To
Find Lyric Alphabetical Category Click On The First
Letter Of The Title
.......
Enjoy
Over A Million Pages Of Resources
.
HP
English Site
Chineese
German
French
Dutch
Portuge
Italian
Spanish
Japanese
Russian
Korean
English
To
Select Your Language And
Translate PagesClick
Flags
Return To ENGLISH
Click American Flag
Or
Alert
To The Public: Protect Your Children From
This Spyware
If you see
Christian web sites where some ads are
from Vimax, know that your computer
has some how been a target of a Trojan
spyware virus. How? By Email Spam or
through downloads from Lime Wire, Kazaa
or other download sharing sites.
Apple has posted on their discussion
forum articles by many clients having
a problem on their personal computers
and lap tops with a Spyware Virus. The
virus is sent by spam mail and once
opened it infects that computer. The
virus is set to change ads displayed
on the computer infected. The Spyware
changes clean ads intruding peoples
lives through Internet Explorer and
FireFox, by taking over clean and decent
ads replacing them with Vimax Pills.
There are pictures of mostly undressed
men (hats strategically located) and
comments about enhancing body parts.*****
Higher Praise Team is posting this article
to make believers in Christ aware of
how the enemy works to try and destroy
the youth and the credibility of honest
and pure web sites. For the record Higher
Praise goes through all ad content daily
and selects ad content that is clean
pure and of a good report.
If you see Christian web sites where
some ads are from Vimax, know that your
computer has some how been a target
of a Trojan spyware
As everyone has deduced this is very
clearly not an issue with the web sites
it is some sort of malware in individual
computers. The New York Times, MLB.com,
Macworld.com, and countless Religious
and other Respectable sites were not
simultaneously compromised. These web
sites were visited simultaneously with
many computers that did not have the
virus and on these web site computers
they were all completely clean of bad
ads. Everyone can take this as a definitive
test that this is a problem of malware
and individual computers compromised
-- not compromised web sites. For clarity's
sake the ads are always replacing the
spaces on web sites where normal ads
would sit and have not yet been seen
in a pop-up window, they certainly aren't
spawning pop-up windows of their own. Please
read the documents below from Apples
web site. Apple lets you know of the
dangers and how to safe guard your computers
from this spyware.
Apple
Community Discussions
Apple Community DiscussionsApple.com
> Support > Discussions
for Mac
Posts: 8
From:
Long Island,
NY
Registered:
Jul 6,
2005
Takeover by male enhancement product
ads....HELP!
Posted: Oct 12, 2008 6:38 PM
It seems
that banner
ads and
other
ads on
a variety
of very
tame web
sites
(e.g.,
tvguide.com)
have been
taken
over by
ads for
Vimax
Pills.
There
are pictures
of mostly
naked
men (hats
strategically
located)
and comments
about
a larger
*****.
What's
going
on? I
downloaded
Safari
thinking
it would
override
the existing
program,
but it
didn't
help.
Do I need
to delete
the existing
Safari
and download
a new
one?
I am extremely
unsavvy
about
anything
of this
sort,
always
counting
on my
iMac to
be free
from all
concerns
such as
this and
to run
smoothly
allowing
me to
maintain
complete
ignorance.
So now,
I'd appreciate
any help
possible
in the
simplest
explanation
possible.
Thanks
in advance.
iMac 500 Special Edition 128 MG PowerPC
G3
Mac OS
X (10.2.x)
Re: Takeover by male enhancement
product
ads....HELP!
Posted: Oct 12, 2008 8:01
PM
in response to: Gerie
Lopez
There
is
no
infection,
so
it's
useless
to
start
thinking
that
way.
You
cannot
download
a
new
copy
of
Safari,
so
if
you
try,
you'll
be
sorry.
Instead,
try
disabling
JavaScript
and
Plugins
in
Safari
preferences,
and
disable
JavaScript
and
enable
Block
Pop-Up
windows
on
Firefox.
If
you're
being
redirected
to
a
different
site
than
what
you
expect
or
typed
in
your
address
bar,
that
would
indicate
either
a
Trojan
Horse
or
something
your
ISP
is
doing.
