Mudcat Virus or new feature

Subject: Mudcat Virus or new feature
From: DMcG
Date: 01 Nov 12 - 09:09 AM

On mudcat pages, but no other websites, random words are being changed to links, which are typically pop-up adverts. Are other people experiencing this?

Subject: RE: Mudcat Virus or new feature
From: BobKnight
Date: 01 Nov 12 - 09:18 AM

The last three times I've Tried to visit, I've had some pop-up intervene - not amused.

Subject: RE: Mudcat Virus or new feature
From: bobad
Date: 01 Nov 12 - 09:20 AM

I don't see it - give an example of where you see it

Subject: RE: Mudcat Virus or new feature
From: GUEST
Date: 01 Nov 12 - 09:25 AM

For example, with IE the word 'experiencing' in my first post is turned into a link, but not with Firefox or Chrome. I don't get it on my phone either, so I reckon it is an IE nasty, though why only Mudcat seems to be affected I don't know.

Subject: RE: Mudcat Virus or new feature
From: bobad
Date: 01 Nov 12 - 09:27 AM

Nope, not here, neither in IE nor Firefox - you must have a bug.

Subject: RE: Mudcat Virus or new feature
From: DMcG
Date: 01 Nov 12 - 09:29 AM

I fear so. I am running a full scan now. (Sob!)

Subject: RE: Mudcat Virus or new feature
From: bobad
Date: 01 Nov 12 - 10:44 AM

Did the scan find anything?

Subject: RE: Mudcat Virus or new feature
From: DMcG
Date: 01 Nov 12 - 11:11 AM

Still going!

Subject: RE: Mudcat Virus or new feature
From: Steve Shaw
Date: 01 Nov 12 - 11:46 AM

I've seen this happen on another forum. Everyone got it there irrespective of browser. I'm not getting it here. I use Chrome.

Subject: RE: Mudcat Virus or new feature
From: GUEST,Brian Peters
Date: 01 Nov 12 - 12:03 PM

It's happened to me three times on Mudcat over the past few days.

Subject: RE: Mudcat Virus or new feature
From: maeve
Date: 01 Nov 12 - 12:36 PM

Might it be related to Max's trying out different features, as in this thread? thread.cfm?threadid=137165&messages=76

Subject: RE: Mudcat Virus or new feature
From: Jack Campin
Date: 01 Nov 12 - 01:33 PM

There is nothing odd about the word "experiencing" in the HTML source for DMcG's initial post.

I was amazed how much the source for a Mudcat page has bloated since I last looked at it.

Subject: RE: Mudcat Virus or new feature
From: Megan L
Date: 01 Nov 12 - 02:15 PM

Ok mudcat is getting annoying every so often when i refresh the page it comes up with a new page usually asking me to take part in a survey. Needless to say i close my browser without opening the page. I have run my av several times but not picking up anything. the tab bar for this reads http://testables.net/d/juicyru.com I do not trust things that come up on my screen

Subject: RE: Mudcat Virus or new feature
From: JohnInKansas
Date: 01 Nov 12 - 03:56 PM

I haven't seen what's described here at mudcat, but several other sites do seem to think it's necessary to have a popup to explain "every difficult word." It's possible that you've visited a site that put the "find and define" utility on your machine, in which case it would look like an intentional add-in to your AV.

I haven't looked at any of these annoyances in any detail, but they appear to be nearly all incorporated via Java/JScripts. Microsoft lost the ability to incorporate their own version of Java in Windows a while back, so you have to get the Java applet from Sun now. There have been several Java exploits (malware vulnerabilities), with multiple patches and updated revisions recently.

Whether or not it's related to this nuisance, it would probably be a good idea to make sure to get rid of all older Java versions, especially in IE, and get only the most recent one in your IE, if you think Java is necessary at all.

Newest versions are claimed to be fully "backward compatible" so you no longer need to keep obsolete versions for obsolete websites (they say?), and if you don't have some version in your browser some sites will attempt to download an obsolete one without informing you. They shouldn't be able to do that, but it seems sometimes they can.

John

Subject: RE: Mudcat Virus or new feature
From: JohnInKansas
Date: 01 Nov 12 - 04:57 PM

A quick look for an example for what I think is being described found one isolated example. One or two of the "green links" appears, with a popup ad if the mouse pointer passes over it in a news article if I load the article from an MSNBC link:

http://www.nbcnews.com/business/ford-ceo-mulally-stay-through-2014-1C6800995#__utma=238145375.1783836327.1343143278.1351735994.1351801362.284&__utmb=238145375.1.10.1351801362&__utmc=238145375&__utmx=-&__utmz=238145375.1351801362.284.100.utmcsr=nbcnews.com|utmccn=(referral)|utmcmd=referral|utmcct=/&__utmv=238145375.|8=Earned%20By=msnbc%7Cbusiness=1^12=Landing%20Content=Mixed=1^13=Landing%20Hostname=www.msnbc.msn.com=1^30=Visit%20Type%20to%20Content=Internal%20to%20Mixed=1&__utmk=55132904.

(The word highlighted, and the ad, changes if I open the same link more than once.)

