IPB

Welcome Guest ( Log In | Register )

16 Pages V  « < 4 5 6 7 8 > »   
Closed TopicStart new topic
> "Blacklist" of Anti-Banner
shah jahan
post 12.12.2009 00:40
Post #101


Kaspersky Fan III
**********

Group: Gold beta testers
Posts: 2224
Joined: 14.04.2008




There's a problem using the HTC website when Anti-Banner is turned ON.
The main content of the HTC website is not displayed.

CODE
12/12/2009 12:36:10 AM    Denied: */iframe.*    http://www.htc.com/Scripts/iFrame.js    Databases    Firefox


A White-list entry is required for the HTC website.

White List (mask):

*htc.com*

This post has been edited by shah jahan: 12.12.2009 00:48
Attached File(s)
Attached File  ab_htc.jpg ( 56,5K ) Number of downloads: 10
 


--------------------


KIS 2010 - Black Skin / Green Skin

Support for Portuguese (Latin America) to be added soon.

Go to the top of the page
 
+Quote Post
JanRei
post 12.12.2009 22:41
Post #102


Gold Beta Testers
***************

Group: Moderators
Posts: 12274
Joined: 1.01.2006
From: Germany




Layer advertisements on sites hosted by funpic.de (example: http://jodab18.jo.funpic.de/yi/wbblite/index.php)
Attached File  avp_bannerfunpic.png ( 90,84K ) Number of downloads: 12

Everything related to these ads seem to delivered from media.funpic.de. I am not sure whether blocking this would have side effects. Alternative could be blocking *layer.php*

Advertisements from contaxe.com that appear after hovering certain words (example: http://gzsz-wiki.de)
Attached File  avp_bannercontaxe.png ( 17,68K ) Number of downloads: 15

Those could be blocked by contaxe.com/go/*
Go to the top of the page
 
+Quote Post
devasteitor
post 13.12.2009 20:22
Post #103


Advanced Member II
****

Group: Members
Posts: 348
Joined: 14.08.2007
From: Asunción, Paraguay




Please add to the blacklist this link, contains malware

Link to malware removed.
This thread is for adding banners and advertisements to the anti-banner list, not malware.
send malware to the lab: http://support.kaspersky.ru/virlab/helpdesk.html?LANG=en
Also the file is already detected: Kaspersky 7.0.0.125 2009.12.12 Trojan.Win32.Buzus.ctgb

This post has been edited by Lucian Bara: 13.12.2009 21:31
Reason for edit: link to malware removed


--------------------
Go to the top of the page
 
+Quote Post
Ignatev Konstant...
post 14.12.2009 16:46
Post #104


Web Content Analysts Group Manager
****

Group: KL Russia
Posts: 412
Joined: 13.11.2008
From: Russia




Hi all!

shah jahan, thank you very much! Today I add all your cases to antibanner database!

About this:


QUOTE(JanRei @ 12.12.2009 21:41) *
Layer advertisements on sites hosted by funpic.de (example: http://jodab18.jo.funpic.de/yi/wbblite/index.php)
Attached File  avp_bannerfunpic.png ( 90,84K ) Number of downloads: 12

Everything related to these ads seem to delivered from media.funpic.de. I am not sure whether blocking this would have side effects. Alternative could be blocking *layer.php*

Advertisements from contaxe.com that appear after hovering certain words (example: http://gzsz-wiki.de)
Attached File  avp_bannercontaxe.png ( 17,68K ) Number of downloads: 15

Those could be blocked by contaxe.com/go/*



JanRei, very strange case... here http://jodab18.jo.funpic.de/yi/wbblite/index.php I couldn't find any banners...

and here http://gzsz-wiki.de - main popup banner blocked by standart antibanner database:

14.12.2009 15:07:44 Denied: adscale.de Firefox http://js.adscale.de/getads.js Databases
14.12.2009 15:07:45 Denied: adscale.de Firefox http://js.adscale.de/getads.js Databases

I use KIS2010 and what version did you use?
Go to the top of the page
 
+Quote Post
shah jahan
post 15.12.2009 12:25
Post #105


Kaspersky Fan III
**********

Group: Gold beta testers
Posts: 2224
Joined: 14.04.2008




http://www.laprensa.com.ar/

Source:

CODE
http://adware.civinext.com//Images/20090624162409062.gif
       http://adware.civinext.com//Images/20090624163134468.jpg
       http://adware.civinext.com//Images/20091210001609203.gif
       http://adware.civinext.com//Images/20090826121419421.jpg


Black List (mask) :

*adware.civinext.*
Attached File(s)
Attached File  adsample.jpg ( 229,55K ) Number of downloads: 6
 


--------------------


KIS 2010 - Black Skin / Green Skin

Support for Portuguese (Latin America) to be added soon.

