ADB, ADB+, Disconnect 0, HTTPSB 1

Discussion in 'malware problems & news' started by flinchlock, Feb 2, 2014.

Thread Status:
Not open for further replies.
  1. flinchlock

    flinchlock Registered Member

    Joined:
    Jan 30, 2005
    Posts:
    554
    Location:
    Michigan
    I think I have discovered a malware web site!

    When I type adblock.com into Chrome, it pauses for maybe 3 seconds then 3 other web sites appear so fast in the address bar I can't even read them. It finally stops at the fourth site. If HTTP Switchboard is NOT installed, AdBlock, Adblock Plus, and Disconnect show absolutely nothing at the last site.
    Wilders_1.PNG
    Wilders_2.PNG

    If HTTP Switchboard is installed, it stops anything from happening.
    Wilders_3.PNG

    Mike

    --------------------------------------------

    Win7 Home Prem x64

    Google Chrome 32.0.1700.102 m

    AdBlock 2.6.18
    ... AdBlock custom filters (recommended) updated 1 hour ago
    ... EasyList (recommended) updated 1 hour ago
    ... EasyPrivacy (privacy protection) updated 1 hour ago
    ... Fanboy's Annoyances (removes annoyances on the Web) updated 1 hour ago
    ... Malware protection updated 1 hour ago

    Adblock Plus 1.7.4
    ... Enabled EasyList Last updated at 5:26:28 PM today
    ... Enabled Malware Domains Last updated at 5:30:19 PM today
    ... Enabled Fanboy's Social Blocking List Last updated at 5:30:36 PM today
    ... Enabled EasyPrivacy Last updated at 5:30:58 PM today

    Disconnect 5.11.0
    HTTP Switchboard 0.7.9.2
    HTTPS Everywhere 2014.1.3
    Referer Control 0.48
     
  2. gorhill

    gorhill Developer

    Joined:
    Nov 12, 2013
    Posts:
    747
    Location:
    Canada
    I didn't investigate, but from the look of it, the disabling of javascript probably made the difference.

    EDIT: Yes, there is javascript code in hxxp://adblock.com/js/init.min.js which redirects to hxxp://splitter.ndsplitter.com.
     
    Last edited: Feb 3, 2014
  3. flinchlock

    flinchlock Registered Member

    Joined:
    Jan 30, 2005
    Posts:
    554
    Location:
    Michigan
    I also think that is true... thanks HTTSB. :thumb:

    I also have these Chrome settings:
    JavaScript: Allow all sites to run JavaScript (recommended)
    Plug-ins: Click to play

    I am mostly surprised that adblock.com is not black listed. I researched that web site at many web reputation sites and could not find any bad results. I noticed this morning that adblock.com is acting differently that it did last nite. o_O

    Mike
     
Loading...
Thread Status:
Not open for further replies.