• Welcome to the Resident Evil Community Forum!

    We're a group of fans who are passionate about the Resident Evil series and video gaming.

    Register Log in

Question about ads on the site

Darkness

Infected
Are these supposed to be here? They seem like a virus or something on my end, but the reason I ask is that they only show up on this site, none of the others I visit. (I've highlighted them in red.)

0vtMD.jpg
 
Can someone tell me how to get rid of them?
Adblock doesn't do anything for them, neither does siteblock.
AVG doesn't detect anything or can't touch them.
 
Are these supposed to be here? They seem like a virus or something on my end, but the reason I ask is that they only show up on this site, none of the others I visit. (I've highlighted them in red.)

http://i.imgur.com/0vtMD.jpg
1) That must be two screenshots merged into one?
2) Ads are supposed to be here and they help pay the bills. But it looks like they are out of place, they are not supposed to cover other things.
3) I can't say if it's a malware infected advert or if your computer is infected, or if there are no infections at all. Errors often happens without the presence of malware.
4) Do you see signs of something strange going on elsewhere? Try Google or another search engine, do you get your usual search results, or is something hijacked?
5) You don't need to upgrade to gold to avoid ads. Logged-in members don't get ads, and you can use the option that automatically logs you in by a cookie.
6) That "x" image in your text editor... weird. I have seen things being loaded in the wrong place in a browser before, it usually helps to reload the page, sometimes deleting the cache is necessary. If the "x" won't go away, try to right click it and see what options you get.
 
1) That must be two screenshots merged into one?
2) Ads are supposed to be here and they help pay the bills. But it looks like they are out of place, they are not supposed to cover other things.
3) I can't say if it's a malware infected advert or if your computer is infected, or if there are no infections at all. Errors often happens without the presence of malware.
4) Do you see signs of something strange going on elsewhere? Try Google or another search engine, do you get your usual search results, or is something hijacked?
5) You don't need to upgrade to gold to avoid ads. Logged-in members don't get ads, and you can use the option that automatically logs you in by a cookie.
6) That "x" image in your text editor... weird. I have seen things being loaded in the wrong place in a browser before, it usually helps to reload the page, sometimes deleting the cache is necessary. If the "x" won't go away, try to right click it and see what options you get.
When I went to look at gold it said "Absolutely no ads."
 
1) That must be two screenshots merged into one?
2) Ads are supposed to be here and they help pay the bills. But it looks like they are out of place, they are not supposed to cover other things.
3) I can't say if it's a malware infected advert or if your computer is infected, or if there are no infections at all. Errors often happens without the presence of malware.
4) Do you see signs of something strange going on elsewhere? Try Google or another search engine, do you get your usual search results, or is something hijacked?
5) You don't need to upgrade to gold to avoid ads. Logged-in members don't get ads, and you can use the option that automatically logs you in by a cookie.
6) That "x" image in your text editor... weird. I have seen things being loaded in the wrong place in a browser before, it usually helps to reload the page, sometimes deleting the cache is necessary. If the "x" won't go away, try to right click it and see what options you get.
Yes that is two screenshots.
In the upper screenshot, I am logged in.
Whenever I hover over the little X, or anywhere directly left of it on the screen, my curser turns into the little finger used when hovering over links, and whenever i click, the little X disapears, but it reappears when I load a new page.
I think that the ads are a virus because the words they say don't exactly make sense. It looks almost as if they are taking a line of text from somewhere on the page and then inserting it into a pre-made sentence, hinting that they probably do this on other pages with lines of text taken from there as well, even though this is the only place I see them at.
 
It may be a virus, because I was at my mother's house yesterday and I saw the same ads on her computer. I don't see them on my brother's computer.
 
This should be relatively easy to fix. First, delete AVG. It sucks. Also, never get any big name Antivirus except Kaspersky, if you ever do get one. For now, install Avira free. I personally use it, and it works fine for me. Run a virus scan with Avira on and see if it detects anything. If it doesn't, tell me and I'll try looking up the virus.
 
It may be a virus, because I was at my mother's house yesterday and I saw the same ads on her computer. I don't see them on my brother's computer.
You saw those same exact ads? That narrows it down a bit, either your mother and I have the same virus, or they are actually part of the site itself.

