Annoying scam pop-ups ! (1 Viewer)

[Busman]

Another one on android only getting these on MHF
Get a warning from McAfee

 

[JockandRita]

Using Ablock Plus, I don't get any of those annoying adverts on either the Laptop, PC, or Android Tablet.
I don't do Smart Phones.................................yet.

Good luck eradicating the problems.

Cheers,

Jock.

 

[AXO66]

Not getting anything at all.

Is this brcause I am using Apple stuff! Or is it because I,ve downloaded Firefox Focus a web browser which claims to leave nothing on your device . i have linked it to work through Safari .

Please don’t ask how, I can’t remember the details other than it’s in apples general settings somewhere.

Just mentioning this, as answer might be via Firefox Focus and not just apple devices.

 

[klaatu]

Perhaps a solution might be that paid up subscribers don’t get shown adverts in the first place?

 

[DBK]

View attachment 208436 Another one on android only getting these on MHF
Get a warning from McAfee

From what I understand of this the trigger is the adverts. Which are either on the right or bottom of the screen. You could go onto another site and have the same issue - if it had similar adverts.

^{_{Subscribers  do not see these advertisements}}

 

[Boringfrog]

From what I understand of this the trigger is the adverts. Which are either on the right or bottom of the screen. You could go onto another site and have the same issue - if it had similar adverts.

No adverts on the site when view on a phone. OH and just have the site redirects after deleting cookies etc.

 

[DBK]

No adverts on the site when view on a phone. OH and just have the site redirects after deleting cookies etc.

If you are viewing on a phone the adverts will probably be at the bottom. Try scrolling down.

 

[Antique]

Good point @DBK .
Got an ad I've never seen on here before. .
'Latest diva pics and vids' !!!!!!!

 

[Busman]

Bugger just had the Asda add again then my security kicks in

 

[Dorwyn]

I've had this in the past, but there was also a recorded voice warning not to quit as this would wipe everything from the hard disk. I realized that it had happened because my laptop had auto selected while i was moving the cursor via the finger pad and inadvertently paused on an advert on the side of the screen (occasionally I have to cancel auto select in the settings menu, it sees to revert to it now and then). The ad was a graphic/video file, and would probably have spread malware if I had clicked on the suggested select now button. I crashed out and all was well. A Malbytes scan found nothing on reboot.

^{_{Subscribers  do not see these advertisements}}

 

[jollyrodger]

Latest one for me just :

And I have the latest updates
And again only on this forum !!!

 

[Gromett]

Sorry for not responding, I missed the notification that further posts had been made.

Reading what you have all posted it appears to be caused by a "SPECIFIC" advert served by google. The advert will have javascript in it causing the redirect/pop up message etc etc.

What we need to do it track down the specific advert that is causing it.

There is no need to post screen shots of the effect of the redirect/popup. The infection warnings don't actually give me any information to be able to track this down.

If you can do the following it would really help me track down which adverts are causing this.
1) When you get the message/redirect.
2) Exit the warning and go back to the motorhomefun page and see what adverts are displayed.
3) Take a screenshot of the adverts and post here.
4) Clear cache/cookies then Go back to step 1

Once we have seen a number of you post a bunch of adverts on screen when this happens we can correlate the data and see which specific advert is causing the issue and report it to google.

We really need this diagnostic info to be able to fix the issue unfortunately.

I will just re-iterate. This is not an infection of the forum itself. The malware/adware is not being served by us and does not come from our server. Our server is clean and fully protected.

The adverts appear to be targetted specifically at forums and then sub targetted at android users. Quite a few other forums are having the same issues.

If you can follow the steps above it would be really helpful and appreciated.

 

[Gromett]

Possibly interesting update from my last post. Having disabled javascript and using my phone on this site for an hour or so the "shark" has kept away.
So I put MHF as an allowed site which could run javascript. This was needed as the site sort of worked without javascript but the menus were a bit muddled.
So, I enable javascript and within 30 seconds he's back, but not as we know him.

Which is basically just a blank page and I guess is to be expected as shark dot com can't run javascript.

