akadimka Posted September 10, 2015 Report Share Posted September 10, 2015 from last build maxthon starts to open various web pages related to sites with ads (like aliexpress.com, rutube.ru etc). The browser reacts like this when I trying to open links (normal ones). First I thought it was some kind of virus on my PC but then the same browser behaviour was noticed on other PCs running Windows 10. Cannot tell nothing about Windows 7, 8 or 8.1. Does anyone know anything about this? ANd how to fight it? BR, akadimka Link to comment Share on other sites More sharing options...
7twenty Posted September 10, 2015 Report Share Posted September 10, 2015 Test in other browsers to see if it's just a Maxthon thing, or a system wide issue. If it doesn't happen on other browsers, then in Maxthon make sure ABP is on. Run an adware check using something like Malwarebytes Ad-Aware. Link to comment Share on other sites More sharing options...
slank Posted September 10, 2015 Report Share Posted September 10, 2015 from last build maxthon starts to open various web pages related to sites with ads (like aliexpress.com, rutube.ru etc). The browser reacts like this when I trying to open links (normal ones). First I thought it was some kind of virus on my PC but then the same browser behaviour was noticed on other PCs running Windows 10. Cannot tell nothing about Windows 7, 8 or 8.1. Does anyone know anything about this? ANd how to fight it? Where did you download Maxthon from? Maxthon.com or some other site? Here in the forum? Link to comment Share on other sites More sharing options...
akadimka Posted September 11, 2015 Author Report Share Posted September 11, 2015 To 7twenty, other browsers (like Edge, Mozilla and Chrome) works fine. In maxthon ABP is on and I run Malwarebytes Ad-Aware several times - everything is OK. That's strange... To slank, yep, I downloaded latest build from this forum. Link to comment Share on other sites More sharing options...
SnowLeopard Posted September 11, 2015 Report Share Posted September 11, 2015 from last build maxthon starts to open various web pages related to sites with ads (like aliexpress.com, rutube.ru etc). The browser reacts like this when I trying to open links (normal ones). First I thought it was some kind of virus on my PC but then the same browser behaviour was noticed on other PCs running Windows 10. Cannot tell nothing about Windows 7, 8 or 8.1. Does anyone know anything about this? ANd how to fight it? BR, akadimka I have noticed something that may be similar on Windows 7. The extra tabs alwasy contain GIFs. But so far I have religiously avoinded even looking at these tabs; I just close them. Although similar, your report seems to have a broader range of links that are opened. Link to comment Share on other sites More sharing options...
7twenty Posted September 11, 2015 Report Share Posted September 11, 2015 (like aliexpress.com, rutube.ru etc). Are these sites that you go to that have other tabs open? or are these the sites that get opened? Doesn't make sense?! There's definitely something else going on, Link to comment Share on other sites More sharing options...
akadimka Posted September 14, 2015 Author Report Share Posted September 14, 2015 Are these sites that you go to that have other tabs open? or are these the sites that get opened? Doesn't make sense?! There's definitely something else going on, These sites are get opened when I click on any link inside normal page (or even when I open new tab) Link to comment Share on other sites More sharing options...
7twenty Posted September 14, 2015 Report Share Posted September 14, 2015 Definitely not a Maxthon issue, but that other browsers aren't having the same issue is confusing. Try updating maxthon to the latest version and do a clean install. Make sure all your data is saved or are using a Passport account. See the troubleshooting thread for details. I have noticed something that may be similar on Windows 7. The extra tabs alwasy contain GIFs. Again, this doesn't make sense. Unless there is some malware that specifically targets Maxthon (and why would it?) there's no reason why things like this will magically start happening. Can we get some links to sites which cause these popups? I'm thinking it's more than likely some popups that aren't getting blocked by ABP rather than something dodgy going on. Link to comment Share on other sites More sharing options...
