dslreports logo
 
    All Forums Hot Topics Gallery
spc
Search similar:


uniqs
947

noodletek
@24.190.85.x

noodletek

Anon

https://opensoftwareupdater.com - youtube

was on youtube, browsing past pages of videos, happen upon page 3....»opensoftwareupdater.com appears, i exit it, i go back to page 1 and move to page 3....

apparently on page 3 something triggers »opensoftwareupdater.com to appear and wanting me to install something.

i was on no other site only youtube.

anyone experience something intrusive like this on youtube yet?

antdude
Matrix Ant
Premium Member
join:2001-03-25
US

antdude

Premium Member

Do you not block ads?
BlitzenZeus
Burnt Out Cynic
Premium Member
join:2000-01-13

1 recommendation

BlitzenZeus to noodletek

Premium Member

to noodletek
Sounds like you have adware, it could be a browser extension, or actually be on your system.
redwolfe_98
Premium Member
join:2001-06-11

redwolfe_98 to noodletek

Premium Member

to noodletek
doing a google-search for "opensoftwareupdater.com", i found this:

»malwaretips.com/blogs/op ··· m-virus/

noodletek
@24.190.85.x

noodletek to noodletek

Anon

to noodletek
Click for full size
this is what i was greeted with while i was on youtube.

waitingroom
@137.53.249.x

waitingroom

Anon

You were already given a link showing you have adware, either you have no anti-virus, or it didn't catch it, which you might want to replace it provided you were using it correctly.

noodletek
@24.190.85.x

noodletek

Anon

then the adware originated from youtube.
Nanaki (banned)
aka novaflare. pull punches? Na
join:2002-01-24
Akron, OH

Nanaki (banned)

Member

not likely it just showed up on you tube by luck of the draw is much more likely

noodletek
@24.190.85.x

noodletek

Anon

look up " YouTube ads serving malware"

because everytime i would click back to page 3 it would pop up, i would move foward to page 4 or backward to page 2 and nothing happened. but on page 3 i would get a pop up...eventually it went away and i could not replicate it.

i just reinstalled my os so something like this would give me ocd.
noodletek

noodletek

Anon

i meant i reinstalled the os and went web surfing and then it occurred, i did not find anything in my install/uninstall menu
noodletek

noodletek to noodletek

Anon

to noodletek
i do recall playing cod 4 online through steam.

is it possible for a server admin to infect players? maybe
noodletek

noodletek to BlitzenZeus

Anon

to BlitzenZeus
upon further research it also can be a pop up, so i can remove malware/adware out of the equation
redwolfe_98
Premium Member
join:2001-06-11

1 recommendation

redwolfe_98

Premium Member

noodletek, you should refer to the "malwaretips" article that i posted a link to, above..

try doing a scan with the "adwcleaner" program, and with the "malwarebytes" program:

»toolslib.net/downloads/v ··· cleaner/

»www.malwarebytes.org/
BlitzenZeus
Burnt Out Cynic
Premium Member
join:2000-01-13

2 recommendations

BlitzenZeus to noodletek

Premium Member

to noodletek
I've never seen a pop-up of that nature on multiple operating systems with different browsers using youtube, and other sites with ads. Adware can come with other packages, like are you sure you got your popular software from the official site? Do you even have an anti-virus, or anti-malware scanner? Did you make sure you had all the os updates before you browsed the web with IE?

You also clearly missed your search was changed to trovi search, it's in the image you uploaded.....
»www.google.com/search?q= ··· nel=fflb

You downloaded something bad, accept it, and clean up your system. If you didn't have an anti-virus, or anti-malware get one.

noodletek
@24.190.85.x

noodletek

Anon

no that pic i posted is similar to what appeared in my web browser wanting me to install it. it would pop each time i went to a certain page number.
Nanaki (banned)
aka novaflare. pull punches? Na
join:2002-01-24
Akron, OH

1 recommendation

Nanaki (banned) to BlitzenZeus

Member

to BlitzenZeus
+1 on that blitzen. It is a malware infection. Looks like maybe the author of the software has employed a little misdiretion

noodletek
@24.190.85.x

noodletek

Anon

i don't know, i have a hard time trying to understand it's a malware infection when i just formatted the hdd 1 day ago.

what if it's simply a pop up or a cross site scripting attack. i did not download anything bad

Pjr
Don't Panic
join:2005-12-11
UK

2 recommendations

Pjr

Member

said by noodletek :

i did not download anything bad

From which I infer you downloaded and installed some programs.

The software you installed could be malware free but the download manager/installer could have had something embedded into it. See »FileHippo tests adware distributing download manager for examples of sites that do this.

noodletek
@24.190.85.x

noodletek

Anon

i probably did not make myself clear enough

I did not download anything really, i installed the necessary security updates, i installed firefox, i installed mse, i installed steam to play some games and that's it basically.
redwolfe_98
Premium Member
join:2001-06-11

2 edits

1 recommendation

redwolfe_98

Premium Member

said by noodletek :

i probably did not make myself clear

do you have a link for youtube's "page 3"?

everyone keeps telling you that the problem is that you have malware/crapware on your computer.. have you scanned your computer for malware? or, you imagine that there is no malware on your computer and so you refuse to scan your computer, to remove the malware?

