# The SDMB is serving up malware again **URL:** \ **Category:** About This Message Board\ **Created:** [June 21, 2010, 2:40am UTC](https://boards.straightdope.com/t/the-sdmb-is-serving-up-malware-again/543949 "2010-06-21T02:40:32Z")\ **Posts on this page:** 20\ **Page:** 3
**Author:** ![Joanie](https://avatars.discourse-cdn.com/v4/letter/j/e95f7d/32.png) [@Joanie](https://boards.straightdope.com/u/Joanie)\ **Post date:** [June 25, 2010, 12:44pm UTC](https://boards.straightdope.com/t/the-sdmb-is-serving-up-malware-again/543949/41 "2010-06-25T12:44:26Z")
Sorry. Please cancel this post. ---
**Author:** ![jayjay](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/jayjay/32/6765_2.png) [@jayjay](https://boards.straightdope.com/u/jayjay)\ **Post date:** [June 25, 2010, 12:47pm UTC](https://boards.straightdope.com/t/the-sdmb-is-serving-up-malware-again/543949/42 "2010-06-25T12:47:38Z")
All you have to do to find your version is hit “Help” in the menu bar, then click on “About Internet Explorer”. The window that comes up will have the version number on it. **Joanie** , **Shakes** is asking about his version of Internet Explorer, not Windows. ---
**Author:** ![Joanie](https://avatars.discourse-cdn.com/v4/letter/j/e95f7d/32.png) [@Joanie](https://boards.straightdope.com/u/Joanie)\ **Post date:** [June 25, 2010, 12:59pm UTC](https://boards.straightdope.com/t/the-sdmb-is-serving-up-malware-again/543949/43 "2010-06-25T12:59:15Z")
Oops. Sorry. **Jayjay,** thank you for that clarification. ---
**Author:** ![Shadez](https://avatars.discourse-cdn.com/v4/letter/s/90ced4/32.png) [@Shadez](https://boards.straightdope.com/u/Shadez)\ **Post date:** [June 25, 2010, 1:03pm UTC](https://boards.straightdope.com/t/the-sdmb-is-serving-up-malware-again/543949/44 "2010-06-25T13:03:40Z")
Av Security Suite is a very nasty virus. It’s no joke about it disabling all .exe files – can’t open any progams, not Malwarebytes, not Adaware, not even programs like Word or Textpad or anything. It brings up multiple messages and scan windows and slows everything down. I got it about a month ago, though I will be clear that I don’t think I got it here, as I was not on SDMB when I noticed it, but a random news site. And I am almost always logged in on SDMB anyways. But, my gosh, it took 7 1/2 straight hours to clean off the virus (I am not a computer person, though) and it was only last week that I figured out how to get rid of the last remnants of its google search redirects and popups to [results.gugle.com](http://results.gugle.com) and google5 screens. It had changed the settings on my ROUTER! :smack: I thought my computer was a goner for sure. That was one virus that has made me much more careful, and I admit even though I do not see ads here, hearing that SDMB’s advertisements are causing it does give me pause – I don’t want to deal with that virus ever again. I just want people who have not had it to understand that it is a monster, especially for those who are not computer virus literate. It is not simply “run Malwarebytes once” and reboot variety. ---
**Author:** ![zweisamkeit](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/zweisamkeit/32/4360_2.png) [@zweisamkeit](https://boards.straightdope.com/u/zweisamkeit)\ **Post date:** [June 25, 2010, 1:37pm UTC](https://boards.straightdope.com/t/the-sdmb-is-serving-up-malware-again/543949/45 "2010-06-25T13:37:56Z")
How about the idea of getting rid of all ads temporarily, and then let _one_ ad source back in, then another? Like a food allergy elimination test. ---
**Author:** ![Grrr](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/grrr/32/146_2.png) [@Grrr](https://boards.straightdope.com/u/Grrr)\ **Post date:** [June 25, 2010, 7:00pm UTC](https://boards.straightdope.com/t/the-sdmb-is-serving-up-malware-again/543949/46 "2010-06-25T19:00:01Z")
> [@jayjay](#): > > All you have to do to find your version is hit “Help” in the menu bar, then click on “About Internet Explorer”. The window that comes up will have the version number on it. > > **Joanie** , **Shakes** is asking about his version of Internet Explorer, not Windows. Thanks. I’m using IE8. ---
