Printable Version of Topic

Click here to view this topic in its original format

BuzzJack Music Forum _ Forum News and Help _ Hi-jacking adverts

Posted by: Silas Nov 17 2014, 09:38 PM

One of our adverts just Hi-jacked my browser in BJSC. I dunno what one but all of a sudden I was looking at a page with a pop up about intel drivers and downloading things for windows. naolabo.com

Tried to download some shit onto my Macbook. Thankfully I caught it before it could succeed in launching its wee download but it was not appreciated.


After all Google put us through, the least they could do is prevent viruses infecting their bloody adverts.

Posted by: { bré } Nov 18 2014, 12:29 AM

I unfortunately had to put Adblock back on on BuzzJack because this kept being a problem for me as well.

Posted by: MĪth Nov 19 2014, 06:55 PM

Oh god, I hate that stuff. It's why I keep AdBlock on. Any way to donate to make up for lost ad revenue?

Posted by: Iz~ Nov 19 2014, 07:37 PM

I must say, I've had no problems leaving this as an exception in my AdBlock lately although if this is happening to other people it's a bit of a problem.

Math, that's lovely of you but there's no need for you to do that! Try turning AdBlock off for the site, see if you get the hijacking ads and if you do, then that's unfortunate but just put it back on and hopefully it'll be sorted soon. I don't think we have any ways to donate anyway.

Posted by: { bré } Nov 19 2014, 08:44 PM

I'm going to turn Adblock back off and see if it is still a problem for me, I turned it on a few weeks back.

Posted by: Phil Nov 19 2014, 09:24 PM

QUOTE(Silas @ Nov 17 2014, 09:38 PM) *
One of our adverts just Hi-jacked my browser in BJSC. I dunno what one but all of a sudden I was looking at a page with a pop up about intel drivers and downloading things for windows. naolabo.com

Tried to download some shit onto my Macbook. Thankfully I caught it before it could succeed in launching its wee download but it was not appreciated.
After all Google put us through, the least they could do is prevent viruses infecting their bloody adverts.

thanks Silas, its very annoying this hasnt been sorted by Google.. I never receive the ads but I can imagine the annoyance dry.gif

These ads actually create popups? Very unusual...


Posted by: Silas Nov 20 2014, 10:41 AM

This particular ad hi-jacked the browser, took me off buzzjack and onto it's site where it launched a pop-up and tried to download something to my hard-drive.

It was all very very odd. More like the type of thing I would expect to find on shady streaming sites that are littered with viruses.

Posted by: MĪth Nov 20 2014, 05:09 PM

QUOTE(Silas @ Nov 20 2014, 05:41 AM) *
This particular ad hi-jacked the browser, took me off buzzjack and onto it's site where it launched a pop-up and tried to download something to my hard-drive.

It was all very very odd. More like the type of thing I would expect to find on shady streaming sites that are littered with viruses.

I've seen something like that on a blog, the ad redirects you, takes you off the original site, and onto (in my case) a fake Flash Player download. I assume it is some sore of exploit in the coding?

Posted by: 152chris Nov 23 2014, 11:27 PM

yep happened to me too, pretending to be an adobe update

Posted by: Silas Jan 9 2015, 07:29 PM

After a while of this not happening any more. At least 5 times today my browser has been hijacked and redirected to the following places:

