RedCafe Malicious Advert?

rcoobc

Not as crap as eferyone thinks
Joined
Jul 28, 2010
Messages
41,701
Location
C-137



Thats the latest one. I don't think I have malware on the phone
 
Last edited:

Niall

All Powerful Super Being
Staff
Joined
Jun 13, 1999
Messages
24,612
Images didn't work - try again?
 

rcoobc

Not as crap as eferyone thinks
Joined
Jul 28, 2010
Messages
41,701
Location
C-137
I think i fixed it. Doing anything on phones is a bit more difficult, bit its on the phone i get it
 

shaggy

Prefers blue over red, loathed by Spurs fans
Joined
Jun 16, 2011
Messages
14,936
Location
Man United fan
I always get that sot of pop up as well (on mobile). I think it comes up when you click the ad accidently.
 

Niall

All Powerful Super Being
Staff
Joined
Jun 13, 1999
Messages
24,612
This has been reported by a couple of mods as well, I'm looking into it. I don't have an Android phone however so can't reproduce it.

If it's popping up without you taking action (i.e. tapping on an ad) then that shouldn't be happening. Can you verify the behaviour?
 

Twigg

Not Twigginator
Joined
Nov 14, 2012
Messages
15,283
Location
Alfordsay, earnay Oldway Affordtray
Supports
100 extrapolation
I've been getting these on this website too. They usually warn me of a virus and tell me to click ok, and sometimes there isn't even a cancel button.
 

KM

I’m afraid I just blue myself
Joined
Sep 18, 2008
Messages
49,745
This has been reported by a couple of mods as well, I'm looking into it. I don't have an Android phone however so can't reproduce it.

If it's popping up without you taking action (i.e. tapping on an ad) then that shouldn't be happening. Can you verify the behaviour?
I can verify that. It happens to me too.
 

rcoobc

Not as crap as eferyone thinks
Joined
Jul 28, 2010
Messages
41,701
Location
C-137
I appreciate that that was a terrible post by the way. But I can't delete those phantom images.

I don't think i click on an advert but I'm not sure. I do sometimes click on them
 

Mr Anderson

Eats, shoots, leaves
Joined
Jul 6, 2009
Messages
24,299
Location
Ireland
I think it is to do with the adverts. When DU Mobile (or something like that) advert is on the page, I get a pop up window saying "Clean your Android and speed up to.....etc". So I presume it could be something to do with the google adverts? This is on my phone obviously
 

IBleedRed

likes to use pantyhose
Joined
Jan 23, 2008
Messages
6,642
Location
The Colonies
I get it too
Its from the adverts and you don't have to click the advert for the popup to happen

I get it on my android phone and tablet

Sometimes It says stuff like YOU HAVE A VIRUS!
 

Member 60376

Guest
@rcoobc @Niall the first pic is of DU speed booster - it's a well known app and definitely not malware (https://play.google.com/store/apps/details?id=com.dianxinos.optimizer.duplay&hl=en) but that is a pop-up ad generated by some other adware app installed in the phone

The second one is also adware, so there is likely some app installed in the phone which is generating these ads

Robo I would get the free Lookout antivirus installed from the play store if I were you. Also, if you are rooted - google adfree apk and install it - that will kill the ads
 

rcoobc

Not as crap as eferyone thinks
Joined
Jul 28, 2010
Messages
41,701
Location
C-137
I had AVG installed and that never found anything. Now I've got malware bytes and it's not finding anything. I've also got adblock plus which wasn't doing anything, although I've now realised it wasn't turned on.

I turned on restricted content though, but despite that I think its related to RedCafe and not the phone. Could be wrong.
 

Niall

All Powerful Super Being
Staff
Joined
Jun 13, 1999
Messages
24,612
Ok I've removed a bunch of mobile ads - please let me know if this fixes it?
 

Niall

All Powerful Super Being
Staff
Joined
Jun 13, 1999
Messages
24,612
Not an advert but opening this thread I got this

This is the link:
Code:
https://www.redcafe.net/threads/iconic-1970s-album-covers.384204/page-2#post-15042019
This is fixed, I removed the image.
 

Niall

All Powerful Super Being
Staff
Joined
Jun 13, 1999
Messages
24,612
@rcoobc @Niall the first pic is of DU speed booster - it's a well known app and definitely not malware (https://play.google.com/store/apps/details?id=com.dianxinos.optimizer.duplay&hl=en) but that is a pop-up ad generated by some other adware app installed in the phone

The second one is also adware, so there is likely some app installed in the phone which is generating these ads

Robo I would get the free Lookout antivirus installed from the play store if I were you. Also, if you are rooted - google adfree apk and install it - that will kill the ads
So you're saying it's nothing to do with the ads on the site?
 

Member 60376

Guest
So you're saying it's nothing to do with the ads on the site?
That's my take on it, yes, but I will read up a bit more to be sure

Do you have popup/popunder ads enabled on the site or just Google ads?
 

Carl

has permanently erect nipples
Joined
Mar 6, 2008
Messages
45,374
I've been having these pop ups as well. Not the same as the ones in the OP though, mine have been about getting anti-virus software.
 