Go to the top of the page
 
+Quote Post
shah jahan
post 15.12.2009 12:59
Post #106


Kaspersky Fan III
**********

Group: Gold beta testers
Posts: 2224
Joined: 14.04.2008




http://www.armenianow.com/
Using Open X for ads

Script Source:
CODE
<script type='text/javascript' src='http://armnowmedia.com/openx/www/delivery/spcjs.php'></script>


Banner Source:
CODE
http://armnowmedia.com/openx/www/images/522449937c119174e9bf6f282ce61732.swf



Black List (mask):

*openx*delivery* (Perfect) wink.gif

OR

*armnowmedia.com/openx*

OR

*armnowmedia.com/*
Attached File(s)
Attached File  adsamplw3.jpg ( 127,5K ) Number of downloads: 3
 


--------------------


KIS 2010 - Black Skin / Green Skin

Support for Portuguese (Latin America) to be added soon.

Go to the top of the page
 
+Quote Post
shah jahan
post 15.12.2009 13:13
Post #107


Kaspersky Fan III
**********

Group: Gold beta testers
Posts: 2224
Joined: 14.04.2008




http://www.arminfo.info/

Source:
CODE
http://www.arminfo.info/images/unistream_ln.swf
http://www.arminfo.info/images/160x430%20ru.swf
http://www.arminfo.info/images/600x90_Arca_am.swf
http://www.arminfo.info/images/ingo_armenia2.swf
http://www.arminfo.info/images/Cascade%20Bank-Arminfo.swf
http://www.arminfo.info/images/cube160x160_simple.swf
http://www.arminfo.info/images/arminfo_podpiska.swf
http://www.arminfo.info/images/ACBA_Leasing_Credit.am.swf
http://www.arminfo.info/images/viva_cell_online_sms_340x60.swf
http://www.arminfo.info/images/convers_boom_finance_340x60.swf


Black List:

*.arminfo.info/images/*.swf


--------------------


KIS 2010 - Black Skin / Green Skin

Support for Portuguese (Latin America) to be added soon.

Go to the top of the page
 
+Quote Post
shah jahan
post 15.12.2009 13:44
Post #108


Kaspersky Fan III
**********

Group: Gold beta testers
Posts: 2224
Joined: 14.04.2008




http://www.lragir.am/engsrc/home.html


Source:

CODE
http://www.lragir.am/links/CivilitasLogo3.jpg
http://www.lragir.am/links/banner-eng.jpg
http://www.lragir.am/links/new%20banner.swf
http://www.lragir.am/links/Azatutyun_Radiokayan_Banner.jpg
http://www.lragir.am/links/Azatutyun_Radiokayan_Banner.jpg
http://www.lragir.am/links/Banner-%20Religions.am.gif
http://www.lragir.am/links/Azatutyun_Radiokayan_Banner.jpg
http://www.lragir.am/links/Banner-%20Religions.am.gif
http://www.lragir.am/links/22cfa1b3141537c8f986e2acc02.jpg

CODE
<OBJECT align=absmiddle classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,40,0" WIDTH="468" HEIGHT="60" id="movie"><PARAM NAME=movie VALUE="../links/new banner.swf" /> <EMBED src="../links/new banner.swf" quality=high bgcolor=#FFFFFF WIDTH="468" HEIGHT="60" NAME="movie" ALIGN="" TYPE="application/x-shockwave-flash" PLUGINSPAGE="http://www.macromedia.com/go/getflashplayer"><PARAM NAME=quality VALUE=high /><param name=wmode value=opaque /></EMBED></OBJECT>

CODE
<OBJECT align=absmiddle classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,40,0" WIDTH="468" HEIGHT="80" id="movie"><PARAM NAME=movie VALUE="../links/viva_cell_online_sms_468x80.swf" /> <EMBED src="../links/viva_cell_online_sms_468x80.swf" quality=high bgcolor=#FFFFFF WIDTH="468" HEIGHT="80" NAME="movie" ALIGN="" TYPE="application/x-shockwave-flash" PLUGINSPAGE="http://www.macromedia.com/go/getflashplayer"><PARAM NAME=quality VALUE=high /><param name=wmode value=opaque /></EMBED></OBJECT>


Black List:

*lragir.am/links/*

This post has been edited by shah jahan: 15.12.2009 13:45


--------------------


KIS 2010 - Black Skin / Green Skin

Support for Portuguese (Latin America) to be added soon.