But
if
you're
just
getting
a
pop-up
ad
from
a
site,
disabling
JavaScript
and
Plugins
should
stop
those;
but
you
should
also
send
an
email
to
the
webmaster
of
those
sites
telling
them
about
these
pop-up
ads,
since
it's
much
more
likely
that
their
web
server
has
been
infiltrated
for
that
purpose.
Posts: 8
From:
Long
Island,
NY
Registered:
Jul
6,
2005
Re: Takeover by male enhancement
product
ads....HELP!
Posted: Oct 12, 2008 9:27
PM
in response to: Mulder
Thank
you,
Mulder!
I
clicked
off
JavaScript
enabling
and
was
back
to
the
typical,
"respectable"
ads.
Now
my
concern
is
that
with
JavaScript
disabled,
will
other
things
be
affected?
In
other
words,
just
what
does
JavaScript
do?
Re: Takeover by male enhancement
product
ads....HELP!
Posted: Oct 12, 2008 7:43
PM
in response to: Gerie
Lopez
Yeah,
I
have
the
exact
same
problem,
I
noticed
it
first
on
BBC.com,
which
i
don't
think
even
has
actual
advertisements,
and
now
the
same
ads
on
Yahoo,
IGN,
and
several
others.
I've
scanned
my
MacBook
using
several
programmes,
but
can
find
nothing
out
of
the
ordinary??
Re: Takeover by male enhancement
product
ads....HELP!
Posted: Oct 13, 2008 2:48
AM
in response to: Gerie
Lopez
I
know
that
Ad-Aware
removes
the
malware
that
causes
this
browser
hijacking
from
PCs.
I
am
guessing
that
iAntiVirus
will
do
the
same
but
my
MBP
is
clean
so
cannot
test
Re: Takeover by male enhancement
product
ads....HELP!
Posted: Oct 13, 2008 6:58
AM
in response to: AllisonR
There
are
no
viruses
for
Mac
OS
X,
so
purchasing
or
using
Antivirus
software
will
accomplish
nothing
other
than
wasting
time
and
money.
You
cannot
defend
against
or
remove
something
that
doesn't
exist
for
the
Mac.
As
I
stated
earlier,
if
you
see
pop-up
ads
from
sites
you
visit,
you
should
advise
the
site
administrators,
since
there
are
very
few
that
actually
allow
those
types
of
ads,
so
either
one
of
their
advertisers
is
doing
something
they
shouldn't
be,
or
their
web
server
has
been
infiltrated
to
serve
up
those
types
of
ads.
Posts: 8
From:
Long
Island,
NY
Registered:
Jul
6,
2005
Re: Takeover by male enhancement
product
ads....HELP!
Posted: Oct 13, 2008 7:21
AM
in response to: Mulder
Mulder,
you
were
posting
when
I
was.
Thanks
again.
I
have
contacted
two
of
the
website
administrators
so
far.
I'm
just
wondering
how
many
there
will
be,
and
if
this
will
ever
stop.
I'm
also
wondering,
"Why
me?"
One
of
the
sites
is
a
National
Geographic
forum.
When
I
first
spotted
the
ads,
in
places
where
only
Nat.
Geo.
ads
had
appeared
before,
I
asked
other
forum
members
if
they
were
getting
this,
too.
No
one
else
was.
Because
it's
on
so
many
different
web
sites,
on
both
Safari
and
Firefox
browsers
(but
not
AOL,
interestingly)
and
not
affecting
other
users
of
those
sites,
I
can't
help
but
feel
it's
something
in
my
computer.
Re: Takeover by male enhancement
product
ads....HELP!
Posted: Oct 13, 2008 8:39
AM
in response to: Gerie
Lopez
The
only
way
for
the
problem
to
be
something
on
your
computer
is
for
you
to
have
downloaded
it
and
installed
it,
which
requires
Admin
authorization.
If
you
didn't
download
or
install
anything
that
might
be
suspicious,
then
we
know
it's
not
that.