**Author:** ![Shot\_From\_Guns](https://avatars.discourse-cdn.com/v4/letter/s/ccd318/32.png) [@Shot\_From\_Guns](https://boards.straightdope.com/u/Shot_From_Guns)\ **Post date:** [June 25, 2010, 9:31pm UTC](https://boards.straightdope.com/t/the-sdmb-is-serving-up-malware-again/543949/47 "2010-06-25T21:31:56Z")
Note to the board staff: Every time I think about sponsoring, more crap like this comes up. And, yes, I understand that ads will cease to affect me personally if I sponsor, but it’s a principle thing. ---
**Author:** ![Eats\_Crayons](https://avatars.discourse-cdn.com/v4/letter/e/278dde/32.png) [@Eats\_Crayons](https://boards.straightdope.com/u/Eats_Crayons)\ **Post date:** [June 26, 2010, 6:06pm UTC](https://boards.straightdope.com/t/the-sdmb-is-serving-up-malware-again/543949/48 "2010-06-26T18:06:14Z")
I’m on a Mac laptop (using a recent version of Safari) and I’m also getting interesting “log-in” requests. Once I log-in to th Dope in order tp post and hit the reply button, I get a dialog box (the kind you usually see programmed with .htaccess) that says I have to log-in to access this page. The log-in dialog box, has the URL [tap.rubiconproject.com:80](http://tap.rubiconproject.com:80). I can not continue surfing the Dope until I cancel the dialog box. Not sure if you need this info, but I am in Toronto, Canada. ---
**Author:** ![Fear\_Itself](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/fear_itself/32/19637_2.png) [@Fear\_Itself](https://boards.straightdope.com/u/Fear_Itself)\ **Post date:** [June 26, 2010, 6:09pm UTC](https://boards.straightdope.com/t/the-sdmb-is-serving-up-malware-again/543949/49 "2010-06-26T18:09:30Z")
Hmmm. I have been getting the “login to [tap.rubiconproject.com](http://tap.rubiconproject.com)” dialog also, and I am a paid member, and not suppose to get any advertising. I thought is was related to another window I had open, but now I am not so sure. Windows 7, IE8 ---
**Author:** ![bucketybuck](https://avatars.discourse-cdn.com/v4/letter/b/898d66/32.png) [@bucketybuck](https://boards.straightdope.com/u/bucketybuck)\ **Post date:** [June 26, 2010, 6:25pm UTC](https://boards.straightdope.com/t/the-sdmb-is-serving-up-malware-again/543949/50 "2010-06-26T18:25:58Z")
> [@Fear\_Itself](#): > > Hmmm. I have been getting the “login to [tap.rubiconproject.com](http://tap.rubiconproject.com)” dialog also, and I am a paid member, and not suppose to get any advertising. I thought is was related to another window I had open, but now I am not so sure. > > Windows 7, IE8 Can anybody explain why the hell I am getting this stuff popping up on my computer? “[tap.rubiconproject.com](http://tap.rubiconproject.com)”. Vista, using the Opera browser. ---
**Author:** ![engineer\_comp\_geek](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/engineer_comp_geek/32/504_2.png) [@engineer\_comp\_geek](https://boards.straightdope.com/u/engineer_comp_geek)\ **Post date:** [June 26, 2010, 8:05pm UTC](https://boards.straightdope.com/t/the-sdmb-is-serving-up-malware-again/543949/51 "2010-06-26T20:05:27Z")
There is a separate thread for the rubicon malware: > **[I'm getting a pop up asking me for a password](https://boards.straightdope.com/sdmb/showthread.php?t=568637)** > > Anyone else getting this? The URL said something about rubiconproject. I’ll try to get a screen shot next time it happens. ---
**Author:** ![Guinastasia](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/guinastasia/32/5751_2.png) [@Guinastasia](https://boards.straightdope.com/u/Guinastasia)\ **Post date:** [June 26, 2010, 9:58pm UTC](https://boards.straightdope.com/t/the-sdmb-is-serving-up-malware-again/543949/52 "2010-06-26T21:58:50Z")
Question – is anyone using an adblocker getting it? ---