Niall

All Powerful Super Being
Staff
Joined
Jun 13, 1999
Messages
24,612
That's my take on it, yes, but I will read up a bit more to be sure

Do you have popup/popunder ads enabled on the site or just Google ads?
I need to check on exactly where those ads are coming from but there definitely shouldn't be any popup or pop under ads enabled.
 
Last edited:

Alex99

Rehab's Pete Doherty
Joined
May 30, 2009
Messages
15,902
I occasionally get pop up ads on my tablet or mobile, usually warning me that my android has a virus and to 'click here' to get rid of it.
 

rcoobc

Not as crap as eferyone thinks
Joined
Jul 28, 2010
Messages
41,701
Location
C-137
I've been having these pop ups as well. Not the same as the ones in the OP though, mine have been about getting anti-virus software.
Thats the main one I've been getting. The others I got today for the first time.
I occasionally get pop up ads on my tablet or mobile, usually warning me that my android has a virus and to 'click here' to get rid of it.
These ones.

I really don't think its the phone as I've never had them elsewhere, I'm sensible and it comes back clean on scans.

Thanks for looking into this though niall! I'll stop spamming :)
 

Member 60376

Guest
Guys on Android getting these popup ads, can you try this and report please?

Install AirPush Detector from https://play.google.com/store/apps/details?id=com.brosmike.airpushdetector&hl=en

This is a simple Android application which detects other installed applications which appear to use known notification ad frameworks and offers the user the ability to easily uninstall them.
If your device is running Android 4.1 "Jelly Bean" or higher, you don't need this app anymore! You can just press and hold on notifications and your device will tell you who is generating them.

Currently detected frameworks include:
- Airpush
- LeadBolt
- Appenda
- IAC
- Moolah Media
- SendDroid
- AppBucks
- Kuguo
- Applovin'

THIS APP DOES NOT *BLOCK* THESE ADS. It only tells you which applications are causing them. You must uninstall the applications this app identifies to stop the ads.
 

Member 60376

Guest
That's odd, I'd have thought airpush/leadbolt would be the culprits

Could you please try out these steps? Sorry for the long post

1. Manually opt out from ad networks
Most ad companies ask you to manually opt-out else they will continue sending ads even if the apps that they came with have been uninstalled
From
http://opt.leadbolt.com/
http://www.airpush.com/optout
http://senddroid.com/opt-out/

2. Install ad network detectors and do full scan
If this step can tell you which app is creating the notifications - you can directly go to step 4
From
https://play.google.com/store/apps/details?id=com.brosmike.airpushdetector
https://play.google.com/store/apps/details?id=com.lookout.addetector
https://play.google.com/store/apps/details?id=com.denper.addonsdetector

3. Install adblock plus (no root required) and adaway (requires root)
Even if step 2 works, it is highly recommended that you do this step
From
https://adblockplus.org/en/android-install
https://f-droid.org/repository/browse/?fdid=org.adaway

4. Disable notifications for apps
A) If you have identified the app in step 2, follow this video to stop notifications for that app
B) If you have not found the app in step 2, then stop notifications for the browser app that you use (stock browser or firefox or dolphin or chrome etc)


After doing all of the above steps please restart, clear cache and then test by opening redcafe on your browser
 

Woodzy

Full Member
Joined
Sep 10, 2004
Messages
14,762
Location
Cardiff
I've had Android messages a couple of times when using the browser, but I mostly use Tapatalk so I wouldn't be able to say if it's a regular thing.

I think the message was something like "blah blah, your Android is in danger."
 

Niall

All Powerful Super Being
Staff
Joined
Jun 13, 1999
Messages
24,612
If this happens again, can somebody please take a screenshot of the page and post it here so I can see which ads are being served when this happens. This will help me identify where the problem is.

Thanks.
 

Niall

All Powerful Super Being
Staff
Joined
Jun 13, 1999
Messages
24,612
I've been getting these for about the last 10 days, no ads were clicked to trigger it. AVG finds nothing untoward.
Can you take a screenshot of any ads on the page next time it happens, I need to see what is being served when this popup appears. You can close the popup, I don't need to see that in the screenshot.
 

Summit

"do the dead, spread your seed and get out"
Joined
Nov 10, 2011
Messages
51,054
I've had it a few times as well and If it happens again I'll take a screenshot like requested.
 

Moby

Dick
Joined
May 20, 2011
Messages
51,356
Location
Barcelona, Catalunya
I keep getting redirected to some ad like site when I click on one of the buttons on the editor. Any button, post reply, a smiley, anything. It happens once in every 20-30 times.
 

Niall

All Powerful Super Being
Staff
Joined
Jun 13, 1999
Messages
24,612
I keep getting redirected to some ad like site when I click on one of the buttons on the editor. Any button, post reply, a smiley, anything. It happens once in every 20-30 times.
What device?

PM me the URL you're redirected to as well if it happens again.
 

Niall

All Powerful Super Being
Staff
Joined
Jun 13, 1999
Messages
24,612
What device?

PM me the URL you're redirected to as well if it happens again.
It certainly does sound like it could be something on your end. I doubt it's related to ads. Do a virus scan on your computer? :confused: