ScammersSuck
Jan 27 2007, 12:31 AM
I received an ad for soredtherose.net and while I was looking at the site, this full page ad showed for a site called brown book shop, then Norton went crazy trying to remove whatever that site contained.
I don't know what it was, but be careful if you visit soredtherose.net and it switches to the full page ad?
Ken
jlandis
Feb 6 2007, 03:19 PM
The exploit is on a site in rotation in AdBrite interstitials. The ad was for brownbookshop.net, but clicking the Home link on that page leads to brownbookshop.com. The .net page has the malware iframe, and the .com page doesn't.
Don't go to this site, but this particular iframe leads to lawcons.info. That's where the malware is, and that's what should be added to your AdBlock/Restricted sites lists.