[Only Topic] Malicious "Microsoft" Ad Pop-up

Topic made into an only topic. Please only post in this topic if you are having the similar issue.

Technical Details

Forum version : #phpBB3
Position : Administrator
Concerned browser(s) : Mozilla Firefox
Screenshot of problem : https://i.servimg.com/u/f35/19/10/96/61/forum_11.jpg
Who the problem concerns : Yourself
When the problem appeared : Today 7/15/16
Forum link : http://mst3kcaps.forumotion.com/

Description of problem

Starting today, the attached ad appears right after opening my forum's home page. I have had several pop up in the past, but this one is non-stop... and with alarms.

Is this something that comes through your paying advertisers? I haven't had any reports of this type of ad popping up from other members... there aren't many.

Thanks for the help!

---

Added by APE
Please post the following in your report about this problem.....
Copy and past this code and fill in the missing parts

Code:

[b]URL of your forum:[/b]
[b]Browser this problem is showing in:[/b]
[b]Screen shot of warning:[/b]
[b]Number of users having this on your site:[/b]
[b]Do you have ad's on your forum [/b](please just say yes or no )[b]:[/b]

SubBot wrote:

Technical Details

Forum version : #phpBB3
Position : Administrator
Concerned browser(s) : Mozilla Firefox
Screenshot of problem : https://i.servimg.com/u/f35/19/10/96/61/forum_11.jpg
Who the problem concerns : Yourself
When the problem appeared : Today 7/15/16
Forum link : http://mst3kcaps.forumotion.com/

Description of problem

Starting today, the attached ad appears right after opening my forum's home page. I have had several pop up in the past, but this one is non-stop... and with alarms.

Is this something that comes through your paying advertisers? I haven't had any reports of this type of ad popping up from other members... there aren't many.

Thanks for the help!

One of our members has reported this too.

whitelightningii.forumotion.com

I've just looked at your forum and i think you have links on your forum that are making this popup as you look at the bottom left hand side you see sites loading up all the time.

this is not our Ad's that are doing this this is down to links on your forum.

as you can see the little blue wheel is always going round this tells me your forum is always looking for codes i think this is on your scrolling announcement.

Hello i have found other topic's the same as this one
https://help.forumotion.com/t105791-website-has-been-reported-to-microsoft-for-containing-threats?highlight=microsoft

it is down to member using IE ask your members to update there IE or use a new browser.
This is nothing that we are using on our forums that make this pop up

make sure all your links to other sites are not linked to Microsoft or bad sites.

this is in your ad system as we are having same problem with some people and we link to nothing malicious.

http://mugenmultiverse.fanbb.net/forum

multiverse wrote:this is in your ad system as we are having same problem with some people and we link to nothing malicious.

http://mugenmultiverse.fanbb.net/forum

it has nothing to do with our ad's i am on a site that has no ad's on it as we have paid for them to be removed and still there was this problem with one of the members using IE we got this member to update there browser and clear the browser and also use firefox and bam it was no there no more this member is now not having a problem at all so i can say this is not our ad's system its a browser safe problem that has nothing to do with us what so ever.

if that is the case, then that is more proof it is on your end causing these problems and until it is fixed, our posting activities and communities will suffer until you guys figure it out. so please do so soon and consider disabling certain things on your side until this all is rectified.

I get the same thing http://dimeolas.forumotion.com/ and it isnt even built, there are no links on my forum, looks like will be going elsewhere.

This problem has been reported to the head office and we will see what the office comes up with on monday but it may take longer to find out where this is coming from.

We ask you to post on your forum that there is nothing to worry about and to use a different browser then IE until this is looked at.

Please fill in this so we can find the patten here

Code:

[b]URL of your forum:[/b]
[b]Browser this problem is showing in:[/b]
[b]Screen shot of warning:[/b]
[b]Number of users having this on your site:[/b]
[b]Do you have ad's on your forum [/b](please just say yes or no )[b]:[/b]

URL of your forum:
Browser this problem is showing in:
Screen shot of warning:
Number of users having this on your site:
Do you have ad's on your forum (please just say yes or no ):

I was getting this late last week (haven't seen anything over the past day or two) but I thought I would report it anyway.

URL of your forum: http://fromyesterday.forumotion.com/ (using phpBB3)
Browser this problem is showing in: FireFox / Google Chrome / Safari
Screen shot of warning:
Number of users having this on your site: 8
Do you have ad's on your forum (please just say yes or no ): yes

Hello,

Is the problem still occured now or is it over?

Hello Leviosa,

I checked with the other members and it seemed like everything was good over the weekend - however there wasn't a lot of posting going on. I'll keep an eye out and let you know if the pop-ups continue.

Thanks!
Morawena

Okay thank you, I let this topic open just in case.

sorry guys but will have to look somewhere else, I cant go to the forum to work on it without malicious popups and ransomware, just dont want to take a chance. I like the way my forum was going to look, I hope you get it cleaned up.

dimeolas wrote:sorry guys but will have to look somewhere else, I cant go to the forum to work on it without malicious popups and ransomware, just dont want to take a chance. I like the way my forum was going to look, I hope you get it cleaned up.

