Malware in popunders by PLUGRUSH

[RegUser]

Plugrush pop-unders once again have malware.
http://5102e2c34c2b4.zipnlist.com/ar...rs/Sketch.phps
A perfect way to have your website blocked off by Google for malware.
I wonder how this kind of shit can be pulled off by advertisers without getting their damn ass sued

[Killswitch]

http://www.plugrush.com/account/tickets

GFY isn't PlugRush's support board, learn to fucking do it the right way idiot.

[RegUser]

Originally Posted by Killswitch

http://www.plugrush.com/account/tickets

GFY isn't PlugRush's support board, learn to fucking do it the right way idiot.

GFY is for adult webmasters, isnt it
I dont give a fuck to plugrush but do care about other adult webmasters.
I will refrain from using any bad words, my parents did teach me the manners

[Killswitch]

Originally Posted by RegUser

GFY is for adult webmasters, isnt it
I dont give a fuck to plugrush but do care about other adult webmasters.
I will refrain from using any bad words, my parents did teach me the manners

And reporting it to PlugRush through proper channels results in it being removed asap, but instead you post it on an unofficial board to "save webmasters" who maybe are only 10% of the total users of PlugRush... So helpful. I bet your parents are proud of the good you do in this world.

[RegUser]

Originally Posted by Killswitch

And reporting it to PlugRush through proper channels results in it being removed asap, but instead you post it on an unofficial board to "save webmasters" who maybe are only 10% of the total users of PlugRush... So helpful. I bet your parents are proud of the good you do in this world.

when did i write that i did NOT report it to plugrush?

[signupdamnit]

Originally Posted by Killswitch

And reporting it to PlugRush through proper channels results in it being removed asap, but instead you post it on an unofficial board to "save webmasters" who maybe are only 10% of the total users of PlugRush... So helpful. I bet your parents are proud of the good you do in this world.

Please sit down and shut up. I appreciate his efforts and being informed about this. Maybe if everyone reported here and to the network they would all finally be embarrassed enough to make it much harder for the crap to slip through?

Fuck now I have to pull the popunders AGAIN.

[Black All Through]

Originally Posted by signupdamnit

Please sit down and shut up. I appreciate his efforts and being informed about this. Maybe if everyone reported here and to the network they would all finally be embarrassed enough to make it much harder for the crap to slip through?

Fuck now I have to pull the popunders AGAIN.

[IllTestYourGirls]

Kaspersky has completely blocked their popunder url so it is no longer popping for me.

[signupdamnit]

Any update on this being resolved so we know whether it is safe to put popunders back on our sites? I sent an email to [email protected] myself just in case they missed the reports others have made.

[roganoli]

I never put shit like this on my sites. Create your own pop-under for decent programs and have much better results!

[Presnus]

Originally Posted by roganoli

I never put shit like this on my sites. Create your own pop-under for decent programs and have much better results!

What programs?

[seeandsee]

here we go again

[sandman!]

[roganoli]

Originally Posted by Presnus

What programs?

CCBILL programs... 1:274 in my stats!

[BFT3K]

Easy answer... just block all popunders!

http://safariadblock.com/

[1215]

report it on plugrush so that they can remove it asap.

probably good for people to block that persons url in their trades as well.

it's a good program, but there's always a bad egg somewhere.

[grumpy]

Originally Posted by BFT3K

Easy answer... just block all popunders!

http://safariadblock.com/

you hate the business youre in??

[MoreMagic]

Doesn't mater what you report with them. Everyday there is new maleware threat at Plugrush. It's simply not to avoid.

[bluebook18]

BTW where is nextri, you should forward this thread to him.

[Mutt]

i got hit by malware yesterday from a Plugrush widget on a tumblr blog.

[Zeiss]

Failure is not an option -- it comes bundled with Windows.

[signupdamnit]

Originally Posted by bluebook18

BTW where is nextri, you should forward this thread to him.