Go to the top of the page
 
+Quote Post
shah jahan
post 15.12.2009 14:15
Post #109


Kaspersky Fan III
**********

Group: Gold beta testers
Posts: 2224
Joined: 14.04.2008




http://www.elintransigente.com/index.asp

Black List:

*elintransigente.com/banners/*

OR

*/banners/*


--------------------


KIS 2010 - Black Skin / Green Skin

Support for Portuguese (Latin America) to be added soon.

Go to the top of the page
 
+Quote Post
shah jahan
post 15.12.2009 14:19
Post #110


Kaspersky Fan III
**********

Group: Gold beta testers
Posts: 2224
Joined: 14.04.2008




http://www.zoro.ro/

Source:
CODE
http://www.zoro.ro/advPics/RTIBannerFrau_1.jpg
http://www.zoro.ro/advPics/mediapartner2.jpg
http://www.zoro.ro/advPics/casa_altringen.jpg
http://www.zoro.ro/advPics/bmw-timisoara1.jpg
http://www.zoro.ro/advPics/buzias.gif


Black List:

*/advpics/*

OR

*zoro.ro/advPics/*


--------------------


KIS 2010 - Black Skin / Green Skin

Support for Portuguese (Latin America) to be added soon.

Go to the top of the page
 
+Quote Post
shah jahan
post 15.12.2009 14:46
Post #111


Kaspersky Fan III
**********

Group: Gold beta testers
Posts: 2224
Joined: 14.04.2008




http://www.bnamericas.com/


Black List:

*eagle.bnamericas.com*
OR
*eagle.bnamericas.com*delivery*
Attached File(s)
Attached File  adsample.jpg ( 192,58K ) Number of downloads: 8
 


--------------------


KIS 2010 - Black Skin / Green Skin

Support for Portuguese (Latin America) to be added soon.

Go to the top of the page
 
+Quote Post
shah jahan
post 15.12.2009 17:40
Post #112


Kaspersky Fan III
**********

Group: Gold beta testers
Posts: 2224
Joined: 14.04.2008




http://www.diariodecanoas.com.br/site/

Source:
CODE
http://www.diariodecanoas.com.br/site/_js/flash.js



Black List mask 1:

*diariodecanoas.com.br*flash.js
OR
*diariodecanoas.com.br/*/flash.js
OR
*diariodecanoas.com.br*_js*.js


Black List mask 2:
Used by websites to track users..

*opentracker.net*site=*

More info: http://www.opentracker.net/index.jsp

Source - OpenTracker:

CODE
<script defer
     src="http://server1.opentracker.net/?site=www.diariodecanoas.com.br"></script><noscript><a
     href="http://www.opentracker.net" target="_blank"><img
     src="http://img.opentracker.net/?cmd=nojs&site=www.diariodecanoas.com.br"
     alt="web
     analytics" border="0"></a> </noscript>

CODE
<script src="http://script.opentracker.net/?site=www.opentracker.net&cg=Front"></script>

Attached File(s)
Attached File  adsamplex.jpg ( 314,08K ) Number of downloads: 7
 


--------------------


KIS 2010 - Black Skin / Green Skin

Support for Portuguese (Latin America) to be added soon.

Go to the top of the page
 
+Quote Post
shah jahan
post 15.12.2009 17:58
Post #113


Kaspersky Fan III
**********

Group: Gold beta testers
Posts: 2224
Joined: 14.04.2008




http://www.jornalvs.com.br/site/

Source:
CODE
http://www.jornalvs.com.br/site/_js/flash.js



Black List:
*jornalvs.com.br/*flash.js


--------------------


KIS 2010 - Black Skin / Green Skin

Support for Portuguese (Latin America) to be added soon.

