<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=us-ascii" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 8.00.6001.23536"></HEAD>
<BODY>
<DIV dir=ltr align=left><SPAN class=407034020-19112013><FONT color=#0000ff
size=2 face=Arial>In this case you get a good program. Clicker
beware!</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=407034020-19112013></SPAN> </DIV><BR>
<BLOCKQUOTE
style="BORDER-LEFT: #0000ff 2px solid; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; MARGIN-RIGHT: 0px"
dir=ltr>
<DIV dir=ltr lang=en-us class=OutlookMessageHeader align=left>
<HR tabIndex=-1>
<FONT size=2 face=Tahoma><B>From:</B>
chirp_users-bounces@intrepid.danplanet.com
[mailto:chirp_users-bounces@intrepid.danplanet.com] <B>On Behalf Of </B>Jens
J.<BR><B>Sent:</B> Tuesday, November 19, 2013 15:31<BR><B>To:</B> Discussion
of CHIRP<BR><B>Subject:</B> Re: [chirp_users] Problem reported with Windows
download?<BR></FONT><BR></DIV>
<DIV></DIV>
<DIV
style="BACKGROUND-COLOR: #fff; FONT-FAMILY: Courier New, courier, monaco, monospace, sans-serif; COLOR: #000; FONT-SIZE: 12pt">
<DIV><SPAN>Yes, anybody (including bad guys) can purchase ads from various ad
networks and use it to distribute questionable stuff (including malware). They
usually get vetted/blocked by reputable ad networks like google, but the
trickier ones find ways to get through, and it's a continuous whac-a-mole game
w/ bad guys.</SPAN></DIV>
<DIV
style="BACKGROUND-COLOR: transparent; FONT-STYLE: normal; FONT-FAMILY: 'Courier New', courier, monaco, monospace, sans-serif; COLOR: rgb(0,0,0); FONT-SIZE: 16px"><SPAN><BR></SPAN></DIV>
<DIV
style="BACKGROUND-COLOR: transparent; FONT-STYLE: normal; FONT-FAMILY: 'Courier New', courier, monaco, monospace, sans-serif; COLOR: rgb(0,0,0); FONT-SIZE: 16px"><SPAN>What
to do?</SPAN></DIV>
<DIV
style="BACKGROUND-COLOR: transparent; FONT-STYLE: normal; FONT-FAMILY: 'Courier New', courier, monaco,
monospace, sans-serif; COLOR: rgb(0,0,0); FONT-SIZE: 16px"><SPAN>See the blue
triangle on top of the ad to the left of the x? Click on it, and it will take
you to googles ad site, which has a wealth of information, the best of which
is at the very bottom where you can report that ad.</SPAN></DIV>
<DIV
style="BACKGROUND-COLOR: transparent; FONT-STYLE: normal; FONT-FAMILY: 'Courier New', courier, monaco, monospace, sans-serif; COLOR: rgb(0,0,0); FONT-SIZE: 16px"><SPAN><BR></SPAN></DIV>
<DIV
style="BACKGROUND-COLOR: transparent; FONT-STYLE: normal; FONT-FAMILY: 'Courier New', courier, monaco, monospace, sans-serif; COLOR: rgb(0,0,0); FONT-SIZE: 16px"><SPAN>HTH</SPAN></DIV>
<DIV
style="BACKGROUND-COLOR: transparent; FONT-STYLE: normal; FONT-FAMILY: 'Courier New', courier, monaco, monospace, sans-serif; COLOR: rgb(0,0,0); FONT-SIZE: 16px"><SPAN>-Jens</SPAN></DIV>
<DIV style="DISPLAY: block" class=yahoo_quoted><BR><BR>
<DIV
style="FONT-FAMILY: 'Courier New', courier, monaco, monospace, sans-serif; FONT-SIZE: 12pt">
<DIV
style="FONT-FAMILY: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; FONT-SIZE: 12pt">
<DIV dir=ltr><FONT size=2 face=Arial>On Tuesday, November 19, 2013 1:56 PM,
Aubrey Turner <aubrey.c.turner@gmail.com> wrote:<BR></FONT></DIV>
<DIV class=y_msg_container>
<DIV id=yiv4920174117>
<DIV>After reloading the download page a few times, I got the 'green download
button' that someone reported earlier to appear. It is indeed an ad,
served by Google, and it points you to a download page for what is ostensibly
7Zip ( </DIV>
<DIV><A href="http://www.download-21.com/7zip-20627cre/" shape=rect
rel=nofollow
target=_blank>http://www.download-21.com/7zip-20627cre/</A>). This
download is most definitely not CHIRP and is not part of the Chirp download
page. <BR clear=none><BR clear=none>Of interest, the download, which
technically includes 7Zip, also includes a bevy of other software, including a
variety of toolbars.<BR clear=none><BR clear=none>Here's what it has to say on
that site:<BR clear=none>" </DIV>
<DIV><SPAN
style="TEXT-ALIGN: center; TEXT-TRANSFORM: none; BACKGROUND-COLOR: rgb(217,217,217); TEXT-INDENT: 0px; DISPLAY: inline; FONT: 11px/14px helvetica, arial, sans-serif; WHITE-SPACE: normal; FLOAT: none; LETTER-SPACING: normal; COLOR: rgb(51,51,51); WORD-SPACING: 0px">Clicking
this Download button starts DomaIQ™, it manages your 7Zip installation.
