This site HAS a virus. Yes it does. I don’t care if some here are not having a iss

Status
Not open for further replies.

Presentation

Well-Known Member
TECHNICAL Contributor
Oct 3, 2006
4,404
Wisconsin - Winnebago Pool chain of lakes
Boat Info
280 Sundancer, Westerbeke MPV generator
Engines
twin 5.0's w/BIII drives
This site HAS a virus.

Yes it does. I don’t care if some here are not having a issue, good for you, but this site has a virus. I can’t believe the stuff I am reading. ‘Well, I’m not having an issue so let’s not fix it so we can infect as many unsuspecting people as possible.’ WFT?

Yes, I see the 404 error and…..AND …. Getting a fake video pop-up with the virus.

This site HAS a virus.

I suggest this site be taken down until its fixed.


Keeping this site up at this time is like driving on the interstate and tossing nails out your window. This virus will cause computer issues for innocent people who come to this site.

It’s a non-issue when I come here via FireFox but I don’t like Firefox, I use internet explorer 8. With IE8 its a issue.
 
Re: This site HAS a virus. Yes it does. I don’t care if some here are not having a

This site HAS a virus.

Yes it does. I don’t care if some here are not having a issue, good for you, but this site has a virus. I can’t believe the stuff I am reading. ‘Well, I’m not having an issue so let’s not fix it so we can infect as many unsuspecting people as possible.’ WFT?

Yes, I see the 404 error and…..AND …. Getting a fake video pop-up with the virus.

This site HAS a virus.

I suggest this site be taken down until its fixed.


Keeping this site up at this time is like driving on the interstate and tossing nails out your window. This virus will cause computer issues for innocent people who come to this site.

It’s a non-issue when I come here via FireFox but I don’t like Firefox, I use internet explorer 8. With IE8 its a issue.
What's wrong with FireFox? FireFox is 10 times better at surfing than IE! I only use IE when I have to!


EDIT: I wonder if being a sponsor helps since you don't get some of the ads???
 
Re: This site HAS a virus. Yes it does. I don’t care if some here are not having a

What's wrong with FireFox? FireFox is 10 times better at surfing than IE! I only use IE when I have to!


EDIT: I wonder if being a sponsor helps since you don't get some of the ads???

If you like it good for you, use it.

I do not wish to get into a debate on Ford vs Chevy, Firefox vs Windows, etc.

My point is keeping this site up right now is intentionally spreading a virus and causing people to get the virus.

It’s not reasonable to say it’s someone’s fault for getting the virus because they came here using the Microsoft web browser and just because you are not using this brand the virus should not be fixed and be allowed to continue to infect other peoples computers.

This site should be taken down until the virus is removed and that is my point.
 
Re: This site HAS a virus. Yes it does. I don’t care if some here are not having a

I don't think the site has a virus. None of my scans has picked it up using either IE8 or Chrome. However I was able to find a link in the code "http://antivirus-check.cz.cc/forum.php?tp=801f8aee" for the banner ad where the 404 error is found.

From Wikipedia:
The 404 or Not Found error message is a HTTP standard response code indicating that the client was able to communicate with the server, but the server could not find what was requested. A 404 error should not be confused with "server not found" or similar errors, in which a connection to the destination server could not be made at all. A 404 error indicates that the requested resource may be available again in the future.

I would bet that link is where the virus is but the site has been taken down - hence the 404 error since the sever responds but the page does not load.

-Steve
 
Re: This site HAS a virus. Yes it does. I don’t care if some here are not having a

If you like it good for you, use it.

I do not wish to get into a debate on Ford vs Chevy, Firefox vs Windows, etc.

My point is keeping this site up right now is intentionally spreading a virus and causing people to get the virus.

It’s not reasonable to say it’s someone’s fault for getting the virus because they came here using the Microsoft web browser and just because you are not using this brand the virus should not be fixed and be allowed to continue to infect other peoples computers.

This site should be taken down until the virus is removed and that is my point.
Calm down, not trying to debate, trying to learn!
 
Re: This site HAS a virus. Yes it does. I don’t care if some here are not having a

Further checks using an online site scanner showed:

Report 2011-06-20 16:15:18 (GMT 1)
Website antivirus-check.cz.cc
Domain Hash 5991f7f94cbc4340203663b679a455b7
IP Address 188.229.88.109 [SCAN]
IP Hostname -
IP Country RO (Romania)
AS Number 43134
AS Name COMPLIFE-AS CompLife Ltd
Detections 3 / 23 (13 %)
Status DANGEROUS


Scanning site with: AMaDa CLEAN
Scanning site with: BrowserDefender CLEAN
Scanning site with: DNS-BH CLEAN
Scanning site with: DShield SDL CLEAN
Scanning site with: Google Diagnostic CLEAN
Scanning site with: hpHosts UNRATED:huh:
Scanning site with: joewein.de LLC CLEAN
Scanning site with: Malc0de CLEAN
Scanning site with: Malware Domain List CLEAN
Scanning site with: Malware Patrol CLEAN
Scanning site with: MyWOT SUSPICIOUS :wow:
Scanning site with: Norton SafeWeb CLEAN
Scanning site with: ParetoLogic URL Clearing House CLEAN
Scanning site with: PhishTank CLEAN
Scanning site with: SCUMWARE CLEAN
Scanning site with: SpamhausDBL CLEAN
Scanning site with: SURBL DETECTED :smt021
Scanning site with: Threat Log CLEAN
Scanning site with: Trend Micro Site Safety Center DETECTED :smt021
Scanning site with: URIBL CLEAN
Scanning site with: VSCAN CLEAN
Scanning site with: Web Security Guard UNRATED :huh:
Scanning site with: ZeuS Tracker CLEAN
 
