Malware
Thread Starter
Melting Slicks
Joined: Jun 2013
Posts: 3,473
Likes: 691
From: West Virginia
Malware
When I goto Corvetteforum C5 general, I often get an unwanted screen asking me to update Flash Player. URL displayed is: toptypeonlinetheclicks.icu
This is a known malware distribution site, per Google search. Somehow, it's started by either the forum software or an ad running on the forum. Does not happen when I visit any other site.
This is a known malware distribution site, per Google search. Somehow, it's started by either the forum software or an ad running on the forum. Does not happen when I visit any other site.
Last edited by jackthelad; Dec 21, 2018 at 04:11 PM.
Le Mans Master
Joined: Feb 2011
Posts: 6,707
Likes: 173
From: Chatham NY
St. Jude Donor '13, '15-'16,'18 thru '25
I too have been getting the update Flash Player the last 4 or 5 days, on a Mac. Also getting a blank screen that says in upper left corner, this site is using too much memory.
so far? 
Thanks! 
Thread Starter
Melting Slicks
Joined: Jun 2013
Posts: 3,473
Likes: 691
From: West Virginia
Too much memory used warning may mean you have a malware process running. As a start, go to Force Quit and see if anything unexpected is running.
It seems to occur to me whe I first go to a site Forum - I've just had it happen twice, once when I went to C5 General and just now when I came to this forum. I always kill Safari and restart.
Think I'll stay away from here for a while - don't want to pick up anything nasty.
Edit: just checked - there was something called "printer proxy" running. Killed it. And removed the cookies and cache these people dumped on me.
Here's my "all history" list of these scanmmer websites:
https://bestadbid.com/afu.php?zoneid=1850667&var=new
http://www.irony.world/static/lps/u6Fs3j2D/?installer_id=46&affiliate_id=437038&cli ck-id=5c1ffb1a7edb230001be1505
http://windowgolddealtheclicks.live/3cOcsyKjwbpAPt2aGoHt3mQiUy1FULBGtXktoUBB BrI?cid=100815352983728129&sid=1365143
https://bestadbid.com/afu.php?zoneid=1365143&var=1365143
http://toptypeonlinetheclicks.icu/SKhpkoBTmSlxmgzbaLWkGxb2W_O5rJFBQlWaxyD5 y5E?clck=5c1ffb1e7edb230001be15f8&sid=%7 Bsub%7D
http://toptypeonlinetheclicks.icu/SKhpkoBTmSlxmgzbaLWkGxb2W_O5rJFBQlWaxyD5 y5E?clck=5c1ffb1e7edb230001be15f8&sid=%7 Bsub%7D
https://www2.popgreataptitudeliteflash.icu/?dsda=r8EQL8jeZ_PWK2Pd-9wpoG2NLKSN0D20ZpELSAHoWtm1NhoyHGWnHdv7a ugbx-https://www2.popgreataptitudeliteflash.icu/?dsda=r8EQL8jeZ_PWK2Pd-9wpoG2NLKSN0D20ZpELSAHoWtm1NhoyHGWnHdv7a ugbx-WRG1zZrO004MEdkRqvOKP6lQ..&cid=wK9NHH2NI 6NP855JHUMJ1JPU&sid=wK9NHH2NI6NP855JHUMJ 1JPU&v_id=2eH_4wNnu7_A8ckeG1odrYdQPnvsLf AwOh7-2FpoqoY.
These all flash by at speed, but history shows each one was visited.
Mods: multiple reports of malware here. Please clean this up - tnks.
It seems to occur to me whe I first go to a site Forum - I've just had it happen twice, once when I went to C5 General and just now when I came to this forum. I always kill Safari and restart.
Think I'll stay away from here for a while - don't want to pick up anything nasty.
Edit: just checked - there was something called "printer proxy" running. Killed it. And removed the cookies and cache these people dumped on me.
Here's my "all history" list of these scanmmer websites:
https://bestadbid.com/afu.php?zoneid=1850667&var=new
http://www.irony.world/static/lps/u6Fs3j2D/?installer_id=46&affiliate_id=437038&cli ck-id=5c1ffb1a7edb230001be1505
http://windowgolddealtheclicks.live/3cOcsyKjwbpAPt2aGoHt3mQiUy1FULBGtXktoUBB BrI?cid=100815352983728129&sid=1365143
https://bestadbid.com/afu.php?zoneid=1365143&var=1365143
http://toptypeonlinetheclicks.icu/SKhpkoBTmSlxmgzbaLWkGxb2W_O5rJFBQlWaxyD5 y5E?clck=5c1ffb1e7edb230001be15f8&sid=%7 Bsub%7D
http://toptypeonlinetheclicks.icu/SKhpkoBTmSlxmgzbaLWkGxb2W_O5rJFBQlWaxyD5 y5E?clck=5c1ffb1e7edb230001be15f8&sid=%7 Bsub%7D
https://www2.popgreataptitudeliteflash.icu/?dsda=r8EQL8jeZ_PWK2Pd-9wpoG2NLKSN0D20ZpELSAHoWtm1NhoyHGWnHdv7a ugbx-https://www2.popgreataptitudeliteflash.icu/?dsda=r8EQL8jeZ_PWK2Pd-9wpoG2NLKSN0D20ZpELSAHoWtm1NhoyHGWnHdv7a ugbx-WRG1zZrO004MEdkRqvOKP6lQ..&cid=wK9NHH2NI 6NP855JHUMJ1JPU&sid=wK9NHH2NI6NP855JHUMJ 1JPU&v_id=2eH_4wNnu7_A8ckeG1odrYdQPnvsLf AwOh7-2FpoqoY.
These all flash by at speed, but history shows each one was visited.
Mods: multiple reports of malware here. Please clean this up - tnks.
Last edited by jackthelad; Dec 23, 2018 at 04:37 PM.
IB Staff
Joined: Jun 2013
Posts: 471
Likes: 75
My apologies for the Flash redirects, everyone. This issue stems from malicious code being injected into our ad partner's banners, and we're working with those partners to isolate and remove the bad code.
I noticed a few of you mentioned it's happening in Safari on your Macs. Has it occurred for any of you in any other browsers on your Mac? Or on any other devices? Can you please also let us know the forum page you were on at the time the redirect occurred?
Thanks!
I noticed a few of you mentioned it's happening in Safari on your Macs. Has it occurred for any of you in any other browsers on your Mac? Or on any other devices? Can you please also let us know the forum page you were on at the time the redirect occurred?
Thanks!
