If you spend a lot of time on a t35 site, you'll probaly have noticed the infamous winfixer popup.
Not only does it forces it self on to your computer, (if you choose No, it still scans your pc) it also carries not so pretty stuff. Just google it, and you"ll come across hundereds of pages complaining about the winfixer popups/infestations. I have yet to find a decent way to block it. (please, if you know a good popup stopper or how to stop, i'll be very gratefull). Luckely, my system is patched and secured well beyond average standards, so it doesn't get installed on my system..

Now, I totally understand that ads are required to keep the free-account free. I totally do. But can't you do anything about it, serverwise or something?

Many people have complained about this sort of stuff, but t35's ads are spyware/adware/virus/trojan and others free. They are clean. If you want good programs to protect your computer use:

Norton Antivirus
Norton Firewall
Lavasoft Ad-aware

Can anyone provide the url to this ad? Thanks..

Thanks RHawes ... I just finished a very thorough check of all of our advertisers and I have found no traces to any kind of spyware.. especially the winfixer..

The thing is, My t35 page was the only one that was open at the time. It's also the only site I get it from.
I have NO spyware whatsoever. I have several antispywareprograms (adaware, MS antispyware, spywareblaster, spybot S&D all with the latest definitions) which I scan with at least every other day and I do a regular check with the online checker from Etrust pestpatrol. None of them find anything remotely close to winfixer or spyware except the common tracking cookies. Checked with HiJackThis and didn't find anything.  Furthermore, I have read dozens of websites and did every single test they offered. Never found anything.
As a browser I use FF, I'm using a fully patched SP2, firewall, antivirus...

Heck, i'm writing this reply just after I got the popup again.

I never have had the winfixer infestation. And i know at least 2 sites that have had the very same problem. They too didn't know where it came from. (check 2nd reply)


It pops as a javascript popup, and underneath there is a regular browser-window. I can't get the exact url from that since it's to small. If i try to cancel or X the window, it still pops open, in this site h**p://www.winfixer.com/pages/scanner/index.php?aid=dblu_e_ed2&lid=wf3&ex=1&p=&ax=1
However.
I did some searching on the sites which i talked about earlier, and i found this on one of the boards
http://www.ogame224.de/forum/thread.php?threadid=44306&threadview=0&hilight=winfixer&hilightuser=0&page=1

In the last post, a user give out the (possible) malicious urls.

Still, it's very strange.
but then again, things never happen normal for me

anyways, i reopened my t35 page again (it's working as a preview for a site i'm working on, so i use it often) and what do you know, this pops up, with the winfixer popup.

http://www212.paypopup.com/networks/budsinc2.php?rurl=http%3A%2F%2Fpopunder.paypopup.com%2Fprogress.php%3Fsn%3D21134577132%26serverfile%3Dpaypopup%26siteid%3Damelen%26subid%3D1142%26data%3DrSe_2%25CB%25CA%25CC%25CF%25D1%25D4%25D6%25D0%25CC%25CD%25C0qSl_%255E%25FE%25D6%25FA%2525%257D%2526%2521%252A%25BF%252B%252C%2560S%255C7%2526%25CB%25CD%25CB%25C1%25263%25E2%252B%252B%2526%252Bpc5%253C%253A%25C0%25FB%2528%2527%2525%25FE%252A%2523%252B%25FC%257Dc%2527ff%2521%257B%2524%25C6-%252C%25D8-%25DC%25C9%25C9%25D1%252AOf5f%25D7%25C9%25C7%25CE%25C2%25275%25E2%257E%252C0%253B5jo%255E%252A%257D%2525--%257E%2529%25C5%257E%2528%25D70%25FE%252B%2528%2526%25CB%25D1%25C7%25D1%25D5%25CB%25D4%25D5%26adsid%3D4%26adsname%3Dbudsinc_prepopped

I then reentered it into FF and it still gave me the winfixer. by the time i finished this text, this doesn't work anymore, or it'll give another add.

I don't know how all this stuff works and all with ad-servers and whatnot, but could it be that certain code in seemingly legit ads "trigger" the winfixer-spyware? And that that's the reason why it stays hidden for your staff?

edit:
i managed to get a decent capture of the popup, and a large part of the originating site.
http://preske.t35.com/winfixer.JPG

I can't seem to replicate the error.. but paypop-up provides a link for visitors to report ads like this.. since you seem to have all the info on your side.. just go to the url and fill out the info and I will call them tomorrow to check up on their resolution of it.

http://www.PayPopup.com/adreport.php?username=amelen

I can't get them on the phone (probobly because its the weekend), but I will call to follow up tomorrow.