But
the
fact
that
it
doesn't
happen
using
the
AOL
browser
would
seem
to
eliminate
malware
from
the
equation.
You
should
enable
pop-up
blocking
in
both
Safari
and
Firefox
if
you
haven't
already;
this
will
stop
most
pop-up
ads
and
other
windows.
Posts: 8
From:
Long
Island,
NY
Registered:
Jul
6,
2005
Re: Takeover by male enhancement
product
ads....HELP!
Posted: Oct 13, 2008 7:02
AM
in response to: AllisonR
Thanks,
Allison.
After
all
these
years
of
being
so
smug
about
using
a
Mac.....Sheesh!
I
don't
want
to
disable
javascript
because
it
does
have
a
negative
impact
on
my
computer
use.
I'd
rather
see
the
ads.
I'm
curious
about
antivirus
software,
but
don't
want
to
go
downloading
things
until
I
know
they'll
solve
the
problem.
Has
anyone
had
any
success
with
these
kinds
of
products?
Re: Takeover by male enhancement
product
ads....HELP!
Posted: Oct 13, 2008 11:47
AM
in response to: Gerie
Lopez
I
just
noticed
it
today.
Chicago
Tribune,
Notebookreview.com,
and
many
others.
All
of
them
are
from
Vimax
with
the
same
ridiculous
ads
about
enhancement
and
enlargement.
Surely
there
must
be
a
market
opportunity
for
someone
to
come
up
with
a
product
that
will
block
this.
Posts: 8
From:
Long
Island,
NY
Registered:
Jul
6,
2005
Re: Takeover by male enhancement
product
ads....HELP!
Posted: Oct 13, 2008 1:38
PM
in response to: Smith9900
Hey,
Smith!
Good
for
you!
Can
you
please
supply
a
link
for
the
adblock
plus?
Did
it
take
care
of
both
Firefox
and
Safari?
Is
it
a
free
program?
Appreciate
your
help.
Thanks
Re: Takeover by male enhancement
product
ads....HELP!
Posted: Oct 13, 2008 2:55
PM
in response to: Gerie
Lopez
I'm
so
glad
I
am
not
alone
and
this
issue
is
happening
in
real
time
to
others.
I
started
seeing
these
Vimax
ads
on
IGN
and
Globe
and
Mail
just
yesterday.
It
appears
the
other
sites
listed
below
have
similar
ways
of
displaying
banners...which
makes
me
think
they
are
being
hosted
by
the
same
company.
So
this
suggests
its
a
server-side
issue.
However
I
am
having
other
issues
(I
use
Vista
and
Firefox).
If
i
type
a
search
in
Google
(using
the
search
field
at
the
top
of
FireFox)
that
contains
.com,
i
get
a
looping
search
error.
May
I
ask
those
seeing
these
Vimax
banners
try
typing
"ask.com"
and
see
if
it
goes
to
the
correct
site,
or
if
you
see
these
looping
search
error.
Because
this
tells
me
the
problem
could
actually
be
Malware
on
my
computer...
I
have
run
serveral
virus
scans,
it
found
2
viruses
and
both
were
removed,
now
all
scans
are
clean.
Perhaps
this
issue
is
so
new
that
it
has
not
hit
the
Virus
Scanning
companies
yet...
Hopefully
its
fixed
soon!
Re: Takeover by male enhancement
product
ads....HELP!
Posted: Oct 13, 2008 5:23
PM
in response to: Kyle
Shackley
Perhaps
this
issue
is
so
new
that
it
has
not
hit
the
Virus
Scanning
companies
yet...
It's
not
a
virus,
so
there's
nothing
for
any
antivirus
company
to
do.
This
is
a
server-side
issue
and
that
means
the
web
sites'
systems
have
probably
been
infiltrated
to
serve
up
these
types
of
pop-up
ads,
which
are
activated
with
Flash
and
JavaScript.
Posts: 8
From:
Long
Island,
NY
Registered:
Jul
6,
2005
Re: Takeover by male enhancement
product
ads....HELP!