i don't know what programs you have installed on your computer but i think a lot of people get "crapware" on their computers by installing shady programs that supposedly allow people to download videos, or music, from youtube..
Nanaki (banned)
aka novaflare. pull punches? Na
join:2002-01-24
Akron, OH

1 recommendation

Nanaki (banned) to noodletek

Member

to noodletek
just because cnet aka download.com is %100 spyware free by their standards it does not mean they are by any one else. Download.com uses a file installer as does many / most software sites. One of the few who do not is major geeks. Most of their stuff is zip files. so just because you did not download any thing "bad" does not mean you did not install any thing "bad".
Nanaki

Nanaki (banned) to redwolfe_98

Member

to redwolfe_98
Im a youtube nut love the site. I spend hours on their some days and have never had this happen on any browser. I bet if he looks in his browser extensions hes going to find a few that do not come standard and that he did not install knowingly. Lots of maleware has page counter triggers etc now that will make it pop up after a given number of pages on a web site are visited can be 1 to 100000 etc but the point is they will simply pick a site that is visted often select a number then pop up after that number is reached.
redwolfe_98
Premium Member
join:2001-06-11

redwolfe_98 to noodletek

Premium Member

to noodletek
novaflare, i was just kidding, about a "youtube page 3"

i agree with you, i don't think the problem was with youtube..

Blackbird
Built for Speed
Premium Member
join:2005-01-14
Fort Wayne, IN

2 recommendations

Blackbird to noodletek

Premium Member

to noodletek
said by noodletek :

... I did not download anything really, i installed the necessary security updates, i installed firefox, i installed mse, i installed steam to play some games and that's it basically.

"Opensoftware Updater" is a recognized PuP (potentially unwanted program). You get it as part of a bundle that comes along with other software downloads, properly disclosed or not. It typically applies itself to several registry keys, injects itself into the Start folder, embeds itself into the browser, and installs itself as a regular program. It functions by periodically popping up an ad or notice during a browsing session... the triggering mechanism for the ads is whatever Updater makes it to be. But what you describe and what you show in your screenshot is exactly what this PuP does.

If your quote above is accurate, you should not get it from your OS, security updates, Firefox (if obtained at the Mozilla site), or MSE. Beyond that (eg: Steam, etc), you may well be at risk for it to be bundled with the download(s).
Nanaki (banned)
aka novaflare. pull punches? Na
join:2002-01-24
Akron, OH

2 recommendations

Nanaki (banned) to redwolfe_98

Member

to redwolfe_98
Yeh it simply is not from you tube other wise we would see dozens of others coming here with the same issue. It comes down to this if a site is displaying pop ups for just you or a few users it is likely not the cause of the problem. If it is dozens who are seeing the behavior then it may very well be the source.

I have cleaned up lots of computers in one case i had a popup (porn popup) that was only showing up on dslreports google and 4 or 5 other sites. Now i noticed it was coming up here because i came here to check on some info for a infection i found on the computer. Now obviously dslr is not hosting porn pop ups. So why was it popping up here? Simple dslreports was the x site visited for that session and the spyware was set to trigger at that time. I played around a bit and was actually able to determine that it was hard coded to pop up during page loads based off a set number of links followed or sites visited. Was kind of cool to dissect it a bit. Sense it was a php etc files that controlled the pop up i was able to dissect it and really get a handle on how it functioned and even change it's behavior lol

That's just how spyware etc works. They use misdirection to confuse the situation and shift blame etc. They obviously want to avoid having the real source discovered as it can then potentially be dealt with.

noodletek
@24.190.85.x

noodletek

Anon

anyway i formatted and reinstalled.

maybe it was because i was using firefox 28.0 - the screen shot i posted above in this thread was from a random person on the internet who encountered the same thing as me
Nanaki (banned)
aka novaflare. pull punches? Na
join:2002-01-24
Akron, OH

3 recommendations

Nanaki (banned)

Member

Unless you figure out what it was you installed that included this garbage ware you'll probably just end up with it right back on the system.
R3porter
join:2014-07-23

R3porter

Member

said by Nanaki:

Unless you figure out what it was you installed that included this garbage ware you'll probably just end up with it right back on the system.

How did you find and remove it from your system? Thanks in advance.
Nanaki (banned)
aka novaflare. pull punches? Na
join:2002-01-24
Akron, OH

Nanaki (banned)

Member

Well ive never had it on mine or any other junkware/spyware/viruses. On these things the best method to take out a single bit of malware at a time is to google name and removal in this case
open software updater removal. and to find out what is known to install it (there will be 100s of results for what is known to install it and 100s of more sources that are not known) google what installs open software updater.

Open software updater will also turn up both the main download site for the junkware as well as people complaining about it being installed by program x. Which will give you more results to track down what it is that you may have installed that included it so that you can decide to not install that program or can double check to make sure you are not clicking past the i agree to install check box/prompt.

Chances are this garbage ware is skirting the law by being included as a auto opt in install meaning that if you simply clock next through all prompts in some freeware program you will install it as it will be checked by default.

This stuff happens with all oses any more where you download a installer for a program hell it is on android as well. Generally in the form of in app advertisements that are to easy to click.


TheJoker
MVM
join:2001-04-26
Charlottesville, VA

TheJoker to noodletek

MVM

to noodletek
noodletek, I recommend you go to »Security Cleanup, read the »Security Cleanup FAQ »Mandatory Steps Before Requesting Assistance, and post the resulting logs in a new topic.