<html><body><div style="color:#000; background-color:#fff; font-family:Courier New, courier, monaco, monospace, sans-serif;font-size:12pt"><div><span>Yes, anybody (including bad guys) can purchase ads from various ad networks and use it to distribute questionable stuff (including malware). They usually get vetted/blocked by reputable ad networks like google, but the trickier ones find ways to get through, and it's a continuous whac-a-mole game w/ bad guys.</span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: 'Courier New', courier, monaco, monospace, sans-serif; background-color: transparent; font-style: normal;"><span><br></span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: 'Courier New', courier, monaco, monospace, sans-serif; background-color: transparent; font-style: normal;"><span>What to do?</span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: 'Courier New', courier, monaco,
monospace, sans-serif; background-color: transparent; font-style: normal;"><span>See the blue triangle on top of the ad to the left of the x? Click on it, and it will take you to googles ad site, which has a wealth of information, the best of which is at the very bottom where you can report that ad.</span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: 'Courier New', courier, monaco, monospace, sans-serif; background-color: transparent; font-style: normal;"><span><br></span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: 'Courier New', courier, monaco, monospace, sans-serif; background-color: transparent; font-style: normal;"><span>HTH</span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: 'Courier New', courier, monaco, monospace, sans-serif; background-color: transparent; font-style: normal;"><span>-Jens</span></div><div class="yahoo_quoted" style="display: block;"> <br> <br> <div
style="font-family: 'Courier New', courier, monaco, monospace, sans-serif; font-size: 12pt;"> <div style="font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; font-size: 12pt;"> <div dir="ltr"> <font size="2" face="Arial"> On Tuesday, November 19, 2013 1:56 PM, Aubrey Turner <aubrey.c.turner@gmail.com> wrote:<br> </font> </div> <div class="y_msg_container"><div id="yiv4920174117"><div>
After reloading the download page a few times, I got the 'green
download button' that someone reported earlier to appear. It is
indeed an ad, served by Google, and it points you to a download page
for what is ostensibly 7Zip (
</div><div><a rel="nofollow" shape="rect" target="_blank" href="http://www.download-21.com/7zip-20627cre/">http://www.download-21.com/7zip-20627cre/</a>).
This download is most definitely not CHIRP and is not part of the
Chirp download page. <br clear="none">
<br clear="none">
Of interest, the download, which technically includes 7Zip, also
includes a bevy of other software, including a variety of toolbars.<br clear="none">
<br clear="none">
Here's what it has to say on that site:<br clear="none">
"
</div><div><span style="color: rgb(51, 51, 51); font-family: helvetica, arial, sans-serif; font-size: 11px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 14px; text-align: center; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; background-color: rgb(217, 217, 217); display: inline; float: none;">Clicking this Download button starts DomaIQ™, it
manages your 7Zip installation. Additional software may be offered
to you via opt-in ads during the installation process."<br clear="none">
<br clear="none">
</span><br clear="none">
So it's kind of unscrupulous on the part of "Zip App" (the sponsor
of the ad, according to the bottom of the banner), and it could
trick someone into downloading the "7Zip" utility instead of Chirp.<br clear="none">
<br clear="none">
I don't know how whether an attachment will make it to the list, but
I've attached a screen shot of the ad, for any who may be interested
in what it looks like.<br clear="none">
<br clear="none">
<br clear="none">
<br clear="none">
<br clear="none">
<div class="yiv4920174117yqt2739515430" id="yiv4920174117yqt90269"><div class="yiv4920174117moz-cite-prefix">On 11/19/2013 01:44 PM, Jens J. wrote:<br clear="none">
</div>
<blockquote type="cite">
