A Bad Ad? (Security Intrusion Attempt)
 

As I was viewing a thread in Other, I got this message from Norton:

Norton Internet Security has blocked an intrusion attempt.
Details:
Time: 7:38
Date: 9/11/2006
Intrusion: HTTP Embed Tag NPDSPlay DLL BO.
Intruder: pagead2.googlesyndication.com(216.239.57.103) (http(80))
Risk Level: Medium
Protocol: TCP
Attacked IP: localhost.
----------------

The reason I think it came from here is because of the address of the intruder and I didn't have any other pages up. Also, the 'Sponsored Link' didn't display a picture when this happened.

Just thought I'd let you guys know in case this is a problem with anyone else.

it looks like a cookie set for a rich media placement via google.

Symantec sure doesn't seem to like it:

http://www.symantec.com/avcenter/att...gs/s21551.html

This one hangs my computer while it is trying to download the content. Then it releases the page so I can view it, then starts all over trying to download it again. Which is followed by another freeze.

Well, I had the Norton warning come up again a couple minutes ago, and this time I copied the properties of the ad that may have caused it.

Both of the ads were missing; The square ad in the "sponsored links" section was using Flash - so I couldn't copy any link from it. The top banner showed the old "This page cannot be displayed.." message and had this odd address:

" res://C:\WINDOWS\system32\shdoclc.dll/dnserror.htm#http://ads.kleinman.com/cgi-bin/adcy...34&type=iframe "

I don't know anything about google's advertising service or anything like that. But I do know that that stuff about "res://C:\WINDOWS\...." isn't supposed to be there. Could that be the thing that was trying to enter the system? It seems to be the only thing different than the norm.

X: Thanks for the link! I checked it out and it looks like it's for this problem here. So I'll find out which specific OS I have and download the fix later. Thanks again!