View Single Post
Old 27-01-2007, 07:27 AM   #2
Japo
Autonomous human
 
Japo's Avatar


 
Join Date: Mar 2006
Location: ,
Posts: 4,615
Default

BUMP (rules compliant double post) I've already figured all out and have even mailed PhB and got action and an answer from them, so this second post is going to grant information instead of requesting it. If you use any free image hosting service you might be interested in reading it.

First of all, I know why I was getting this and most people weren't, and it's not just bad luck It's because I was trying Comodo firewall and so I had to deactivate the Windows one. People who use the latter --as I now am in the position to advise-- were safe in PhB even when there was malware in it, and I had been safe before while I used the Windows firewall, as I'm doing back now. But the threat was certain, it wasn't in my computer but in PhB as they have admitted themselves in an email.

I can't tell for certain how likely it is that PhB was hijacked, or whether they were trying to make some easy dishonest money, but with the fast answer and action I got from them I can't possibly deny them the benefit of doubt. I finally contacted them (with my hotmail account which I use only to give it away when I have to, so I don't care about spam in it) and, shortly thereafter, I encountered this when accessing to PhB and I found the following in my mailbox:

Quote:
Dear [email],


Thank you for bringing this to our attention. We are aware of the issue and
are actively investigating the suspect advertisements/pop-ups that you are
seeing on your computer. We are seeking to remove these ads, and resolve this

issue as quickly as possible. We greatly appreciate your patience in this
matter.

Sincerely,

Your Photobucket Support Team

------
Online Help Center: http://photobucket.com/tips.php
Support Forums: http://forums.photobucket.com
Support Email: support@photobucket.com




[email] wrote:

> Hello,
> I'm really perplexed at what is happening to me at your site --and not any
> other. My knowledge is little if any but it would seem to me that your site
> has been infected or hijacked by the malware errorsafe/systemdoctor?
>
> username: japofran
> email: [email][/b]
I have even dared to momentarily deactivate the Windows firewall and un-ban the intruding domains, and have checked that PhB is now free of Errorsafe indeed. What I can't tell is whether they have removed them completely or only for my account, the latter would mean that PhB were and are swindling and infecting people on purpose. At least Errorsafe is a common appearance in free image hosting services as the links I posted above (1 and 2) prove. I would actually be interested in learning about that, because it would raise a moral issue. I mean I would not use nor endorse in any other way a service which is free for me because it's swindling some unlucky or artless but innocent few.
__________________
Life starts every day anew. Prospects not so good...
Japo is offline                         Send a private message to Japo
Reply With Quote