# If you get hit by malware on the SDMB

**URL:** <https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319>\
**Category:** About This Message Board\
**Created:** [December 15, 2011, 6:24pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319 "2011-12-15T18:24:16Z")\
**Posts on this page:** 20\
**Page:** 3

<div class="post-metadata">

**Author:** ![bouv](https://avatars.discourse-cdn.com/v4/letter/b/bc8723/32.png) [@bouv](https://boards.straightdope.com/u/bouv)\
**Post date:** [January 31, 2014, 3:00am UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/48 "2014-01-31T03:00:21Z")

</div>

I just had an Android pop up ad that I’m guessing would have directed me to some janky website full of bad/fake apps that would send my personnel info to who knows where. Here’s a screenshot:

[![Imgur](https://i.imgur.com/ZAbd5tE.png "imgur.com") ](https://imgur.com/ZAbd5tE)

---

<div class="post-metadata">

**Author:** ![Busy\_Scissors](https://avatars.discourse-cdn.com/v4/letter/b/d78d45/32.png) [@Busy\_Scissors](https://boards.straightdope.com/u/Busy_Scissors)\
**Post date:** [February 3, 2014, 8:31pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/53 "2014-02-03T20:31:19Z")

</div>

> [@MostlyClueless](#):
>
> The redirecting ads for android phones are still active. I’ve been unable to capture the ad that did it, but it tried to send me to [http://lovelinks.us/gray/mobo/m](http://lovelinks.us/gray/mobo/m)

I’ve been getting this on my android phone for a bit - SD is pretty much unusable as it happens on every page change. I’m in the UK, and it is the only website that it occurs on (on my phone).

Seems to be a widely reported issue with various sites - I downloaded an airpush detector app for the phone but it came up blank.

SD on various pcs (work, home) is fine.

---

<div class="post-metadata">

**Author:** ![TubaDiva](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/tubadiva/32/507_2.png) [@TubaDiva](https://boards.straightdope.com/u/TubaDiva)\
**Post date:** [February 6, 2014, 4:29am UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/54 "2014-02-06T04:29:27Z")

</div>

Thanks for the screenshots and etc., have sent up the pipeline.

Hope a fix is found soon.

---

<div class="post-metadata">

**Author:** ![AtomicDog](https://avatars.discourse-cdn.com/v4/letter/a/ac91a4/32.png) [@AtomicDog](https://boards.straightdope.com/u/AtomicDog)\
**Post date:** [February 23, 2014, 2:35am UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/57 "2014-02-23T02:35:42Z")

</div>

The “DU SPEED Booster” ad at the top of the page is causing popups on my android. Is this allowed?

---

<div class="post-metadata">

**Author:** ![Alley\_Dweller](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/alley_dweller/32/430_2.png) [@Alley\_Dweller](https://boards.straightdope.com/u/Alley_Dweller)\
**Post date:** [February 23, 2014, 11:42pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/58 "2014-02-23T23:42:50Z")

</div>

Got hit by another ad that opens a new tab and tells me that I must install a new video player.

Here is the page I was viewing:  
[![](https://i.imgur.com/63UZ7Xa.jpg) ](https://i.imgur.com/63UZ7Xa.jpg)

Here is the tab it opened:  
[![](https://i.imgur.com/sCKJooe.jpg) ](https://i.imgur.com/sCKJooe.jpg)

Here is the url for the tab:

http: [//www.downloadactivate.com/go/lightspark?source=smg\_lightspark-display-us&adprovider=SMGAff&CID=262034&ClickID=02\_133084457\_55c67249-1126-45e4-8f7a-f67be9e73a09&AffiliateReferenceID=nym1CLnkurz6q5TCYRACGIzj9\_fAgKzpGSIONjguMjU1LjEwNy4xMTYoATCIhaqYBQ..&SID=http%3A%2F%2Fnym1.ib.adnxs.com%2Fif%3Fenc%3DAAAAAAAAAAAAAAAAAAAAAJhuEoPAyvE\_AAAAAAAAAAAAAAAAAAAAACkof0MtVztRObKO](https://www.downloadactivate.com/go/lightspark?source=smg_lightspark-display-us&adprovider=SMGAff&CID=262034&ClickID=02_133084457_55c67249-1126-45e4-8f7a-f67be9e73a09&AffiliateReferenceID=nym1CLnkurz6q5TCYRACGIzj9_fAgKzpGSIONjguMjU1LjEwNy4xMTYoATCIhaqYBQ..&SID=http%3a%2f%2fnym1.ib.adnxs.com%2fif%3fenc%3dAAAAAAAAAAAAAAAAAAAAAJhuEoPAyvE_AAAAAAAAAAAAAAAAAAAAACkof0MtVztRObKO)