I am sorry you feel you have to leave us over this we are working hard on getting this fixed. We understand your frustration and we really hope we can get this fixed as soon as we can.

We are starting to collect info from our members, but I thought that I would pass this along now.

1.URL of your forum:

http://samcelt.forumotion.net/

One of our members came up with the following:

http://www.stayprotected.com/2014/01/google-android-safe-com-virus-pop-up/

Google-android-safe.com virus warning pop ups on Android
January 23, 2014Adware
Beware of new misleading pop ups from http://update.google-android-safe.com that have recently started to occur on eBay. I bet similar misleading virus pop ups will occur on other websites as well but probably with slightly modified or completely different warnings. The latest pop ups say that your phone or tablet is infected with viruses. Here’s an example:

Warning:Your phone has (13) Virus!

The Virus may comput you date .

Please follow instructions to remove Virus

update.google-android-safe.com pop up

It’s nothing new really and it even has typos. The main goal of this fake virus warning is to scare you into thinking that your phone is infected with viruses. If you click OK you will be redirected to Google Play to download a security app called 360 Security. It’s a free antivirus app developed by Qihu 360 Software Co., LTD based in China. Of course, it doesn’t mean that other users will be redirected to the same product but at least for me it was the 360 Security app. The app was recently updated and even though it has many positive reviews, more than 40,000 gave it 1-2 starts rating complaining about memory usage, unethical advertising and some users even say it’s a fake app. Since it’s promoted in such a questionable way, I wouldn’t use it. Besides, there are many great apps from well known and trusted antivirus vendors.

In case you are constantly getting fake update.google-android-safe.com pop-ups on your phone or tablet, go to device’s Settings menu > Apps or Application manager (this may differ depending on your device). Uninstall apps that may display these pop-ups. Most likely, your device is infected with adware that displays fake virus warning from google-android-safe.com.

_________________________________________________

I will send more info later, after I get more input.

gyso

well just speaking for me, this is the only site where I get these. I have scanned with updated defs with McAfee and Malwarebytes so seriously doubt its on my end.

My members are still getting the ads and for us Free Forum is the only site where we are getting these pop-ups. (Should have mentioned that in my original post.) We have both PC and Mac users who are getting these messages.

Thanks!
Morawena

I have multiple member on y forum getting these types of messages.
http://944hybrids.forumotion.com/
URL of your forum:
Browser this problem is showing in:Chrome, IE (what is know as of now
Screen shot of warning: do not have one.
Number of users having this on your site: 4 reported n last 3 hours
Do you have ad's on your forum (please just say yes or no ): yes

We have a moderator who used to own an Apple store. He suggests deleting cookies. Hopefully it is just that simple.

...granted im not on an apple but I deleted cookies and didnt help

Forum version : #phpBB3
Position : Administrator
Concerned browser(s) : Chrome
Screenshot of problem : https://i.servimg.com/u/f35/19/10/96/61/forum_11.jpg and two others not here
Who the problem concerns : Yourself and members/guests
When the problem appeared : Today 7/15/16
Forum link : http://30dd.forumotion.com/
Yes There are ad's

Hello,

From now on please post in the actual only topic and also please dont make only topics.

Thanks!

-Brandon

Topic merged with the actual only topic ~ brandon_g

Hey,
One of my forum members posted this reply to the issue:

another forum im on (cobaltss.net) had the same issues, they found the source was from the ad bot that runs on the site. the ad company was unknowingly hosting ads that the owners were running malware in.

Hope this helps

sooo, the ads we have to have are screwing it up....

Hello @Dimeloas,

Can you tell me if the pop ups are showing more than 2 times a day when you're going on your forum? See the thing is, as a new forum, your forum has zero point of activity. When a forum has zero point of activity there's a pop under that opens normaly every 12 hours for each user. It is indeed an ad, an advertising only uses on forums with absolutely no point so that it doesn't really bother anybody (normally). To stop the pop-unders, try to post some messages so that you can gain some points of activity and get rid of the pop unders.

If it's not that then, we will need the banner you see on your forum when the redirection occures if you can catch it. If possible with the link (right click copy the link) and the code (right click inspect copy the code). I would understand if it's not possible, just know that we're working on it.

Hi

i got a message from several visitors of my forum that my forum contains malware. Someone wrote me following:

http://reasonandscience.heavenforum.org/

I have been viewing your materials and although long, they are good. But when I click links to your site, I get pop ups, including one that was pornographic in nature and also one that highjacked my browser while on your page, purporting to be from Microsoft, saying I have the Zeus virus and telling me to call a certain number. I have run several scans and followed the removal instructions, but none of the trojan files show up. This may be because I have been running the computer on safe mode with networking for several weeks. So far, I only experience the problem when I go to your site, so I think it has been compromised and that my own unit has been protected by operating in safe mode.

i ask the forum support team to solve the problem.

thanks

We will need the banner you see on your forum when the redirection occures if you can catch it. If possible with the link (right click copy the link) and the code (right click inspect copy the code). I would understand if it's not possible, just know that we're working on it.

If you can provide this, it could help us.

i never see any banner. Its the visitors . i will ask them