[twsocket] Website hacked?

2009-11-03 Thread Stefan Paege
Hi,

I just visited www.overbyte.be

At this point my Firefox Popup-Blocker stopped a popup.

Now when clicking on the ICS link on the left bar (under Products) I get
 a new window of some commercial site (e.g. a US Green Card lottery).

I tried a few times and a new window pops up every time.

Intended or not?

Regards
-- 


elektronik-labor CARLS GmbH  Co. KG

  Stefan Paege

Fon: +49 5973 9497-23
Fax: +49 5973 9497-19



elektronik-labor CARLS GmbH  Co. KG
Kommanditgesellschaft:
Sitz Neuenkirchen, Registergericht Steinfurt HRA 3310

Persönlich haftende Gesellschafterin:
elektronik-labor CARLS, Beteiligungsgesellschaft mbH,
Sitz Neuenkirchen, Registergericht Steinfurt HRB 4175

Geschäftsführer:
Irmgard Carls, Joachim Schulte

--
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] Website hacked?

2009-11-03 Thread Fastream Technologies
Hi,

I saw a game ad when I click products in a popup!

Regards,

SZ

On Tue, Nov 3, 2009 at 10:50 AM, Stefan Paege pa...@el-carls.de wrote:

 Hi,

 I just visited www.overbyte.be

 At this point my Firefox Popup-Blocker stopped a popup.

 Now when clicking on the ICS link on the left bar (under Products) I get
  a new window of some commercial site (e.g. a US Green Card lottery).

 I tried a few times and a new window pops up every time.

 Intended or not?

 Regards
 --


 elektronik-labor CARLS GmbH  Co. KG

  Stefan Paege

 Fon: +49 5973 9497-23
 Fax: +49 5973 9497-19

 

 elektronik-labor CARLS GmbH  Co. KG
 Kommanditgesellschaft:
 Sitz Neuenkirchen, Registergericht Steinfurt HRA 3310

 Persönlich haftende Gesellschafterin:
 elektronik-labor CARLS, Beteiligungsgesellschaft mbH,
 Sitz Neuenkirchen, Registergericht Steinfurt HRB 4175

 Geschäftsführer:
 Irmgard Carls, Joachim Schulte

 --
 To unsubscribe or change your settings for TWSocket mailing list
 please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
 Visit our website at http://www.overbyte.be

--
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be

Re: [twsocket] Website hacked?

2009-11-03 Thread A Drent

I've never seen this, have posted it on the ics newsgroup for explanation.

albert
- Original Message - 
From: Stefan Paege pa...@el-carls.de

To: twsocket@elists.org
Sent: Tuesday, November 03, 2009 9:50 AM
Subject: [twsocket] Website hacked?


Hi,

I just visited www.overbyte.be

At this point my Firefox Popup-Blocker stopped a popup.

Now when clicking on the ICS link on the left bar (under Products) I get
a new window of some commercial site (e.g. a US Green Card lottery).

I tried a few times and a new window pops up every time.

Intended or not?

Regards
--


elektronik-labor CARLS GmbH  Co. KG

 Stefan Paege

Fon: +49 5973 9497-23
Fax: +49 5973 9497-19



elektronik-labor CARLS GmbH  Co. KG
Kommanditgesellschaft:
Sitz Neuenkirchen, Registergericht Steinfurt HRA 3310

Persönlich haftende Gesellschafterin:
elektronik-labor CARLS, Beteiligungsgesellschaft mbH,
Sitz Neuenkirchen, Registergericht Steinfurt HRB 4175

Geschäftsführer:
Irmgard Carls, Joachim Schulte

--
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be

--
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] Website hacked?

2009-11-03 Thread A Drent


- Original Message - 
From: Fastream Technologies ga...@fastream.com

To: ICS support mailing twsocket@elists.org
Sent: Tuesday, November 03, 2009 9:53 AM
Subject: Re: [twsocket] Website hacked?



Hi,

I saw a game ad when I click products in a popup!

Regards,

SZ

On Tue, Nov 3, 2009 at 10:50 AM, Stefan Paege pa...@el-carls.de wrote:


Hi,

I just visited www.overbyte.be

At this point my Firefox Popup-Blocker stopped a popup.

Now when clicking on the ICS link on the left bar (under Products) I get
 a new window of some commercial site (e.g. a US Green Card lottery).

I tried a few times and a new window pops up every time.

Intended or not?