**Author:** ![mnemosyne](https://avatars.discourse-cdn.com/v4/letter/m/c4cdca/32.png) [@mnemosyne](https://boards.straightdope.com/u/mnemosyne)\ **Post date:** [June 26, 2010, 11:50pm UTC](https://boards.straightdope.com/t/the-sdmb-is-serving-up-malware-again/543949/53 "2010-06-26T23:50:26Z")
I’m a Charter Member but also have some version of AdBlockPlus installed in Firefox 3.6.3 (and in the process of upgrading to 3.6.4) and I haven’t seen any popups or ads of any sort in a long time, certainly not anything I can associate with the SDMB. ETA: AdBlockPlus 1.1.3. I need to do updates! ---
**Author:** ![Guinastasia](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/guinastasia/32/5751_2.png) [@Guinastasia](https://boards.straightdope.com/u/Guinastasia)\ **Post date:** [June 26, 2010, 11:52pm UTC](https://boards.straightdope.com/t/the-sdmb-is-serving-up-malware-again/543949/54 "2010-06-26T23:52:33Z")
> [@mnemosyne](#): > > I’m a Charter Member but also have some version of AdBlockPlus installed in Firefox 3.6.3 (and in the process of upgrading to 3.6.4) and I haven’t seen any popups or ads of any sort in a long time, certainly not anything I can associate with the SDMB. That’s why I was asking – I use AdBlock Plus as well, and I haven’t seen anything at all. That might be the solution, people. Well, at least for the time being. (Being that the mods don’t like us mentioning that kind of thing) ---
**Author:** ![bucketybuck](https://avatars.discourse-cdn.com/v4/letter/b/898d66/32.png) [@bucketybuck](https://boards.straightdope.com/u/bucketybuck)\ **Post date:** [June 27, 2010, 12:01am UTC](https://boards.straightdope.com/t/the-sdmb-is-serving-up-malware-again/543949/55 "2010-06-27T00:01:46Z")
> [@Guinastasia](#): > > That’s why I was asking – I use AdBlock Plus as well, and I haven’t seen anything at all. That might be the solution, people. Well, at least for the time being. (Being that the mods don’t like us mentioning that kind of thing) If I have to download adblockers to stop this type of thing, can I have my membership fee back please? Thats kinda why I paid the thing. ---
**Author:** ![Guinastasia](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/guinastasia/32/5751_2.png) [@Guinastasia](https://boards.straightdope.com/u/Guinastasia)\ **Post date:** [June 27, 2010, 12:16am UTC](https://boards.straightdope.com/t/the-sdmb-is-serving-up-malware-again/543949/56 "2010-06-27T00:16:43Z")
> [@bucketybuck](#): > > If I have to download adblockers to stop this type of thing, can I have my membership fee back please? Thats kinda why I paid the thing. Hey, it’s not up to me! (Although I certainly reccomend them – it’s nice not to have constant pop-ups all over the internet) ---
**Author:** ![tumbleddown](https://avatars.discourse-cdn.com/v4/letter/t/e9bcb4/32.png) [@tumbleddown](https://boards.straightdope.com/u/tumbleddown)\ **Post date:** [June 27, 2010, 5:37pm UTC](https://boards.straightdope.com/t/the-sdmb-is-serving-up-malware-again/543949/57 "2010-06-27T17:37:07Z")
> [@BigT](#): > > Surely Google’s adservice actually checks the source code before approving an ad. They might, but it might well be irrelevant. > [@zweisamkeit](#): > > How about the idea of getting rid of all ads temporarily, and then let _one_ ad source back in, then another? Like a food allergy elimination test. That likely won’t solve the problem. [This is a pretty good breakdown of how these things happen, inspired by a recent outbreak of scareware advertising on LiveJournal](http://void-star.net/2010/01/livejournal-malware-interstitial-advertising-and-you/comment-page-2/#comments). I specifically linked to the second page of comments because of the third comment down which talks about how these ads get onto the big named ad networks to begin with. Long story short: so long as a site has advertising, it cannot be trusted to be a safe site, because the internet advertising model is broken. It cannot ever be assumed to not be populated with ads that have malicious content and intent. And while individual users can protect themselves, by memberships that eliminate ads and use of Adblock, NoScript and their brethren, there comes a point where you must consider the impact when your words (posts) are the attraction for non-savvy people (who don’t have/know about things like Adblock) who aren’t members and therefore don’t have _that_ protection, to come to a site where their computers are being put at risk. ---
