Unwanted Ads Suddently Overlaying My Images

  • Resolved goldferris

    (@goldferris)


    12 years, 4 months ago

    Hey, guys!

    So, I visited my blog today to find that the pictures are being overlayed with ads. This isn’t something I installed or anything I want, so it must be a sort of virus/hijacking of my blog. You go to any post and an ad will pop up over the bottom of the picture.

    Here’s my website so you can see it in action:

    https://www.makeupfiles.com/

    As far as I can tell, it only happens from within the posts, so click on any of the posts to see it. And, when I view the source of the ad, this is what it looks like:

    <div id="corticaFcl" style="text-align:right;width:16px;height:16px;position:absolute;top:0;right:0;display:block;z-index:999999;cursor:pointer;" onclick="javascript:hideDiv(this);">
<img src="https://srv.overlay-ad.com:8080/adserver/static/overlay/close.png">
</div>
<script type="text/javascript">
function hideDiv(obj){
obj.style.display = 'none';
	if(document.getElementById("corticaInnerDiv")){
		document.getElementById("corticaInnerDiv").style.display = 'none';
	}
};
</script>

<div id="corticaInnerDiv" style="position:absolute;top:0;left:0;height:75px;width:100%;border:1px solid #BABABA;">
<div style="background: #666666; background: -moz-linear-gradient(top, #666666 0%, #000000 100%);
background: -webkit-gradient(linear, left top, left bottom, color-stop(0%,#666666), color-stop(100%,#000000));
background: -webkit-linear-gradient(top, #666666 0%,#000000 100%);
background: -o-linear-gradient(top, #666666 0%,#000000 100%);
background: -ms-linear-gradient(top, #666666 0%,#000000 100%);
background: linear-gradient(to bottom, #666666 0%,#000000 100%);
filter: progid:DXImageTransform.Microsoft.gradient( startColorstr='#666666', endColorstr='#000000',GradientType=0 );
background-color:#333333;
height:75px; width:100%; opacity:0.8; filter:alpha(opacity=80);"></div>

<div style="border-bottom-width:0px;border-bottom-style:solid;border-bottom-color:#fff;position:absolute;left:4px;top:4px;right:4px;bottom:4px;">

<div style="text-align:center;float:left;height:49px;width:49px;padding-top:0px;"><img src="https://srv.overlay-ad.com:8080/adserver/static/images/empty/iStock_000019473221XSmall.jpg" style="width:67px;height:67px;cursor:pointer;" onclick="window.open('https://tags.click-srv.com/xml/dclick.php?pub_id=348&aid=135&fid=4&country=&cat=0&url=aHR0cDovL3NydjcubWFyc2Fkcy5jb20vc3J2L3RhZ3MvP2dDJnB1Yl9pZD0zNDgmY3BjPTAuMDEmcDE9NCZwMj0xMzUmcDM9JnA0PSZwNT0wJnA2PWh0dHAlM0ElMkYlMkZ3d3cubWFrZXVwZmlsZXMuY29tJTJGMjAxMiUyRjA3JTJGMjQlMkZsdXNocy1uZXctZW1vdGlvbmFsLWJyaWxsaWFuY2UtbWFrZXVwLWxpbmUtaW4tYWN0aW9uJTJGJnA3PSZwOD0=');" /></div>

<div style="">
<div style="color:#D9D919;font-family:Verdana,Geneva,sans-serif;font-size:13px;font-weight:bold;line-height:14px;vertical-align:middle;width: 100%;position:relative;left:32px;top:0;cursor:pointer; white-space:nowrap;padding:4px 0 0 0px;cursor:pointer;" onclick="window.open('https://tags.click-srv.com/xml/dclick.php?pub_id=348&aid=135&fid=4&country=&cat=0&url=aHR0cDovL3NydjcubWFyc2Fkcy5jb20vc3J2L3RhZ3MvP2dDJnB1Yl9pZD0zNDgmY3BjPTAuMDEmcDE9NCZwMj0xMzUmcDM9JnA0PSZwNT0wJnA2PWh0dHAlM0ElMkYlMkZ3d3cubWFrZXVwZmlsZXMuY29tJTJGMjAxMiUyRjA3JTJGMjQlMkZsdXNocy1uZXctZW1vdGlvbmFsLWJyaWxsaWFuY2UtbWFrZXVwLWxpbmUtaW4tYWN0aW9uJTJGJnA3PSZwOD0=');">play games on your PC</div>

