PDA

View Full Version : Website infected?



asket
06-21-2010, 10:25 PM
Hi there,

my antivirus software is constantly blocking a programm (supposedly) launched from this site and the site is declared as attacking in firefox. the programm is a "known bad file" declared as trojan whith names from the website ( usercp[1].htm, newthread[1].htm, ...). there was no thread about this but other activity on the forum when i looked that's why i post this.

if it's just me i'm sorry for the confusion.

asket

edit: I'm using VIPRE Antivirus+Antispyware

LeoRetilus
06-21-2010, 10:47 PM
Firefox is telling me the same thing

Andro
06-21-2010, 10:49 PM
I use IE7 with Norton 360 - no allerts (so far).

But I've already received other's reports about the same problem.
__________________________________________________

PS: Switched to Firefox - Allerts all of a sudden...

Seth-Ra
06-22-2010, 07:53 PM
I'm using the latest version of Safari, also getting the warning.

vega33
06-22-2010, 08:56 PM
That would probably be the gcounter DOT cn iframe link in the source thats been added to the title. Pretty standard SQL injection. Sounds like someone needs to do a little housecleaning on the database and upgrade to the newest version of the board software.

Aleilius
06-25-2010, 11:43 PM
That would probably be the gcounter DOT cn iframe link in the source thats been added to the title. Pretty standard SQL injection. Sounds like someone needs to do a little housecleaning on the database and upgrade to the newest version of the board software.

Indeed!

Andro
07-10-2010, 09:04 AM
This site is still 'attacking'.

One of the latest intrusion attempts was described by Norton as:

MSIE Java Deployment Toolikt Input Invalidation, and the risk level was labelled as 'high'.

FYI.

Andro
07-15-2010, 04:48 PM
I'm still getting the occasional virus/trojan attack when opening this site. Took me calling Norton technical support to get rid of the last one.

Deviadah, are you around to give this issue some attention?

Several members have recently signed up with stated reasons for joining such as 'mflljtdlvjyemfkewnd'.
Check the most recent memberships...

I thought the registering process wasn't automatic anymore...

This is quite unpleasant...

:(

horticult
07-28-2010, 11:11 AM
This site is infected by some Java based shit which is connected to russian porn.

solomon levi
07-30-2010, 03:17 AM
I wonder if sacred texts has been hit too?
I use that site frequently for the Golden Chain of Homer, but this
time I got this message:

This Connection is Untrusted

You have asked Firefox to connect
securely to fortunaty.net, but we can't confirm that your connection is secure.

Normally, when you try to connect securely,
sites will present trusted identification to prove that you are
going to the right place. However, this site's identity can't be verified.

Ghislain
07-31-2010, 08:15 PM
It appears very quiet on the forum.

Is this to do with the infection scare?

Is there actually a threat as I dont seem to be experiencing any difficulty
other than some silly program that gets blocked by my anti-virus anyway.

Google seems to have over reacted.

Ghislain

Ghislain
08-01-2010, 05:40 AM
Hi

I have not forgot about the forums. In fact I got some guy working on it
(a guy I am actually paying). It is a bigger mess than I thought. It has
really happened at a bad timing because this summer I have really had a
lot of stuff to do, and I have been traveling a lot...

Also another problem is I can't access the forums myself on my computer...
so that doesn't help either.

When it has been fixed, I will also see if I can implement some stronger
protection so this won't happen in the future.

The forums are a non-profit thing and that is why this is taking a little
longer than it should. I hope everyone has patience and things will be
fixed. This mess is something I have to pay from my own pocket... so no
one is more annoyed than I. It is just a matter of time before everything
is back on track.

Please post this message on the forums so everyone can know what is
happening.

Yet again sorry, and if anyone meets the fucker who did this please shove
some barbwire up his ass!

Kind Regards
deviadah

solomon levi
08-05-2010, 08:22 PM
Thanks for posting Dev's message.
I got a copy too but just checked my mail today.
Nice to know Dev is okay. :)

Awani
09-05-2010, 11:35 PM
See: http://forum.alchemyforums.com/showthread.php?t=1688

:cool:

III
10-15-2010, 07:21 PM
There is a virus that does these attacks and then takes you to their sitre to sell you their software which will keep you endlessly infected always having to buy upgrades. This virus reports alomost all sites as attacking you and version of it won't even let you run Norton and other removal tools. I have been totally unable to get rid of it on another computer and am reformatting the disks and starting over. Zone Alarm firewall appears to be the only thing that keeps it out. It infects from email, ad links and some sites.