**Author:** ![BigT](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/bigt/32/12044_2.png) [@BigT](https://boards.straightdope.com/u/BigT)\ **Post date:** [June 28, 2010, 11:03am UTC](https://boards.straightdope.com/t/the-sdmb-is-serving-up-malware-again/543949/58 "2010-06-28T11:03:24Z")
> [@tumbleddown](#): > > They might, but it might well be irrelevant. > > That likely won’t solve the problem. > > [This is a pretty good breakdown of how these things happen, inspired by a recent outbreak of scareware advertising on LiveJournal](http://void-star.net/2010/01/livejournal-malware-interstitial-advertising-and-you/comment-page-2/#comments). I specifically linked to the second page of comments because of the third comment down which talks about how these ads get onto the big named ad networks to begin with. > > Long story short: so long as a site has advertising, it cannot be trusted to be a safe site, because the internet advertising model is broken. It cannot ever be assumed to not be populated with ads that have malicious content and intent. And while individual users can protect themselves, by memberships that eliminate ads and use of Adblock, NoScript and their brethren, there comes a point where you must consider the impact when your words (posts) are the attraction for non-savvy people (who don’t have/know about things like Adblock) who aren’t members and therefore don’t have _that_ protection, to come to a site where their computers are being put at risk. That’s stupid. If every site that uses ads is a problem, that takes out nearly all of the Internet. Very few sites have any other way to pay upkeep costs. At some point, if the net is as bad as you say, it becomes incumbent on the user to properly protect themselves. You can’t expect the adbrokers to eliminate the problem unless you deprive them completely of their money, and you can’t completely avoid Internet advertising otherwise. Also, I very much suspect that this many problems can’t happen on accident. I understand that it is possible to specifically target the SDMB with your ads if you know how. At least one of the offshoot boards does it already. ---
**Author:** ![tumbleddown](https://avatars.discourse-cdn.com/v4/letter/t/e9bcb4/32.png) [@tumbleddown](https://boards.straightdope.com/u/tumbleddown)\ **Post date:** [June 28, 2010, 11:26am UTC](https://boards.straightdope.com/t/the-sdmb-is-serving-up-malware-again/543949/59 "2010-06-28T11:26:09Z")
> [@BigT](#): > > That’s stupid. If every site that uses ads is a problem, that takes out nearly all of the Internet. Very few sites have any other way to pay upkeep costs. That’s why I specifically said: the model is broken. Bad faith dealers know that they have a wide open exploit with which to use the sheer size of Google Ads and Doubleclick to insulate themselves from their bad behavior. Using a smaller, more selective ad server is the first step to security. But they don’t pay as well, and aren’t well known. So sites go with Google and Doubleclick, and their users pay the cost. ---
**Author:** ![ivan\_astikov](https://avatars.discourse-cdn.com/v4/letter/i/58f4c7/32.png) [@ivan\_astikov](https://boards.straightdope.com/u/ivan_astikov)\ **Post date:** [June 28, 2010, 11:26am UTC](https://boards.straightdope.com/t/the-sdmb-is-serving-up-malware-again/543949/60 "2010-06-28T11:26:34Z")
[After the advice I was given in a PM by **ZipperJJ**](http://boards.straightdope.com/sdmb/showpost.php?p=12542794&postcount=14) in [this thread](http://boards.straightdope.com/sdmb/showthread.php?t=565919), my problems with Rubicon seem to have ceased. Is it okay to share that advice here, if the thread itself doesn’t give enough of a clue? [Previous page](https://boards.straightdope.com/t/the-sdmb-is-serving-up-malware-again/543949.md?page=2) [Next page](https://boards.straightdope.com/t/the-sdmb-is-serving-up-malware-again/543949.md?page=4)