# If you get hit by malware on the SDMB

**URL:** <https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319>\
**Category:** About This Message Board\
**Created:** [December 15, 2011, 6:24pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319 "2011-12-15T18:24:16Z")\
**Posts on this page:** 20\
**Page:** 2

<div class="post-metadata">

**Author:** ![Mame](https://avatars.discourse-cdn.com/v4/letter/m/858c86/32.png) [@Mame](https://boards.straightdope.com/u/Mame)\
**Post date:** [August 24, 2012, 10:00pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/25 "2012-08-24T22:00:14Z")

</div>

Hi

I have had the redirect to a porn site twice now, a few weeks apart. Happened while reading the SDMB on my ipad, scrolling through thread titles. Not sure which forum though. I think it was IMHO, but frankly I was so taken aback (the first time it happened I was supervising my daughter tidying her room and didn’t want her to see the screen!) I didn’t note which forum.

Only part of the screen I was touching was the far left, if that helps any.

---

<div class="post-metadata">

**Author:** ![ducati](https://avatars.discourse-cdn.com/v4/letter/d/cc9497/32.png) [@ducati](https://boards.straightdope.com/u/ducati)\
**Post date:** [September 11, 2012, 1:17pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/26 "2012-09-11T13:17:28Z")

</div>

Here’s something I’ve been running into for a while:

While browsing a forum, I’ll click on a thread, read it, then hit my back button. Nothing happens.  
When I look at the previous page dropdown, it’s filled with one address 20 or 30 times, as though I went that particular address repeatedly.

the address is [http://ad.doubleclick.net/N622/adj/stra](http://ad.doubleclick.net/N622/adj/stra)

Is this malware on the Dope, on me, or is it some part of the ad system that the Dope has and just goes haywire on occasion?

---

<div class="post-metadata">

**Author:** ![TubaDiva](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/tubadiva/32/507_2.png) [@TubaDiva](https://boards.straightdope.com/u/TubaDiva)\
**Post date:** [September 11, 2012, 4:49pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/27 "2012-09-11T16:49:32Z")

</div>

Yeah, it’s some sort of malfunction.

Some think it’s an intentional hijack of the back button rather than some miscoding or other error on someone’s part somewhere that causes this but we can’t tell for sure.

Sorry that this happened to you.

---

<div class="post-metadata">

**Author:** ![Smokestack](https://avatars.discourse-cdn.com/v4/letter/s/e0b2c6/32.png) [@Smokestack](https://boards.straightdope.com/u/Smokestack)\
**Post date:** [September 12, 2012, 6:08pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/28 "2012-09-12T18:08:25Z")

</div>

There have been a _lot_ of people complaining about surprise porn redirects while using iOS on a wide variety of websites. Just google ‘iPad porn redirects’ and you’ll see. It’s not just on Straightdope. I haven’t seen any solutions yet though and I’m not sure Apple is aware yet in any meaningful way.

---

<div class="post-metadata">

**Author:** ![Saint\_Cad](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/saint_cad/32/18907_2.png) [@Saint\_Cad](https://boards.straightdope.com/u/Saint_Cad)\
**Post date:** [October 25, 2012, 1:38pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/29 "2012-10-25T13:38:57Z")

</div>

> [@TubaDiva](#):
>
> Yeah, it’s some sort of malfunction.
> 
> Some think it’s an intentional hijack of the back button rather than some miscoding or other error on someone’s part somewhere that causes this but we can’t tell for sure.
> 
> Sorry that this happened to you.

Any report yet on if this suspected hijack is related to the other hijack I reported where the atlassolutions malware will go out every 5-10 minutes and connect to 10-15 other sites when a browser is open?

---

<div class="post-metadata">

**Author:** ![Colophon](https://avatars.discourse-cdn.com/v4/letter/c/f05b48/32.png) [@Colophon](https://boards.straightdope.com/u/Colophon)\
**Post date:** [February 4, 2013, 1:51pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/30 "2013-02-04T13:51:39Z")

</div>

I just tried to perform a search and got the following Google Chrome malware warning:

> [@](#):
>
> Danger: Malware Ahead!  
> Google Chrome has blocked access to this page on [boards.straightdope.com](http://boards.straightdope.com).  
> Content from [cm.netseer.com](http://cm.netseer.com), a known malware distributor, has been inserted into this web page. Visiting this page now is very likely to infect your computer with malware.  
> Malware is malicious software that causes things like identity theft, financial loss and permanent file deletion.

I’m running Chrome (obviously) on Windows 7. Location is UK.

---

<div class="post-metadata">

**Author:** ![TubaDiva](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/tubadiva/32/507_2.png) [@TubaDiva](https://boards.straightdope.com/u/TubaDiva)\
**Post date:** [February 4, 2013, 2:32pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/31 "2013-02-04T14:32:54Z")

</div>

> [@Colophon](#):
>
> I just tried to perform a search and got the following Google Chrome malware warning:
> 
> I’m running Chrome (obviously) on Windows 7. Location is UK.

