Latest Popups

The popups that survive the popup killers

[zuko105]

I am using a google toolbar to kill popups, but there is still one type it seems that still makes it through. It is first a small ie window, then the advertisement pops up.

Was wondering if anyone had the code or an example of this. Am not trying to set this up on another site, just wanted to learn more about it so I could maybe stop it on my side.

Thanks in advance.

Zuko

[BlobFisk]

I wonder is there is some spyware/scumware at work here.

Have you tried running AdAware and/or Spybot Search & Destroy to see if they catch anything?

[zuko105]

No no spyware,
Have adaware, and spybot running on my pc along with norton, so am pretty sure its not spyware.

It is pretty common around the web. It is a small window first, then a popup after that. The small window disappears once the popup is done.

I can pm a url for you if you want to look at an example of this?

I don't get the popup in mozilla for the url in question, but I do in ie, so this may have something to do with it, or maybe just the difference in javascript interpreters...

Let me know if you want that url.

Zuko

[robjones]

Yeah, I've seen the same thing, a small square at the bottom right of the screen, not sure how it's done, but you can't close it before it opens an advertisement window.

[Chndru]

>>I've seen the same thing, a small square at the bottom right of the screen,

Yup.. And u can't close it.. :(

[flashfan]

If you get popup, just analyze the source code.

[zuko105]

Source code is gone before you get a chance to open it.

That's what I'm after.....

Zuko

[zuko105]

I think this might be the source:

<script language="Javascript"><!--
var d=new Date();var r=(d.getTime()%8673806982)+Math.random();var u=escape(window.location.href);
var host=' language="Javascript" src="http://as.domain.com/s?s=';
document.write('<scr'+'ipt'+host+'51573&u='+u+'&f=1&id='+r+'"></scr'+'ipt>');
//--></script>

Love the

('<scr'+'ipt'+

to avoid detection........

Is anyone seeing or suspecting something different... I can PM the url to anyone.

Zuko

[edited by: BlobFisk at 4:31 pm (utc) on July 19, 2004]
[edit reason] Removed specifics [/edit]

[robjones]

I've noticed that :
<scr'+'ipt'
a few places recently, looks like the toolbar creators will have to use some imagination to block these.

[zuko105]

Yeah,
maybe introduce javascript interpreters into their toolbars. Don't know though. Google Toolbar Team said they already knew of these popup types and are working on a solution for them.

would probably have to interpret output of javascript since '<scr'+'ipt' could be replaced with '<sc'+'ript' or could be replaced with '<s'+'cript'...etc....

[robjones]

Yeah, it looks like they would have to build the Javascript interpreter in, that would solve these popups but might make the toolbar bulkier.
Can't really see them doing that until this is much more widespread than I've seen.

[zuko105]

Maybe a shell of a javascript interpreter...

one that just reads output of doucment.write comments or something like that.

This is all just speculation though. My tiny brain couldn't possibly comprehend something that Google would do.