Posted: Oct 13, 2008 6:20
PM
in response to: Mulder
Mulder,
do
you
see
this
being
solved
by
the
website
servers,
or
will
individual
users
have
to
clean
it
up
themselves?
Do
you
recommend
the
adblock
and
pith
helmet
programs
to
rectify
the
situation?
You
keep
saying
"pop
up,"
which
I
have
always
thought
were
new
windows
that
open,
just
popping
up
out
of
nowhere.
These
ads
are
showing
up
in
the
website
window
itself.
I
just
wanted
to
clarify.
Not
sure
if
it
makes
a
difference
or
not.
I'm
kind
of
getting
used
to
these
mostly
naked
guys.
I
might
even
start
giving
them
names.
Re: Takeover by male enhancement
product
ads....HELP!
Posted: Oct 13, 2008 8:21
PM
in response to: Gerie
Lopez
You
keep
saying
"pop
up,"
which
I
have
always
thought
were
new
windows
that
open,
just
popping
up
out
of
nowhere.
These
ads
are
showing
up
in
the
website
window
itself.
I
just
wanted
to
clarify.
I
did
ask
whether
or
not
these
were
pop-up
windows
at
the
beginning
of
the
topic
thread,
but
you
never
answered
that
question,
so
I
made
the
assumption
that
they
were.
If
they
are
not,
then
I
would
have
to
say
that
it
could
be
a
Trojan
Horse,
which
is
caused
by
something
you
downloaded
and
installed.
If
it
is,
you
should
be
being
redirected
to
web
sites
different
from
the
one
you
entered
in
the
address
bar
or
clicked
on
a
link
to
reach.
Otherwise,
you
probably
don't
have
a
Trojan
Horse
and
the
issue
is
really
one
of
the
web
site
itself
being
hijacked
to
serve
up
these
types
of
ads.
To
find
out
if
this
is
the
case
and
remove
it,
you
need
to
download
and
run
the
DNSChanger
Removal
Tool
and
if
it
finds
it,
you
need
to
restart
your
Mac
for
it
to
finish
the
task,
and
with
any
luck
you
will
not
see
those
ads
again.
Posts: 8
From:
Long
Island,
NY
Registered:
Jul
6,
2005
Re: Takeover by male enhancement
product
ads....HELP!
Posted: Oct 13, 2008 8:55
PM
in response to: Mulder
Mulder wrote:
I
would
have
to
say
that
it
could
be
a
Trojan
Horse,
which
is
caused
by
something
you
downloaded
and
installed.
If
it
is,
you
should
be
being
redirected
to
web
sites
different
from
the
one
you
entered
in
the
address
bar
or
clicked
on
a
link
to
reach.
Otherwise,
you
probably
don't
have
a
Trojan
Horse
and
the
issue
is
really
one
of
the
web
site
itself
being
hijacked
to
serve
up
these
types
of
ads.
To
find
out
if
this
is
the
case
and
remove
it,
you
need
to
download
and
run
the
DNSChanger
Removal
Tool
and
if
it
finds
it,
you
need
to
restart
your
Mac
for
it
to
finish
the
task,
and
with
any
luck
you
will
not
see
those
ads
again.
Mulder
Mulder,
thanks
again.
I
followed
your
advice
above
and
it
did
the
trick.
It
took
less
than
5
minutes
to
download
and
scan
and
did
indeed
find
the
trojan
horse.
The
ads
are
gone
on
both
Safari
and
Firefox
and
my
computer
is
back
up
to
its
normal
peppy
speed.
It
had
slowed
down
tremendously
recently,
which
I
attributed
to
my
son's
activity
with
music
creation.
You
are
my
hero
tonight.
BTW,
I
did
have
a
talk
with
my
son
about
his
viewing
habits!!!!!
Re: Takeover by male enhancement
product
ads....HELP!
Posted: Oct 13, 2008 7:33
PM
in response to: Mulder
Hi
Mulder,
Thanks
for
explaining.
Could
you
comment
on
why
only
some
computers
see
these
ads?
I
loaded
the
Globe
&
Mail
on
my
work
laptop
and
the
normal
ads
appeared.