<div style="font-family:Verdana,Geneva,sans-serif;font-size:13px;line-height:15px;font-weight:normal;color:#FFF;padding:2px 0 0 0px; margin-right:40px;position:relative;left:32px;top:0;white-space:normal;cursor:pointer; max-width:300px; height:32px; overflow:hidden;" onclick="window.open('https://tags.click-srv.com/xml/dclick.php?pub_id=348&aid=135&fid=4&country=&cat=0&url=aHR0cDovL3NydjcubWFyc2Fkcy5jb20vc3J2L3RhZ3MvP2dDJnB1Yl9pZD0zNDgmY3BjPTAuMDEmcDE9NCZwMj0xMzUmcDM9JnA0PSZwNT0wJnA2PWh0dHAlM0ElMkYlMkZ3d3cubWFrZXVwZmlsZXMuY29tJTJGMjAxMiUyRjA3JTJGMjQlMkZsdXNocy1uZXctZW1vdGlvbmFsLWJyaWxsaWFuY2UtbWFrZXVwLWxpbmUtaW4tYWN0aW9uJTJGJnA3PSZwOD0=');">Enjoy a large variety of cool and fun games for your PC</div>

<div style="font-family:Verdana,Geneva,sans-serif;font-size:13px;line-height:12px;font-weight:normal;text-decoration:none;color:#F90;padding:0px 0 0 50px;width: 90%;position:relative;left:32px;top:0;cursor:pointer; height:20px; overflow:hidden;cursor:pointer;" onclick="window.open('https://tags.click-srv.com/xml/dclick.php?pub_id=348&aid=135&fid=4&country=&cat=0&url=aHR0cDovL3NydjcubWFyc2Fkcy5jb20vc3J2L3RhZ3MvP2dDJnB1Yl9pZD0zNDgmY3BjPTAuMDEmcDE9NCZwMj0xMzUmcDM9JnA0PSZwNT0wJnA2PWh0dHAlM0ElMkYlMkZ3d3cubWFrZXVwZmlsZXMuY29tJTJGMjAxMiUyRjA3JTJGMjQlMkZsdXNocy1uZXctZW1vdGlvbmFsLWJyaWxsaWFuY2UtbWFrZXVwLWxpbmUtaW4tYWN0aW9uJTJGJnA3PSZwOD0=');">game4free.com</div>

</div>
</div>
</div>

    I have no idea where this came from or where I can find it in my code to remove it. Anyone have any idea?

Viewing 10 replies - 16 through 25 (of 25 total)

  • I was experiencing the issue with google Chrome, and had delicious bookmarks add-on. I simply uninstalled the whole thing and then re-installed it.
    Will continue to use the code in the css for now on, can’t hurt nobody after all, huh?

    Okay so I think I got it. As far as my site, I added the code and it did the job:

    div#corticaInnerDiv{
    display:none !important;
    }
    div#corticaOF0{
    display:none !important;
    }
    div#_STP_slsdiv{
    display:none !important;
    }

    I then noticed that I was getting popunders on the text of my ads. I went into my browser extensions and eliminated the addon that was causing them. I guess this is a browser issue.. I’ve since noticed that every site I saw with the unwanted ads have disappeared.

    You shouldn’t even add code to fix it, it is a client side virus. That means it isn’t even on your site and the ads will overlay on everyone’s site, even google image results has the ads if the person has the virus. Adding the code just makes it that much harder to track down the virus to being inside the browser. Its like you have a glowing ball and you put a cover on it with duct-tape.

    @ AJaegle: I already solved the issue for people it is a browser extension that hijacks <img> tags.

    @to-mos

    Adding the code just makes it that much harder to track down the virus to being inside the browser. Its like you have a glowing ball and you put a cover on it with duct-tape.

    HA HA HAH! Thank you very much for your putting my

    naive attempt

    so brilliantly into words, I liked your analogy a lot!

    Haha glad you appreciated it xD. I really try to put things like that into perspective. When I’m teaching students about web-coding and any other code for that matter, I try my hardest to give a visual representation or analogy of the event or explination.

    Guys there is nothing wrong with your sites and blogs.

    all this is happening due to a Chrome extension called Fast save 1.1
    ID: apfldfpppomcomboincaiiphebcofigd

    Just uninstall it and the problem with be gone and please do not make any kind of change to your CSS.

    This extension has already been removed from Google Chrome extensions.

    I hope this solves the problem.

    @mlmnewsblog We already figured it out buddy.
    “If you on firefox remove the quick save addon if you on chrome get rid of the quick save extension.”-To-mos

    Just had a similar problem with Chrome using XP. My WordPress kept showing banners but only in Chrome. So I did the obvious and ran a quick virus check and found an infected cookie. It’s been resolved and all is fine!

    I am having this trouble on both firefox and chrome, and do not have the above mentioned “quick save” nor “fast save” addons or extensions.

    Running a full virus scan found nothing.

    Anyone at all know what to do with the problem?

    my site: https://guitarlicksandtabs.com/

    Thank you.

    This is likely the solidsaving malware or a variant

    For Windows, look in Control Panel for application of same name and uninstall the sucker.

Viewing 10 replies - 16 through 25 (of 25 total)
  • The topic ‘Unwanted Ads Suddently Overlaying My Images’ is closed to new replies.