Regards
--


elektronik-labor CARLS GmbH  Co. KG

 Stefan Paege

Fon: +49 5973 9497-23
Fax: +49 5973 9497-19



elektronik-labor CARLS GmbH  Co. KG
Kommanditgesellschaft:
Sitz Neuenkirchen, Registergericht Steinfurt HRA 3310

Persönlich haftende Gesellschafterin:
elektronik-labor CARLS, Beteiligungsgesellschaft mbH,
Sitz Neuenkirchen, Registergericht Steinfurt HRB 4175

Geschäftsführer:
Irmgard Carls, Joachim Schulte

--
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


--
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


I got a US lottery. It looks like there's a hack?

albert 


--
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be

Re: [twsocket] Website hacked?

2009-11-03 Thread Angus Robertson - Magenta Systems Ltd
 I just visited www.overbyte.be
 At this point my Firefox Popup-Blocker stopped a popup.

I see no pop-ups on the front page, there never have been pop-ups.
 
 Now when clicking on the ICS link on the left bar (under Products) 
 I get a new window of some commercial site (e.g. a US Green Card 
 lottery).

I simply see a new ICS web page, no new window, no pop-up, no adverts. 

I'm using the latest Firefox.  However Adblock Plus has blocked: 

http://pagead2.googlesyndication.com/pagead/show_ads.js

from the ICS pages, so if something is infected, it's Google.

It's unfortunately that the ICS web pages are invested with horrible
adverts, although I never see them due to Adblock.  

I also have: 

127.0.0.1  pagead2.googlesyndication.com #[Google AdWords]

in my HOSTS file, which comes from http://www.mvps.org/winhelp2002/ and
which blocks thousands of other ads and porn sites.

Angus

--
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] Website hacked?

2009-11-03 Thread A Drent
Yes, I have a popup-blocker too, but clicking on ics opened a separate 
session containing an add for a phone sms contest. Tried it again, and that 
one is gone, but the page still attemps to start a popup. Didn't know that 
is was google adds though.


albert


- Original Message - 
From: Angus Robertson - Magenta Systems Ltd an...@magsys.co.uk

To: twsocket@elists.org
Sent: Tuesday, November 03, 2009 10:15 AM
Subject: Re: [twsocket] Website hacked?



I just visited www.overbyte.be
At this point my Firefox Popup-Blocker stopped a popup.


I see no pop-ups on the front page, there never have been pop-ups.


Now when clicking on the ICS link on the left bar (under Products)
I get a new window of some commercial site (e.g. a US Green Card
lottery).


I simply see a new ICS web page, no new window, no pop-up, no adverts.

I'm using the latest Firefox.  However Adblock Plus has blocked:

http://pagead2.googlesyndication.com/pagead/show_ads.js

from the ICS pages, so if something is infected, it's Google.

It's unfortunately that the ICS web pages are invested with horrible
adverts, although I never see them due to Adblock.

I also have:

127.0.0.1  pagead2.googlesyndication.com #[Google AdWords]

in my HOSTS file, which comes from http://www.mvps.org/winhelp2002/ and
which blocks thousands of other ads and porn sites.

Angus

--
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be



--
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] Website hacked?

2009-11-03 Thread Arno Garrels
Angus Robertson - Magenta Systems Ltd wrote:
 I just visited www.overbyte.be
 At this point my Firefox Popup-Blocker stopped a popup.
 
 I see no pop-ups on the front page, there never have been pop-ups.

Same here, no pop-ups, I use Firefox as well.

 
 Now when clicking on the ICS link on the left bar (under Products)
 I get a new window of some commercial site (e.g. a US Green Card
 lottery).
 
 I simply see a new ICS web page, no new window, no pop-up, no adverts.

Same here.

 
 I'm using the latest Firefox.  However Adblock Plus has blocked:

I use the NoScript addon.
 
 http://pagead2.googlesyndication.com/pagead/show_ads.js
 
 from the ICS pages, so if something is infected, it's Google.

With NoScript you are able to allow scripts temporarily, however 
that doesn't change anything, still no pop-ups.

Only the What's New box is empty? Wasn't there a java-applet?

--
Arno Garrels
--
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] Website hacked?

2009-11-03 Thread Stefan Paege
I just tried again:
No more popups!

I then cleared the Firefox cache (Shift-Control-Delete) and opened
www.overbyte.be
Result: Popup blocked!

Then clicked on Products/ICS.
Result: Popup! I won a lottery!