Thanks.
Re: Takeover by male enhancement
product
ads....HELP!
Posted: Oct 13, 2008 8:25
PM
in response to: Kyle
Shackley
The
computers
that
are
affected
could
have
a
Trojan
Horse
that
is
causing
this,
but
I
know
of
none
for
this
purpose
for
Windows,
nor
any
tool
to
check
for
and
remove
it
if
you
did
have
it.
I
do
know
that
I'm
not
being
affected
by
these
ads
on
my
Mac.
Posts: 1
From:
Seattle,
WA
Registered:
Oct
14,
2008
Re: Takeover by male enhancement
product
ads....HELP!
Posted: Oct 14, 2008 6:54
AM
in response to: Gerie
Lopez
The
answer
is:
You
have
a
Trojan
Horse
called
DNSChanger
1.1
or
other
variation
that
is
causing
unauthorized
ads
to
load
in
place
of
various
web
sites’
scheduled
ads.
The
Trojan
Horse
is
most
likely
in
(root)
/library/Internet
Plug-Ins,
but
don't
bother
to
try
to
find
it
in
the
finder
or
with
spotlight
-
It's
invisible.
A
free
trial
version
of
MacScan
will
find
it,
isolate
it,
and
allow
it
to
be
trashed.
Be
sure
to
do
a
full
scan
of
the
entire
hard
drive
–
I
found
the
Trojan
in
the
“mainâ€
library
–
not
the
user
library.
If
you
purchase
MacScan,
you
can
perform
custom
scans
of
smaller
areas
of
the
hard
drive.
You
don’t
need
to
re-install
Safari
You
don’t
need
to
disable
your
JavaScript
You
don’t
need
to
disable
your
Plugins
You
don’t
need
to
install
blocking
programs
Just
get
rid
of
the
Trojan
Horse!
Re: Takeover by male enhancement
product
ads....HELP!
Posted: Oct 14, 2008 9:17
AM
in response to: 12th
Root
of
2
I
used
the
trial
version
of
Ad-Aware
this
morning
and
it
appears
to
have
fixed
the
issue.
No
more
naked
men!
Thank
you
to
all
for
the
help
with
fixing
my
problem!
I
really
appreciate
it.
Re: Takeover by male enhancement
product
ads....HELP!
Posted: Nov 19, 2008 7:02
AM
in response to: 12th
Root
of
2
12th
Root,
I
followed
your
instructions.
MacScan
did
find
DNSChanger
1.1,
so
thanks
for
that
clean-up,
but
the
problem
persists.
I
ran
MacScan
again,
and
the
2nd
time
it
did
not
find
DNSChanger
1.1,
but
it
found
1
tracking
cookie.
I'm
still
getting
Vimax
ads
everywhere
I
look,
and
it's
getting
more
frustrating
by
the
minute.
I
too
thought
(for
about
a
week
or
two)
that
it
was
just
an
aggressive
marketing
campaign,
but
now
realize
it's
more
insidious
than
that.
Any
other
suggestions?
Re: Takeover by male enhancement
product
ads....HELP!
Posted: Oct 17, 2008 10:28
PM
in response to: shaplaa
Thank
you
so
much
for
that
solution
(re.
DNS
Removal
Tool).
I
was
going
nuts
for
my
kids
to
have
to
see
those
ads.
I'm
not
prissy,
but
this
is
unacceptable
for
my
kids
to
see
while
surfing
news
sites.
I'd
like
to
join
a
complaint,
if
anyone
can
help.
Re: Takeover by male enhancement
product
ads....HELP!
Posted: Nov 4, 2008 6:45
AM
in response to: rat666
I've
been
having
these
vimax
banner
problems,
too.
I
was
overjoyed
to
find
out
that
so
many
other
people
are
having
this
problem,
and
it's
not
just
me.
However,
my
problem
just
won't
go
away.
I've
downloaded
and
installed
MacScan
and
the
DNS
Trojan
remover,
and
used
both
to
scan
my
system.
I've
run
multiple
full
system
scans
with
MacScan,
and
successfully
removed
the
trojan
with
the
DNS
remover.
