Avast WEBforum

Other => Viruses and worms => Topic started by: the dodo on July 31, 2012, 10:12:29 PM

Title: the daily bag
Post by: the dodo on July 31, 2012, 10:12:29 PM
hello everyone
i keep getting pop ups from something called 'the daily bag' which i think may also be a virus because sometimes but not always avast blocks it. how can i block it completely and forever?
Title: Re: the daily bag
Post by: DavidR on July 31, 2012, 10:19:16 PM
Can you post the full information on the avast alert (change the url http to hXXP to break any active link).
Or
Attach a screenshot of the avast alert, using the 'Attachments and other options' link in the Reply window.
Title: Re: the daily bag
Post by: the dodo on August 01, 2012, 06:40:55 PM
 :) thanks for your prompt reply.
this is the latest one http://w3.deal-connector.com/g12/1339085769698-e0c23494dd86
i tried to do a print screen (shift print screen then control v) but it didn't seem to work.
i'm wondering if daily bag is connected to google
cheers
Title: Re: the daily bag
Post by: the dodo on August 01, 2012, 06:46:37 PM
I also get this
Infection Details
URL:   http://113754.displayadfeed.com/cpv.jsp?...
Process:   C:\Program Files\Google\Chrome\Applicati...
Infection:   URL:Mal
Title: Re: the daily bag
Post by: DavidR on August 01, 2012, 08:01:30 PM
As previously suggested - Please 'modify' your post change the URL from http to hXXp or www to wXw, to break the link and avoid accidental exposure to suspect sites, thanks.

Though the first link doesn't appear to do anything.

For a screenshot you either need an image editing software application or you can use ms paint or similar. Creating a new page in ms paint, etc. then the Ctrl V would work in pasting in the image, crop it to just the image size and save the file as a .gif file (e.g. screenshot.gif, etc.), now you would be able to attach that image file to the post. See attached example, click to expand.

You can't simply try to paste the raw image data into a post, it has to be first converted into an image file.

I rather doubt that the dailybag is part of google a search on "daily bag" returns many hits and the dailybag.com, is that the one you mean, as a whois on that domain doesn't show google as the owner.

The displayadfeed.com site is on the network shields malicious sites list, so any links to that in sites you might be visiting would cause the network shield to alert, as in the attached image. So it may be that some of the pop-ups for the daily bag may have this displayadfeed site displaying ads.

When you get ad pop-ups as this is considered adware if it is using your browsing habits to offer ads which you might be interested in. Normally this comes from having accepted a supposed search helper or other such toolbar. Check your toolbars in Chrome and remove those that fall into this category or those that you don't use.

I would suggest that you get an ad/pop-up blocker add-on/extension for Chrome.
Title: Re: the daily bag
Post by: Pondus on August 01, 2012, 10:32:41 PM
the url in reply#2 is detected by sucuritata emerging threats

http://urlquery.net/report.php?id=110796
Title: Re: the daily bag
Post by: DavidR on August 02, 2012, 12:00:25 AM
I think we need to identify if there is any pattern to these detections, e.g. what site or sites (or is it random) initiates the pop-up ?

Does this still happen if another browser is used or only with chrome ?
Title: Re: the daily bag
Post by: mchain on August 02, 2012, 12:07:47 AM
Hi the dodo,

As DavidR suggests, an adblocker extension would help here in blocking ads in the browser you use.

http://adblockplus.org/en/ (http://adblockplus.org/en/)

Should help in other areas if not with this issue.
Title: Re: the daily bag
Post by: the dodo on August 08, 2012, 06:47:56 PM
Hi
thanks for your assistance. i'll try some of these suggestions.