I have reported your issue. Anyone else seen this?

---

<div class="post-metadata">

**Author:** ![JimNightshade](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/jimnightshade/32/3354_2.png) [@JimNightshade](https://boards.straightdope.com/u/JimNightshade)\
**Post date:** [February 4, 2013, 3:26pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/32 "2013-02-04T15:26:33Z")

</div>

Yup, same here. Location currently The Netherlands.

---

<div class="post-metadata">

**Author:** ![R3d\_Anonymous](https://avatars.discourse-cdn.com/v4/letter/r/aeb1de/32.png) [@R3d\_Anonymous](https://boards.straightdope.com/u/R3d_Anonymous)\
**Post date:** [February 4, 2013, 11:18pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/33 "2013-02-04T23:18:55Z")

</div>

I got a warning from Google Chrome today about that, once this evening.

---

<div class="post-metadata">

**Author:** ![TubaDiva](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/tubadiva/32/507_2.png) [@TubaDiva](https://boards.straightdope.com/u/TubaDiva)\
**Post date:** [February 5, 2013, 7:51am UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/34 "2013-02-05T07:51:52Z")

</div>

It’s apparently a hack at Netseer and has nothing to do with the Straight Dope.

[http://www.denverpost.com/business/ci\_22515730/malware-warning-citing-netseer-blocks-google-chrome-users](http://www.denverpost.com/business/ci_22515730/malware-warning-citing-netseer-blocks-google-chrome-users)

> [@](#):
>
> Formidoni reported just after 10:30 a.m. Pacific time that Google had removed Netseer from its list of malware-affected websites, clearing up the problems

.

---

<div class="post-metadata">

**Author:** ![AuntPam](https://avatars.discourse-cdn.com/v4/letter/a/9fc348/32.png) [@AuntPam](https://boards.straightdope.com/u/AuntPam)\
**Post date:** [February 22, 2013, 5:25pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/35 "2013-02-22T17:25:39Z")

</div>

Got a “StraightDope is running a survey” pop-up and followed it partway thru (with a rarely used e-mail address) till it started asking questions about my checking account. Time 12:22PM EST, Date 2/22/2013. Location is Bloomfield, NJ.

---

<div class="post-metadata">

**Author:** ![rock\_party](https://avatars.discourse-cdn.com/v4/letter/r/e19b73/32.png) [@rock\_party](https://boards.straightdope.com/u/rock_party)\
**Post date:** [April 27, 2013, 11:02am UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/36 "2013-04-27T11:02:14Z")

</div>

For about 2 weeks now, when I’m in Cafe Society a security waring pops up but it’s not from my computer, it’s from a website and won’t let me close it

It says Warning! Microsoft Security Essentials has detected the followng:  
(then it lists various trojans, malware, ect) then it says “you must click here”  
I never do, I close out the screen

---

<div class="post-metadata">

**Author:** ![MostlyClueless](https://avatars.discourse-cdn.com/v4/letter/m/ba9def/32.png) [@MostlyClueless](https://boards.straightdope.com/u/MostlyClueless)\
**Post date:** [September 26, 2013, 6:29am UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/37 "2013-09-26T06:29:29Z")

</div>

This is using a HTC One V Android Cellphone:

For about two weeks now, when I try to browse the dope, about 30% of the time when I enter a thread I automatically get redirected to porn sites and app downloads. Two links I managed to save:

> **[PlayMobo Android Alternatives – Credit Reward Perks](https://creditrewardperks.com/playmobo/)**

[http://cdn.mcextjmp.com/feed/out/1960\_l\_1\_1984805993\_5243cbc3c37e9](http://cdn.mcextjmp.com/feed/out/1960_l_1_1984805993_5243cbc3c37e9)

DO NOT FOLLOW THESE LINKS.

I’m pretty sure these are from the banner ads you run in threads. I hope the URLS can assist in finding the culprit.

---

<div class="post-metadata">

**Author:** ![Ed\_Zotti](https://avatars.discourse-cdn.com/v4/letter/e/fbc32d/32.png) [@Ed\_Zotti](https://boards.straightdope.com/u/Ed_Zotti)\
**Post date:** [September 26, 2013, 5:43pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/38 "2013-09-26T17:43:39Z")

</div>

What ads are visible when this occurs? Who is the advertiser?

---

<div class="post-metadata">

**Author:** ![MostlyClueless](https://avatars.discourse-cdn.com/v4/letter/m/ba9def/32.png) [@MostlyClueless](https://boards.straightdope.com/u/MostlyClueless)\
**Post date:** [September 26, 2013, 10:12pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/39 "2013-09-26T22:12:43Z")

</div>

As the redirects are almost instantaneous, it’s hard to see the banners. I’ll try and get a better look next time.