CODE
http://lemode-mgz.com/fd/dietluma/index.html?voluumdata=vid..00000001-4939-4f07-8000-000000000000__vpid..b5ddf800-9831-11e4-8d20-fe4bb6ed1472__caid..d886a87d-8d81-463a-a4f6-0728daf2bf13__lid..f8d69c6a-11d9-4d82-a511-5c3ae47ca324__rt..R__oid1..f8de86c5-4971-45cb-9fb2-f0896e552652__var1..adwynne__var2..uk__var3..1__var4..728-90__var5..1420831604179__var6..http%3A%2F%2Fgoogleads%5C.%5Cg%5C.%5Cdoubleclick%5C.%5Cnet%2Fpagead%2Fads%3Fclient%3Dca-pub-3761557466034158%26output%3Dhtml%26h%3D90%26slotname%3D4969611610%26adk%3D506305457%26w%3D728%26lmt%3D1420831603%26flash%3D16%5C.%5C0%5C.%5C0%26url%3Dhttp%3A%2F%2Fwww%5C.%5Cbuzzjack%5C.%5Ccom%2Fforums%2F%26dt%3D1420831603915%26bpp%3D3%26bdt%3D8%26shv%3Dr20150106%26cbv%3Dr20141212%26saldr%3Dsa%26correlator%3D6896320077825%26frm%3D20%26ga%5C_%5Cvid%3D1677507192%5C.%5C1388506217%26ga%5C_%5Csid%3D1420830913%26ga%5C_%5Chid%3D855976055%26ga%5C_%5Cfc%3D1%26u%5C_%5Ctz%3D0%26u%5C_%5Chis%3D100%26u%5C_%5Cjava%3D1%26u%5C_%5Ch%3D800%26u%5C_%5Cw%3D1280%26u%5C_%5Cah%3D701%26u%5C_%5Caw%3D1280%26u%5C_%5Ccd%3D24%26u%5C_%5Cnplug%3D9%26u%5C_%5Cnmime%3D71%26dff%3Dverdana%26dfs%3D11%26adx%3D518%26ady%3D218%26biw%3D1280%26bih%3D738%26eid%3D317150304%26oid%3D3%26ref%3Dhttp%3A%2F%2Fwww%5C.%5Cbuzzjack%5C.%5Ccom%2Fforums%2Findex%5C.%5Cphp%3F%26act%3DMsg%26CODE%3D01%26rx%3D0%26eae%3D0%26fc%3D8%26brdim%3D0%2C0%2C0%2C0%2C1280%2C23%2C1280%2C800%2C1280%2C738%26vis%3D1%26abl%3DCS%26ppjl%3Du%26srr%3D1%26fu%3D0%26bc%3D1%26ifi%3D1%26xpc%3DkOS9NXbxGP%26p%3Dhttp%3A%2F%2Fwww%5C.%5Cbuzzjack%5C.%5Ccom%26dtd%3D13&account=adwynne&campaign=uk&adgroup=1&banner=728-90&it=1420831604179&refurl=http://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3761557466034158&output=html&h=90&slotname=4969611610&adk=506305457&w=728&lmt=1420831603&flash=16.0.0&url=http://www.buzzjack.com/forums/&dt=1420831603915&bpp=3&bdt=8&shv=r20150106&cbv=r20141212&saldr=sa&correlator=6896320077825&frm=20&ga_vid=1677507192.1388506217&ga_sid=1420830913&ga_hid=855976055&ga_fc=1&u_tz=0&u_his=100&u_java=1&u_h=800&u_w=1280&u_ah=701&u_aw=1280&u_cd=24&u_nplug=9&u_nmime=71&dff=verdana&dfs=11&adx=518&ady=218&biw=1280&bih=738&eid=317150304&oid=3&ref=http://www.buzzjack.com/forums/index.php?&act=Msg&CODE=01&rx=0&eae=0&fc=8&brdim=0,0,0,0,1280,23,1280,800,1280,738&vis=1&abl=CS&ppjl=u&srr=1&fu=0&bc=1&ifi=1&xpc=kOS9NXbxGP&p=http://www.buzzjack.com&dtd=13