Re: This site HAS a virus. Yes it does. I don’t care if some here are not having a

Further checks using an online site scanner showed:

Report 2011-06-20 16:15:18 (GMT 1)
Website antivirus-check.cz.cc
Domain Hash 5991f7f94cbc4340203663b679a455b7
IP Address 188.229.88.109 [SCAN]
IP Hostname -
IP Country RO (Romania)
AS Number 43134
AS Name COMPLIFE-AS CompLife Ltd
Detections 3 / 23 (13 %)
Status DANGEROUS


Scanning site with: AMaDa CLEAN
Scanning site with: BrowserDefender CLEAN
Scanning site with: DNS-BH CLEAN
Scanning site with: DShield SDL CLEAN
Scanning site with: Google Diagnostic CLEAN
Scanning site with: hpHosts UNRATED:huh:
Scanning site with: joewein.de LLC CLEAN
Scanning site with: Malc0de CLEAN
Scanning site with: Malware Domain List CLEAN
Scanning site with: Malware Patrol CLEAN
Scanning site with: MyWOT SUSPICIOUS :wow:
Scanning site with: Norton SafeWeb CLEAN
Scanning site with: ParetoLogic URL Clearing House CLEAN
Scanning site with: PhishTank CLEAN
Scanning site with: SCUMWARE CLEAN
Scanning site with: SpamhausDBL CLEAN
Scanning site with: SURBL DETECTED :smt021
Scanning site with: Threat Log CLEAN
Scanning site with: Trend Micro Site Safety Center DETECTED :smt021
Scanning site with: URIBL CLEAN
Scanning site with: VSCAN CLEAN
Scanning site with: Web Security Guard UNRATED :huh:
Scanning site with: ZeuS Tracker CLEAN

Could you please explain what this means?
 
Re: This site HAS a virus. Yes it does. I don’t care if some here are not having a

Could you please explain what this means?

I used a site called URLVOID.COM. It runs various security scanners (available on the web for free) that checks websites for viruses BEFORE you go to the site. That is the long list near the bottom.

I ran it on clubsearay.com and got a clean bill of health.

Then I ran it on the website link that is embedded in the "404" box. (Right click in IE on the 404 box and choose "properties". You can see the embedded URL address)

That scan came back "Dangerous" and I posted the complete scan list.

So as I mentioned. As far as I can tell the Club Searay" site is clean BUT it may have been hacked and they posted a link for that site in Romania that was actually the virus.

If it is a video link - it is not the video that is the "payload". Typically when you try and run the video you will get a notice that you need to "Update your browser or video player". That update carries the virus and will harm your computer. And you give it permission by allowing it to do the update so it can install the virus.

-S
 
Re: This site HAS a virus. Yes it does. I don’t care if some here are not having a

I used a site called URLVOID.COM. It runs various security scanners (available on the web for free) that checks websites for viruses BEFORE you go to the site. That is the long list near the bottom.

I ran it on clubsearay.com and got a clean bill of health.

Then I ran it on the website link that is embedded in the "404" box. (Right click in IE on the 404 box and choose "properties". You can see the embedded URL address)

That scan came back "Dangerous" and I posted the complete scan list.

So as I mentioned. As far as I can tell the Club Searay" site is clean BUT it may have been hacked and they posted a link for that site in Romania that was actually the virus.

If it is a video link - it is not the video that is the "payload". Typically when you try and run the video you will get a notice that you need to "Update your browser or video player". That update carries the virus and will harm your computer. And you give it permission by allowing it to do the update so it can install the virus.

-S

Thank you for the excellent explanation.

If I understand your reply, if a site administrator removes that ad from the top of the page that is only seen if you are not logged in or not a sponsor the issue will be resolved.

Also logged in site sponsors will not see this ad with the virus.

Is the above correct?
 
Re: This site HAS a virus. Yes it does. I don’t care if some here are not having a

That is correct. Since I am a site sponsor and logged in I do not see the ad at all. I had to log out and then I saw the offending ad box.
 
Re: This site HAS a virus. Yes it does. I don’t care if some here are not having a

Looking into it now. Its not a banner, its the welcome message for non-registered people.
 
Re: This site HAS a virus. Yes it does. I don’t care if some here are not having a

It is not from an ad. It was embedded in the code. I have removed it, but it may re-appear. The programmer is going to look at it.
 
Re: This site HAS a virus. Yes it does. I don’t care if some here are not having a

Jim - I believe that I started the ad rumor with my original post this weekend. I couldn't remember what was in that box on the home page - I only see it ten times a day.

It is not from an ad. It was embedded in the code. I have removed it, but it may re-appear. The programmer is going to look at it.
 
Re: This site HAS a virus. Yes it does. I don’t care if some here are not having a

I see that Jim removed the code. I would have to assume that someone injected the HTML code into the site's welcome message (And this has been confirmed by vBulletin for this particular version that there was in fact a injection security issue). Jim, I'll look through my info and see if I have the latest logins, then perform a upgrade as soon as I can.
 
Re: This site HAS a virus. Yes it does. I don’t care if some here are not having a

I guess the lesson here is to become a sponsor!:grin:

Just kidding (although it's not a bad idea). That must be why I have had no problems here!
But, Presentation is right, this site can affect newbies that obviously won't be sponsors when they log on unsuspectingly and then get a virus. Hopefully admin can do something about this!:smt024
 
Re: This site HAS a virus. Yes it does. I don’t care if some here are not having a

No issue on a Mac!
 
Re: This site HAS a virus. Yes it does. I don’t care if some here are not having a

No issue on Google Chrome.
 
Status
Not open for further replies.

Forum statistics

Threads
112,950
Messages
1,422,872
Members
60,932
Latest member
juliediane
Back
Top