Russian ads

[Yw-slayer]

I am suddenly getting all sorts of weird Russian ads when I go to various websites (say, mtbr.com, bikeradar.com, etc. etc.). Mainly, apparently, clickbait for escorts. It's enough to make me beg for the old "SIX PACK SHORTCUTS" and other crap that I used to see on a daily basis.

I haven't changed my browsing habits. I haven't been looking at Russian pr0nz. I've scanned with Super Antispyware, Malwarebytes, and Kaspersky. Nothing found. How do I get rid of Russian escort ads?

EDIT: I've installed Adblock Plus, I suppose that may help, but I'm interested in finding out why I got all those ads in the first place.

[Cam]

Could be any number of things not affected by your browsing habits.

[George]

In Soviet Russia, escorts find you!

[Rare White Ape]

Maybe the ad services on your websites haven't been able to track you well enough to personalise your browsing experience.

[thesameguy]

.... or maybe they have.

Can't lie to adchoices.

[Yw-slayer]

Fuckers going to pay. IF YOU CAN SEE THIS, YOU ARE GOING TO GET FUCKED UP

[overpowered]

.... or maybe they have.

Can't lie to adchoices.This.

[Yw-slayer]

This is the shit I'm talking about.

Seriously, I have not looked at any Russian news sites or whatever. I've scanned multiple times with Super, MBAM, and Kaspersky. I run Adblock Plus. And this shit still happens.

714

[FaultyMario]

Coincidentally, I run NoScript and ADP on my firefox. I've dl'd therabytes of porn and PDF files from questionable sites in the last year, my cyberdick is spotless.

It seems unlikely that someone didn't break into your connection to browse around the shady places looking for warez, yo.

[Yw-slayer]

So, short of a reinstall, does anyone have anything else useful to say? I mean, I don't have anything from multiple scans of MBAM, Super, Kaspersky, and I've run everything on CCleaner.

[thesameguy]

Well, you need to determine where these ads are coming from - where they are being inserted by something on your computer, or legitimately the result of the content provider. You'd need to look at the HTML of a page displaying this content and see where it originates. It seems likely CNET would serve Russian escort ads, but OTOH it seems that slew of protection/scanning apps you have would all miss some malware. Have you checked your hosts file to see if domains are being redirected? Tried using a different browser? Tried browsing in protected mode?

[Yw-slayer]

They appear in CNET (let's say that's my test site) on Firefox too. I haven't tried IE yet.

I'll try protected mode. How do I check my hosts file, and what should I be looking for?

OK, I've checked and refreshed the hosts file in /system32 etc. with the stock windows one. No change.

In Incognito Mode, Chrome doesn't display the ads. But a Firefox Private Window DOES display the ads. Kaspersky Protected Mode in Chrome doesn't display ads.

Where is JZL anyway?

[thesameguy]

If you right click on one of the ads and get the image properties, what domain are they coming from?

I really think these are legitimate ads - maybe not ads you want to see, but ads cnet's advertising broke wants you to.

[Yw-slayer]

It's from

http://dstatic.aceadsys.net/s/t/200-1402413539_8833_phpxdjkue.jpeg

The element is

element.style {
}
table {
border-collapse: collapse;
border-spacing: 0;
}
table[Attributes Style] {
border-spacing: 0px;
border-top-width: 0px;
border-right-width: 0px;
border-bottom-width: 0px;
border-left-width: 0px;
height: 1000px;
width: 1600px;
}
user agent stylesheettable {
display: table;
border-collapse: separate;
border-spacing: 2px;
border-color: gray;
}
Inherited from body.not-logged-in.us.touch-disabled
body {
font-family: Proxima-Nova,Helvetica,Arial,sans-serif;
font-size: 17px;
line-height: 1.4;
}
Inherited from html.wf-proximanova-n3-active.wf-proximanova-n4-active.wf-proximanova-n6-active.wf-proximanova-n7-active.wf-jubilat-n4-active.wf-jubilat-n5-active.wf-jubilat-n2-active.wf-jubilat-i4-active.wf-jubilat-n7-active.wf-active
html, button, input, select, textarea {
color: #000;
}
html {
font-family: sans-serif;
-webkit-text-size-adjust: 100%;
-ms-text-size-adjust: 100%;
}


Wait, it may be because I installed Ace Stream (on the advice of my colleague). Going to try removing that and see if that works.

[Yw-slayer]

Got it. I just disabled the Ace Stream plugins in Chrome and FF and the dodgy-ass ads are gone. Googling Aceadsys helped too. If someone were to use the computer to watch AceStream, uh, streams they could just copy and paste the link to the standalone player anyway.

Thanks a bunch, dude.

[thesameguy]

Bam.