http://lemode-mgz.com/fd/dietluma/indexdr.html?voluumdata=vid..00000004-3c11-4357-8000-000000000000__vpid..b5ddf800-9831-11e4-862a-34ac03f41a4a__caid..d886a87d-8d81-463a-a4f6-0728daf2bf13__lid..ee9fcb80-0a4e-4a58-8a17-cb50cbf59bcb__rt..R__oid1..f8de86c5-4971-45cb-9fb2-f0896e552652__var1..adwynne__var2..uk__var3..1__var4..728-90__var5..1420831631999__var6..http%3A%2F%2Fgoogleads%5C.%5Cg%5C.%5Cdoubleclick%5C.%5Cnet%2Fpagead%2Fads%3Fclient%3Dca-pub-3761557466034158%26output%3Dhtml%26h%3D90%26slotname%3D4969611610%26adk%3D506305457%26w%3D728%26lmt%3D1420831631%26flash%3D16%5C.%5C0%5C.%5C0%26url%3Dhttp%3A%2F%2Fwww%5C.%5Cbuzzjack%5C.%5Ccom%2Fforums%2F%26dt%3D1420831631527%26bpp%3D3%26bdt%3D12%26shv%3Dr20150106%26cbv%3Dr20141212%26saldr%3Dsa%26correlator%3D3139026831361%26frm%3D20%26ga%5C_%5Cvid%3D1677507192%5C.%5C1388506217%26ga%5C_%5Csid%3D1420830913%26ga%5C_%5Chid%3D1816421671%26ga%5C_%5Cfc%3D1%26u%5C_%5Ctz%3D0%26u%5C_%5Chis%3D100%26u%5C_%5Cjava%3D1%26u%5C_%5Ch%3D800%26u%5C_%5Cw%3D1280%26u%5C_%5Cah%3D701%26u%5C_%5Caw%3D1280%26u%5C_%5Ccd%3D24%26u%5C_%5Cnplug%3D9%26u%5C_%5Cnmime%3D71%26dff%3Dverdana%26dfs%3D11%26adx%3D518%26ady%3D218%26biw%3D1280%26bih%3D738%26eid%3D317150304%26oid%3D3%26ref%3Dhttp%3A%2F%2Fwww%5C.%5Cbuzzjack%5C.%5Ccom%2Fforums%2Findex%5C.%5Cphp%3Fshowtopic%3D173373%26st%3D20%26%26rx%3D0%26eae%3D0%26fc%3D8%26brdim%3D0%2C0%2C0%2C0%2C1280%2C23%2C1280%2C800%2C1280%2C738%26vis%3D1%26abl%3DCS%26ppjl%3Du%26srr%3D1%26fu%3D0%26bc%3D1%26ifi%3D1%26xpc%3DwjcZoI1kmg%26p%3Dhttp%3A%2F%2Fwww%5C.%5Cbuzzjack%5C.%5Ccom%26dtd%3D18&account=adwynne&campaign=uk&adgroup=1&banner=728-90&it=1420831631999&refurl=http://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3761557466034158&output=html&h=90&slotname=4969611610&adk=506305457&w=728&lmt=1420831631&flash=16.0.0&url=http://www.buzzjack.com/forums/&dt=1420831631527&bpp=3&bdt=12&shv=r20150106&cbv=r20141212&saldr=sa&correlator=3139026831361&frm=20&ga_vid=1677507192.1388506217&ga_sid=1420830913&ga_hid=1816421671&ga_fc=1&u_tz=0&u_his=100&u_java=1&u_h=800&u_w=1280&u_ah=701&u_aw=1280&u_cd=24&u_nplug=9&u_nmime=71&dff=verdana&dfs=11&adx=518&ady=218&biw=1280&bih=738&eid=317150304&oid=3&ref=http://www.buzzjack.com/forums/index.php?showtopic=173373&st=20&&rx=0&eae=0&fc=8&brdim=0,0,0,0,1280,23,1280,800,1280,738&vis=1&abl=CS&ppjl=u&srr=1&fu=0&bc=1&ifi=1&xpc=wjcZoI1kmg&p=http://www.buzzjack.com&dtd=18


That's what's in the address bar of my browser. Hopefully that gives you info you can take to Google. The way they treated us the least they could do is ensure our adverts are safe.

Posted by: Silas Jan 9 2015, 07:29 PM

Make that 7 times.... It's getting worse.

Posted by: Jester Jan 9 2015, 07:39 PM

I have had the same on my phone only this afternoon.

Posted by: *Tim Jan 9 2015, 07:43 PM

You might wanna check your extensions.
I had this as well and I found out an extension I did not install was installed by adware and triggered adverts all over the place

Posted by: Silas Jan 9 2015, 07:49 PM

QUOTE(Jester @ Jan 9 2015, 07:39 PM) *
I have had the same on my phone only this afternoon.


That's when it started with me too. Got it on my phone, then when I came onto the Macbook this evening it's been almost constant!
QUOTE(*Tim @ Jan 9 2015, 07:43 PM) *
You might wanna check your extensions.
I had this as well and I found out an extension I did not install was installed by adware and triggered adverts all over the place
Thanks for the tip!

I've checked my extensions and the only ones i have are Avast and Adblock so it mustn't be the same problem as you were having. It's only effecting this site as well.

Posted by: *Tim Jan 9 2015, 07:50 PM

Hmm how odd, I don't experience anything and I have addblock turned off for this website

Posted by: 152chris Jan 9 2015, 08:06 PM

defo a safari thing it happns all the time on my phone but never on pc

Posted by: Cameron Jan 9 2015, 08:31 PM

This has happened to me multiple times today as well, and doesn't seem to be stopping laugh.gif

I am on my Laptop too and it is only this site which it is happening on

Posted by: مدهش* Jan 9 2015, 09:29 PM

This is happening to me too - using Firefox too so not just a Safari thing.

Only happening on this site too, redirecting me to the same site as Silas.

Posted by: مدهش* Jan 9 2015, 09:32 PM

Worse still, it's a women's health page. They could at least know their target audience.