This should be relatively easy to fix. First, delete AVG. It sucks. Also, never get any big name Antivirus except Kaspersky, if you ever do get one. For now, install Avira free. I personally use it, and it works fine for me. Run a virus scan with Avira on and see if it detects anything. If it doesn't, tell me and I'll try looking up the virus.
Alright, I'm in the process of uninstalling AVG right now, I'll let you know once Avira is here if it finds anything.

On a side note, I've also noticed this thing that might be related to the situation. There's just a random rectangular object in the lower left hand corner of the screen whenever I'm on this site. It's invisible, but whenever I hover over it, it turns my curer into the link-hover hand, but it does nothing if I click on it. It's especially annoying because it's positioned right over where the page numbers usually are, so I have to awkwardly scroll all the way down and/or minimize the page to get it out of the way, because it won't let me click on anything behind it. When I right click on it and press "inspect element," it gives me this.

Plcgl.jpg
 
I dont see those ads either. to get rid of viruses i always use 'malware bytes anti malware'. Its a small tool that you run to do a scan and it will get rid of the crap. I use Avast usually running in the background but that just prevents some from getting in, once their in you need to use Malware Bytes or a type of C cleaner. I clear quite a few viruses at work using this..(the free version) and installing /update the program in Safe mode before running full scan.
 
Okay I installed Avira and it did a scan. It found one problem and apparently repaired it, but it's not exactly fixed to me. On the log it says

Start of the scan: Friday, December 07, 2012 00:43

Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!
Starting to scan executable files (registry):
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\slikafa.dll
[DETECTION] Is the TR/Crypt.XPACK.Gen5 Trojan

The registry was scanned ( '1142' files ).


Beginning disinfection:
The registration entry <HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\slikafa> was successfully repaired.
The registration entry <HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\slikafa> was successfully repaired.
The registration entry <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\slikafa\DllName> was removed successfully.
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\slikafa.dll
[DETECTION] Is the TR/Crypt.XPACK.Gen5 Trojan
[NOTE] The file was moved to the quarantine directory under the name '59c70eff.qua'!
[NOTE] The registration entry <HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\slikafa> was successfully repaired.
[NOTE] The registration entry <HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\slikafa> was successfully repaired.
[NOTE] The registration entry <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\slikafa\DllName> was successfully repaired.


End of the scan: Friday, December 07, 2012 00:48
Used time: 00:52 Minute(s)
This would imply that the problem should be fixed, but I am still getting that little box in the lower left hand corner on this site, and every so often, one of the links on google will redirect to sites I have blacklisted.
 
Okay I installed Avira and it did a scan. It found one problem and apparently repaired it, but it's not exactly fixed to me. On the log it says


This would imply that the problem should be fixed, but I am still getting that little box in the lower left hand corner on this site, and every so often, one of the links on google will redirect to sites I have blacklisted.
I googled that virus name, and it is linked with shutting down Antivirus and Antimalware programs. Try installing Malware Bytes and try a scan with that, maybe? Does this happen on other sites or just REN?
 
Whenever I hover over the little X, or anywhere directly left of it on the screen, my curser turns into the little finger used when hovering over links, and whenever i click, the little X disapears, but it reappears when I load a new page.
I think that the ads are a virus because the words they say don't exactly make sense. It looks almost as if they are taking a line of text from somewhere on the page and then inserting it into a pre-made sentence, hinting that they probably do this on other pages with lines of text taken from there as well, even though this is the only place I see them at.

On a side note, I've also noticed this thing that might be related to the situation. There's just a random rectangular object in the lower left hand corner of the screen whenever I'm on this site. It's invisible, but whenever I hover over it, it turns my curer into the link-hover hand, but it does nothing if I click on it. It's especially annoying because it's positioned right over where the page numbers usually are, so I have to awkwardly scroll all the way down and/or minimize the page to get it out of the way, because it won't let me click on anything behind it. When I right click on it and press "inspect element," it gives me this.

http://i.imgur.com/Plcgl.jpg

They are overlays, what purpose it serves I don't know but they are not supposed to be here. Maybe they want to trick you into clicking a hidden link.

I think that if an ad was infected we would hear from more users, so at this time I believe it's more likely that the problem is on your pc, but I can't say anything for sure.

