What the heck is this? (Malicious page potentially accessed via TF2Maps)

PL-7764

L6: Sharp Member
Aug 4, 2009
376
84
I was opening tabs with a few threads here from that page reached from the "New Posts" link on the homepage when all of a sudden, the page (the "New Posts" one) changed to an obvious virus page with a pop-up that said "Warning! Your PC is in danger and needs to be scanned and cleaned now!" and proceeded to repeatedly attempt to download an .exe file (I canceled every time). It brought up a bogus page with a phony "virus scan" claiming to find tons of "problems," and alternated between bringing up that awful "Warning! Your computer is in blah blah blah" pop-up and the attempted download. Upon trying to navigate away from the page it kept popping up more crap saying "But you need to scan now!!" I almost had to totally force-quit Firefox to get rid of it (managed to get the tab to close eventually).

I haven't installed any new and/or suspicious software recently that would potentially trigger Firefox to open such a page. The only thing I've installed recently was an upgrade to a paid-for and trusted professional music editing program. The only pages I had open were TF2Maps threads accessed via that "New Posts" page and said page itself. The only logical conclusion I can come to with my admittedly limited knowledge of this situation is that something within that TF2Maps page may have triggered that bad page coming up.

I'm going to run a full virus scan overnight to make sure it didn't get anything onto my system. Does anyone know what might cause such a bogus page to pop up? Was it something I got from the TF2Maps page? I didn't click on anything except the unread threads linked from that page.
 

LordNor

L3: Member
Jun 24, 2009
134
15
o_O did you have any other shady tabs open other than TF2Maps.net? idk run ur virusscan....what program you use? .....also.....didnt you know *conspiratorial whisper* TF2maps.net = hax website :p
 

Terr

Cranky Coder
aa
Jul 31, 2009
1,590
410
Probably some sleazy concern buying a banner ad from the banner ad network.
 

Chaopsychochick

L4: Comfortable Member
Jun 16, 2009
189
91
I just got that now as well, and have not had any troubles with any other site. So there may be something wrong with the banners or tf2maps.net could have been hacked... Which would have sucked. :/ Regardless, that thing is really annoying and I hope it does not appear again.
 

drp

aa
Oct 25, 2007
2,273
2,628
I just got that now as well, and have not had any troubles with any other site. So there may be something wrong with the banners or tf2maps.net could have been hacked... Which would have sucked. :/ Regardless, that thing is really annoying and I hope it does not appear again.
its probably a malicious ad in the adnetwork. if you can give me the url of this page, i can call burst media and shout at them.
 

PL-7764

L6: Sharp Member
Aug 4, 2009
376
84
The one I saw was called "VirusDoctor" in the page header, according to my browsing history.

McAfee ran overnight and found 3 known trojans, all in the browser cache and associated with that webpage, so I cleared my cache to hopefully get rid of them and anything else.

Here's the URL taken from my history: http://rootscan.info/25/24-033wLyEzLGBzL==
Click at your own risk!
 

drp

aa
Oct 25, 2007
2,273
2,628
i turned off all the ads until i can get this taken care off. sorry guys.