Previous 1 2 3 Next 43 Replies Latest reply: Feb 22, 2009 1:05 AM by innovate Go to original post
  • Mulder Level 6 (8,980 points)
    Adblock Plus is an add-on for Firefox only, which you can install from here while in Firefox: Adblock Plus.

    For Safari, you can download PithHelmet, which is shareware, not freeware. Be sure to get the right version for your OS and version of Safari.

    Mulder
  • Mulder Level 6 (8,980 points)
    Perhaps this issue is so new that it has not hit the Virus Scanning companies yet...


    It's not a virus, so there's nothing for any antivirus company to do. This is a server-side issue and that means the web sites' systems have probably been infiltrated to serve up these types of pop-up ads, which are activated with Flash and JavaScript.

    Mulder
  • Gerie Lopez Level 1 (5 points)
    Mulder, do you see this being solved by the website servers, or will individual users have to clean it up themselves?

    Do you recommend the adblock and pith helmet programs to rectify the situation?

    You keep saying "pop up," which I have always thought were new windows that open, just popping up out of nowhere. These ads are showing up in the website window itself. I just wanted to clarify. Not sure if it makes a difference or not.

    I'm kind of getting used to these mostly naked guys. I might even start giving them names.
  • Kyle Shackley Level 1 (5 points)
    Hi Mulder,
    Thanks for explaining. Could you comment on why only some computers see these ads? I loaded the Globe & Mail on my work laptop and the normal ads appeared.
    Thanks.
  • Mulder Level 6 (8,980 points)
    You keep saying "pop up," which I have always thought were new windows that open, just popping up out of nowhere. These ads are showing up in the website window itself. I just wanted to clarify.


    I did ask whether or not these were pop-up windows at the beginning of the topic thread, but you never answered that question, so I made the assumption that they were. If they are not, then I would have to say that it could be a Trojan Horse, which is caused by something you downloaded and installed. If it is, you should be being redirected to web sites different from the one you entered in the address bar or clicked on a link to reach. Otherwise, you probably don't have a Trojan Horse and the issue is really one of the web site itself being hijacked to serve up these types of ads.

    To find out if this is the case and remove it, you need to download and run the DNSChanger Removal Tool and if it finds it, you need to restart your Mac for it to finish the task, and with any luck you will not see those ads again.

    Mulder
  • Mulder Level 6 (8,980 points)
    The computers that are affected could have a Trojan Horse that is causing this, but I know of none for this purpose for Windows, nor any tool to check for and remove it if you did have it. I do know that I'm not being affected by these ads on my Mac.

    Mulder
  • Gerie Lopez Level 1 (5 points)
    Mulder wrote:

    I would have to say that it could be a Trojan Horse, which is caused by something you downloaded and installed. If it is, you should be being redirected to web sites different from the one you entered in the address bar or clicked on a link to reach. Otherwise, you probably don't have a Trojan Horse and the issue is really one of the web site itself being hijacked to serve up these types of ads.

    To find out if this is the case and remove it, you need to download and run the DNSChanger Removal Tool and if it finds it, you need to restart your Mac for it to finish the task, and with any luck you will not see those ads again.

    Mulder


    Mulder, thanks again. I followed your advice above and it did the trick. It took less than 5 minutes to download and scan and did indeed find the trojan horse. The ads are gone on both Safari and Firefox and my computer is back up to its normal peppy speed. It had slowed down tremendously recently, which I attributed to my son's activity with music creation. You are my hero tonight.

    BTW, I did have a talk with my son about his viewing habits!!!!!
  • AllisonR Level 1 (0 points)
    sigh

    As I mentioned yesterday this is *browser hijack* malware and nothing to do with your OS, server side issues or anything similar.
  • 12th Root of 2 Level 1 (0 points)
    The answer is: You have a Trojan Horse called DNSChanger 1.1 or other variation that is causing unauthorized ads to load in place of various websites’ scheduled ads.
    The Trojan Horse is most likely in (root) /library/Internet Plug-Ins, but don't bother to try to find it in the finder or with spotlight - It's invisible.
    A free trial version of MacScan will find it, isolate it, and allow it to be trashed.
    Be sure to do a full scan of the entire hard drive –
    I found the Trojan in the “main” library – not the user library.
    If you purchase MacScan, you can perform custom scans of smaller areas of the hard drive.
    You don’t need to re-install Safari
    You don’t need to disable your JavaScript
    You don’t need to disable your Plugins
    You don’t need to install blocking programs
    Just get rid of the Trojan Horse!
  • Kyle Shackley Level 1 (5 points)
    I used the trial version of Ad-Aware this morning and it appears to have fixed the issue. No more naked men!
    Thank you to all for the help with fixing my problem! I really appreciate it.
  • shaplaa Level 1 (0 points)
    Vimax Banner ads are ridiculous. Why have they taken over? Who can we complain to?
  • rat666 Level 1 (0 points)
    Thank you so much for that solution (re. DNS Removal Tool). I was going nuts for my kids to
    have to see those ads. I'm not prissy, but this is unacceptable for my kids to see while surfing news sites. I'd like to join a complaint, if anyone can help.

    any idea how the trojan horse got in?
  • GuitarWolf101 Level 1 (0 points)
    I've been having these vimax banner problems, too. I was overjoyed to find out that so many other people are having this problem, and it's not just me.

    However, my problem just won't go away. I've downloaded and installed MacScan and the DNS Trojan remover, and used both to scan my system. I've run multiple full system scans with MacScan, and successfully removed the trojan with the DNS remover.

    But when I go to macworld, I still get those naked guys in the top banner.

    I downloaded PithHelmet for Safari, and it successfully blocks the ads from appearing - which is all right by itself, but I'd much rather fix the problem and remove this offending file instead of covering it up.

    I have no idea how to kill this thing. Is there a terminal fix?
  • Tim Kraan Level 1 (40 points)
    This article on Macworld does shed some light on the issue. They say a product called Virus Barrier by Intego might help. I'm not endorsing it or anything, since I've never used it, but I would be interested in hearing if anyone else has tried it.
    http://www.macworld.com/article/60823/2007/10/trojanhorse.html
  • bugmore Level 1 (0 points)
    It is your wi-fi router. The infection blocks windows update and re-directs searches to god-knows-where, mainly msn.com to start. Reset it, replace it, whatever. I found it without any forum help. Just what to "gift" this info to the world.