If I open the same page using the "real link:"

http://www.nbcnews.com/business/ford-ceo-mulally-stay-through-2014-1C6800995

the highlight isn't there.

This may suggest that it comes from the site you linked in from(?) or from the link you used to get here; but doesn't necessarily have to be anything that's on the site you're looking at.

IFF THIS is the kind of thing you're seeing. (???)

Assuming you're using an icon, or your "Favorites" link to get to mudcat, it's possible that deleting the link you have and making a new one would get rid of the effect, but I can't offer any real assurances for that.

John

Subject: RE: Mudcat Virus or new feature
From: Joe_F
Date: 01 Nov 12 - 08:08 PM

With my deviant browser, Conkeror, I have not seen any such thing. Shot At And Missed.

Subject: RE: Mudcat Virus or new feature
From: GUEST,.gargoyle
Date: 02 Nov 12 - 05:40 AM

Mudcat is a place that it is best to "check your guns at the bar."

I came for text and only text,.

Therefore, turn off:

Java

Flash

Cookies

Images

popups

accerate page loading



You will have a smoother more litterary experience.

Sincerely
Gargoyle

the persistant MC tracking device is another story...I need to enter with a "virgin " and view the source.

Subject: RE: Mudcat Virus or new feature
From: Nigel Parsons
Date: 02 Nov 12 - 05:49 AM

Thanks Garg:

Is there some way to avoid getting annoying messages in tiny print & illegible colours? :)

Subject: RE: Mudcat Virus or new feature
From: Nick
Date: 02 Nov 12 - 06:47 AM

Nigel - if you put a thin piece of paper across the screen with sellotape you can then scroll down until the offending text sits under the paper.

By varying the height of the piece of paper you can actually remove whole posts...

Subject: RE: Mudcat Virus or new feature
From: Brian Peters
Date: 02 Nov 12 - 09:05 AM

There it goes again - tried to click on a thread and got diverted to a 'Prize Draw' page. Not happening with any other site, so I don't think it's in my computer.

Subject: RE: Mudcat Virus or new feature
From: Jim Carroll
Date: 02 Nov 12 - 09:18 AM

I'm getting similar behaviour from the Mudcat site - wonder if "the mice are at it again!!"
Would be grateful if anybody comes up with a solution, preferably before I put my fist through the screen
Jim Carroll

Subject: RE: Mudcat Virus or new feature
From: GUEST,.gargoyle
Date: 02 Nov 12 - 09:55 AM

The instructions I posted were to turn off.

COOKIES
JAVA SCRIPT
FLASH
CACHE
and IMAGE LOADING

Sincerely,
Gargoyle

enteted this through a proxy since my URL appears blocked at the moment.

Subject: RE: Mudcat Virus or new feature
From: DMcG
Date: 02 Nov 12 - 09:57 AM

As the opening poster, I can report that there were no viruses as such, but somewhere along the lines I'd picked a 'utility add-in' called something like "Grand Offers" which must have been installed alongside something I actually wanted. Fortunately it seems to be reasonably well-behaved in the sense that disabling it stopped the behaviour and it uninstalled when asked to.

Subject: RE: Mudcat Virus or new feature
From: maeve
Date: 02 Nov 12 - 09:59 AM

Good to hear, DMcG.

Subject: RE: Mudcat Virus or new feature
From: GUEST,LesB (cookie gone yet again)
Date: 02 Nov 12 - 11:36 AM

I keep getting 'redirected' from Mudcat to various sites. By the way I don't want have to turn off lots of various applications just to have a quick look at Mudcat!
Cheers
Les

Subject: RE: Mudcat Virus or new feature
From: Bernard
Date: 02 Nov 12 - 01:17 PM

It happens randomly for me, irrespective of which computer and which browser... if I shut down the browser immediately the pop-up appears, then re-open the same browser, it doesn't happen...

Subject: RE: Mudcat Virus or new feature
From: GUEST,punkfolkrocker
Date: 02 Nov 12 - 01:43 PM

For what it's worth...

I use Chrome with AdBlock plugin
on a reasonably well maintained daily updated antisvirus / spyware PC

and have experienced no such problems here..

I also clear cookies and temp files etc with Win 7 Disk Cleanup at least once a day,
if that makes any positive difference ?

Subject: RE: Mudcat Virus or new feature
From: stallion
Date: 02 Nov 12 - 01:44 PM

not on the mac

Subject: RE: Mudcat Virus or new feature
From: Rapparee
Date: 02 Nov 12 - 01:58 PM

I use Firefox (latest version) and Ad Blocker Plus. In addition I have the free AVG antivirus, Spybot Search and Destroy, and Free Windows Registry Repair software. My Windows firewall is on. I run Spybot and the registry repair a couple times a month, checking for updates in each of course. You have to run the registry repaid about three times to take care of everything possible, but it doesn't take long to run.

I've done some tweaking of the firewall, but I don't remember exactly what I did and I'm not sure it matters.

Oh, yeah -- I'm on XP.

Subject: RE: Mudcat Virus or new feature
From: Rapparee
Date: 02 Nov 12 - 01:59 PM

Oh, yeah -- I don't get the pop-up thing anywhere except when I look at certain VA websites and then it wants me to complete a surey -- which I refuse to do.