« BACK  |  PRINT

RS

EDITOR OF REDSTATE

Need some help

By: Erick Erickson (Diary)  |  January 8th, 2009 at 10:58 AM  | 

RESIZE: AAA

We identified the problem with that pop up window that kept coming up. It appeared to be a remnant ad server spitting out some malicious javascript. We shut it down the other day, but it has started happening again this morning.

The problem appears to have come from a small remnant ad provider, and that provider has been removed.

Tags:

COMMENTS

POSTING RULES  |  LOGIN TO COMMENT  |  REGISTER TODAY
  • MetaCosm

    If you still get the page hijack (virus scanner fake page) after 3:30 PM EST STD (January 8th, 2009), please post on this thread.

    Thanks so much for your understanding.

  • hogiewan

    I just got a popup for some fake Anitvirus

  • MetaCosm

    If you can manage to save the source file or get any extended info when you see it, please pass that on to me.

  • MetaCosm

    Hoegiewan–

    I am trying to recreated it, so any information you can give me on it would be terrific.

  • David_Kirby

    MetaCosm, when I get it agian, I’ll provide details…

  • jnsmith76

    11:52am Eastern

    Popup sighted while loading main page. Redirected to link below:

    (Link logged by management and removed — Thanks!)

  • jnsmith76

    Not currently on my forensics machine so I did not try to isolate program.

  • MetaCosm

    Thank you very much jnsmith!

  • crousehold

    Just got the popup when I was loading the front page. 1:08 Central Time. I didn’t get the link though. Sorry!

  • woodsman

    something similar is going on over at Human Events.

  • mediumcool

    3:07 pm eastern time

  • Jaded

    maybe the virus detector is better here :-) which means I need what they have at home!

  • hoosierteacher

    about 3pm est, 1-8-09. My page was redirected, but at least I didn’t get a message from my anti-virus program that a virus had to be moved to a vault.