones are to talk on the computer is for the internet. They say I’m getting old. lol. I have enough problems using the internet on my computer I don’t need to do it on my phone, but then again I’m home a lot and have access to my computer more than a lot of people.

2 Likes

I use my phone as a pocket computer all the time. I can’t tell you how many times a customer has called or emailed when I was out of the office and they’re looking for a cargo van or box truck for a hot shipment. I’ve done all phases of the load from the offer, quote, booking and delivery right from my phone. In terms of dollars earned, well it’s hard to say. I make anywhere from $100 to $750ish per load and I’ve done tons this way. Would hate to only be able to do that if I was sitting at my work station. What’s more I can send and receive faxes from my phone so if I need to get a driver a bill of lading, I can do that from my chair on the beach. Just have to set my beer down for a minute :slight_smile:

3 Likes

Oh I know it’s just a running joke in the family. My boys and even my step daughters keep telling they’ll show me how to do it. I just don’t want to have to get a huge data plan. I’m just being frugal, according to them I’m just cheap lol

3 Likes

So I’ve used a few of the tools listed in this thread and verified my pc is clean. I’ve been getting quite a bit of redirects today. The worst one happened just after clicking:

It took me to a page on … and ESET blocked a trojan.

Please remove the takeawayfund URL :wink:

#Assuming your using Win OS

Redirects are a sign of adware, you could run malwarebytes anti-malware: https://www.malwarebytes.com

You could use CCleaner to clean up ALL application history and browser files:
https://www.piriform.com/ccleaner/download

You can manually delete your TEMP files by doing the following:
Press winkey + R OR just open the run box
Type %temp% and press enter
Verify your inside your TEMP folder
Delete everything in that TEMP folder

You can also check your startup for anything suspicious:
Open the Run box as above
Type msconfig and press enter
Select the startup tab
Untick anything suspicious

1 Like

The URL is gone. I forget a list of all the URLs are listed at the top of the thread without any context.

I’ve used Malwarebytes/Spybot/Comodo/Hijack This/CC Cleaner/SuperAntiSpyware in addition to ESET and can’t find anything. Also tried Chrome in safe mode and Firefox with the same results. Editing the startup programs via msconfig is something I regularly do as well. I guess the problem could be on my end, but others have reported the same thing, so I doubt it.

I’ve been thinking about a format anyway, so I’ll see what happens after a clean install.

Pop-under when opening a recipe:
http://www.digitalprivacyalert.org/lnd/PU/stopgoogle-UK.html?subid=qXbQCY5CKN-57b35ba21d880213068b4a97&l=514&ept=96qitnKV33HiruxN1%2Bb1QqKgKtDH75K%2F02OuHh0JtVv%2BEbWX1II%2B7AtID49FErN%2FfYx%2Bf6KfCd4QaXxL%2Fz1d8Q%3D%3D&o=6-396

1 Like

Sounds like youve covered your bases already with the multiple scans.
For me, malwarebytes while in ā€œsafe mode with networkingā€ usually does the trick. I like super anti spyware also as @Scottes777 mentioned, but for as much of the tracking cookie type crap it finds, it doesnt do much for me in the way of more intrusive or disruptive malware/spyware. Avg used to be my go to scanner but i really havent liked them for a couple years now since they switched layout to fit windows 8 style and such more. Not a fan of that fuckery, the pop ups avg gives is more annoying than just about any virus (except maybe ā€œfbi moneypackā€).

Thanks mate!

You could have a rootkit. By replacing system files they can go undetected and are difficult to remove

http://www.microsoft.com/security/portal/mmpc/threat/rootkits.aspx

There’s a Windows Command Prompt you can type to scan for root kits. I won’t post any executable run-as Admin commands here …just google

Also there are LSPs ā€œLayered Service providersā€ which infect your TCP/IP stack (Winsock) and those can be difficult to find and fix. These are usually visible as URL redirects (and popups) to generate Ad click revenue for the hacker.

1 Like

Its an ongoing problem for me, when idle at home page I’m getting pop ups. Only for ELR, not on the forums however, I never get them on any other site. I’m not sure why this idea is floating around that it can’t be a problem on the page.

If it’s on the page, you’d expect more people to be having similar issues.

1 Like

agreed, but when multiple parties are experiencing the same thing solely on one site, starting at the same time, doesn’t that also tell us something?

2 Likes

In malwarebytes settings the root kit search isn’t checked by default, try a full scan with that on

Last night I did a clean install of Windows 7. I got one popup last night after the format and one this morning. I finally went through the Adblock settings to see which one was making the recipe data disappear. It’s the Fanboy’s Annoyance setting. With that disabled ELR works fine and so far no popups.

2 Likes

Hijack when following an ELR recipe link from the forum:
http://date-for-adults.com/?u=gvdkd0x&o=5emg9u1&t=tgdt#

I can’t replicate it. This is annoying the crap out of me!
I know it’s a pain, but if you can activate the developer console and check off ā€œpersistā€ and log what’s going on under ā€œnetworkā€, I might be able to pinpoint what’s going on. It’s annoying and damn confusing, so not everyone can do this. I’ve tried, but as I said, I couldn’t replicate it :confused:

I’m in the developer console, but don’t see anything labeled ā€œpersistā€ here… I’ve went through all the settings (I think anyway). There is a box labeled ā€œpreserve logā€ on the main console screen if that’s got anything to do with it.

Edit: Is this what you’re referring to? This came from http://stackoverflow.com/questions/5327955/how-to-make-google-chrome-javascript-console-persistent


So, my questions is: is there a way to make Google Chrome JavaScript console persistent? (And if yes, how?)

Update: Copying the answer here, if anyone’s still looking for this, Chrome 14+ has a setting in Developer Tools > Settings labelled ā€œConsole: Preserve log on navigationā€.

Ah. I use FireBug in Firefox - In Chrome it’s ā€œPreserve logā€ :slight_smile:

EDIT: The result can be exported somehow - In Chrome you can save a ā€œHARā€-file which can later be analyzed…

1 Like