×

Give a tip

maxthon opens "strange" pages


akadimka

Recommended Posts

from last build maxthon starts to open various web pages related to sites with ads (like aliexpress.com, rutube.ru etc). The browser reacts like this when I trying to open links (normal ones).

First I thought it was some kind of virus on my PC but then the same browser behaviour was noticed on other PCs running Windows 10. Cannot tell nothing about Windows 7, 8 or 8.1.

 

Does anyone know anything about this? ANd how to fight it?

 

BR, akadimka

Tip   Give
Link to comment
Share on other sites

from last build maxthon starts to open various web pages related to sites with ads (like aliexpress.com, rutube.ru etc). The browser reacts like this when I trying to open links (normal ones).

First I thought it was some kind of virus on my PC but then the same browser behaviour was noticed on other PCs running Windows 10. Cannot tell nothing about Windows 7, 8 or 8.1.

 

Does anyone know anything about this? ANd how to fight it?

 

Where did you download Maxthon from? Maxthon.com or some other site? Here in the forum?

Tip   Give
Link to comment
Share on other sites

from last build maxthon starts to open various web pages related to sites with ads (like aliexpress.com, rutube.ru etc). The browser reacts like this when I trying to open links (normal ones).

First I thought it was some kind of virus on my PC but then the same browser behaviour was noticed on other PCs running Windows 10. Cannot tell nothing about Windows 7, 8 or 8.1.

 

Does anyone know anything about this? ANd how to fight it?

 

BR, akadimka

I have noticed something that may be similar on Windows 7.  The extra tabs alwasy contain GIFs.  But so far I have religiously avoinded even looking at these tabs; I just close them.  

 

Although similar, your report seems to have a broader range of links that are opened.

Tip   Give
Link to comment
Share on other sites

Are these sites that you go to that have other tabs open? or are these the sites that get opened?

 

Doesn't make sense?! There's definitely something else going on,

These sites are get opened when I click on any link inside normal page (or even when I open new tab)

Tip   Give
Link to comment
Share on other sites

Definitely not a Maxthon issue, but that other browsers aren't having the same issue is confusing.

 

Try updating maxthon to the latest version and do a clean install. Make sure all your data is saved or are using a Passport account. See the troubleshooting thread for details.

 

I have noticed something that may be similar on Windows 7.  The extra tabs alwasy contain GIFs. 

 

Again, this doesn't make sense. Unless there is some malware that specifically targets Maxthon (and why would it?) there's no reason why things like this will magically start happening.

 

Can we get some links to sites which cause these popups?

 

I'm thinking it's more than likely some popups that aren't getting blocked by ABP rather than something dodgy going on.

Tip   Give
Link to comment
Share on other sites

Here's the links (I gathered them in 7 minutes of working in Maxthon)

http://best.aliexpress.com/ru.htm?af=502606&dp=REBzd-mNOnAuWKMdyFpuitAfFazOG_NF-F2HXKP-sjRmfPslJVxyrdEOmkNsCoxPMriNgROyhTQ0gOe6g9Gp07ZTb4Y2lp3OyLdJfaBZLw1cx1kkVSGPRV0L6ii1aMkIcX_8gFpzdkptymjbDpezpbfHvHwnksxIslf_mCNmdsKFxtc-lWZLK83AxuzG_thSRBZhlsq0BAAy0jyA8uV1jlXHQPDNALmAwReGX6F1zgWnft9ZwETdyw__32334&cv=_55f7d1ca260d2567448b468b___&alpsm=true&sms=suginter&sms_type=country&aff_platform=aaf&sk=nUfQVzZJI%3A&cpt=1442304459950&aff_trace_key=812e6cf5cbcd4e5588a7720a36cff44b-1442304459950-06625-nUfQVzZJI

http://best.aliexpress.com/markets/ru.htm?af=502606&dp=REBzd-mNOnAT5cE5D-dl4qTjF68BiNF4-F2HXKP-sjRmfPslJVxyrdEOmkNsCoxPMriNgROyhTQ0gOe6g9Gp00Zgoss2Pu3HjffK_TC_ct1TFEFdZ1GR3I6hCsvOXqcZcX_8gFpzdkptymjbDpezpbfHvHwnksxIslf_mCNmdsKFxtc-lWZLK83AxuzG_thSRBZhlsq0BAAy0jyA8uV1jlXHQPDNALmAwReGX6F1zgWnft9ZwETdyw__32334&cv=_55f7d21369c313533d8c2ae9___&alpsm=true&sms=sughot&sms_type=country&aff_platform=aaf&sk=nUfQVzZJI%3A&cpt=1442304538988&aff_trace_key=812e6cf5cbcd4e5588a7720a36cff44b-1442304538988-05696-nUfQVzZJI

http://www.tradeadexchange.com/a/display.php?r=463177&sub1=xda-developers.com&runauction=1&crr=ccad36be17cf71784ce7,,gRyUSbvNmLzJXZw9GblZXZk1SYkhnLtVncvZmRyUiRyUSQzUCc0RHa76f796062b5bb88de40e&ctbust=0.9767196027096361-> goes to http://lp.bigfarm.goodgamestudios.com/?country=ru&pid=262&camp=2&gid=15&cid=202494&tid=463177

http://nevskyinvest.com/ma/?campaign=utTS-PRA-UT-RU-NVK-TS-PRA-RU-UT-BI-MLP-L-02&offer_id=100495&from=99

