Use Yahoo Mail? One of their adservers just tried to give me a virus- BEWARE

Yep. Was checking my Yahoo mail when my A/V program (that has a heuristic analyzer web module) stopped the virus dead in its tracks. It tried to load from an ad server, and the url specified was at www.trueffects.net

I am not going to give the exact url, because I just know one of you is going to try it. But it is at that domain.

WARNING: do not go to this site, and you may want to manually block this site in your browser or in your A/V program.

The virus was defined as a trojan.script.Iframer, very dangerous, with criticality HIGH!

Now that is very unusual for Yahoo mail, which I have used for YEARS without incident. At least I have never encountered one of their ad servers trying to drop something on my machine before.

And that right there tells me this is a bad virus, because it is being delivered via script over a webserver through a browser. And Firefox, no less!

So watch out people, take precautions, and ban the heck out of that domain on your system.

I am bumping this thread, because it is important, and SOMEONE is getting ready to lose their machine because of this. Or worse- like have all their money stolen. YAHOO mail users, I am tellin yas, watchout, and ban that site before it gets you.

Ok, bumping one last time for the night crowd- Important!

I dont use it ... but some people may want to know

I suggest you report that, if you didnt already do it

I use it and never click on ads... But hey, unlimited storage space and accessible via mobile phone too!

If you are really concerned, then:
www.sandboxie.com...
Or
www.comodo.com...

Case closed

reply to post by GakunGak


Hmm, I guess I should have mentioned that I NEVER CLICKED ON ANY AD. That's why this is so dangerous. The ad appeared on the right side bar, the way ads always do when you have the sidebar open. And no sooner than it appeared, my A/V busted it trying to d/l that trojan into my system. No clicking needed. Just opening your inbox is all it took. Scary.

Did you report it to Yahoo Mail? Did you notice what it was advertising?

If you don't then they may not find out about it till a lot of people have been infected. I know some sites run their ads thru a AVS before displaying them. ATS even started doing this after several ads were reported to be infected. The ads weren't hosted on ATS, but on Ad Servers.

Anytime this happens:
1. Note the ad that was infected if possible.
2. Make sure it was caught before you were infected.
3. Report it to the site you were on.
4. If possible report it to the Ad Server that hosts the ad.

I've stopped using yahoo.mail for anything other than a spam box. Ages ago in fact. I just got so much spam through their messenger service and email stuff that I just came to think of them as "shady."

Might want to think about getting this program called 'privoxy.' stops almost all ads from opening on your screen. It's wonderful

Wow, if you don't even have to click that's bad news. Hope this gets taken down by Yahoo. I checked my Yahoo mail about an hour ago and no problems. Thanks for the heads up!!!!

Not sure, havent noticed myself, and not to derail, I cant make my own thread...but

I'm much more interested in the random web requests/pages not working I've been getting. Wish I knew more people to ask about it. All the 'home base' sites ALWAYS work well, google, yahoo, msn, but international or other sites seem to randomly stop working.

Not like with a time out issue, but something is just cutting me off from my destination, instant page not found. Sometimes a web page request will pop up too. I've started to ignore them, and usually reload the page after 5 minutes, sometimes its blocked half the day. But this seems a unique problem, not caused by some program that I've downloaded. Rather by all this wordlife and googlesyndication/google webresults that are being accessed between pages. I don't know if anyone is experiencing anything at all similar, but I'm finding it troublesome.

Originally posted by Theblackout

Not like with a time out issue, but something is just cutting me off from my destination, instant page not found. Sometimes a web page request will pop up too. I've started to ignore them, and usually reload the page after 5 minutes, sometimes its blocked half the day. But this seems a unique problem, not caused by some program that I've downloaded. Rather by all this wordlife and googlesyndication/google webresults that are being accessed between pages. I don't know if anyone is experiencing anything at all similar, but I'm finding it troublesome.

That's very much a DNS problem, I had this too on a new router I decided to try out, turns out the router couldn't do DNS requests at certain times that pages would bring up a "server cannot be found" instantly. Putting in my ISP DNS entries into my Windows IPv4 properties resolved this issue, so my router may be somewhat underpowered to handle requests. Either way, it's your router or your ISP that could be at fault, there is OpenDNS and Google DNS if you wish to try alternatives.

Use "noscript" (a firefox plugin---look it up) and never worry about scripts again.
Possible fake detection by your A.V., or a trojan on your machine hacking or redirecting links.
Probably not a yahoo based problem.

I would advise a complete cleanout of all firefox cookies and saved cache items, a bug scan of all drives and contents, and an install of firefox plugins:
Noscript
Ghostery
Beef Taco
Better Privacy.

You will have to "whitelist" some sites you use often for them to work properly, or temporarily allow them per session----like here.

reply to post by Theblackout


Same for you as I posted above.
Probably benefit from a good adware/malware scan as well as a router dns server change, if you have access, or a connection properties DNS change if you do not have access to the router.

I've been hearing reports from people on Rivals.com college football recruiting site about the same thing. Rivals.com is a college football recruiting site that is owned by Yahoo. So I guess its an add thats being run on Yahoos whole network. My opinion is they are just too lazy to screen their ads.

Thank you for interest and reply. Worries are lessened. Didn't know how/who to mention to.

2nd line