akadimka Posted September 15, 2015 Author Report Share Posted September 15, 2015 Here's the links (I gathered them in 7 minutes of working in Maxthon) http://best.aliexpress.com/ru.htm?af=502606&dp=REBzd-mNOnAuWKMdyFpuitAfFazOG_NF-F2HXKP-sjRmfPslJVxyrdEOmkNsCoxPMriNgROyhTQ0gOe6g9Gp07ZTb4Y2lp3OyLdJfaBZLw1cx1kkVSGPRV0L6ii1aMkIcX_8gFpzdkptymjbDpezpbfHvHwnksxIslf_mCNmdsKFxtc-lWZLK83AxuzG_thSRBZhlsq0BAAy0jyA8uV1jlXHQPDNALmAwReGX6F1zgWnft9ZwETdyw__32334&cv=_55f7d1ca260d2567448b468b___&alpsm=true&sms=suginter&sms_type=country&aff_platform=aaf&sk=nUfQVzZJI%3A&cpt=1442304459950&aff_trace_key=812e6cf5cbcd4e5588a7720a36cff44b-1442304459950-06625-nUfQVzZJI http://best.aliexpress.com/markets/ru.htm?af=502606&dp=REBzd-mNOnAT5cE5D-dl4qTjF68BiNF4-F2HXKP-sjRmfPslJVxyrdEOmkNsCoxPMriNgROyhTQ0gOe6g9Gp00Zgoss2Pu3HjffK_TC_ct1TFEFdZ1GR3I6hCsvOXqcZcX_8gFpzdkptymjbDpezpbfHvHwnksxIslf_mCNmdsKFxtc-lWZLK83AxuzG_thSRBZhlsq0BAAy0jyA8uV1jlXHQPDNALmAwReGX6F1zgWnft9ZwETdyw__32334&cv=_55f7d21369c313533d8c2ae9___&alpsm=true&sms=sughot&sms_type=country&aff_platform=aaf&sk=nUfQVzZJI%3A&cpt=1442304538988&aff_trace_key=812e6cf5cbcd4e5588a7720a36cff44b-1442304538988-05696-nUfQVzZJI http://www.tradeadexchange.com/a/display.php?r=463177&sub1=xda-developers.com&runauction=1&crr=ccad36be17cf71784ce7,,gRyUSbvNmLzJXZw9GblZXZk1SYkhnLtVncvZmRyUiRyUSQzUCc0RHa76f796062b5bb88de40e&ctbust=0.9767196027096361-> goes to http://lp.bigfarm.goodgamestudios.com/?country=ru&pid=262&camp=2&gid=15&cid=202494&tid=463177 http://nevskyinvest.com/ma/?campaign=utTS-PRA-UT-RU-NVK-TS-PRA-RU-UT-BI-MLP-L-02&offer_id=100495&from=99 Link to comment Share on other sites More sharing options...
akadimka Posted September 15, 2015 Author Report Share Posted September 15, 2015 another one http://go.spaceshipads.com/afu.php?zoneid=361258 Link to comment Share on other sites More sharing options...
-ody- Posted September 15, 2015 Report Share Posted September 15, 2015 Here's the links (I gathered them in 7 minutes of working in Maxthon) http://best.aliexpress.com/ru.htm?af=502606&dp=REBzd-mNOnAuWKMdyFpuitAfFazOG_NF-F2HXKP-sjRmfPslJVxyrdEOmkNsCoxPMriNgROyhTQ0gOe6g9Gp07ZTb4Y2lp3OyLdJfaBZLw1cx1kkVSGPRV0L6ii1aMkIcX_8gFpzdkptymjbDpezpbfHvHwnksxIslf_mCNmdsKFxtc-lWZLK83AxuzG_thSRBZhlsq0BAAy0jyA8uV1jlXHQPDNALmAwReGX6F1zgWnft9ZwETdyw__32334&cv=_55f7d1ca260d2567448b468b___&alpsm=true&sms=suginter&sms_type=country&aff_platform=aaf&sk=nUfQVzZJI%3A&cpt=1442304459950&aff_trace_key=812e6cf5cbcd4e5588a7720a36cff44b-1442304459950-06625-nUfQVzZJI http://best.aliexpress.com/markets/ru.htm?af=502606&dp=REBzd-mNOnAT5cE5D-dl4qTjF68BiNF4-F2HXKP-sjRmfPslJVxyrdEOmkNsCoxPMriNgROyhTQ0gOe6g9Gp00Zgoss2Pu3HjffK_TC_ct1TFEFdZ1GR3I6hCsvOXqcZcX_8gFpzdkptymjbDpezpbfHvHwnksxIslf_mCNmdsKFxtc-lWZLK83AxuzG_thSRBZhlsq0BAAy0jyA8uV1jlXHQPDNALmAwReGX6F1zgWnft9ZwETdyw__32334&cv=_55f7d21369c313533d8c2ae9___&alpsm=true&sms=sughot&sms_type=country&aff_platform=aaf&sk=nUfQVzZJI%3A&cpt=1442304538988&aff_trace_key=812e6cf5cbcd4e5588a7720a36cff44b-1442304538988-05696-nUfQVzZJI http://www.tradeadexchange.com/a/display.php?r=463177&sub1=xda-developers.com&runauction=1&crr=ccad36be17cf71784ce7,,gRyUSbvNmLzJXZw9GblZXZk1SYkhnLtVncvZmRyUiRyUSQzUCc0RHa76f796062b5bb88de40e&ctbust=0.9767196027096361-> goes to http://lp.bigfarm.goodgamestudios.com/?country=ru&pid=262&camp=2&gid=15&cid=202494&tid=463177 http://nevskyinvest.com/ma/?campaign=utTS-PRA-UT-RU-NVK-TS-PRA-RU-UT-BI-MLP-L-02&offer_id=100495&from=99 what site did you get those links from ? can you give us a link please ? Link to comment Share on other sites More sharing options...
