Deceptive Ads and page redirects

Our forum is http://halo-fixes.findforum.net/

At times when users are browsing our forum they are getting redirected to pages/sites that claim "your Java is out of date" or "you need to update your Flash" and then they start a file download (you are prompted for a location to save the file).  

But if you look at the URL of the page, it has nothing to do with Java or Flash, it is clearly a deceptive attempt to get you to install some other software.

I suspected this might be coming from some other free widget I was using but I have removed everything now except for a snippet of Javascript that adds a Google Translate button (which came direct from Google).

And my browser/computer is free of malware (I'm very careful).

Is there anything you can do to prevent this type of deceptive (malicious) ad? If I give you details of the page it redirects to can you remove that advertiser from your cycle?

Here is one example:

Spoiler:

Are members pressing the ads or links?

No, no clicking required. As soon as the forum page loads you are redirected away from our site (same window, not a new tab) and to the malicious page.

BTW, I do not have this problem with any other (non-forumotion) websites I go to... which is another confirmation that it's not my browser or computer that is the problem.

As another example, just now I got immediately redirected to
http://mmotraffic.com/redirect2.php?go=https%3A%2F%2Fmyaccount.elswordonline.com%2Fregistration%3Fsite%3DIQU%26pub%3D9711%7C

which then redirected me to 
https://myaccount.elswordonline.com/registration?site=IQU&pub=9711|

Well, when I visited your forum, I was not redirected.

It doesn't happen all the time, I guess it depends which ad is being served up. And it appears the ads are somewhat tailored to your geographic region... I'm in Canada so I'm probably getting a different ad cycle than you.

I'll post this one last example. In this case I switched to a different browser (IE instead of Chrome), and I removed the last bit of personal Javascript from my page (the Google Translator button) just to be sure that wasn't to blame.

I was writing a post, I hit the Preview button (which caused a new ad to load) and I was redirected to 360nowalat.com and this fake warning about my Flash:




I then clicked the red Close X and this page loaded:



It is a fake Flash Player update page, and as you can see at the bottom it immediately tried to send me a "setup.exe" file from "get.file2desktop.com"...  completely unrelated to Flash and probably a malicious bit of malware.

Luckily I had turned on network tracing this session so I was able to backtrack somewhat how I got there. I can send you the session trace in a PM if you want but it is very technical.

I'm driving a lot of people to the site (over 1000 per hour today) to see the information I've posted and they are all viewing your ads and hopefully bringing you revenue. 

But the bottom line is... I don't want to infect my users due to malicious ads. And I'm sure you don't want a reputation for serving malicious ads. Is there anything you can do about it?

That last screenshot does look like the real page for updating your flash player.

I will report this to Buttercup.

Hello

The problem of Java ads has been reported to our technicians.

I have created an "only topic". Thanks for reporting the problem here with all necessary information:

https://help.forumotion.com/t133064-913-java-ads#894230

Thanks