Transsexual

Eros blocked
hanify2001 1905 reads
posted

Been away from the hobby for a while (still am) and decided to check out Eros. Google Chrome blocked it saying the site has malware. How long has this been going on? I'm running a full scan with Malwarebytes just to be safe.

Hi Hanify2001,  

It just happened today--fairly annoying. Here is what they sent all advertisers:

"A third party affiliate on our site experienced an issue that resulted in OUR site being flagged as malware. We identified the problem and we are working diligently to restore things to normal. Our sites are safe to use in the meantime while we wait for the warning to be removed."

In the meantime there's always P411, DateCheck, RSK2000, which although they are all verification services allow you to browse, I believe.  

You can still access the Eros site, of course, if you want to. You just have to click through all the warnings.

xo  

Veronica

-- Modified on 6/18/2013 12:52:45 PM

Here in DC I'm having the same issue.  It asks if I want to continue and when I do, it sends me back to where I started.  Same Malware stuff.

On another note.  Veronica, you coming to our nations capitol any time soon?

Posted By: veronicacross
Hi Hanify2001,  
   
 It just happened today--fairly annoying. Here is what they sent all advertisers:  
   
 "A third party affiliate on our site experienced an issue that resulted in OUR site being flagged as malware. We identified the problem and we are working diligently to restore things to normal. Our sites are safe to use in the meantime while we wait for the warning to be removed."  
   
 In the meantime there's always P411, DateCheck, RSK2000, which although they are all verification services allow you to browse, I believe.  
   
 You can still access the Eros site, of course, if you want to. You just have to click through all the warnings.  
   
 xo  
   
 Veronica

-- Modified on 6/18/2013 12:52:45 PM

hi redbird,  

not that i know of. although one can always invite me to their city of choice. I'll post my travel invitation link below.

xo,  

Veronica

Veronica,
Thanks for the reply and the link.
I'll see if I can swing it.

Posted By: veronicacross
hi redbird,  
   
 not that i know of. although one can always invite me to their city of choice. I'll post my travel invitation link below.  
   
 xo,  
   
 Veronica

Maybe we can begin a fund to bring Veronica to DC.

Posted By: redbird824
Veronica,  
 Thanks for the reply and the link.  
 I'll see if I can swing it.  
   
Posted By: veronicacross
hi redbird,    
     
  not that i know of. although one can always invite me to their city of choice. I'll post my travel invitation link below.  
     
  xo,    
     
  Veronica

Funny, some Cities are not blocked but Boston is as of now...Google search says I can continue to site but no link displayed... lol

Ironcially yesterday i was on a few web sites (maybe Boston Eros on 1 tab -- i cannot recall exactly) but I got a popup window (small) asking permisson to run a Java applet.  I think that may have come from Eros... it makes sense now... I have no malware on my PC and others sites I visit were just news sites and nothing ever prompts me there.

hanify2001773 reads

Posted By: vfrrider
Funny, some Cities are not blocked but Boston is as of now...Google search says I can continue to site but no link displayed... lol  
   
 Ironcially yesterday i was on a few web sites (maybe Boston Eros on 1 tab -- i cannot recall exactly) but I got a popup window (small) asking permisson to run a Java applet.  I think that may have come from Eros... it makes sense now... I have no malware on my PC and others sites I visit were just news sites and nothing ever prompts me there.
If you click on the "advanced" heading at the bottom of the Google Chrome message it will send you to more info including which Eros sites were affected. I think NJ was one. Google also says the main Eros site is not carrying malware, so as Veronica's post from Eros said it looks like a third party they have on the site did the deed. BTW my Malwarebytes full scan came up clean.

Someone was really pissed off at EROS to do this. Thats so wrong and it sucks for girls out here working. It slowed my business down today thats for sure, because Chicago has always been lovely!

Yesterday I was only getting the app popup on my browser (IE 8 on XP). It triggered 3 times, which means 3 different applet operations were attempted. This is not consistent with a banner error which has been reported elsewhere as the cause of these problems.  

Today, I can get to the summary screens but unlike yesterday, I cannot get to the individual ads. It seems not to matter which eros region is involved nor which section of the site is involved. Because the java popups happen as soon as enter the site, I would venture to say it is site-wide. The new behavior of not being able to access individual ads is likely related to the behavior of this Java app or more likely a parameter it is setting. I cannot find any reference to the app launch anywhere in source; I suspect it is being launched in a frame by something that looks on the surface like javascript or perhaps an image

This FBI warning thing is particularly annoying. This is a known malware scam often called "ransomware" because payment is demanded. First thing, as said elsewhere, DO NOT PAY!

Removal can be easy or tricky as there are several variants of this code.  

You can read more about this at:
http://botcrawl.com/how-to-remove-the-fbi-moneypak-ransomware-virus-fake-fbi-malware-removal/

Basically if you have access to your computer, you can run System Restore to bring your system back to a point before the malware was installed. This removes enough of the malware to keep it from activating, but it does not totally remove all files installed. To do this, you should a malware removal tool. While many are available, most security professionals like MalwareBytes which is available for download and use free of charge. Run the full scan option and remove anything MalwareBytes finds.

If you cannot access your computer, even in Safe Mode with Command Prompt on Windows, you may have to recover from a recovery disk. The article above mentions a number of ways to do this.  

The key points are that this is just malware, it is a scam, it can infect your computer and can be very scary.  

Also, just because it has gone dormant does not mean it is gone or you need not worry more about it. Many variants continue monitoring your system. It is even possible that some of the email hacking you have heard about or even may have experienced could be traced back to this malware, which is technically a Trojan. I would strongly suggest you try to remove this malware, even if it appears to have mysteriously "vanished" or you no longer experience evidence of it on your system.

Best of luck to all

Register Now!