Go to the top of the page
 
+Quote Post
GooD01
post 15.12.2009 20:36
Post #114


Advanced Member I
***

Group: Members
Posts: 130
Joined: 9.07.2009




http://volcanoscreens.com/

This post has been edited by GooD01: 15.12.2009 20:37
Attached File(s)
Attached File  banner.PNG ( 47,62K ) Number of downloads: 15
 


--------------------
Go to the top of the page
 
+Quote Post
Ignatev Konstant...
post 16.12.2009 13:11
Post #115


Web Content Analysts Group Manager
****

Group: KL Russia
Posts: 412
Joined: 13.11.2008
From: Russia




Hi all!

Wow! I see great activity! Thanks to all for this!
shah jahan - special thanks for you, your reports are very convenient.

And I have some peace of news - from today and before end of russians cristmas holidays(10.01.2010) I can do only simple operations with antibanner bases:
1.deleting from black list
2.add to white list

But, anyway, I will collect all request from this branch and save it until 10.01.2010
Go to the top of the page
 
+Quote Post
shah jahan
post 16.12.2009 16:39
Post #116


Kaspersky Fan III
**********

Group: Gold beta testers
Posts: 2224
Joined: 14.04.2008




QUOTE(Ignatev Konstantin @ 16.12.2009 13:11) *
Hi all!

Wow! I see great activity! Thanks to all for this!
shah jahan - special thanks for you, your report are very convenient.

And I have some peace of news - from today and before end of russians cristmas holidays(10.01.2009) I can do only simle operations with antibanner bases:
1.deleting from black list
2.add to white list

But, anyway, I will collect all request from this branch and save it until 10.01.2009


Thank you.. Have a good time.. we will continue to post information here as usual smile.gif


--------------------


KIS 2010 - Black Skin / Green Skin

Support for Portuguese (Latin America) to be added soon.

Go to the top of the page
 
+Quote Post
shah jahan
post 16.12.2009 16:57
Post #117


Kaspersky Fan III
**********

Group: Gold beta testers
Posts: 2224
Joined: 14.04.2008




http://www.elcolombiano.com/

Source:
CODE
http://elcolo03.teknograd.no/openx/www/delivery/ajs.php?zoneid=173&cb=30066244657&charset=ISO-8859-1&loc=http%3A//www.elcolombiano.com/portada.asp%3FNM%3DInicio&referer=http%3A//www.elcolombiano.com/portada.asp%3FNM%3DInicio
http://elcolo03.teknograd.no/openx/www/delivery/ajs.php?zoneid=353&cb=24874483930&charset=ISO-8859-1&loc=http%3A//www.elcolombiano.com/portada.asp%3FNM%3DInicio&referer=http%3A//www.elcolombiano.com/portada.asp%3FNM%3DInicio
http://elcolo03.teknograd.no/openx/www/delivery/ajs.php?zoneid=246&cb=57186339668&charset=ISO-8859-1&loc=http%3A//www.elcolombiano.com/portada.asp%3FNM%3DInicio&referer=http%3A//www.elcolombiano.com/portada.asp%3FNM%3DInicio
http://elcolo03.teknograd.no/openx/www/delivery/ajs.php?zoneid=218&cb=3541089323&charset=ISO-8859-1&loc=http%3A//www.elcolombiano.com/portada.asp%3FNM%3DInicio&referer=http%3A//www.elcolombiano.com/portada.asp%3FNM%3DInicio



Black List:

*openx*delivery*

It's good to add this mask because many other websites uses this. I have reported it earlier for other websites also.


--------------------


KIS 2010 - Black Skin / Green Skin

Support for Portuguese (Latin America) to be added soon.

Go to the top of the page
 
+Quote Post
shah jahan
post 16.12.2009 17:03
Post #118


Kaspersky Fan III
**********

Group: Gold beta testers
Posts: 2224
Joined: 14.04.2008




http://www.holidaydestinationsguide.com/


Source:
CODE
http://www.holidaydestinationsguide.com/right_banners/Banner_25.jpg  
http://www.holidaydestinationsguide.com/right_banners/Banner_19.jpg
http://www.holidaydestinationsguide.com/right_banners/Banner_26.jpg
http://www.holidaydestinationsguide.com/right_banners/Banner_27.jpg
http://www.holidaydestinationsguide.com/right_banners/Banner_23.jpg




Black List (?):

*/right_banners/*
Attached File(s)
Attached File  ab.jpg ( 226,87K ) Number of downloads: 7
 


--------------------


KIS 2010 - Black Skin / Green Skin

Support for Portuguese (Latin America) to be added soon.

