RealGM Advertiser Malware

[SkyHook]

My McAfee Antivirus/Firewall has been going nuts lately with malware alerts regarding ads on RealGM. More than usual, even for this site. Anyone else seeing this?

[dunleavyjr]

Quite a few times while suring in RealGM, my browser redirected me to some website asking
me to download the so-called "anti-virus" software.

So, yea, definitely malware

[Rendezvous]

hopefully they can fix this crap.

[kyphi]

lol, new ad on RealGM: experience a new condom!

[CR Reina]

I haven't experienced any of these problems, so sending the url of where it happens, along with a screenshot could really help me identify the problem.

Does it typically happen after browsing more than a dozen pages on RealGM?

[dunleavyjr]

CR Reina,

This is the malicious website I got redirected to, while surfing RealGM Off Topic Forum:

rootscan.info

It tricks people into downloading so-called "Anti-Virus" file to clean PC.

[Kyrama]

It's been happening to me endlessly lately.

[GswStorm3]

I got a rogue virus alert from Realgm also.

[GswStorm3]

CR Reina,

This is the malicious website I got redirected to, while surfing RealGM Off Topic Forum:

rootscan.info

It tricks people into downloading so-called "Anti-Virus" file to clean PC.

The same exact thing happened to me.

[DelaneyRudd]

Is that the one where it forces you into the spam site, and then when you try to press back it pops up a "are you sure, do you love your children or not?" box and then you press back and it redirects you right back. The only thing that stops it is when you get back to realgm is to press the stop button.

[dunleavyjr]

Me, the Dun man, is one computer *freak*. Here's the solution:

(1) Open the NotePad program as Administrator(right click mouse)
(2) In NotePad, open the file "c:\windows\systems32\drivers\etc\host"
(3) After the Host File is loaded, add this line to the file 127.0.0.1 rootscan.info
(4) Save the file

It tells your web browser to avoid going into that malicious website.
By the way, I'm using Windows 7 RTM. Depending the version of Windows, the Host file
location could be different.

By the way, next time you folks see Manocad, tell him I said Hi.

[mike-]

It's pretty laughable that RealGM tries to masquerade itself as a professional website and has problems like this for several weeks.

Deal with your advertisers.

[DelaneyRudd]

You mean google?

[GuyverX]

RealGM, this is unacceptable. I usually use firefox with adblock+noscript...of course I never ran into any problems. Tried using the site for once with Internet Explorer and what do I get? A trojan trying to install itself on my computer after clicking the forums tab. I have a good antivirus so it blocked the attack but this shold not be happening on a huge site like realgm. From the looks of it, people have been experiencing this fake "virus scan" redirect for weeks now and no admin has noticed? Are you serious?

A good thing to note is that I didn't get this attack from somebody's avatar or signature. I wasn't even viewing any posts yet. Going to the main index prompted the malware attack so it's entirely advertiser related.

[phiphan]

Yup. Went to my realgm bookmark and got hijacked by an 'anti-virus' malware ad. It was called "virus doctor," and is well-known malware according to google.

[Dry_Fish]

It's very annoying and it intermittent - seems to be on the OTB

[CR Reina]

We've paused all of our ads except for Google, so we hope this solves everything until we can get it squared away.

[tecumseh18]

I keep being redirected to:

http://ads.adsonar.com/adserving/getAds ... acementIds

Hope that helps.

[Dozer!]

Now its the Alpha computer scan.

[dunleavyjr]

I keep being redirected to:

http://ads.adsonar.com/adserving/getAds ... acementIds

Hope that helps.

You need to edit your HOST FILE to have that site blocked. See page 1
for instruction.