Posted by: Cameron Jan 10 2015, 12:24 PM

I've been back to normal all morning, but this is happening again just now and it's that same women's fitness site again sad.gif

Posted by: Cameron Jan 10 2015, 06:38 PM

There is another womans fitness site joining in too... This is becoming a real pain in the neck having to reload a page 5 times to try and view it because it keeps going onto these sites sad.gif

Posted by: Phil Jan 10 2015, 06:54 PM

are you all accessing the site through a mobile device, tablet?

Posted by: Cameron Jan 10 2015, 07:07 PM

No, I am using a Toshiba Laptop and I am on Google Chrome. Hope this is helpful Phil

Posted by: Jester Jan 10 2015, 07:55 PM

This is only affecting me on my iPhone, Phil. Fine here on my Mac (same browser though??).

Posted by: Jester Jan 10 2015, 08:05 PM

Could it be a variation of this?

http://techfruit.com/2012/06/11/mobrewards-scam-targeting-ios-and-android-users/

Posted by: مدهش* Jan 10 2015, 08:09 PM

I get it worst on my MacBook so categorically no to the phone/tablet question...

Posted by: مدهش* Jan 10 2015, 08:13 PM

It appears it's not just a Buzzjack problem...

https://www.google.co.uk/?gws_rd=ssl#q=le-mode+mgz+redirect

Posted by: Jester Jan 10 2015, 08:13 PM

Ok, been looking into this online.

I think it is to do with a malicious google ad, which is being hijacked by phishing ads.

Other forums seem to be suffering from it, mainly when browsing with tablets/phones.

This link seems to indicate that Google are aware? https://productforums.google.com/forum/#!topic/adsense/szfNNkPrkLI

Posted by: Silas Jan 10 2015, 08:56 PM

I was having it on Safari on the Macbook and on the iPhone. I copied the code I was getting from my Macbook onto the first page! Hopefully that'll help google identify what ad it is.

Posted by: Fareek 2K15 Jan 11 2015, 08:17 PM

Since last night this web address has kept popping up on my screen whenever I click on threads, am I the only one who is experiencing this?

http://lemode-mgz.com/fd/gm-3609-3610/special-report.html?voluumdata=vid..00000003-b414-428a-8000-000000000000__vpid..6c75e000-99cc-11e4-8669-c21f39cd42d5__caid..d886a87d-8d81-463a-a4f6-0728daf2bf13__lid..6c948f9b-a12f-48f0-9784-deff789626fe__rt..R__oid1..a14ef0fd-04c9-491b-a066-adc53d3dfb20__oid2..e0532829-7906-42cf-9f6d-5348b15e2d24__var1..adwynne__var2..uk__var3..1__var4..728-90__var5..1421007261027__var6..http%3A%2F%2Fgoogleads%5C.%5Cg%5C.%5Cdoubleclick%5C.%5Cnet%2Fpagead%2Fads%3Fclient%3Dca-pub-3761557466034158%26output%3Dhtml%26h%3D90%26slotname%3D4969611610%26adk%3D506305457%26w%3D728%26lmt%3D1421007260%26flash%3D15%5C.%5C0%5C.%5C0%26url%3Dhttp%3A%2F%2Fwww%5C.%5Cbuzzjack%5C.%5Ccom%2Fforums%2F%26dt%3D1421007260148%26bpp%3D25%26bdt%3D216%26shv%3Dr20150106%26cbv%3Dr20141212%26saldr%3Dsa%26correlator%3D4687134493169%26frm%3D20%26ga%5C_%5Cvid%3D1386658342%5C.%5C1415394257%26ga%5C_%5Csid%3D1421003801%26ga%5C_%5Chid%3D1760790656%26ga%5C_%5Cfc%3D1%26u%5C_%5Ctz%3D0%26u%5C_%5Chis%3D30%26u%5C_%5Cjava%3D1%26u%5C_%5Ch%3D768%26u%5C_%5Cw%3D1024%26u%5C_%5Cah%3D728%26u%5C_%5Caw%3D1024%26u%5C_%5Ccd%3D24%26u%5C_%5Cnplug%3D3%26u%5C_%5Cnmime%3D5%26dff%3Dtimes%20new%20roman%26dfs%3D11%26adx%3D286%26ady%3D219%26biw%3D1024%26bih%3D673%26eid%3D317150304%26oid%3D3%26ref%3Dhttp%3A%2F%2Fwww%5C.%5Cbuzzjack%5C.%5Ccom%2Fforums%2FUK-Charts-f2%5C.%5Chtml%26rx%3D0%26eae%3D0%26fc%3D8%26docm%3D11%26brdim%3D0%2C55%2C-8%2C-8%2C1024%2C%2C1040%2C744%2C1024%2C673%26vis%3D1%26abl%3DCS%26ppjl%3Df%26fu%3D0%26bc%3D1%26ifi%3D1%26xpc%3DeWbS9lXael%26p%3Dhttp%3A%2F%2Fwww%5C.%5Cbuzzjack%5C.%5Ccom%26dtd%3D193&account=adwynne&campaign=uk&adgroup=1&banner=728-90&it=1421007261027&refurl=http://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3761557466034158&output=html&h=90&slotname=4969611610&adk=506305457&w=728&lmt=1421007260&flash=15.0.0&url=http://www.buzzjack.com/forums/&dt=1421007260148&bpp=25&bdt=216&shv=r20150106&cbv=r20141212&saldr=sa&correlator=4687134493169&frm=20&ga_vid=1386658342.1415394257&ga_sid=1421003801&ga_hid=1760790656&ga_fc=1&u_tz=0&u_his=30&u_java=1&u_h=768&u_w=1024&