Go to the top of the page
 
+Quote Post
shah jahan
post 17.12.2009 14:39
Post #119


Kaspersky Fan III
**********

Group: Gold beta testers
Posts: 2224
Joined: 14.04.2008




http://www.noticiascadadia.com/


Source:
CODE
http://openads.ittakus.com/www/delivery/ajs.php?zoneid=4&charset=UTF-8&cb=90300917662&charset=UTF-8&loc=http%3A//www.noticiascadadia.com/&referer=http%3A//ittakus.com/
http://openads.ittakus.com/www/delivery/ajs.php?zoneid=8&cb=46857425240&charset=UTF-8&loc=http%3A//www.noticiascadadia.com/&referer=http%3A//ittakus.com/
http://openads.ittakus.com/www/delivery/ajs.php?zoneid=9&cb=67368485827&charset=UTF-8&loc=http%3A//www.noticiascadadia.com/&referer=http%3A//ittakus.com/


Black List mask:

*openads*delivery*


--------------------


KIS 2010 - Black Skin / Green Skin

Support for Portuguese (Latin America) to be added soon.

Go to the top of the page
 
+Quote Post
shah jahan
post 17.12.2009 15:02
Post #120


Kaspersky Fan III
**********

Group: Gold beta testers
Posts: 2224
Joined: 14.04.2008




http://www.portalmundos.com/
http://mundomoda.portalmundos.com/gisele-b...a-mejor-pagada/


Using Open X for Ads

Source:

CODE
<div style="margin-top:2px;margin-left:470px;">            
     <iframe id='a1651093' name='a1651093'  src='http://adse.portalmundos.com/www/delivery/afr.php?zoneid=1&amp;cb=INSERT_RANDOM_NUMBER_HERE'  framespacing='0' frameborder='no' scrolling='no' width='468'  height='60'><a  href='http://adse.portalmundos.com/www/delivery/ck.php?n=a0e70a77&amp;cb=INSERT_RANDOM_NUMBER_HERE'  target='_blank'><img  src='http://adse.portalmundos.com/www/delivery/avw.php?zoneid=1&amp;cb=INSERT_RANDOM_NUMBER_HERE&amp;n=a0e70a77'  border='0' alt='' /></a></iframe></div>
     <div style="margin-left:881px"><span class="Publicidad2"> Publicidad</span>
    
       </div>

CODE
<iframe id='a278fd9e'  name='a278fd9e'  src='http://adse.portalmundos.com/www/delivery/afr.php?zoneid=14&amp;cb=INSERT_RANDOM_NUMBER_HERE'  framespacing='0' frameborder='no' scrolling='no' width='468'  height='60'><a  href='http://adse.portalmundos.com/www/delivery/ck.php?n=abef2f82&amp;cb=INSERT_RANDOM_NUMBER_HERE'  target='_blank'><img  src='http://adse.portalmundos.com/www/delivery/avw.php?zoneid=14&amp;cb=INSERT_RANDOM_NUMBER_HERE&amp;n=abef2f82'  border='0' alt='' /></a></iframe>
           </td>

CODE
<td  width="468"><iframe id='ab2f3adb' name='ab2f3adb'  src='http://adse.portalmundos.com/www/delivery/afr.php?zoneid=2&amp;cb=INSERT_RANDOM_NUMBER_HERE'  framespacing='0' frameborder='no' scrolling='no' width='468'  height='60'><a  href='http://adse.portalmundos.com/www/delivery/ck.php?n=ac534f15&amp;cb=INSERT_RANDOM_NUMBER_HERE'  target='_blank'><img  src='http://adse.portalmundos.com/www/delivery/avw.php?zoneid=2&amp;cb=INSERT_RANDOM_NUMBER_HERE&amp;n=ac534f15'  border='0' alt='' /></a></iframe>
         </td>


Black List mask:

*adse.portalmundos.com/*

OR

*ads*/www/delivery/*

OR

*/www/delivery/* (?)


--------------------


KIS 2010 - Black Skin / Green Skin

Support for Portuguese (Latin America) to be added soon.

Go to the top of the page
 
+Quote Post

16 Pages V  « < 4 5 6 7 8 > » 
Closed TopicStart new topic

 



Lo-Fi Version Time is now: 20.10.2014 13:44