Page 1 of 1

What is this?

Posted: Wed Aug 14, 2013 9:10 am
by Arbogast
I have been seen this the last couple days and I noticed that many mess are peppered with it. What gives?

Re: What is this?

Posted: Wed Aug 14, 2013 2:15 pm
by Caedo
It's an advertisement, nothing Freeciv-related.

Re: What is this?

Posted: Wed Aug 14, 2013 7:27 pm
by JTN
When/where are you seeing this? When visiting forum.freeciv.org? (The stuff in the background of your screenshot looks vaguely like this phpBB forum, but I don't recognise the content.)
There should be no ads served by forum.freeciv.org.

Re: What is this?

Posted: Wed Aug 14, 2013 8:46 pm
by Arbogast
Ok! Since my last post, a lot of those spams have disapeared...
But please note, there was one in the banner, in the word 'free!'
Then, I found another one, here it is. It's a meeting site for sex, for the love of Mary!
I'm sending the whole screen this time.

There are more of them, I'm sure, but I didn't feel like checking every post.

Re: What is this?

Posted: Thu Aug 15, 2013 5:36 am
by HanduMan
I don't think they are coming from this forum. Sorry to say but it seems your computer is being attacked. It has most likely been infected with some malware that loads and displays random ads while you're browsing the net.

Or are you saying it only happens with this forum?

Re: What is this?

Posted: Thu Aug 15, 2013 10:11 am
by Arbogast
Thank you for your pertinent comment HanduMan.
So here is what I did after reading your post and logging out:
* Ran PCCleaner and a lot of stuff got cleaned, but didn't notice any files about the spams.
* Ran ADWcleaner found very little but I supressed those files too.
* Went to other phpBB sites and they are infected too, which answers your question.

Came back here and found less spams but still some, like this one:

Re: What is this?

Posted: Thu Aug 15, 2013 1:29 pm
by Caedo
It seems special keywords(like "free", "your computer" and "money", as I could see in your screenshots) are turned into links that, upon being clicked on, show an advertisement. I have no idea how to fix that though, my guess would be uninstalling your browser and removing all browser data(that will remove bookmarks and login data too, so be warned), then reinstalling the browser again. Though I don't know if that will work, you could ask somewhere else on the internet. What antivirus software do you use?

EDIT: You could also check your browser plugins and addons first and see if there's something that shouldn't be there.

Re: What is this?

Posted: Thu Aug 15, 2013 1:58 pm
by Sarilho1
It also happens with my sister computer, but not in mine, in many sites. It's not forum-related.

Re: What is this?

Posted: Sat Aug 17, 2013 11:17 am
by Arbogast
Well... THIS IS A MALWARE: "globalconsumersurvey" is a hacker's site.
From the amount of spams, there may be others I'm sure.
And to make things clear, I never implied that this spaming comes from the FreeCiv site.

EDIT a few hours later:
* adwcleaner is not enough, I tried 'iSafe' and altough I didn't understand how it works, it worked.

I seem to have cleared all the malwares, thanks for your sugestions you guys&gals!

Edit2 to Caedo: Your sugestion is not bad but a real pain in the... nose.
I loaded different anti-malwares which did the job OK.
I use three anti-viruses -2 of them from USB keys- but they don't catch malwares, even if they are the three top ranked.