Strange spyware or malware took over adsense ads

[obmob]

Everywhere i go, not just in my sites, googles adsense is replaced with some sort of iframe, inside there is definitely a not adsense ad... of course, google doesn't use iframes and display html code inside.

Have used several spywares, all of them say i'm clean, i searched for virus... nothing. <.<

Simply annoying, has anyone had a similar experience... i need help, don't know what to do. :(

Happens in IE & Firefox >.<

Thanks

[Etonian]

It sounds as though something has modified your 'hosts' file.

Suspecting that the topic would have been covered before, I did a quick search and this thread might be relevant:

[webmasterworld.com...]

I'll take a closer look at the search results and post some more links.

[Etonian]

No, I don't see anything else which is directly relevant. If the problem is in your hosts file though, then the link above should hopefully be all the information that you need. Open your hosts file in Notepad, and if you see a line which contains a reference to pagead2.googlesyndication.com like this:

###.###.###.### pagead2.googlesyndication.com

... then just delete that line, then save the file and close it. Then close any browsers which are open, and then re-open them and see if that's fixed it. For Firefox that should be all that's needed but I think IE may need a computer restart.

[fredw]

I test things at work by changing my hosts file all the time. IE does NOT require a computer restart for a new hosts to take effect. Just a closing of all the browser windows will do it.

By the way, the hosts file in windows can be found in:

\WINDOWS\System32\drivers\etc\

[sauron0512]

My host file contains links to many websites which i never even visited.

I have never even heard of those sites....

Should i delete all the entries?

[encyclo]

The hosts file should only include one line unless you specifically want to add extra lines (for example for an intranet). So keep the following:

127.0.0.1 localhost

And wipe all the rest. Then use your preferred anti-virus and anti-spyware tools to find the rogue program which added the entries.

The hosts file is a way of defining the IP address for a site bypassing DNS - so spyware can point the name of the AdSense servers to their own server and display their own ads.

[obmob]

OMG! i thought i searched... i guess i didn't do it very well... >_<

It's the second time this happens to me, last time i had to make fresh install of everything u.u

I'll try this and let you know, thanks.

It was that hosts problem. I remember i had a week fight with google guys, they had no idea what could be wrong... after that i formatted my PC.

Thank you guys.

[greedy player]

When you've studied this kind of technology you wonder to yourself...

Are my members infectected with this spyware also?

Should we run a script to check if they get he desired page for adsense or not.. and if not .. give them details about it?

If this is true then maybe it's a reason for sudden decrease in CTR and page impressions alike?..

Anyone wish to contribute efforts into the ultimate ANTI-SPYWARE of ADSENSE.

to the user infected. please inform adsense about the site replacing adsense banners it will help all of us. :)

[fredw]

Should we run a script to check if they get he desired page for adsense or not.. and if not .. give them details about it?

I'd be interested to hear feedback on this idea. As all the bad stuff is happening on the browser end, I don't think there's anything we can do to ascertain whether third party scripts (like Adsense) are properly loaded or not. What's everyone else think?

[Etonian]

It was that hosts problem.

That's good. Thanks for letting us know.