---

<div class="post-metadata">

**Author:** ![TubaDiva](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/tubadiva/32/507_2.png) [@TubaDiva](https://boards.straightdope.com/u/TubaDiva)\
**Post date:** [February 26, 2014, 6:32am UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/59 "2014-02-26T06:32:54Z")

</div>

Lemme send this info to the ad people. Sorry for your inconvenience.

---

<div class="post-metadata">

**Author:** ![Nanoda](https://avatars.discourse-cdn.com/v4/letter/n/ce73a5/32.png) [@Nanoda](https://boards.straightdope.com/u/Nanoda)\
**Post date:** [April 6, 2014, 4:48pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/61 "2014-04-06T16:48:16Z")

</div>

Just today I’ve gotten some redirects to [http://www](http://www). upgradienk .com/ for a fake Java updater. Looks like it’s popular this month.

---

<div class="post-metadata">

**Author:** ![johnpost](https://avatars.discourse-cdn.com/v4/letter/j/f17d59/32.png) [@johnpost](https://boards.straightdope.com/u/johnpost)\
**Post date:** [May 4, 2014, 4:06pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/62 "2014-05-04T16:06:30Z")

</div>

got twice today in the USofA while in the message board using FF28.0.

my antivirus did a notification of malware

URL: h\_cdn\_ebdr1\_com\_\_5fa820331015fd808e11a67384508c6a\_jpg

URL: h\_cdn\_ebdr1\_com\_\_3dcbd8f840ac270b5df6d8a2c7a11680\_jpg

---

<div class="post-metadata">

**Author:** ![johnpost](https://avatars.discourse-cdn.com/v4/letter/j/f17d59/32.png) [@johnpost](https://boards.straightdope.com/u/johnpost)\
**Post date:** [May 4, 2014, 4:37pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/63 "2014-05-04T16:37:46Z")

</div>

and some more

h\_cdn\_ebdr1\_com\_\_596d93bde8c1273725ef8a94d8da059a\_gif

---

<div class="post-metadata">

**Author:** ![johnpost](https://avatars.discourse-cdn.com/v4/letter/j/f17d59/32.png) [@johnpost](https://boards.straightdope.com/u/johnpost)\
**Post date:** [May 4, 2014, 4:54pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/64 "2014-05-04T16:54:02Z")

</div>

and even more.

URL: h\_cdn\_ebdr1\_com\_\_3dcbd8f840ac270b5df6d8a2c7a11680\_jpg

---

<div class="post-metadata">

**Author:** ![amanset](https://avatars.discourse-cdn.com/v4/letter/a/8dc957/32.png) [@amanset](https://boards.straightdope.com/u/amanset)\
**Post date:** [May 13, 2014, 2:38pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/65 "2014-05-13T14:38:39Z")

</div>

I am currently posting this after clicking on “Proceed at your own risk” in Chrome.

Yes, you’ve managed to get put on Chrome’s “known to spread malware” list.

---

<div class="post-metadata">

**Author:** ![amanset](https://avatars.discourse-cdn.com/v4/letter/a/8dc957/32.png) [@amanset](https://boards.straightdope.com/u/amanset)\
**Post date:** [May 13, 2014, 2:40pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/66 "2014-05-13T14:40:18Z")

</div>

This is what you get:

[QUOTE=Google Chrome]  
The Website Ahead Contains Malware!  
Google Chrome has blocked access to [boards.straightdope.com](http://boards.straightdope.com) for now.  
Even if you have visited this website safely in the past, visiting it now is very likely to infect your Mac with malware.  
Malware is malicious software that causes things like identity theft, financial loss, and permanent file deletion.  
[/QUOTE]

---

<div class="post-metadata">

**Author:** ![WreckingCrew](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/wreckingcrew/32/4080_2.png) [@WreckingCrew](https://boards.straightdope.com/u/WreckingCrew)\
**Post date:** [May 13, 2014, 2:41pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/67 "2014-05-13T14:41:11Z")

</div>

And this is now a “Reported Attack Page!” on Firefox as well.

---

<div class="post-metadata">

**Author:** ![JXJohns](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/jxjohns/32/469_2.png) [@JXJohns](https://boards.straightdope.com/u/JXJohns)\
**Post date:** [May 13, 2014, 2:45pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/68 "2014-05-13T14:45:13Z")

</div>

> [@amanset](#):
>
> This is what you get:

I just got the same thing.

---

<div class="post-metadata">

**Author:** ![Bozuit](https://avatars.discourse-cdn.com/v4/letter/b/edb3f5/32.png) [@Bozuit](https://boards.straightdope.com/u/Bozuit)\
**Post date:** [May 13, 2014, 2:45pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/69 "2014-05-13T14:45:32Z")

</div>

Same for me on Chrome (Windows 8), seemingly any page.

---

<div class="post-metadata">

**Author:** ![running\_coach](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/running_coach/32/15836_2.png) [@running\_coach](https://boards.straightdope.com/u/running_coach)\
**Post date:** [May 13, 2014, 2:48pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/70 "2014-05-13T14:48:54Z")

</div>

> [@WreckingCrew](#):
>
> And this is now a “Reported Attack Page!” on Firefox as well.

Same here.

---

<div class="post-metadata">

**Author:** ![flight](https://avatars.discourse-cdn.com/v4/letter/f/bbce88/32.png) [@flight](https://boards.straightdope.com/u/flight)\
**Post date:** [May 13, 2014, 3:15pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/71 "2014-05-13T15:15:01Z")

</div>

Firefox put up a bunch of barricades to getting here, saying it had been listed as a known badware site. They bumped me over to [stopbadware.org](http://stopbadware.org) . There was a link for more information provided by google, but that did not list any problems with the site.

Even after saying I still want to come here, they give me this:

[https://www.stopbadware.org/firefox?hl=en-US&url=http%3A%2F%2Fboards.straightdope.com%2Fsdmb%2F](https://www.stopbadware.org/firefox?hl=en-US&url=http%3A%2F%2Fboards.straightdope.com%2Fsdmb%2F)

---

<div class="post-metadata">

**Author:** ![RickG](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/rickg/32/5174_2.png) [@RickG](https://boards.straightdope.com/u/RickG)\
**Post date:** [May 13, 2014, 3:22pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/72 "2014-05-13T15:22:01Z")

</div>

Same thing on Safari 7.0.3, OS X 10.9. Oddly, when I go to [Google Transparency Report](http://www.google.com/safebrowsing/diagnostic?site=boards.straightdope.com), it says mouthing is suspicious. Since safari is supposed to use google safe browsing, this seems very weird.

---

<div class="post-metadata">

**Author:** ![Bricker](https://avatars.discourse-cdn.com/v4/letter/b/977dab/32.png) [@Bricker](https://boards.straightdope.com/u/Bricker)\
**Post date:** [May 13, 2014, 3:50pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/73 "2014-05-13T15:50:39Z")

</div>

> [@amanset](#):
>
> I am currently posting this after clicking on “Proceed at your own risk” in Chrome.
> 
> Yes, you’ve managed to get put on Chrome’s “known to spread malware” list.

Me, too.

Lucky for me, I’m running Chrome in a Linux VM, which I will revert to a snapshot when I’m done, so malware, do your worst.

---

<div class="post-metadata">

**Author:** ![Sam\_Stone](https://avatars.discourse-cdn.com/v4/letter/s/ecccb3/32.png) [@Sam\_Stone](https://boards.straightdope.com/u/Sam_Stone)\
**Post date:** [May 13, 2014, 4:23pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/74 "2014-05-13T16:23:43Z")

</div>

No problem getting here with my iPad, but my PC is locked out with firefox and chrome, but strangely Internet Explorer has no problem.  
Has no problem.

[Previous page](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319.md?page=2)

[Next page](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319.md?page=4)
