Admin: Malicious Advert

You do know what the solution is don’t you?….

Or as a test turn off your wi fi, then load up singletrack from cached memory and see if it still pops up

FWIW, I’ve only had it once and I’m pretty sure that was before I’d logged on to STW.

I’ve just browsed the site using silk chrome and explorer, no issues some of you guys need to clean your devices up!

Which browser are you all using?

Seems bloody weird to me that it’s only STW and only certain people affected. I might give it a battering during lunch.

In-built browser on HTC phone (i.e. not Chrome) for me.

I’ll get some stuff together when I get a moment, but if it helps, one of the pop-ups originated from ib.adnxs.com

Edit: Chrome on a Nexus 4

Further Edit: ib.adnxs.com does indeed set a cookie in Chrome – Settings > Content Settings > Website Settings, you may see it in there. Which could be a clue. I haven’t had an ad for a while, but I am going to bin the cookie as a first step.

ib.adnxs.com

quick google implies that’s a malware site…

quick google implies that’s a malware site…

It’s not a malware site in and of itself I don’t think, however some browser redirect malware uses that site to generate click-through revenue.

Appnexus is a legitimate ad network. We are looking into what is going on but I learned quite a lot by googling the OP’s pop up message text “Virus affecting your android ? Turn on Virus scanner Now!”.. This issue is not restricted to our site users it seems. It does look like it’s a virus that causes a popup to appear encouraging you to download AV software. It seems to be triggered by opening a browser.
I’ve found the ad campaigns on our sysetm that are being delivered via the Appnexus network. Like I said, it’s a legit ad network but I’m about to turn it off and see what happens.

Thanks to all those sending us specifics via email – It’s helping.

Flashed to downgrade back to 4.3 Jellybean.

With an official RUU or a homebrew ROM? Check the thread on XDA for that ROM, see if there’s any known issues?

Only re-installed a few apps after reading the latest reviews on Play store,

Try flashing again and testing it before installing any other apps.

Just a thought, had you all turned on “Block pop-ups” in your Chrome or Android Browser settings?

Caveat: As this appears to be a virus, blocking pop-ups after the virus has installed on your device may not help as the virus could overcome browser settings.

Ey up Cougar,
Sorry for the confusion, I was downgrading (official build) as a result of other unrelated issues, I just thought I’d add some additional information.
Thanks for the assistance mind, may give that a go tonight.

Block popups is ticked in Chrome, I haven’t ticked it since the reflash – unsure what the default behaviour is or whether this is synced to my account. Closing the settings page and refreshing Singletrack and it appeared again!

Out of edit-time update:
Popup does not appear every time.
When pop up does appear, it is when the banner at the top of the home page displays an Android Virus Scan advert.
The popup appears 7/8ths of the way through loading the page, pausing the page load. After dismissing the popup, the banner at the top loads immediately (showing the virus scan ad). This banner ad then changes, cycling through new ads for other products.
Haven’t managed to catch the banner and find its link, each new ad has a new link…

Scuzz: forum home page or site home page?
ie
http://singletrackworld.com/
or
http://singletrackworld.com/forum/

Forum, there’s a mainsite?! 😉

Only seen it in Chrome, not the native browser.

Looks like it’s from yahoo?

Edit: this is a freshly flashed (Google official) build of 4.1.2 on a GNex, only a few apps installed and they are all mainstream, such as Chrome, BBC news etc. No shitty games or anything. Also not appearing on any other sites.

that’s reminded me, mine was ads.yahoo.com too

Also had this. But only once. Then installed avg and not seen it since

Thanks for all those details. That’s a great help. The hunt is on.

Yes I’ve experienced this too. Have had a few times exactly what Retro83 has pictured above. Also use Chrome.

Gotcha!
The popup appeared, followed by this (see banner):

Link is as follows:

http://ads.yahoo.com/clk?3,eJyljd1qg0AQhZ8mdxLc1RhFejHWnwgaY5HKerfqmg2utV2FjXn6GtKG3vdjmHM4zGGQ4VqNYyKrtju0szudYheZmGGGKN23mu66LkIYW3sTO1iTh8CDqMpPOah80D248zqJ-gx.ID9qAuQQBHqsavVIwsV5ezi.5nED.yCJ-G8.Xl.FHfNt6L9O3Oxj73kVBdfMr0TmH3lSkCUrYE6LUKQL4llJbklJjKOfXqvyvSe3HBP1bL5oGp.nz40BGxyuM10-zoLNkja9GqVot804rDFtp3VfOkkHdneC0ZbJeqSy3fJ5EN.E7GhN,http://super-speed-dating.com/mobile/uk.php

Just got it from that ad up there as well. Brand new nexus 7, fully updated, no dodgy software or apps installed.

Oh come off it.

Sorry chaps, adblock’s going on now 🙁

Just got exactly the same ad and pop-up combination as scuzz.

*is beginning to reconsider previous view that it was the phones causing the problem*

Just to add my experience- running a Nexus 4 and a 7, no AV installed, and have never had a pop up from the site.

Bog standard 4.4 on the 7, and 4.4.2 on the 4.

“Just got exactly the same ad and pop-up combination as scuzz.”

Same here on my tablet constantly, seems to want me to download
app Mobogenie.

And again

http://ams1.ib.adnxs.com/click?hSxkIQtZ4D8UrkfhehTePzMzMzMzM9M_GrrhkHBuAkDDnQsjvQgEQF2EXardUc8hEbs5rpydBiqZwqlSAAAAAFJ-EQDIAQAAtAMAAAIAAABxYqcAvdMCAAAAAQBVU0QAVVNEACwB-gCXwQAABbcAAgUCAQIAAIQAGiM9wQAAAAA./cnd=%21HwZAOgiX1JwBEPHEnQUYvacLIAA./referrer=http%3A%2F%2Fsingletrackworld.com%2Fforum%2Ftopic%2Fhelp-please-taking-the-contents-of-an-ipod-classic-back-into-an-itunes-account/clickenc=http://super-speed-dating.com/mobile/uk2.php

They’re on looking into they were discussing what to do this am until they can find the problem of the cause. Sorry it’s causing some of you issues folks.

I am having exactly the same problem – lovelinks “your APP store need update immediately” routing to the play store. Very odd – Please post up a solution when it arises.

Only happens when not on Wi-Fi and only with STW web site.

Who’s your service provider? Is everyone affected on the same network?

Anyone get the issue when on a wifi connection?

O2.

Hm. Probably not a provider issue then, as I’m on O2 and I’ve never seen it. Just a thought.

Just seen this thread and I am having the same issues with my android phone(Samsung S4) when browsing this site (Chrome). I also keep getting that lovelinks message. Happens when I use the wifi connection or mobile network (I am based in Germany).

I’m in Germany too.

Refresh happening constantly….

Getting sick of it. Close to not using the site anymore & moving on…

Maybe time to get the Web site sorted by pro puter geeks.

Just so folks know this is happening on other sites as well it’s not just an issue on singletrack. It’s very annoying though.

Been getting the scuzz posted combo on phone and now a love links popup that downloads some crap no matter what you press. Not happy.

I was at a hotel on Saturday night and accessed the forum on my tablet through the hotel wifi, and was getting these popups.

Back home and no popups on the tablet on the home network.

Also been getting the same combo as scuzz on a nexus 4 running the latest 4.4.2 update, only seems to happen on the phone network (giffgaff btw) never seem it at home on the tablet either