The overlay is linking to somewhere, can you see to where it links to without clicking the link? But don't click the link.

Here are some online virus scanners. If you have an infection some of these should be able to detect and hopefully repair the infection.
http://www.bitdefender.com/scanner/online/free.html
http://home.mcafee.com/Downloads/FreeScan.aspx
http://www.windowsecurity.com/trojanscan/
http://www.pandasecurity.com/
http://housecall.trendmicro.com/

PS, Are you also using Opera? I think it looks like it, but I have a totally different skin.
 
The invisible box appears on this site and on Yahoo, but I not see it ever on Youtube or Facebook. Also, even after the Avira scan yesterday, it keeps popping up this thing in the lower right hand side of the screen asking if I want to remove this file. I always click remove, but it comes up about 15 minutes later saying the same exact thing, asking me if I want to remove again. The invisible box on a Yahoo page and the Avira message are depicted here in this screenshot.

x5cyg2.jpg


I can't click on the invisible left corner box, all it does it not let me click on anything behind it. When I hover over it, it doesn't say any destination like a normal link would, it does absolutely nothing whenever I click on it.

Whenever I right click on it, it gives me the following options: Copy, Select all, View selection source, Inspect element, and Block this site.

Copying and pasting into a picture editing program produces nothing. 'Select all' selects the text on the REnews page itself. 'View selection source' brings up a notepad with over 4000 lines of code, which appears to be the REnews page, and there is a highlighted portion of the very last line, which is as follows:
<div id="_rjkkvyjkph" style="z-index:9998;cursor:pointer;position:fixed !important;position:absolute;left:3px;bottom:3px;width:300px;height:265px;text-align:center;margin:0;overflow:hidden;vertical-align:top"><div style="background:url(http://www.google-analytics.com/img/close-btn.png) no-repeat 100% 0% transparent;height:15px;display:none;"><div style="padding-top:15px;"><iframe marginwidth="0" marginheight="0" src="http://www.find-allyouneed.com/ext.html" frameborder="0" height="250" scrolling="no" width="300"></iframe></div></div></div>
 
RUN Rkill before you scan. It detects and stops all malware activity so the scanning process works properly.

Did you recently install any new add-ons/extensions to your browser?

Sometimes those will throw in advertisements. I'd check them and see if there's anything that doesn't belong. If it isn't there, then the ads are definitely coming from a virus.

People have already been suggesting anti-virus software to you, and I don't want to contradict anyone... but if you're only getting 1 problem detected, the anti-virus isn't picking up on everything. It simply isn't getting the job done. I say that because when ads and things start appearing by themselves, you have much more than one virus that can simply be detected and deleted. I recommend using these two programs.

I've gotten rid of this sort of thing on my friends' PCs many times. My whole process (download links included) is outlined HERE!!!!!!!!!!!!!!!!

Just make sure that you are running all scans with your computer in safe mode without networking to make sure that nothing is evading or otherwise messing with the scanning process.
 
RUN Rkill before you scan. It detects and stops all malware activity so the scanning process works properly.

Did you recently install any new add-ons/extensions to your browser?

Sometimes those will throw in advertisements. I'd check them and see if there's anything that doesn't belong. If it isn't there, then the ads are definitely coming from a virus.

People have already been suggesting anti-virus software to you, and I don't want to contradict anyone... but if you're only getting 1 problem detected, the anti-virus isn't picking up on everything. It simply isn't getting the job done. I say that because when ads and things start appearing by themselves, you have much more than one virus that can simply be detected and deleted. I recommend using these two programs.

I've gotten rid of this sort of thing on my friends' PCs many times. My whole process (download links included) is outlined HERE!!!!!!!!!!!!!!!!

Just make sure that you are running all scans with your computer in safe mode without networking to make sure that nothing is evading or otherwise messing with the scanning process.

Problem, I followed your instructions for the complete PC cleanup, but the downloads for Free Windows Registry Cleaner and CleanmyPC Registry never work. They always go to about half way in a second, and then stop, and not move ever. I've waited for like a half hour and they don't budge, I've even tried canceling and retrying the downloads, still nothing. Pic related, this is how far it gets before it stops.

phVLX.jpg


Edit: This message came up, which seems to be describing the problem.

98XWO.jpg
 
Back
Top Bottom