Posted by: Silas Jan 11 2015, 08:22 PM

Most of the posts in this thread are about that site/issue....so yeah, it's a problem for a fair few of us.

Posted by: Fareek 2K15 Jan 11 2015, 08:24 PM

No I didn't, I mentioned it in the shoutbox then I was directed here.

Posted by: Suedehead2 Jan 11 2015, 10:53 PM

It was happening throughout the Chart Show for me which was extremely annoying.

Posted by: Phil Jan 12 2015, 11:29 AM

Sorry guys, I've also just contacted Google directly and will let you know their response. I will also look to try out new ad platforms to gauge if we can move part of our inventory over..

Posted by: Suedehead2 Jan 12 2015, 11:23 PM

It's back tonight mad.gif

Posted by: Phil Jan 13 2015, 03:50 PM

are they all the lemode-mgz one? When I get home I will block this ad and then if you guys inform me of new ones I will subsequently block those as well.

Posted by: Suedehead2 Jan 13 2015, 06:09 PM

There's some sort of Men's Fitness one as well.

Posted by: Mart!n Jan 15 2015, 01:24 PM

This was happening to me last night, quite a lot, my Bit Defender said it blocked it, was happening mostly in the chart forum and BJSC forum. I'm using Google Chrome. on my laptop. It seems fine now.

Posted by: J▲hq Jan 21 2015, 09:51 AM

Just had it for the first time on my phone, something about Thai girls?

Posted by: MĪth Feb 26 2015, 11:52 PM

I'm getting redirections to a fake android security alert even though I'm on an iPad. It opened a new tab and a dialogue screen so I couldn't get rid of it unless I clicked it. The website was called android-security-alert . safesecuredownload . com.

Posted by: Phil Feb 27 2015, 11:48 AM

thanks guys, i contacted Google some time ago and did not hear back! I will send them another chaser and see if I can find out more..

Posted by: bipolar angel Feb 27 2015, 01:38 PM

fortunately, pop up adverts arn't a problem for me here on the forum

what annoys me is the random messages on the screen about finance.

i'll go and view a topic, and before every reply is something about finance

this also nearly caused me to post a reply as a new thread, though fortunately they have a feature here where if you don't put a title in the subject, it won't post

that saved me

Posted by: *Tim Apr 13 2015, 07:11 PM

http://hxxp://m.sinoadv.com/topic/winiphone6/?geo=NL

Just popped my first one in the BJSC forum. Redirecting me to that website, asking me to fill in my phonenumber to win a prize and when I refuse, it redirects me to tell me I am possibly infected with a virus

(I am on mobile browsing with Googl Chrome)

Edit: It actually only happens on the first page of the semi results thread

edit2: Edited the url to hxxp:// like Math did so Nobody would click it

Posted by: MĪth Apr 13 2015, 07:41 PM

Also happening on anohther BJSC thread: hxxp://get.pricefunding.com/small-business-loan/?campaignid=2973&utm_campaign=PF_Remarketing&utm_content=DynamicWorkingCapital&phone=844-912-2328&gclid=CIPI5qCE9MQCFREoaQodiLEACw

Redirected to that. Changed it to hxxp so nobody would accidentally click on it.

Posted by: 5 Silas Frøkner Sep 25 2018, 07:18 AM

These unwanted f***ers are back. I just got hi-jacked in BJSC sad.gif

Powered by Invision Power Board
© Invision Power Services