Tool Talk

General Category => General Discussion => Topic started by: Papaw on October 28, 2013, 04:13:58 PM

Title: ATTENTION!!
Post by: Papaw on October 28, 2013, 04:13:58 PM
I don't know who or how, but some spammer has been putting rollover links in our posts!
If you see one, don't click it- I am trying to remove them.
Look like a regular link, but different color and have an arrow on them.
Title: Re: ATTENTION!!
Post by: amertrac on October 29, 2013, 09:50:51 AM
Why don't these nitwits use their time productively  bob w.
Title: Re: ATTENTION!!
Post by: lbgradwell on October 29, 2013, 10:48:00 AM
Why don't these nitwits use their time productively  bob w.

They do. It's just not productive for us - only for them & their scumbag clients...

I have not yet encountered one of these links.

Remain vigilant Papaw!
Title: Re: ATTENTION!!
Post by: Papaw on October 30, 2013, 07:47:53 AM
Here is an example-
Quote
Hello, I've collected a few classic, aluminum body power tools and I'm wondering if anyone knows of a good tutorial for shining them up? I've seen them cleaned up to almost mirror-like shine.

Here's pictures of three sitting on a shelf, and two more currently stashed in a drawer... And I have my eye on a few others... Ignore the Irwin blade in the Circ saw, eventually it will be replaced with a matching blade. On another side note, does anyone have ANY info on the Craftsman Sander? The model number is 315.22400.
See the highlighted and underlined words with a little arrow above them? "power" and "Craftsman Sander"? Those links show an ad if you roll your cursor over them. Please don't click any of the ads. I don't know what will happen and I didn't put them there. I don't know how to get rid of them other than modifying the post to remove the word itself. Then if the word is typed in again, it makes a link again!
Title: Re: ATTENTION!!
Post by: oldgoaly on October 30, 2013, 10:55:05 AM
Have you checked the Board software forum?  See if others are dealing  with the problem?
I'm not that familiar with php software. know a little about vbulletin, many patches to fix new hacks.
Title: Re: ATTENTION!!
Post by: lbgradwell on October 30, 2013, 11:19:05 AM
Here is an example-
Quote
Hello, I've collected a few classic, aluminum body power tools and I'm wondering if anyone knows of a good tutorial for shining them up? I've seen them cleaned up to almost mirror-like shine.

Here's pictures of three sitting on a shelf, and two more currently stashed in a drawer... And I have my eye on a few others... Ignore the Irwin blade in the Circ saw, eventually it will be replaced with a matching blade. On another side note, does anyone have ANY info on the Craftsman Sander? The model number is 315.22400.
See the highlighted and underlined words with a little arrow above them? "power" and "Craftsman Sander"? Those links show an ad if you roll your cursor over them. Please don't click any of the ads. I don't know what will happen and I didn't put them there. I don't know how to get rid of them other than modifying the post to remove the word itself. Then if the word is typed in again, it makes a link again!

I still don't see the links to which you refer, Noel - not even in your example quoted above. I don't see "the highlighted and underlined words with a little arrow above them" and nothing happens when I rollover...

Nor can I find the original post you've quoted!

Did you edit the example to remove the links mentioned?

If not, it makes me think the issue might be connected to individual PCs...
Title: Re: ATTENTION!!
Post by: eddie hudson on October 30, 2013, 12:39:02 PM
Same goes for me, I see nothing unusual.
Title: Re: ATTENTION!!
Post by: Bus on October 30, 2013, 12:58:41 PM
Nothing on my computer.
Title: Re: ATTENTION!!
Post by: oldgoaly on October 30, 2013, 02:15:24 PM
Hey Noel!
what browser are you using?
I'm running the latest Firefox and do not see any links using the page info button,  nothing shows up other than the normal pics and icons.
 Using Firebug for the 1st time in a long time I see no outside link listed.
What malware program and virus software are you using?
 I'm having a idea about Internet Exploder and a malware on your computer. and it has "keywords" that it loads it's crap on your computer.

