Forum Moderators: martinibuster

Message Too Old, No Replies

Strange spyware or malware took over adsense ads

         

obmob

4:58 am on Aug 27, 2006 (gmt 0)

10+ Year Member



Everywhere i go, not just in my sites, googles adsense is replaced with some sort of iframe, inside there is definitely a not adsense ad... of course, google doesn't use iframes and display html code inside.

Have used several spywares, all of them say i'm clean, i searched for virus... nothing. <.<

Simply annoying, has anyone had a similar experience... i need help, don't know what to do. :(

Happens in IE & Firefox >.<

Thanks

Etonian

5:06 am on Aug 27, 2006 (gmt 0)

10+ Year Member



It sounds as though something has modified your 'hosts' file.

Suspecting that the topic would have been covered before, I did a quick search and this thread might be relevant:

[webmasterworld.com...]

I'll take a closer look at the search results and post some more links.

Etonian

5:39 am on Aug 27, 2006 (gmt 0)

10+ Year Member



No, I don't see anything else which is directly relevant. If the problem is in your hosts file though, then the link above should hopefully be all the information that you need. Open your hosts file in Notepad, and if you see a line which contains a reference to pagead2.googlesyndication.com like this:

###.###.###.### pagead2.googlesyndication.com

... then just delete that line, then save the file and close it. Then close any browsers which are open, and then re-open them and see if that's fixed it. For Firefox that should be all that's needed but I think IE may need a computer restart.

fredw

2:20 pm on Aug 27, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



I test things at work by changing my hosts file all the time. IE does NOT require a computer restart for a new hosts to take effect. Just a closing of all the browser windows will do it.

By the way, the hosts file in windows can be found in:

\WINDOWS\System32\drivers\etc\

sauron0512

2:30 pm on Aug 27, 2006 (gmt 0)

10+ Year Member



My host file contains links to many websites which i never even visited.

I have never even heard of those sites....

Should i delete all the entries?

encyclo

2:37 pm on Aug 27, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



The hosts file should only include one line unless you specifically want to add extra lines (for example for an intranet). So keep the following:

127.0.0.1 localhost

And wipe all the rest. Then use your preferred anti-virus and anti-spyware tools to find the rogue program which added the entries.

The hosts file is a way of defining the IP address for a site bypassing DNS - so spyware can point the name of the AdSense servers to their own server and display their own ads.

obmob

5:15 pm on Aug 27, 2006 (gmt 0)

10+ Year Member



OMG! i thought i searched... i guess i didn't do it very well... >_<

It's the second time this happens to me, last time i had to make fresh install of everything u.u

I'll try this and let you know, thanks.

It was that hosts problem. I remember i had a week fight with google guys, they had no idea what could be wrong... after that i formatted my PC.

Thank you guys.

greedy player

6:00 pm on Aug 27, 2006 (gmt 0)



When you've studied this kind of technology you wonder to yourself...

Are my members infectected with this spyware also?

Should we run a script to check if they get he desired page for adsense or not.. and if not .. give them details about it?

If this is true then maybe it's a reason for sudden decrease in CTR and page impressions alike?..

Anyone wish to contribute efforts into the ultimate ANTI-SPYWARE of ADSENSE.

to the user infected. please inform adsense about the site replacing adsense banners it will help all of us. :)

fredw

6:04 pm on Aug 27, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Should we run a script to check if they get he desired page for adsense or not.. and if not .. give them details about it?

I'd be interested to hear feedback on this idea. As all the bad stuff is happening on the browser end, I don't think there's anything we can do to ascertain whether third party scripts (like Adsense) are properly loaded or not. What's everyone else think?

Etonian

6:15 pm on Aug 27, 2006 (gmt 0)

10+ Year Member



It was that hosts problem.

That's good. Thanks for letting us know.