very annoying add - errorsafe

[dodecahedron]

i get this annoying thing every few days.

when i first load the CDRLabs forum page - before logging in, i get the 1st pic. it has a popup on top of it.
i kill the popup by clicking on the X and then the blue window is suddenly replaced by a new one that is maximized (on all of the screen) without the possibility of resizing it. see 2nd pic.
after it has done "scanning" my computer and warning me etc. i kill it with the X and again i get again the popup in pic 3.
again i kill it and get another window like in the 2nd pic or something and then it will finally die out.

can you get rid of this annoyance ?

[redk9258]

Firefox's best friends!

http://adblock.mozdev.org/

https://addons.mozilla.org/extensions/m ... hp?id=1136

[Ian]

Ack.. that's an annoying one. I'll try to get rid of it today.

[cynthia]

Ack.. that's an annoying one. I'll try to get rid of it today.

Amazing. For several months you still haven't done that.

It this forum a joke with the only purpose to hijack and infect the members computers?

Will be interesting to read your answer.

[Ian]

Wow.. a worthless post from someone with only one post under their belt. Please read the forum rules before posting again.

I said I'd try and I did. I figured it was gone as I have not gotten any complaints since then. I will check again though.

Instead of criticizing and accusing, it would be helpful to know what ad network it was with (Ex: valueclick, casale, etc). This will help me narrow it down more quickly.

As far as Errorsafe goes, this is primarily spread through spyware.. something CDRLabs has not and will not ever distribute.

[cynthia]

Thanks for your warm welcome.

Not sure what postcounts have to do with this matter.

I was browsing this forum as a non registrered member. It infected my computer. I registered to the forum to make you aware of the problem.

Using IE6 and used this link: http://www.cdrlabs.com/

[Ian]

While I'm not discounting your claims, I would like to see some proof that the spyware infecting your computer came from one of the ads on this website.

[cynthia]

One browser window open and the as soon as you get to the forum - my Firewall noticed my that something was trying to be installed on my computer and also trying to get access thru the firewall.

Google is not the trigger - so it can only be the same ads as the thread starter also had problems with. Could very well be that it only triggers not logged in members.

[Ian]

My gut feeling is that you already have spyware on your system that is activating when you go from one website or page to another. A couple of questions..

1. Does your firewall say where the program being installed was coming from?

2. Are there any odd ActiveX plugins under Tools->Managed Addons?

3. Are these pop behinds or popups?

Again, I don't think this was caused by any of the ads on CDRLabs but if you post a screenshot of Managed Addons and a hijackthis log and I'll see what I can do to help you clean up your computer.

I also apologize for my less than warm welcome. As the people on this forum know, I'm usually an easy going guy. When a new person joins the forum and starts throwing accusations around... let's just say I don't take shit from anyone.

[Ian]

Info on ErrorSafe..

http://www.symantec.com/security_respon ... 99&tabid=1

[dodecahedron]

Ack.. that's an annoying one. I'll try to get rid of it today.

Amazing. For several months you still haven't done that.

It this forum a joke with the only purpose to hijack and infect the members computers?

Will be interesting to read your answer.

Ian got rid of it on the same day i complained.
now that's good service! you were in the wrong.

[Ian]

No, cynthia was right. I checked valueclick and two ErrorSafe campaigns had snuck back on there. They were only for International (non-US) viewers and that's why I never saw them. In any case, they're gone again. I apologize for any inconvenience.

[cynthia]

This is from my firewall. The major problem is that you don't need to press any of those adds - it just activates itself for download as soon as you enter the forum adress.

Perhaps it does affect more persons - I don't think people registers just to report it.

No problems to remove it with AdAware.

Description ErrorSafe Installer requested permission to access the internet.
Rating High
Date / Time 2006/08/06 19:22:12+2:00 GMT
Type New Program
Program C:\WINDOWS\Downloaded Program Files\UERSL_0001_N91M2407NetInstaller.exe
Source IP
Destination IP 66.244.254.181:53
Direction Outgoing (connect)
Action Taken Blocked (once)
Count 1
Source DNS
Destination DNS stats1.reliablestats.com

[Ian]

Yeah, it looked like the one was downloading a file and then prompted you to click OK to install it. You gotta wonder how they get around IE's security to do that.

[cynthia]

No, cynthia was right. I checked valueclick and two ErrorSafe campaigns had snuck back on there. They were only for International (non-US) viewers and that's why I never saw them. In any case, they're gone again. I apologize for any inconvenience.

No need to aplogize. My only goal with my first post and the rest of the posts was to make you aware of the problem with ads from that company.

Thanks for solving the problem. Atleast no other ones will need to get this problem in the future.

[cynthia]

Yeah, it looked like the one was downloading a file and then prompted you to click OK to install it. You gotta wonder how they get around IE's security to do that.

The problem with that "do you want to install it" box - is that what you do - answering no, yes or close the box down - it triggers the installation.

[dodecahedron]

when i had said cynthia was wrong, i was referring to the "several months" comment. not the other stuff.
in any case good thing it's gone. as usual you fix things very quickly as cynthia can now see.
BTW i didn't see those ads again because of the subscription ...