-- 


elektronik-labor CARLS GmbH  Co. KG

  Stefan Paege

Fon: +49 5973 9497-23
Fax: +49 5973 9497-19



elektronik-labor CARLS GmbH  Co. KG
Kommanditgesellschaft:
Sitz Neuenkirchen, Registergericht Steinfurt HRA 3310

Persönlich haftende Gesellschafterin:
elektronik-labor CARLS, Beteiligungsgesellschaft mbH,
Sitz Neuenkirchen, Registergericht Steinfurt HRB 4175

Geschäftsführer:
Irmgard Carls, Joachim Schulte

--
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] Website hacked?

2009-11-03 Thread Marc Charbonneau
 I then cleared the Firefox cache (Shift-Control-Delete) and opened
 www.overbyte.be
 Result: Popup blocked!

 Then clicked on Products/ICS.
 Result: Popup! I won a lottery!

I get the same thing with Firefox under Linux, except that I didn't
won the lottery, I just got an ad for 11 hosting.
--
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] Website hacked?

2009-11-03 Thread Fastream Technologies
I think in Google Adwords, site admins now can specify whether popup ads are
to be served:

Regards,

SZ

On Tue, Nov 3, 2009 at 1:35 PM, Marc Charbonneau timebandit...@gmail.comwrote:

  I then cleared the Firefox cache (Shift-Control-Delete) and opened
  www.overbyte.be
  Result: Popup blocked!
 
  Then clicked on Products/ICS.
  Result: Popup! I won a lottery!

 I get the same thing with Firefox under Linux, except that I didn't
 won the lottery, I just got an ad for 11 hosting.
 --
 To unsubscribe or change your settings for TWSocket mailing list
 please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
 Visit our website at http://www.overbyte.be




-
--
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] Website hacked?

2009-11-03 Thread RTT

These pop-ups are probably coming from the Motigo Webstats Counter

http://web.me.com/thierry.cornelis/Site/Blog/Entries/2009/1/23_Motigo_Webstats_Counters_Generate_Pop-ups.html

Better change to statcounter, completely free of any advertise technique.

Hi,

I just visited www.overbyte.be

At this point my Firefox Popup-Blocker stopped a popup.

Now when clicking on the ICS link on the left bar (under Products) I get
 a new window of some commercial site (e.g. a US Green Card lottery).

I tried a few times and a new window pops up every time.

Intended or not?

Regards
  


--
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] Website hacked?

2009-11-03 Thread Francois PIETTE

These pop-ups are probably coming from the Motigo Webstats Counter

http://web.me.com/thierry.cornelis/Site/Blog/Entries/2009/1/23_Motigo_Webstats_Counters_Generate_Pop-ups.html


I have removed Motigo counter. Could you check if you still see the popup 
(Strangely, I don't see it from here).


--
francois.pie...@overbyte.be
The author of the freeware multi-tier middleware MidWare
The author of the freeware Internet Component Suite (ICS)
http://www.overbyte.be

--
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] Website hacked?

2009-11-03 Thread RTT



These pop-ups are probably coming from the Motigo Webstats Counter

http://web.me.com/thierry.cornelis/Site/Blog/Entries/2009/1/23_Motigo_Webstats_Counters_Generate_Pop-ups.html 



I have removed Motigo counter. Could you check if you still see the 
popup (Strangely, I don't see it from here).
Seems to be fine now, but previously it had a random behavior, not 
always showing these pop-ups, so I can't say for sure.
Even so, I don't see nothing more in these pages that can cause it. It's 
probably fixed now.
If you miss the feature, take a look at the equivalent statcounter.com. 
I use it, and it's really a great service, showing only advertises at 
the statistics pages, that can be made public, or not. Google analytics 
is more complete, but not so easy to understand and work with.


--
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] Website hacked?

2009-11-03 Thread Hoby Smith
 I have removed Motigo counter. Could you check if you still see the popup

 (Strangely, I don't see it from here).

Hey, Francois...  That seems to have done it for me... Thanks much!  Hoby

--
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] Website hacked?

2009-11-03 Thread Stefan Paege
All looks fine now.

No more popups.

Thank you very much.


-- 


elektronik-labor CARLS GmbH  Co. KG

  Stefan Paege

Fon: +49 5973 9497-23
Fax: +49 5973 9497-19



elektronik-labor CARLS GmbH  Co. KG
Kommanditgesellschaft:
Sitz Neuenkirchen, Registergericht Steinfurt HRA 3310

Persönlich haftende Gesellschafterin:
elektronik-labor CARLS, Beteiligungsgesellschaft mbH,
Sitz Neuenkirchen, Registergericht Steinfurt HRB 4175

Geschäftsführer:
Irmgard Carls, Joachim Schulte

--
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be