{"id":947,"date":"2014-03-03T16:54:17","date_gmt":"2014-03-03T21:54:17","guid":{"rendered":"http:\/\/zitstif.no-ip.org\/?p=947"},"modified":"2014-03-03T17:01:45","modified_gmt":"2014-03-03T22:01:45","slug":"i-kind-of-regret-having-ads-on-my-website","status":"publish","type":"post","link":"http:\/\/zitstif.no-ip.org\/?p=947","title":{"rendered":"I kind of regret having ads on my website&#8230;"},"content":{"rendered":"<p>Today I decided to take a look at my website without any ad blocking software through Internet Explorer 11. With my web history cleared and with no cookies for Google&#8217;s ad service to create targeted ads for me, I was served a suspicious ad with this link:<\/p>\n<p><a href=\"hxxp:\/\/file-downloads.net\/download\/?pi=zitstif.no-ip.org&amp;gclid=CJLtkeHr97wCFcURMwodTnQAtg\">hxxp:\/\/file-downloads.net\/download\/?pi=zitstif.no-ip.org&amp;gclid=CJLtkeHr97wCFcURMwodTnQAtg<\/a><\/p>\n<p>That looks legit!<\/p>\n<p>Let&#8217;s see what VirusTotal says about this URL:<\/p>\n<p><a href=\"https:\/\/www.virustotal.com\/en\/url\/f0e704606da846903a630c56cee42812a7a943b897fa550a50db0e0bbb19fccd\/analysis\/1393900872\/\">https:\/\/www.virustotal.com\/en\/url\/f0e704606da846903a630c56cee42812a7a943b897fa550a50db0e0bbb19fccd\/analysis\/1393900872\/<\/a><\/p>\n<p>It&#8217;s too legit to quit now!<\/p>\n<p>Upon visiting this link I was served up immediately an EXE file with the title, &#8220;7zip_14381_stn.exe&#8221;&#8230; how wonderful. Why don&#8217;t we just upload this to VirusTotal? <\/p>\n<p><a href=\"https:\/\/www.virustotal.com\/en\/file\/fc80f6307596ce2d6139710873be7ede8693a65681067c75b9bf17617a1af070\/analysis\/\">https:\/\/www.virustotal.com\/en\/file\/fc80f6307596ce2d6139710873be7ede8693a65681067c75b9bf17617a1af070\/analysis\/<\/a><\/p>\n<p>Granted this piece of software isn&#8217;t necessarily malicious per se but it&#8217;s the kind of crap I get sick of seeing on Windows systems. Here are some tools I strongly recommend using when dealing with this kind of junkware:<\/p>\n<p><a href=\"http:\/\/www.bleepingcomputer.com\/download\/rkill\/\">http:\/\/www.bleepingcomputer.com\/download\/rkill\/<\/a><br \/>\n<a href=\"http:\/\/www.bleepingcomputer.com\/download\/junkware-removal-tool\/\">http:\/\/www.bleepingcomputer.com\/download\/junkware-removal-tool\/<\/a><br \/>\n<a href=\"http:\/\/www.bleepingcomputer.com\/download\/adwcleaner\/\">http:\/\/www.bleepingcomputer.com\/download\/adwcleaner\/<\/a><\/p>\n<p>In addition, I recently found a tool that is kind of equivalent to having a portable version of VirusTotal:<\/p>\n<p><a href=\"http:\/\/www.herdprotect.com\/downloads.aspx\">http:\/\/www.herdprotect.com\/downloads.aspx<\/a><\/p>\n<p>Even though it doesn&#8217;t delete\/quarantine\/cure anything, use the herdprotect scanner with care because it can throw off false positives but it is still very useful. Anyways, I wish Google&#8217;s ad service would stop referring people to crapware, but they&#8217;re paying customers too and no, you won&#8217;t offend me if you use ad blocking software on my website. <\/p>\n","protected":false},"excerpt":{"rendered":"<p>Today I decided to take a look at my website without any ad blocking software through Internet Explorer 11. With my web history cleared and with no cookies for Google&#8217;s ad service to create targeted ads for me, I was served a suspicious ad with this link: hxxp:\/\/file-downloads.net\/download\/?pi=zitstif.no-ip.org&amp;gclid=CJLtkeHr97wCFcURMwodTnQAtg That looks legit! Let&#8217;s see what VirusTotal &hellip; <a href=\"http:\/\/zitstif.no-ip.org\/?p=947\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">I kind of regret having ads on my website&#8230;<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[693,689,687,695,694,696,692,688,507,691,690],"class_list":["post-947","post","type-post","status-publish","format-standard","hentry","category-posts","tag-adwcleaner","tag-annoying","tag-google-ads","tag-herd","tag-herdprotect","tag-herdprotect-portable","tag-jrt","tag-malicious","tag-malware","tag-potentially-unwanted-software","tag-pup"],"_links":{"self":[{"href":"http:\/\/zitstif.no-ip.org\/index.php?rest_route=\/wp\/v2\/posts\/947","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/zitstif.no-ip.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/zitstif.no-ip.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/zitstif.no-ip.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/zitstif.no-ip.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=947"}],"version-history":[{"count":11,"href":"http:\/\/zitstif.no-ip.org\/index.php?rest_route=\/wp\/v2\/posts\/947\/revisions"}],"predecessor-version":[{"id":958,"href":"http:\/\/zitstif.no-ip.org\/index.php?rest_route=\/wp\/v2\/posts\/947\/revisions\/958"}],"wp:attachment":[{"href":"http:\/\/zitstif.no-ip.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=947"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/zitstif.no-ip.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=947"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/zitstif.no-ip.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=947"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}