Messenger Plus! users are still being exposed to malware/infector advertisers via Patchou’s Sponsor Program.
The adultfriendfinder.com and passion.com ads are there, and seem to be getting more risque as the days go by.
My primary concern tonight, though, is the re-emergence of Errorsafe.
Note the completely blank window… there is no addressbar (which in IE7 is unusual – that shouldn’t be happening with my settings) nor is there any text in the title bar…
Important note: Do NOT click on OK or Cancel.. click on the red x to close the window and prompts.
What do we see if we close the window/prompt? Errorsafe are as persistent as ever…
And if you click on the red x again? This is what you will see. The determination to get ErrorSafe on to the victims’ computers is very obvious Note: there is no Cancel button. Click on the red x, do not click on ok.
Then there is the Web page that appears, which again tries to install Errorsafe… systems with older versions of IE, or system with reduced security settings, are at risk of being infected with no user interaction.
Note there is no addressbar in the window, and that the Window cannot be resized… that makes it kind of hard to report them…but do not fear, we have ways and means….
A close check of my system reveals just one unexplained connection… to 220.127.116.11.reverse. layeredtech.com
Once again, I can only hope Patchou takes a serious look at the dangers his users are being exposed to if they install the sponsor program. It seems this stuff is going to keep on getting into the advertising system supplied by the Sponsor, and his users are going to continue being placed at risk. I’ve told Patchou that I will be blogging to warn of the dangers, and will send him a link to this blog as soon as it goes live, but it shouldn’t be up to my associates and I to monitor this stuff and pass on what we see to Patchou and by extension his Sponsors. *They* should be doing it. If I, with a small 5 PC network and half a dozen pairs of eyes, can monitor what is happening and report it, then so can the Sponsors.