---

<div class="post-metadata">

**Author:** ![tellyworth](https://avatars.discourse-cdn.com/v4/letter/t/977dab/32.png) [@tellyworth](https://boards.straightdope.com/u/tellyworth)\
**Post date:** [November 10, 2013, 9:34am UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/40 "2013-11-10T09:34:18Z")

</div>

Several times recently when reading the SDMB on an iPhone, I’ve been redirected to a particular game in the app store. “Empire: Four Kingdoms” by Goodgame Studios. The redirect happens when I’m sitting looking at a page, definitely not the result of tapping on something.

If I switch back to Safari, there’s a banner visible at the top for the same game. I captured the banner link, which hopefully will help identify the culprit:

[http://mob.tictacti.com/dynamic.player?adka=1008&offer\_id=48097&subid=6ZEgbiFJlWpWa0R\_0T2-sjUxdAmD2k75JZ61PBtyZh-yrJRZDve4CKbqDWw8SBEBfptU6nCD9ET\_VwXLeR8n8psfFQr6rPghqk3qEdSEYIFGxiFC4jvSIY1aI2C5zROQuZtS6-NdoPo2orGfI0Wml9FqSFaAiKzntI-Lg9xMqmbq4CB7n0yfZBx0q9JOtOA0n3lgdhiSyio2UFLqo10ZvrDTR3ub9AHAaftEBxiiT2siJdo-FCMBx26cz7Kk6sa\_nO4O\_prqdS\_Zkoq7NaCZ\_KFtSHD1eCTGrKLnDMjXauQF9qwRc09pwIzwMGkl9oSUH6-ZGL-7fjtZmGVBXtXQnOISzEqNaE5\_IMdX8ejIx98qh-4Ro3WpcURNMBZN77iyWrxK33DCBSd1ndqbhqT-](http://mob.tictacti.com/dynamic.player?adka=1008&offer_id=48097&subid=6ZEgbiFJlWpWa0R_0T2-sjUxdAmD2k75JZ61PBtyZh-yrJRZDve4CKbqDWw8SBEBfptU6nCD9ET_VwXLeR8n8psfFQr6rPghqk3qEdSEYIFGxiFC4jvSIY1aI2C5zROQuZtS6-NdoPo2orGfI0Wml9FqSFaAiKzntI-Lg9xMqmbq4CB7n0yfZBx0q9JOtOA0n3lgdhiSyio2UFLqo10ZvrDTR3ub9AHAaftEBxiiT2siJdo-FCMBx26cz7Kk6sa_nO4O_prqdS_Zkoq7NaCZ_KFtSHD1eCTGrKLnDMjXauQF9qwRc09pwIzwMGkl9oSUH6-ZGL-7fjtZmGVBXtXQnOISzEqNaE5_IMdX8ejIx98qh-4Ro3WpcURNMBZN77iyWrxK33DCBSd1ndqbhqT-)

---

<div class="post-metadata">

**Author:** ![MostlyClueless](https://avatars.discourse-cdn.com/v4/letter/m/ba9def/32.png) [@MostlyClueless](https://boards.straightdope.com/u/MostlyClueless)\
**Post date:** [December 15, 2013, 2:04pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/41 "2013-12-15T14:04:45Z")

</div>

The redirecting ads for android phones are still active. I’ve been unable to capture the ad that did it, but it tried to send me to [http://lovelinks.us/gray/mobo/m](http://lovelinks.us/gray/mobo/m)

---

<div class="post-metadata">

**Author:** ![TubaDiva](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/tubadiva/32/507_2.png) [@TubaDiva](https://boards.straightdope.com/u/TubaDiva)\
**Post date:** [December 15, 2013, 4:59pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/42 "2013-12-15T16:59:58Z")

</div>

Reported.

---

<div class="post-metadata">

**Author:** ![da\_pope](https://avatars.discourse-cdn.com/v4/letter/d/7ba0ec/32.png) [@da\_pope](https://boards.straightdope.com/u/da_pope)\
**Post date:** [December 30, 2013, 11:54pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/43 "2013-12-30T23:54:00Z")

</div>

Sun Times getting all classy on me now. Only happens on SDMB, only from the main forums page. Broken Link broken (I Think…)

[http://www.aliexpress.com/](http://www.aliexpress.com/) premium/ sex-toys.html?src=nb&af=nb\_292732&tp1=65039787&cn={site}&isdl=y&alpsm=true

added: got redirected on submission of this too.

---

<div class="post-metadata">

**Author:** ![TubaDiva](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/tubadiva/32/507_2.png) [@TubaDiva](https://boards.straightdope.com/u/TubaDiva)\
**Post date:** [December 31, 2013, 1:04am UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/44 "2013-12-31T01:04:57Z")

</div>

I’m pretty sure that’s not supposed to be there. I’ll let the folks above me know about it.

[Previous page](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319.md?page=1)

[Next page](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319.md?page=3)
