[404UserNotFound]

I keep getting popups on this site, of the following URL (DO NOT VISIT IT)

http://rvzr-a.akamaihd.net/sd/cpops-1.2.0.html?u=http%3A%2F%2Frvzr-a.akamaihd.net%2Fsd%2Fapps%2Ffusionx%2F0.0.4.html%3Faff%3D4300-1009&p=BetterSurf

This seems to try to install the BetterSurf adware on my computer, leading Microsoft Security Essentials to close down my Firefox and get me to quarantine/remove the infection.

This popup only appears on these forums, oddly enough, and even more odd is that I use Adblock Plus and the up to date HOSTS file from MVPS.org

[asherkin]

From what I can gather based on the information provided by Microsoft about BetterSurf, the issues you're having are due to already being infected.

BetterSurf displays ads to you as you browse the Internet, both in websites and on search engine results [...] It may also sometimes redirect you from where you wanted to go, and instead ask you to install software on your PC or ask you to complete surveys.

The URL you provided matches the screenshot of the 2nd behavior exactly, including the "Ads by BetterSurf" branding.

While you may sometimes see malware warnings (from programs such as Google's or Microsoft's) when browsing the forums, this happens due to images being hotlinked and the domain blacklist not taking into account content - there is no actual risk (browsers are smart enough to only allow inclusion of images with an img tag). Users cannot embed arbitrary HTML anywhere on the forum.

[msleeper]

misleading title

[Mitchell]

you just told every one that you were infected. lulz

[404UserNotFound]

Originally Posted by msleeper

Yes, yes you are.

Also, I've checked my list of installed programs. BetterSurf ain't on it. I don't have the BetterSurf "extension" installed in Firefox either.

And yet the popups are still appearing. Excuse me while I go torch my hard drive.

[ddhoward]

Is Spybot S&D still the preferred antispyware solution out there? Haven't looked into new stuff in a while.

[Jelle]

It wouldn't be a very good virus if you could find it in the list of installed programs, now would it?

It is probably hiding somewhere in a hidden folder. You should scan your system with your preferred anti virus program.

No one except you is getting this popup, which further tells us that you are infected, not the site.

If you can't get rid of it you only have one option; format.

[404UserNotFound]

Originally Posted by Jelle It wouldn't be a very good virus if you could find it in the list of installed programs, now would it? It is probably hiding somewhere in a hidden folder. You should scan your system with your preferred anti virus program. No one except you is getting this popup, which further tells us that you are infected, not the site. If you can't get rid of it you only have one option; format.

It's not a virus as it turns out, just a really shitty coupon-based adware that can be uninstalled.

I also blocked the raw URL in my hosts file, and thus far, no more infections and popups.

[ANTICHRISTUS]

if it's a known virus, it won't be so hard for any antivirus to remove it, so why not to try ?

[WildCard65]

Since were on topic of the better surf adware, McAfee caught one on my sister's laptop.