News: IT'S THE 2ND ANNUAL GUATEMALA LIBRARY PROJECT BOOK DRIVE!    LOOKING FOR DONATIONS OF SCIENCE BOOKS THIS YEAR.    Check it out in the "Extending the Hand of Kindness" folder or here: http://www.etiquettehell.com/smf/index.php?topic=139832.msg3372084#msg3372084   

  • April 30, 2017, 12:26:53 PM

Login with username, password and session length

Author Topic: Ad link on EHell leads to possible Trojan or ransomware  (Read 719 times)

0 Members and 1 Guest are viewing this topic.

snappylt

  • Member
  • Posts: 645
Ad link on EHell leads to possible Trojan or ransomware
« on: February 05, 2017, 09:56:01 AM »
Earlier this morning I clicked on an ad on an EHell page that said "He left us yesterday" and "We are sad about our loss" and "Hershearticle.tk". It had a sideways picture of a man who looked vaguely familiar, so I clicked on the ad to learn who had died.

When I clicked on that ad on Ehell earlier this morning, a new tab opened up, and then a message box appeared at the center top of the new tab. The message box said my computer had been infected by malware and I would lose all of my files unless I called a phone number. (The phone number was given, but I was hurriedly closing down my computer, so I did not copy it down.)

I restarted my computer and everything seems to be running just fine.

Just now that same ad again appeared on an EHell page. I do not know if the ad taking me to a dangerous page was a one-time-only event, or if clicking on the ad takes one to a dangerous place every time. Right now, the ad leads to: " https://googleads.g.doubleclick.net/aclk?sa=L&ai=CgvlglUiXWKenPIKO_AGo_piwD9T1rJJIgYzO09EE9Y38wgMQASC6gYEFYMnW7IzkpKwTyAEJqQLPnT6WpqFVPqgDAcgDwwSqBLsBT9D63Xmdi-VF-5QpdJNX1aTKUNYM69SvDuZB3KJTV2iaXH61i-yZ_q0Jzo3ogo6fQJ1b1bmZPje4GCphjdtOCRgSOWPfu4CGjC0IDaWWgV_eVB9dbBx0EJJHKAr1GLgdlV8DWhmuC8SDQOTdSx2R2YRJvlKnDf5lf_OAQEpBIeIk-f8nDOENdN43WMqOhEfuPBwaq-oavJth6lr7kPJlDz2h5AfFYiWLqh2YE45XBW7L4c8xS7P449Qei6AGLoAH2svxY6gHpr4b2AcA0ggFCIBhEAE&num=1&sig=AOD64_0L94_E-iWiW7LdrYEvKvC456Kheg&client=ca-pub-2383764056760447&adurl=http://hershearticle.tk/droz/&mb=2&bg=!urmluaFE1qRCHwLo7ywCAAAAqVIAAAAmCgAHNQ2j2e9btpkBIvuz91PqnH10Y2fkvfvnT6VLvzQlVz4dSBCFsvSQxilsHJj9qWVKPf-ho4vLh2dt9xS8OcJRQLMJlvICvMNyJErF-xT-UNwknSswH982IrZ_gmGl_S0xvXEHtaLLWrgRQz_cWbEZ8jFp6CHuFpOUbhWlsdZhPIrsHcQNvd7aHPbr5uDNjFEpMjiypggBy3ZEWQ_t-O8P9TOxy0b-ojGypz_4hePZqhfRmfJSjHpKbz-UTHsCdd0kkFXHZVxjW1Dfexrk_xWGXDTY86a9RwhBhLIV1HN3ANw0AikAZU9Ic_bZH8vaBK1mfolom_AR03G-7huXZtfGbqlvjXxiPkPoH8TSYUQB50nOt71j8WzzZpqXP-UFp6KETc-WwgmUNxuSQz3N "

Again, I don't know if that link is the same link the ad took me to earlier because I do now want to risk clicking on it again.

Just thought I should report this.

Curly Wurly Doggie Breath

  • Member
  • Posts: 3674
  • Aussie's Rule
Re: Ad link on EHell leads to possible Trojan or ransomware
« Reply #1 on: February 05, 2017, 09:59:14 AM »
Yikes :O

                          The Southern Cross Flag. Australia

Ehelldame

  • Administrator
  • *****
  • Posts: 2960
  • I'm evil personified to the terminally crass.
    • Etiquette Hell
Re: Ad link on EHell leads to possible Trojan or ransomware
« Reply #2 on: February 10, 2017, 02:19:05 PM »
I blocked the URL this ad was directing clickers to go to.   It shouldn't appear in future ads.

But it's also a good idea to not click any ad that says something like, "She's gone" or "He left us yesterday" which implies someone has died.   I see them a lot on Facebook ads.   It's just click bait 

snappylt

  • Member
  • Posts: 645
Re: Ad link on EHell leads to possible Trojan or ransomware
« Reply #3 on: February 20, 2017, 02:51:57 PM »
OP here. My wife and son both agree with you that I should not be clicking on ads!

Actually, my wife says that if she sees an ad that looks interesting, she will go ahead and type in the url for the advertiser herself instead of clicking on the ad.