But
when
I
go
to
macworld,
I
still
get
those
naked
guys
in
the
top
banner.
I
downloaded
PithHelmet
for
Safari,
and
it
successfully
blocks
the
ads
from
appearing
-
which
is
all
right
by
itself,
but
I'd
much
rather
fix
the
problem
and
remove
this
offending
file
instead
of
covering
it
up.
I
have
no
idea
how
to
kill
this
thing.
Is
there
a
terminal
fix?
Re: Takeover by male enhancement
product
ads....HELP!
Posted: Nov 6, 2008 1:16
PM
in response to: GuitarWolf101
This
article
on
Macworld
does
shed
some
light
on
the
issue.
They
say
a
product
called
Virus
Barrier
by
Intego
might
help.
I'm
not
endorsing
it
or
anything,
since
I've
never
used
it,
but
I
would
be
interested
in
hearing
if
anyone
else
has
tried
it.
http://www.macworld.com/article/60823/2007/10/trojanhorse.html
It
is
your
wi-fi
router.
The
infection
blocks
windows
update
and
re-directs
searches
to
god-knows-where,
mainly
msn.com
to
start.
Reset
it,
replace
it,
whatever.
I
found
it
without
any
forum
help.
Just
what
to
"gift"
this
info
to
the
world.
bugmore wrote:
It
is
your
wi-fi
router.
The
infection
blocks
windows
update
and
re-directs
searches
to
god-knows-where,
mainly
msn.com
to
start.
Reset
it,
replace
it,
whatever.
I
found
it
without
any
forum
help.
Just
what
to
"gift"
this
info
to
the
world.
Could
anyone
confirm
if
this
indeed
WAS
a
router
issue?
Sorry
to
keep
this
thread
going,
but
I'm
trying
to
diagnose
an
issue
remotely
for
a
family
member.
It
seemed
to
first
infect
his
computer
(he
installed
something),
and
then
his
room
mates
(on
xp
pc's)
ended
up
seeing
the
same
ads...
very
strange..
Powerbook
G4
12
Macbook
2.2
ghz
2gb
120gb
Mac
OS
X
(10.5.4)
Re: Takeover by male enhancement
product
ads....HELP!
Posted: Nov 29, 2008 1:22
PM
in response to: JW
in
IN
Thanks
for
posting
this
article.
I
went
through
all
the
terminal
tasks
and
as
far
as
I
can
see
I
don't
have
a
trojan
horse
on
my
system.
Yet,
I
still
have
the
ads!
very
frustrating.
I've
run
all
of
the
anti-spyware/virus
apps
recommended
and
they
have
found
nothing.
I
am
on
a
wireless
network
with
my
roommates
(Netgear
router
connected
to
a
PC).
Is
it
possible
I've
gotten
this
through
the
network?
Posts: 4
From:
California
Registered:
Nov
29,
2008
Re: Takeover by male enhancement
product
ads....HELP!
Posted: Nov 29, 2008 5:21
PM
in response to: Whit555
I'm
in
the
same
boat
as
Whit555.
These
ads
started
popping
up
this
morning.
Since
then
I've
deleted
all
cookies
in
both
Firefox
and
Safari
(I
have
the
latest
versions
of
both
browsers
Firefox
3.0.4
and
Safari
3.2.1).
I
downloaded
MacScan
and
VirusBarrier,
but
neither
of
them
have
detected
anything.
Similarly
the
DNSChanger
Removal
Tool
did
me
no
good.
I
did
the
terminal
work
suggested
in
the
cited
macworld
article
(http://www.macworld.com/article/60823/2007/10/trojanhorse.html)
and
it
looks
like
I'm
clean
of
a
root
cron
job
"no
crontab
for
root"
and
my
DNS
servers
match
my
GUI.
(Of
note
the
article
about
the
new
variant
of
the
RSPlug
trojan
(http://www.tuaw.com/2008/11/18/new-variant-of-rsplug-trojan-making-the-rounds/)
was
published
on
11/18,
the
day
the
makers
of
VirusBarrier
sent
them
an
alert
about
the
trojan
horse.