Additional software may be offered to you via opt-in ads during the
installation process."<BR clear=none><BR clear=none></SPAN><BR clear=none>So
it's kind of unscrupulous on the part of "Zip App" (the sponsor of the ad,
according to the bottom of the banner), and it could trick someone into
downloading the "7Zip" utility instead of Chirp.<BR clear=none><BR
clear=none>I don't know how whether an attachment will make it to the list,
but I've attached a screen shot of the ad, for any who may be interested in
what it looks like.<BR clear=none><BR clear=none><BR clear=none><BR
clear=none><BR clear=none>
<DIV id=yiv4920174117yqt90269 class=yiv4920174117yqt2739515430>
<DIV class=yiv4920174117moz-cite-prefix>On 11/19/2013 01:44 PM, Jens J.
wrote:<BR clear=none></DIV>
<BLOCKQUOTE type="cite">
<DIV
style="BACKGROUND-COLOR: rgb(255,255,255); FONT-FAMILY: 'Courier New', courier, monaco, monospace, sans-serif; COLOR: rgb(0,0,0); FONT-SIZE: 12pt">
<DIV><SPAN>The ads on the right of the chirp.danplanet.com site appear to be
google syndicated ads.</SPAN></DIV>
<DIV
style="BACKGROUND-COLOR: transparent; FONT-STYLE: normal; FONT-FAMILY: 'Courier New', courier, monaco, monospace, sans-serif; COLOR: rgb(0,0,0); FONT-SIZE: 16px"><SPAN>Either
there was a bad (misleading) ad (totally possible) which you would need to
report to google, or you are locally compromised (dns hijack, malware,
etc).</SPAN></DIV>
<DIV
style="BACKGROUND-COLOR: transparent; FONT-STYLE: normal; FONT-FAMILY: 'Courier New', courier, monaco, monospace, sans-serif; COLOR: rgb(0,0,0); FONT-SIZE: 16px"><SPAN><BR
clear=none></SPAN></DIV>
<DIV
style="BACKGROUND-COLOR: transparent; FONT-STYLE: normal; FONT-FAMILY: 'Courier New', courier, monaco, monospace, sans-serif; COLOR: rgb(0,0,0); FONT-SIZE: 16px"><SPAN>I
still don't think it has anything to do w/ chirp website.</SPAN></DIV>
<DIV style="DISPLAY: block" class=yiv4920174117yahoo_quoted><BR
clear=none><BR clear=none>
<DIV
style="FONT-FAMILY: 'Courier New', courier, monaco, monospace, sans-serif; FONT-SIZE: 12pt">
<DIV
style="FONT-FAMILY: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; FONT-SIZE: 12pt">
<DIV dir=ltr><FONT size=2 face=Arial>On Tuesday, November 19, 2013 10:43 AM,
Eben Haber <A class=yiv4920174117moz-txt-link-rfc2396E
href="mailto:eben@habers.us" shape=rect rel=nofollow target=_blank
ymailto="mailto:eben@habers.us"><eben@habers.us></A> wrote:<BR
clear=none></FONT></DIV>
<DIV class=yiv4920174117y_msg_container>I realized the cause of the problem
that was reported to me. When I go to the chirp site in a browser with no
ad-blocker, there is an ad on the right in the form of a green button saying
"start download" which installs malware on Windows machines.<BR
clear=none><BR clear=none>Is there any way for the Chirp site owner to
control what ads are shown? Or does the site just get ads from some ad
server? I wouldn't be surprised if others are being misdirected by this ad,
causing them to go away thinking that Chirp is just a malware site.<BR
clear=none><BR clear=none>73,<BR clear=none><BR clear=none>-Eben / K6EBN<BR
clear=none>_______________________________________________<BR
clear=none>chirp_users mailing list<BR clear=none><A
href="mailto:chirp_users@intrepid.danplanet.com" shape=rect rel=nofollow
target=_blank
ymailto="mailto:chirp_users@intrepid.danplanet.com">chirp_users@intrepid.danplanet.com</A><BR
clear=none><A
href="http://intrepid.danplanet.com/mailman/listinfo/chirp_users" shape=rect
rel=nofollow
target=_blank>http://intrepid.danplanet.com/mailman/listinfo/chirp_users</A><BR
clear=none><BR clear=none><BR clear=none></DIV></DIV></DIV></DIV></DIV><BR
clear=none>
<FIELDSET class=yiv4920174117mimeAttachmentHeader></FIELDSET> <BR
clear=none><PRE>_______________________________________________
chirp_users mailing list
<A class=yiv4920174117moz-txt-link-abbreviated href="mailto:chirp_users@intrepid.danplanet.com" shape=rect rel=nofollow target=_blank ymailto="mailto:chirp_users@intrepid.danplanet.com">chirp_users@intrepid.danplanet.com</A>
<A class=yiv4920174117moz-txt-link-freetext href="http://intrepid.danplanet.com/mailman/listinfo/chirp_users" shape=rect rel=nofollow target=_blank>http://intrepid.danplanet.com/mailman/listinfo/chirp_users</A>
</PRE></BLOCKQUOTE></DIV><BR clear=none></DIV></DIV><BR>
<DIV id=yqt98956
class=yqt2739515430>_______________________________________________<BR
clear=none>chirp_users mailing list<BR clear=none><A
href="mailto:chirp_users@intrepid.danplanet.com" shape=rect
ymailto="mailto:chirp_users@intrepid.danplanet.com">chirp_users@intrepid.danplanet.com</A><BR
clear=none><A
href="http://intrepid.danplanet.com/mailman/listinfo/chirp_users" shape=rect
target=_blank>http://intrepid.danplanet.com/mailman/listinfo/chirp_users</A><BR
clear=none></DIV><BR><BR></DIV></DIV></DIV></DIV></DIV></BLOCKQUOTE></BODY></HTML>