I sent an email to abuse@plugrush earlier today. I think the thread starter stated they might have opened a ticket yesterday. I wish more would be done to give publishers the tools to help minimize the risks of this as well as better know your advertiser policies. Every once in a while is understandable but a couple times a month? Come on guys. You can do better.

[freemarket]

Thanks for this informative thread. I love PlugRush but this a major problem and I hope PlugRush addresses it. In past posts, PlugRush said they are working with new companies to detect malware. Maybe it's time to switch malware detection companies again.

[BFT3K]

Originally Posted by grumpy

you hate the business youre in??

Nope. I hate what the business I'm in has turned into.

[signupdamnit]

Monday morning bump for Plugrush. Can we please get some confirmation that this has been resolved?

[just a punk]

Originally Posted by BFT3K

Nope. I hate what the business I'm in has turned into.

Yep, if ads stop working (will be blocked by most of browsers) the whole "free content" model will die too. I don't see anything bad if this happen.

[Tulku]

I've got email from Google today that my site have malware and is now blocked ..
I started redirecting mobile traffic to them about 4 days ago and on the first visit to see if all works with the redirect script I was redirected to malware and reported it to them and they reply to me that the malware site was removed .. But after that G email I've removed them

[signupdamnit]

Originally Posted by Tulku

I've got email from Google today that my site have malware and is now blocked ..
I started redirecting mobile traffic to them about 4 days ago and on the first visit to see if all works with the redirect script I was redirected to malware and reported it to them and they reply to me that the malware site was removed .. But after that G email I've removed them

Yeah I don't understand why networks don't treat malware popping up on their networks as a nuclear level disaster. Two things will eventually happen as it happened in the past.

1. No serious legitimate publisher will want to put up ad space on their site since it will probably go to malware soon and cause trouble from users and Google.

2. The ad network will develop a reputation for spreading malware and it will be blocked by all anti-malware utilities and blacklisted.

If I were running a million dollar ad network business I would be hiring programmers left and right and looking at my advertiser policies to see how I could reduce the risk of this. Maybe the money these scumbags pay is nice and all but it's not going to be enough when you lose all your publishers and every security company and Google blocks you for good. Then it's game over and your entire business is done!

[bluebook18]

I'll forward this thread to bogis.

[Black All Through]

Originally Posted by signupdamnit

If I were running a million dollar ad network business I would be hiring programmers left and right and looking at my advertiser policies to see how I could reduce the risk of this. Maybe the money these scumbags pay is nice and all but it's not going to be enough when you lose all your publishers and every security company and Google blocks you for good. Then it's game over and your entire business is done!

Thats where they're heading already, month more month less.

[signupdamnit]

So no response now even after three days and all day Monday? Or are we the bad guys now for wanting our sites free of malware?

Can we please get this fixed and get notification that it has been fixed?

No response to the email to [email protected] either.

Date: Sat, 26 Jan 2013 13:08:12 -0500
Subject: Malware in popunders! ALERT! IMPORTANT!
From: signup gfy <[email protected]>
To: [email protected]

Please see https://gfy.com/showthread.php?t=1097608

Some users are reporting malware in the popunders and some popunders are
being blocked by anti-virus companies.

Thank you.

[freemarket]

Bump for response from PlugRush! Come on guys, this is serious stuff....

[freemarket]

Will google really ban a webmaster permanently for using an ad network that includes an advertiser with malware? Are sites using PlugRush in danger of being permanently banned?

[Zeiss]

http://www.plugrush.com/account/malware

[freemarket]

Thanks @zealotry but how does that help? As the thread indicated, people have already reported it and in one case a person's site was subsequently banned by google.

[nextri]

We handle reports as soon as possible, and investigate to find the correct campaign. The one in question was stopped many days ago.

[Zeiss]

PR will fix it and the banned site could be submitted for reconsideration to Google, yes?

[freemarket]

Thanks for the reply, nextri. Can you tell us if you are still scanning sites for malware before they are included in the ad network?

