Page 6 of 7

Re: *** MORE MALWARE DETECTED*** Secure?

Posted: Tue Jun 29, 2010 10:44 pm
by tripaddict
FFS

im calling reinforcements this time

*dubway pls. dont close the forum i want my friends to have a look

**its stopped now wtf

Re: *** MORE MALWARE DETECTED*** Secure?

Posted: Tue Jun 29, 2010 10:53 pm
by gnome
Getting the alerts again

Re: *** MORE MALWARE DETECTED*** Secure?

Posted: Tue Jun 29, 2010 10:53 pm
by nowaysj
I only got one hit, had a freak, sent some pm's and then nothing?

Re: *** MORE MALWARE DETECTED*** Secure?

Posted: Wed Jun 30, 2010 12:56 am
by wormcode
I turned off protection to test if I would get a random pdf downloaded again, and sure enough I got one in the SNH, and a notice that I need to install missing plugins.

Remember to update your Acrobat/Foxit/etc.

(btw not complaining, just trying to provide info that is hopefully of some use.)

Re: *** MORE MALWARE DETECTED*** Secure?

Posted: Wed Jun 30, 2010 8:32 pm
by buckfaster
keep getting alerts. Not good.

Re: *** MORE MALWARE DETECTED*** Secure?

Posted: Thu Jul 01, 2010 1:33 pm
by tripaddict
fucking russians ...

http://www.hak5.org/forums/index.php?showtopic=16927

^^^ read the post i made on hak5

Re: *** MORE MALWARE DETECTED*** Secure?

Posted: Thu Jul 01, 2010 2:05 pm
by paradigm_x
Ive not had a single warning... firefox, with adblock plus and zonealarm suite .?.?.

Re: *** MORE MALWARE DETECTED*** Secure?

Posted: Thu Jul 01, 2010 4:42 pm
by tripaddict
Ive not had a single warning... firefox, with adblock plus and zonealarm suite .?.?.
do you have any antivirus installed ?

you should think about updating

Re: *** MORE MALWARE DETECTED*** Secure?

Posted: Fri Jul 02, 2010 9:34 pm
by nowaysj
Every page I hit on dsf today I get a virus warning. Is no one else getting this?

Re: *** MORE MALWARE DETECTED*** Secure?

Posted: Fri Jul 02, 2010 9:54 pm
by mks
I got one this morning from Avast. What is going on here? Is malware trying to download as soon as you go to a page? I just went to the production page index and got a warning.

Re: *** MORE MALWARE DETECTED*** Secure?

Posted: Fri Jul 02, 2010 9:57 pm
by JFK
Not getting anything at all...............

Re: *** MORE MALWARE DETECTED*** Secure?

Posted: Fri Jul 02, 2010 10:00 pm
by nowaysj
JFK wrote:Not getting anything at all...............
That worries me bro. Because I get it on every page, even the page I'm typing on right now. Avast is blocking some kind of link to a malicious url.

I'm chrome, adblock and avast.

Re: *** MORE MALWARE DETECTED*** Secure?

Posted: Fri Jul 02, 2010 11:42 pm
by Depone
Since i got adblock+ installed it stopped the warnings etc... I think its thru the adverts...

Re: *** MORE MALWARE DETECTED*** Secure?

Posted: Sat Jul 03, 2010 8:53 am
by JFK
nowaysj wrote:
JFK wrote:Not getting anything at all...............
That worries me bro. Because I get it on every page, even the page I'm typing on right now. Avast is blocking some kind of link to a malicious url.

I'm chrome, adblock and avast.
installed avast and adblock. Now getting warnings on every page........

Re: *** MORE MALWARE DETECTED*** Secure?

Posted: Sat Jul 03, 2010 9:23 am
by nowaysj
Might wanna run a full boot scan overnight. Set avast to quarantine nasties if you want to be safe, or just delete the fuckers if you wanna be reckless?

Re: *** MORE MALWARE DETECTED*** Secure?

Posted: Sat Jul 03, 2010 9:38 am
by Basic A
Tripaddict...

who are your reinforcements?

Shall I call in mine, or are you guys making progress?

Re: *** MORE MALWARE DETECTED*** Secure?

Posted: Sat Jul 03, 2010 9:42 am
by Basic A
Depone wrote:Since i got adblock+ installed it stopped the warnings etc... I think its thru the adverts...
For firefox users:

Open Adblock Plus Preferences...
Select the Filter menu in the top right of the preferences dialog...
Select >Filter>Add Filter
Enter

Code: Select all

http://www.nbvhhdtn321.com/
Go about your day, leave your antivirus running, however, after depone snooped that much out, adblock stopped it entirely.

Re: *** MORE MALWARE DETECTED*** Secure?

Posted: Sat Jul 03, 2010 11:12 am
by nowaysj
I was getting it from http://www.ieudhysta51.com*

Just entered this into my filter, not having a problem anymore: *ieudhysta51*

Re: *** MORE MALWARE DETECTED*** Secure?

Posted: Tue Jul 06, 2010 4:37 am
by Basic A
http://www.dubstepforum.com/protecting- ... 50135.html

And its also worth noting that replying to bot threads will send the typical phpbb subscription letter to the email account which is being utilized by the bot to register through, generating a sort of success factor... when someone replies, it assumes its winning, and thus will come back.

Re: *** MORE MALWARE DETECTED*** Secure?

Posted: Tue Jul 06, 2010 12:44 pm
by tripaddict
its doing my head in :(

they should do something a little more drastic

ie.

disable the part of the site the code is being executed

or

swap bb for a while to something more secure / less vulnerable (there are lots of alternatives and wouldnt take long to setup)

or

block the ips to the server where the threats are originating

and hope they dont have a proxy

i hope you find a solution soon, i miss dsf

but will not be posting till all is resolved