FOR ALL
 Please keep your virus and malware software updated!!!! daily! right now I'm using
Microsoft security essentials was running nsa version of norton <grin> it and the new netframework didn't get along. so the hacks at the computer store crashed my computer!
Also running Malwarebytes anti-malware, it is free and is rated one of the best. I do daily scans and catch a trojan or other nasty about once a month, they can embed them to pic info so be aware this a major problem for all!
One more thing CCleaner is a crap cleaner! gets rid of useless files makes scans run faster! it's free too and is highly rated.  Take care!

Title: Re: ATTENTION!!
Post by: RedVise on October 30, 2013, 02:54:40 PM
Papaw, I did get a strange pop up with a login prompt on Sunday. I used Task Manager to End Task and logged back in.
 Didnt really pay attention to where I was...  will get a screen shot if it occurs again, might help you track those down faster.

Brian
Title: Re: ATTENTION!!
Post by: rusty on October 30, 2013, 04:02:21 PM
papaw, there is a nasty little virus that makes your browser turn keywords into links to  bad sites....

Since no one else is seeing this, I suspect it is living in your machine :(

I *think* this will expunge it, I dunno what precicely you may have tho...

http://www.bleepingcomputer.com/download/adwcleaner/

I *do* know that the virus scanners usually don't catch these things for a while, and the nastier ones turn off the virus scanner on your machine so they can hide...
Title: Re: ATTENTION!!
Post by: Papaw on October 30, 2013, 04:04:59 PM
I see these no matter where I access the forum from. Home, work, and on laptop. Each one has all the security available.
Am I the only one who sees them?
Mouse over the words power and Craftsman Sander, and you m ight see them.
Title: Re: ATTENTION!!
Post by: Nolatoolguy on October 30, 2013, 04:16:36 PM
I scrolled over the text late last night and saw it get red. Currently I don't see it. Earlier I did thoe.

I must say your sight is still very well ran. Whatever your doing keep up the good work. Don't let this get you down.
Title: Re: ATTENTION!!
Post by: rusty on October 30, 2013, 04:20:12 PM
I don't see anything in the page code, but the forum generates very messy code loaded with imbedded javascript :(

Try it not logged in...?


Also, for giggles, what happens if you spell check something with those words in it ?
 
Title: Re: ATTENTION!!
Post by: Papaw on October 30, 2013, 04:31:03 PM
If I go in and change the spelling or even take out the space between that word and the next , the link goes away, but if I then put the word back in, it links again.
I know nothing about code.
RLT, who is Rusty on Garage Gazette , has been my go-to guy on these things, but he hasn't answered emails.
Title: Re: ATTENTION!!
Post by: OilyRascal on October 30, 2013, 04:43:21 PM
I'm with others in not having seen anything suspicious (or so much as a "mouse over" in any post). 

Is it the same behavior for you on multiple computers?  I'm assuming you have access to more than one.   If so and you've established its not likely YOUR computer, try using a joe user "test" account (no privs) to verify you see the same behavior (that it's not related to your SUPER POWERS).

This may at least help you narrow it down to not being your PC or your ID.

It would help me if you could PM a link to a post where you are absolutely sure it remains in effect for you.  I know my way around code.

I could also get you in contact with someone at Symantec's antivirus research center if you'd like.
Title: Re: ATTENTION!!
Post by: Papaw on October 30, 2013, 07:57:12 PM
This is the post I quoted-
http://www.papawswrench.com/vboard/index.php?topic=9041.msg56281#msg56281 (http://www.papawswrench.com/vboard/index.php?topic=9041.msg56281#msg56281)

The links are not showing up now.
Title: Re: ATTENTION!!
Post by: rusty on October 30, 2013, 09:06:41 PM

Weird. It is interesting to note that there was a security update to the forum software released 9 days ago tho...hmm