<div style="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); font-family: 'Courier New', courier, monaco, monospace, sans-serif; font-size: 12pt;">
<div><span>The ads on the right of the chirp.danplanet.com site
appear to be google syndicated ads.</span></div>
<div style="color: rgb(0, 0, 0); font-size: 16px; font-family: 'Courier New', courier, monaco, monospace, sans-serif; background-color: transparent; font-style: normal;"><span>Either
there was a bad (misleading) ad (totally possible) which you
would need to report to google, or you are locally
compromised (dns hijack, malware, etc).</span></div>
<div style="color: rgb(0, 0, 0); font-size: 16px; font-family: 'Courier New', courier, monaco, monospace, sans-serif; background-color: transparent; font-style: normal;"><span><br clear="none">
</span></div>
<div style="color: rgb(0, 0, 0); font-size: 16px; font-family: 'Courier New', courier, monaco, monospace, sans-serif; background-color: transparent; font-style: normal;"><span>I
still don't think it has anything to do w/ chirp website.</span></div>
<div class="yiv4920174117yahoo_quoted" style="display: block;"> <br clear="none">
<br clear="none">
<div style="font-family: 'Courier New', courier, monaco, monospace, sans-serif; font-size: 12pt;">
<div style="font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; font-size: 12pt;">
<div dir="ltr"> <font size="2" face="Arial"> On Tuesday,
November 19, 2013 10:43 AM, Eben Haber
<a rel="nofollow" shape="rect" class="yiv4920174117moz-txt-link-rfc2396E" ymailto="mailto:eben@habers.us" target="_blank" href="mailto:eben@habers.us"><eben@habers.us></a> wrote:<br clear="none">
</font> </div>
<div class="yiv4920174117y_msg_container">I realized the cause of the
problem that was reported to me. When I go to the chirp
site in a browser with no ad-blocker, there is an ad on
the right in the form of a green button saying "start
download" which installs malware on Windows machines.<br clear="none">
<br clear="none">
Is there any way for the Chirp site owner to control
what ads are shown? Or does the site just get ads from
some ad server? I wouldn't be surprised if others are
being misdirected by this ad, causing them to go away
thinking that Chirp is just a malware site.<br clear="none">
<br clear="none">
73,<br clear="none">
<br clear="none">
-Eben / K6EBN<br clear="none">
_______________________________________________<br clear="none">
chirp_users mailing list<br clear="none">
<a rel="nofollow" shape="rect" ymailto="mailto:chirp_users@intrepid.danplanet.com" target="_blank" href="mailto:chirp_users@intrepid.danplanet.com">chirp_users@intrepid.danplanet.com</a><br clear="none">
<a rel="nofollow" shape="rect" target="_blank" href="http://intrepid.danplanet.com/mailman/listinfo/chirp_users">http://intrepid.danplanet.com/mailman/listinfo/chirp_users</a><br clear="none">
<br clear="none">
<br clear="none">
</div>
</div>
</div>
</div>
</div>
<br clear="none">
<fieldset class="yiv4920174117mimeAttachmentHeader"></fieldset>
<br clear="none">
<pre>_______________________________________________
chirp_users mailing list
<a rel="nofollow" shape="rect" class="yiv4920174117moz-txt-link-abbreviated" ymailto="mailto:chirp_users@intrepid.danplanet.com" target="_blank" href="mailto:chirp_users@intrepid.danplanet.com">chirp_users@intrepid.danplanet.com</a>
<a rel="nofollow" shape="rect" class="yiv4920174117moz-txt-link-freetext" target="_blank" href="http://intrepid.danplanet.com/mailman/listinfo/chirp_users">http://intrepid.danplanet.com/mailman/listinfo/chirp_users</a>
</pre>
</blockquote></div>
<br clear="none">
</div></div><br><div class="yqt2739515430" id="yqt98956">_______________________________________________<br clear="none">chirp_users mailing list<br clear="none"><a shape="rect" ymailto="mailto:chirp_users@intrepid.danplanet.com" href="mailto:chirp_users@intrepid.danplanet.com">chirp_users@intrepid.danplanet.com</a><br clear="none"><a shape="rect" href="http://intrepid.danplanet.com/mailman/listinfo/chirp_users" target="_blank">http://intrepid.danplanet.com/mailman/listinfo/chirp_users</a><br clear="none"></div><br><br></div> </div> </div> </div> </div></body></html>