open All Channels
seplocked Issues, Workarounds & Localization
blankseplocked CCP using adbrite?
 
This thread is older than 90 days and has been locked due to inactivity.


 
Author Topic

Pheldon Grahm
Gallente
Posted - 2008.01.10 04:15:00 - [1]
 

Is CCP now using adbrite on the EVE-online website?

I have made all attempts to remove adware, trojans, spyware and a myriad of other malware items.
I have made every attempt to get my web-browser to block connections to *.adbrite.*.* (all of which have failed to block the site)

I have even looked at the code of the initial EVE-online web page, and have found numerous references to ads.adbrite.*.*

I, for one, am sick of adbrite... it makes text hard to read for a start.

And if I wasn't already annoyed enough to begin with, hitting the EVE-online web site now results in my browser throwing in the claw and "not responding", meaning I have to close it down and re-open it.

All I can say is that if CCP is now using adbrite, it will be a sure way of keeping me off the website, for ANY reason.

If CCP isn't using adbrite, perhaps they might have some suggestions as to how to get rid of this problem, 'cos I (being ex-IT) am at my wits end trying to rid myself of adbrite, and the internet forums have been no help whatsoever.

Falkrich Swifthand
Caldari
eNinjas Incorporated
Posted - 2008.01.10 15:33:00 - [2]
 

Edited by: Falkrich Swifthand on 10/01/2008 15:33:10
I'm fairly sure they're not using it, I can't find any references to it with adblock. The only non-"eve-online.com" references in the site seem to be "*.teljari.is/*" and "*.google-analytics.com/*" (EDIT: Nothing on the eve-online site is blocked by adblock, including these)

Check for any dodgy-looking browser plugins and toolbars first. The only browser toolbar I trust is the google one. There are other trustworthy ones (typically from big-name sites), but they're far outnumbered by the dodgy ones.

If you have a virus causing it, "Avast! Home Edition" (free) should get rid of it. It has one of the best resident virus scanners too, if it finds a virus in a file being written it will interrupt the program before the write finishes, making it impossible to do anything with the file until you've told it what you want it to do about the virus. It does a similar thing for http downloads, if a virus is found then it kills the connection and the browser will just report "connection reset error" and you won't get infected.

Despite the relatively stupid name, I recommend "Avast!" antivirus to pretty much everyone. It's the only scanner I've used (rest include pc-bundled norton and mcafee, and avg free) which I haven't seen a machine get infected behind its back. It's even managed to keep my parents' and little brother's pcs virus-free, which is quite a feat.

Agent Li
Caldari
CCCP INC
Posted - 2008.01.10 16:09:00 - [3]
 

Originally by: Falkrich Swifthand
<snip>
Despite the relatively stupid name, I recommend "Avast!" antivirus to pretty much everyone.<snip>


It has such a yarr name, which should appeal to Eve pirates.... YARRRR!!

Pheldon Grahm
Gallente
Posted - 2008.01.11 12:08:00 - [4]
 

Originally by: Falkrich Swifthand
Edited by: Falkrich Swifthand on 10/01/2008 15:33:10
I'm fairly sure they're not using it, I can't find any references to it with adblock. The only non-"eve-online.com" references in the site seem to be "*.teljari.is/*" and "*.google-analytics.com/*" (EDIT: Nothing on the eve-online site is blocked by adblock, including these)


Tried blocking "*.teljari.is/*" unsuccessfully.

Originally by: Falkrich Swifthand
Check for any dodgy-looking browser plugins and toolbars first. The only browser toolbar I trust is the google one. There are other trustworthy ones (typically from big-name sites), but they're far outnumbered by the dodgy ones.

If you have a virus causing it, "Avast! Home Edition" (free) should get rid of it. It has one of the best resident virus scanners too, if it finds a virus in a file being written it will interrupt the program before the write finishes, making it impossible to do anything with the file until you've told it what you want it to do about the virus. It does a similar thing for http downloads, if a virus is found then it kills the connection and the browser will just report "connection reset error" and you won't get infected.


Spent about 8-10 hours scrubbing my system with anti-virus software (Avast! included), anti-ad/spyware (including Spybot and Ad-Aware), and manually... complete with manual shredding of suspicious files. And a system restore. All to no avail.

However, I left the system doing a deep scan with Avast! over night, and let it tear through my drives. Apparently the deep scan found 2x copies of 2 separate trojans:

Win32:Ataker [Trj] attacker.exe
Win32:Trojan-gen {Other} SrvAdmin.exe

both of which have now been eliminated.

I cannot yet tell whether either of these two was the offender; the symptoms have currently stopped, but this is the first time I have booted up since closing down after the deep scan, and I am currently on a completely different network at a different location.

Therefore, I cannot rule out a cause that has intervened somewhere between EVE-online and my PC... however, the other PC on my normal home network is uninfected by anything, and it is also frequently used, oftentimes for running my alt account, so they are usually running concurrently.

I will try again once I have returned this PC to its normal location. If I still experience an absence of symptoms, I can safely conclude that one of these two were the fault.

My question now is: why did Avast! not pick the trojans up on a regular scan (with settings as high as I could muster) but did pick them up on the deep boot scheduled scan, when neither of them were hidden nor disguised in any way?

It was not my intention to cast dispersions upon CCP per sť. I find the company (after reading many opinion both pro and con), to be reasonably honourable and responsible.

However, my research (as flawed as it may have been) lead me to believe that adbrite is endorsed and implemented by either the web site, the host or both and, as it was not appearing on the majority of sites I visited, and after the aforementioned 8-10 hours of PC "soul-searching", I was to conclude that the problem was not on my end.

I'd like to apologise to CCP for any dispersions I did manage to cast, and I will post my additional findings once I have retested my unit in my normal location.

Strangely enough, I have had internet access since 1996 and this would then account for the 1st malicious software attack to have successfully infiltrated one of my units, or any unit that I have been responsible for in a home networking capacity.Confused

Pheldon Grahm
Gallente
Posted - 2008.01.11 19:35:00 - [5]
 

I am now on my home network, and can confirm that the annoying adbrite-type symptoms have been eliminated.

Therefore, I must conclude that one of the aforementioned trojans must have been to blame.

Falkrich Swifthand
Caldari
eNinjas Incorporated
Posted - 2008.01.12 17:56:00 - [6]
 

Another "Avast!" antivirus success story.

Its boot-time scan is a really nice feature, allowing it to scan viruses without Windows (or the viruses) running, so they can't defend themselves.


 

This thread is older than 90 days and has been locked due to inactivity.


 


The new forums are live

Please adjust your bookmarks to https://forums.eveonline.com

These forums are archived and read-only