Reply With Quote
Started on my computer as of this weekend, very annoying!
I use a normal windows 10 laptop computer with internet explorer.
Let's see what I can find to get rid of it.
Daddel.
Purify has been preventing these pop-ups on my iPhone but I see they've started again on my iPad. I haven't installed Purify on there, but will be doing so shortly.
Started on my computer as of this weekend, very annoying!
I use a normal windows 10 laptop computer with internet explorer.
Let's see what I can find to get rid of it.
Daddel.
Last edited by Daddelvirks; 1st April 2017 at 11:42.
Got a new watch, divers watch it is, had to drown the bastard to get it!
I use Firefox on my laptop and either web browser or Chrome on my mobile - no issues with any of them and don't have any ad blockers or suchlike activated.
Edit - nope, starting to get pop-ups on my laptop...
Last edited by CardShark; 1st April 2017 at 13:26.
Was having trouble in Safari on iPhone.
I've now installed 'Block Ad' by Never Ads from the app store and all is good.
In fact, Safari is absolutely flying now!
Despite using Linux and Sophos AV, I saw this behaviour last night on Google Chrome. That's concerning as Linux is not meant to allow this sort of nonsense. My Sophos AV did not report an error. I also have many other browsers installed for testing purposes. Only Chrome was affected, so that narrowed down my search.
In Linux, Chrome is installed in two places, /opt/google/chrome and in a hidden folder in the /home/username/.config/google-chrome.
In the latter location were three files dated yesterday that should not be there, confirmed by comparison on my other computers, running the same OS and Chrome versions.
That third file linked to my /tmp directory where Chrome stores files when in operation. Needless to say, I deleted those files, the temp directory contents and restarted Chrome. TZUK now loaded without redirects.
In terms of cleaning other operating systems like Windows and other browsers, I would recommend hunting for similar files in your Program files and temp directories. Beware though the files were locked and you may need an admin password to delete them.
I'm not a programmer but Singletons are used in PHP, a main component of web based apps like forum software and web servers. Those links can only have come from the TZ server, as it was the only site affected, so I would recommend Eddie gets his hosts to have a look for code referencing redirects and those files.
Hopefully the above helps some other members.
Last edited by dkpw; 1st April 2017 at 12:35.
I've just been infected again. I had just deleted all my temp files (in essence a clean install of Chrome) and restarted Chrome, when these re-appeared.
Eddie, you've definitely got some errant and persistent code on your server.
Gave up trying to access on my iphone/ safari as pop up on every click but fine on PC/Chrome so far
iMac ok iPad ok iPhone fecking awful.
Paul.
Win10 using IE11 and I'm being redirected to Adobe saying I need to upgrade. I know all the Adobe products I have are up to date.
Yes I'm getting this too on my iPad.....miserable experience now trying to use the forum.
As per the last time this happened, if you scroll to the bottom and change to mobile site, you don't get these pop ups, but it is a different experience,
Driving me bonkers on my Mac...
:-(
clean here on my windows 10 pc and my iphone, but i don't use tapatalk on the phone.
ktmog6uk
marchingontogether!
I had to edit my post this morning about my laptop being free of issues, now accessing the site through my mobile is shafted as well.
Ditto … managed to log on eventually but now frequently receiving spoof prompts … only occurs with TZ UK and does not happen on other forums.Originally Posted by Mike Wood
dunk
"Well they would say that ... wouldn't they!"
Clear your browser cache, it should have been cleaned (again).
Eddie
Whole chunks of my life come under the heading "it seemed like a good idea at the time".
Cleaned several times but still getting pop ups … including one not seen before when commenced this reply
dunk
PS .. and another popped up when posting the reply … and now a Ladbrokes pop up too
"Well they would say that ... wouldn't they!"
That's peculiar. I checked right after Eddie's announcement and the malicious oei1.gq and mfio.cf scripts were still visible in my NoScript. After clearing my browser history they have disappeared completely.
Cleaned again whilst logged in to TZ UK and now appear to have ceased
dunk
"Well they would say that ... wouldn't they!"
Clearing history, cache, cookies from chrome on Android and it appears fixed for me after Swanbourne's second notification the host cleaned their issues.
Cleared cookies, cache, still knackered :(
Cleared everything on safari and so far so good.
Cautiously optimistic! Bit worrying this, only happening on TZUK. Other forums ( FPGeeks and FPN) seem fine.
+1. Thank god!
What causes this? Was something actually done to stop it?? Thanks
Cleared cache, history and everything else....still happening.
I seem to be clear now (Linux, firefox), back to the full site from temporary switch to mobile site.
Still happening on IPad - makes the site more or less unusable.
The malware is definitely gone. It had been injected into one of the javascript files that powers the forum but has been removed.
Clear your cache as mentioned above and it'll stop for you
I had this first time around. Ive had nothing today though while browsing on my win 10 laptop and andriod phone.
Is it worth disabling active scripting in IE does this lose too much functionality?
Wouldn't hurt to try that. You can activate it again if things don't work. AdBlock Plus works and seems to be available for all browsers: https://adblockplus.org/ It deals with this easily, should it crop up again.
The malware script created an "on click" event in your browser. TZ loads up.. and 1st time you touch or click ANYWHERE on screen, it triggers 2 popups. There's been no risk to passwords... just the annoyance of popups that are often stubborn to close down.
Mine went again late last night. I switched to mobile view which stops the pop ups.
I'm currently only accessing via tablet.
No sign of any PC issues. I've run a full virus scan, malwatebytes and CC cleaner to clear out all the temp files and caches.
Have downloaded chrome to my iPad, will see if it still happens
Cheers bud. Just done this and agree and agree.
Pop-ups for me still, on a PC which had a TZ rule allowing them. Downloading bogus Flash updates, too.
TZ is clean - its your browser cache. You need to clean it out.
Posting Permissions