[tfs]

But Google doesn't care. Some asshole with a Plugrush site took my #1 listing and he is just destroying veryone's porn enjoyment. This is worse than tubes.

Buy advertising. Install Malwware... Nobody profits but the original thieves.

[freemarket]

Originally Posted by Zealotry

PR will fix it and the banned site could be submitted for reconsideration to Google, yes?

That's what I want to to know. If you are banned for malware, can you submit for reconsideration? Does anybody have any experience with this. Being banned for life sounds like a frightening proposition.

[nextri]

we are still scanning and monitoring all campaigns from 60 locations across the world. We catch a lot of malware either before the campaigns start, or shortly after. It's impossible to catch it all though, but we also find that our malware report tools works great when people actually use it. If the user who got a malware pop or redirect submits a report and give us his IP. We can immediately see which campaigns that IP was shown, and usually figure our right away which one it was who was spreading malware.

[nextri]

Originally Posted by freemarket

That's what I want to to know. If you are banned for malware, can you submit for reconsideration? Does anybody have any experience with this. Being banned for life sounds like a frightening proposition.

As far as I know there is nothing called Banned for life on google. If you get rid of the malware and resubmit your site, it should be back in the index right away.

[just a punk]

Originally Posted by nextri

As far as I know there is nothing called Banned for life on google. If you get rid of the malware and resubmit your site, it should be back in the index right away.

With Goggle? Yes, you can get your site recovered.
With antivirus software like Kaspersky? No, you can't, because your site will be banned for life, and they won't give you any comments on that. This already happened to some sites that were using Juicyads, according to the threads I read on other webmaster boards. I would post the links here, but that's not allowed by the GFY rules, so Google for em'.

[AllAboutCams]

Originally Posted by nextri

As far as I know there is nothing called Banned for life on google. If you get rid of the malware and resubmit your site, it should be back in the index right away.

Yep true i bought a site and got a malware waring from chrome got rid of the problem and was back on with no waring within a few days

[freemarket]

Thanks nextri, cyberseo, and allaboutcams. Appreciate the helpful responses.

[signupdamnit]

Originally Posted by nextri

we are still scanning and monitoring all campaigns from 60 locations across the world. We catch a lot of malware either before the campaigns start, or shortly after. It's impossible to catch it all though, but we also find that our malware report tools works great when people actually use it. If the user who got a malware pop or redirect submits a report and give us his IP. We can immediately see which campaigns that IP was shown, and usually figure our right away which one it was who was spreading malware.

Users can't use your malware report tool because from what I see they have to be a webmaster with an account logged in to use it. And most users have no idea that you guys are the ones responsible for serving them the malware which destroyed their computer. They think it's our sites and that WE are responsible for it.

After the fact responses are great but it would be a lot better to do something more proactive which helps prevent the malware from getting there in the first place. I've shared many ideas in the past like having a tier system or allowing publishers to whitelist sites. Then there is better know your advertiser policies where you actually have a verified person who is legally held responsible for the content they put on the network. The fact is each time this happens it damages your reputation just as it damages the reputation of our sites.

[signupdamnit]

Originally Posted by freemarket

That's what I want to to know. If you are banned for malware, can you submit for reconsideration? Does anybody have any experience with this. Being banned for life sounds like a frightening proposition.

Banned for life is unusual but I've seen people claim to be banned for years despite reconsideration requests for other things. Usually for isolated malware issues they will remove the flag after things are sorted out. But no one but Google knows if there are certain thresholds where if it happens so many times in so many months your site is banned longer. I doubt anyone but Google knows for sure how having say two or three (or five or six?) malware incidents in a year will affect your rankings.

Unfortunately since November I've noticed an average of 1 to 3 reports on GFY of malware from PR popunders per month. If that pattern holds (and it probably will unless more measures are taken)then I wonder if Google will have a problem with a site that has malware every month? You'd think they would. That's kinda why I'm bitching about it.