I noted in the URL you had a UTM_Medium= link.
Next time it appears can you post the full URL please. UTM_ are advert tracking links. It is possible that this may help.

 

[Gromett]

https://arstechnica.com/information...ake-agencies-delivered-1-billion-ads-in-2017/

 

[Boringfrog]

Just happened reading this post. No matter how much I click the back button it will not go back to Fun, just keeps reloading the spam pages, 30 in total. I took a screen shot of one suspicious ad just before the redirects. I went into history to get back to the last Fun post I was looking at and took another screen shot. Hope this helps @Gromett

^{_{Subscribers  do not see these advertisements}}

 

[JockandRita]

Hey, maybe I'll get rid of that Adblocker Plus, and get myself a Smart Phone after all.

Cheers,

Jock.

 

[DBK]

I noted in the URL you had a UTM_Medium= link.
Next time it appears can you post the full URL please. UTM_ are advert tracking links. It is possible that this may help.

I managed to resurrect it from the browsing history after finding that blank page. Of course when I first clicked on it the wretched thing did its stuff so I disabled java script again and caught it. I've modified the link of course by adding (space) and (dot) to disable it.

http:// (space) sl.rgshark (dot) com/?utm_medium=96dd8b3ba7d8abe8c23eb15d5f738425bb617ea6&utm_campaign=GB&cid=196462038999382137


Your arstechnica link was very interesting but I didn't see any instant cure for this.

 

[Gromett]

http:// (space) sl.rgshark (dot) com/?utm_medium=96dd8b3ba7d8abe8c23eb15d5f738425bb617ea6&utm_campaign=GB&cid=196462038999382137

Unfortunately they have encoded it so not much use in this case

 

[Gromett]

Just happened reading this post. No matter how much I click the back button it will not go back to Fun, just keeps reloading the spam pages, 30 in total. I took a screen shot of one suspicious ad just before the redirects. I went into history to get back to the last Fun post I was looking at and took another screen shot. Hope this helps @Gromett

Ah so, you can no longer view the page that had the advert on it in the first place?

 

[DBK]

Unfortunately they have encoded it so not much use in this case

But you have to admire the little blighter. It's clever.

^{_{Subscribers  do not see these advertisements}}

 

[Gromett]

I am discussing this with @Jim at the moment to try and track the specific adverts if we can..

 

[Gromett]

ok. I think I may have a solution for chrome users....

I am not sure of the safety or compatibility of this fix so use at your own risk.

go to
chrome://flags
search for framebusting

enable this feature. The full name of it is framebusting-needs-sameorigin-or-usergesture

What his does is prevent an iframe (like a google ad) from redirecting the whole page UNLESS the origin is the same or a user gesture invoked it.

 

[Gromett]

PS: If it breaks anything you can reverse it.

 

[Boringfrog]

Ah so, you can no longer view the page that had the advert on it in the first place?

Possibly via your history but not by using the back button.

 

[Gromett]

https://gadgets.ndtv.com/apps/news/google-chrome-blocking-website-redirects-1773284

^{_{Subscribers  do not see these advertisements}}

 

[DBK]

Thanks Karl. I've just done that, there are a lot of options so I suggest folk use the search field (with the magnifying glass) to find it. I just had to add "frame" and it found it. Then click on "default" on the right and a menu opens as shown below. Then select Enable and a button will appear at the bottom to "Relaunch" Chrome. Click on this too.

 

[Gromett]

there are a lot of options so I suggest folk use the search field (with the magnifying glass) to find it. I just had to add "frame" and it found it. Then click on "default" on the right and a menu opens as shown below. Then select Enable.

That's why i said

search for framebusting

 

[Boringfrog]

That's why i said

Done, will keep you informed.

 

[DBK]

That's why i said

Just trying to help. The menu of options is huge. Scrolling down to find a specific entry was a bit slow.
But this looks promising.

 

[peterc10]

OK, how to I get to frame flags in Android Chrome. I can get there in my Windows 10 Chrome browser but all I get when I put it into Andoid Chrome is a search that comes up with info about it, but no actual page for it.

^{_{Subscribers  do not see these advertisements}}