I
only
downloaded
the
trial
version
of
VirusBarrier.
It's
definitions
were
installed
on
the
7/15
and
I
cannot
update
them
without
purchasing
the
application.
So
it
is
definitely
possible
(if
not
likely)
that
the
full
version
of
VirusBarrier
has
a
solution
for
this...
it
would
be
nice
if
they
would
update
the
trial
version)
As
everyone
has
deduced
this
is
very
clearly
not
an
issue
with
the
web
sites
themselves
and
is
some
sort
of
malware
on
my
computer.
The
New
York
Times,
MLB.com,
macworld.com,
and
countless
other
respectable
sites
were
not
simultaneously
compromised.
On
top
of
that
I
have
visited
these
sites
simultaneously
with
a
friends
computer
and
my
own
and
on
his
computer
they
are
completely
clean.
I
hope
everyone
can
take
this
as
a
definitive
test
that
this
is
a
problem
of
malware
and
my
compromised
computer
--
not
compromised
web
sites.
(Although,
curiously
I
did
see
the
ads
on
nytimes.com
this
morning
but
can't
seem
to
get
them
again).
And
for
clarity's
sake
I
will
mention
that
the
ads
are
always
replacing
the
spaces
on
web
sites
where
normal
ads
would
sit
and
I
have
yet
to
see
one
in
a
pop-up
window
and
they
certainly
aren't
spawning
pop-up
windows
of
their
own.
Also,
the
ads
show
up
in
every
browser
you
try,
including
obscure
ones
(did
anyone
else
know
that
RealPlayer
has
a
web
browser?).
Perhaps
of
note,
Firefox
has
slowed
to
an
absolute
crawl.
While
Safari
runs
fairly
normal,
Firefox
will
take
5
minutes
to
load
a
page
(probably
a
Javascript
battle
going
on?)
and
by
the
time
it
actually
loads
the
Vimax
ads
do
not
appear
--
the
normal
ones
do.
(Note:
this
is
not
due
to
ad-blocking
which
I
will
discuss
below.
When
the
ads
are
blocked
a
blank
spot
appears
where
the
Vimax
ad
would
be.
In
my
super
slow
running
Firefox
after
the
5
minute
load,
the
real
ads
appear.
Yet
I
believe
the
slow
load
times
are
directly
owing
to
the
malware
as
Safari
runs
at
approximately
normal
speed).
Safari
is
my
primary
browser,
so
I
can't
give
a
very
accurate
account
if
Firefox
was
actually
showing
the
ads
or
has
been
running
slow
the
whole
day,
but
it
certainly
has
been
running
extremely
slow
for
the
past
few
hours
and
I
think,
but
I'm
not
sure,
that
it
was
showing
the
ads
as
well
earlier
in
the
day.
Like
Whit555
I'm
curious
how
this
ended
up
on
my
computer.
I
just
noticed
it
this
morning,
but
I
haven't
really
downloaded
anything
in
the
past
few
days.
I
do
recall
updating
VLC
media
player,
but
I'm
sure
I
was
prompted
to
download
an
update
from
within
the
application
itself.
And
I
certainly
haven't
downloaded
p*rn.
I'm
not
very
interested
in
blocking
these
ads
--
I'm
interested
in
removing
the
malware
from
my
computer.
A
month
ago
a
strategy
for
blocking
these
ads
was
mentioned
here:
(http://aalaap.blogspot.com/2008/10/block-annoying-vimax-ads.html)
where
you
add
a
fake
DNS
entry
for
the
host
of
the
images:
"127.0.0.1
b1.adv.net".
I
think
it
is
important
to
note
that
this
seems
to
be
a
new
version
of
the
malware
as
the
host
of
the
images
seems
to
change
depending
upon
when
you
open
a
website
and
which
website.
I
have
gotten
images
from
hosts
"b2.adv.net",
"b4.adv.net",
"b12.adv.net",
"b13.adv.net"
and
"b18.adv.net"
and
that
is
just
in
the
last
10
minutes
since
I've
been
checking.