Tip   Give
Link to comment
Share on other sites

Here's the links (I gathered them in 7 minutes of working in Maxthon)

http://best.aliexpress.com/ru.htm?af=502606&dp=REBzd-mNOnAuWKMdyFpuitAfFazOG_NF-F2HXKP-sjRmfPslJVxyrdEOmkNsCoxPMriNgROyhTQ0gOe6g9Gp07ZTb4Y2lp3OyLdJfaBZLw1cx1kkVSGPRV0L6ii1aMkIcX_8gFpzdkptymjbDpezpbfHvHwnksxIslf_mCNmdsKFxtc-lWZLK83AxuzG_thSRBZhlsq0BAAy0jyA8uV1jlXHQPDNALmAwReGX6F1zgWnft9ZwETdyw__32334&cv=_55f7d1ca260d2567448b468b___&alpsm=true&sms=suginter&sms_type=country&aff_platform=aaf&sk=nUfQVzZJI%3A&cpt=1442304459950&aff_trace_key=812e6cf5cbcd4e5588a7720a36cff44b-1442304459950-06625-nUfQVzZJI

http://best.aliexpress.com/markets/ru.htm?af=502606&dp=REBzd-mNOnAT5cE5D-dl4qTjF68BiNF4-F2HXKP-sjRmfPslJVxyrdEOmkNsCoxPMriNgROyhTQ0gOe6g9Gp00Zgoss2Pu3HjffK_TC_ct1TFEFdZ1GR3I6hCsvOXqcZcX_8gFpzdkptymjbDpezpbfHvHwnksxIslf_mCNmdsKFxtc-lWZLK83AxuzG_thSRBZhlsq0BAAy0jyA8uV1jlXHQPDNALmAwReGX6F1zgWnft9ZwETdyw__32334&cv=_55f7d21369c313533d8c2ae9___&alpsm=true&sms=sughot&sms_type=country&aff_platform=aaf&sk=nUfQVzZJI%3A&cpt=1442304538988&aff_trace_key=812e6cf5cbcd4e5588a7720a36cff44b-1442304538988-05696-nUfQVzZJI

http://www.tradeadexchange.com/a/display.php?r=463177&sub1=xda-developers.com&runauction=1&crr=ccad36be17cf71784ce7,,gRyUSbvNmLzJXZw9GblZXZk1SYkhnLtVncvZmRyUiRyUSQzUCc0RHa76f796062b5bb88de40e&ctbust=0.9767196027096361-> goes to http://lp.bigfarm.goodgamestudios.com/?country=ru&pid=262&camp=2&gid=15&cid=202494&tid=463177

http://nevskyinvest.com/ma/?campaign=utTS-PRA-UT-RU-NVK-TS-PRA-RU-UT-BI-MLP-L-02&offer_id=100495&from=99

what site did you get those links from ? can you give us a link please ? 

sigmax2.png

Tip   Give
Link to comment
Share on other sites

some of them opens from http://forum.xda-developers.com/

some from www.yandex.ru

some just when I click "New tab"

It's not depends what I open at the moment it's works in random way,,,

 

P.S. Right now I lost ability to post any replies in this topic via Maxthon browser (neither ultra neither retro mode) -> there's no more frame for quick answer below last post. So I forced to use MS Edge to post this reply... It's very strange

Tip   Give
Link to comment
Share on other sites

I clicked on a number of links over approx 5mins with ABP on and off, and at no time did any tab open with anything out of the ordinary.

 

Can you run this program, press the first button (do a system scan and save log) and attach the file created to your next post. Hopefully there is something there that indicates where it could be coming from.

 

While it doesn't make sense that only Maxthon is affected, it definitely looks like there something else at play here. Most likely some malware that has been installed either masquerading as a legitimate program or otherwise.

 

Just to confirm, do you have ABP running? And if you check the log (ABP button > View blocked items) does it show anything being blocked?

Tip   Give
Link to comment
Share on other sites

Hi,

I also conducted a test on my side, on this website http://forum.xda-developers.com/ever link i click on does not open any strange new tab...it just goes to the intended link ...

May i know if the same problem happens when your maxthon account is logged off? I suspect the problem is due to your settings ....

Tip   Give
Link to comment
Share on other sites

  • 3 weeks later...

from last build maxthon starts to open various web pages related to sites with ads (like aliexpress.com, rutube.ru etc).

Where are you from?
I ask because when we talk about MX problems and Russian websites I have only one idea...
So are you from Russia? Or CIS?

Tip   Give
Link to comment
Share on other sites

Maybe. Maybe not.
Rutube is Russian website with video. Like YouTube. If this malware opens Russian websites, I think this is Russian malware. If this is Russian malware the source of this is Russian MX
groups in VK, OK, LiveJournal, Facebook, etc. So I asked about country.
The first case with DNS Unlocker was in India. Look on Maxthon page on Facebook. Users wrote about it.

Tip   Give
Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.