akadimka Posted September 15, 2015 Author Report Share Posted September 15, 2015 some of them opens from http://forum.xda-developers.com/ some from www.yandex.ru some just when I click "New tab" It's not depends what I open at the moment it's works in random way,,, P.S. Right now I lost ability to post any replies in this topic via Maxthon browser (neither ultra neither retro mode) -> there's no more frame for quick answer below last post. So I forced to use MS Edge to post this reply... It's very strange Link to comment Share on other sites More sharing options...
7twenty Posted September 15, 2015 Report Share Posted September 15, 2015 I clicked on a number of links over approx 5mins with ABP on and off, and at no time did any tab open with anything out of the ordinary. Can you run this program, press the first button (do a system scan and save log) and attach the file created to your next post. Hopefully there is something there that indicates where it could be coming from. While it doesn't make sense that only Maxthon is affected, it definitely looks like there something else at play here. Most likely some malware that has been installed either masquerading as a legitimate program or otherwise. Just to confirm, do you have ABP running? And if you check the log (ABP button > View blocked items) does it show anything being blocked? Link to comment Share on other sites More sharing options...
joemax Posted September 15, 2015 Report Share Posted September 15, 2015 Try disabling any addons you have running Link to comment Share on other sites More sharing options...
BugSir007 Posted September 16, 2015 Report Share Posted September 16, 2015 Hi, I also conducted a test on my side, on this website http://forum.xda-developers.com/ever link i click on does not open any strange new tab...it just goes to the intended link ... May i know if the same problem happens when your maxthon account is logged off? I suspect the problem is due to your settings .... Link to comment Share on other sites More sharing options...
A.S. Posted October 2, 2015 Report Share Posted October 2, 2015 from last build maxthon starts to open various web pages related to sites with ads (like aliexpress.com, rutube.ru etc).Where are you from?I ask because when we talk about MX problems and Russian websites I have only one idea...So are you from Russia? Or CIS? Link to comment Share on other sites More sharing options...
-ody- Posted October 8, 2015 Report Share Posted October 8, 2015 Where are you from?I ask because when we talk about MX problems and Russian websites I have only one idea...So are you from Russia? Or CIS?related to this ? http://forum.maxthon.com/index.php?/topic/17615-dns-unlocker-still-needs-to-be-removed-right-now/ Link to comment Share on other sites More sharing options...
A.S. Posted October 8, 2015 Report Share Posted October 8, 2015 related to this ? http://forum.maxthon.com/index.php?/topic/17615-dns-unlocker-still-needs-to-be-removed-right-now/Maybe. Maybe not.Rutube is Russian website with video. Like YouTube. If this malware opens Russian websites, I think this is Russian malware. If this is Russian malware the source of this is Russian MX groups in VK, OK, LiveJournal, Facebook, etc. So I asked about country.The first case with DNS Unlocker was in India. Look on Maxthon page on Facebook. Users wrote about it. Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.