(Also
perhaps
of
note,
the
ads
on
any
one
page
can
be
sent
from
different
host
servers
--
so
b2
and
b13
could
both
be
displaying
on
mlb.com).
If
someone
is
only
interested
in
blocking
these
adds
they
can
incrementally
just
add
a
new
fake
DNS
entry
for
every
single
host
they
encounter.
(You
can
find
this
by
right
clicking
on
the
image
and
select
"Copy
Image
Address".
For
example
one
of
my
adds
yielded
this:
http://b18.adv.net/wim/300x250/300x250_10.gif.
Obviously
the
host
you
input
to
block
this
ad
is
"b18.adv.net").
One
could
probably
live
with
the
malware
by
just
blocking
everything
from
b1
to
b20.
But
like
I
said
I
want
this
off
of
my
computer.
I
am
slightly
concerned
that
this
could
be
more
harmful
than
just
offensive
ads.
A
minute
ago
when
I
was
testing
the
fake
DNS
stuff
with
my
horribly
slow
Firefox
Max
OS
X
force
quit.
The
screen
slowly
dimmed
and
then
it
froze
and
said
I
needed
to
manually
restart
by
holding
the
power
button.
No
matter
what,
it
seems
clear
that
this
problem
existed
a
month
ago
and
the
solutions
to
fix
that
version
of
the
malware
exist
with
MacScan
or
the
DNSChanger
Removal
Tool.
However,
considering
that
these
ads
are
now
served
up
by
variable
hosts
and
it
doesn't
seem
as
if
that
was
documented
before
and
considering
that
no
plugin.settings
or
cron
job
exists
(see
linked
macworld
article),
it
seems
as
if
this
is
a
new
and
different
version
of
the
malware.
Like
Whit555
I
would
appreciate
any
help
resolving
this
issue.
I've
tried
to
document
it
as
accurate
as
possible.
Hopefully
this
will
help.
Re: Takeover by male enhancement
product
ads....HELP!
Posted: Nov 29, 2008 9:15
PM
in response to: Gerie
Lopez
If
anyone
here
is
currently
infected
and
currently
getting
vimax
popups
PLEASE
email
me
csy@i2g.net
We
are
trying
to
get
to
the
bottom
of
this.
We
at
vimax
ARE
NOT
personally
doing
this.
We
want
to
out
what
reseller
of
ours
is
doing
this
and
the
only
for
us
to
do
this
is
with
someone
who
is
infected
to
help
me.
Please
email
me
or
message
me
on
aim
at
"jupzchris"
Re: Takeover by male enhancement
product
ads....HELP!
Posted: Nov 30, 2008 10:48
AM
in response to: Gerie
Lopez
I
downloaded
a
trail
copy
of
ProtectMac
AntiVirus,
the
site
said
it
could
find
malware
and
Trojan
Horses
too.
I
have
not
had
any
of
the
vimax
ads
since
I
ran
it.
I
was
seeing
them
at
kcstar.com/sports,
cnn.com,
and
columbiadailytribune.com,
but
not
anymore.
I
didn't
see
the
ads
at
www.bbc.com
after
I
ran
the
software.
The
ProtectMac
AntiVirus
software
took
several
hours
to
scan
everything
after
I
downloaded
it.
I
was
getting
the
ads
in
October
and
used
the
macscan
software
I
think
someone
mentioned
in
a
previous
post.
It
worked
in
October
but
they
came
back
a
couple
of
days
ago
and
the
macscan
software
didn't
work.
I
have
an
e-mail
address
I
use
to
register
at
various
web
sites.
I
don't
check
it
very
often
because
I
get
a
lot
of
junk
mail
at
it,
especially
ads
for
vimax
type
products.
Both
times
I
started
seeing
the
vimax
ads
came
shortly
after
I
downloaded
e-mail
from
that
address.
I'm
assuming
a
virus,
a
malware,
or
a
trojan
horse
got
on
my
computer
that
way.
Anyhow,
I
won't
be
checking
that
address
anymore.
Hope
this
helps
someone.
