/ Register

This site HAS a virus. Yes it does. I don’t care if some here are not having a iss

Discussion in 'NEW SERVER BUGS' started by Presentation, Jun 20, 2011.

Thread Status:
Not open for further replies.
Page 1 of 2
  1. Jun 20, 2011 #1
    Presentation

    Presentation Well-Known Member TECHNICAL Contributor

    4,404
    Oct 3, 2006
    Wisconsin - Winnebago Pool chain of lakes
    280 Sundancer, Westerbeke MPV generator
    twin 5.0's w/BIII drives
    This site HAS a virus.

    Yes it does. I don’t care if some here are not having a issue, good for you, but this site has a virus. I can’t believe the stuff I am reading. ‘Well, I’m not having an issue so let’s not fix it so we can infect as many unsuspecting people as possible.’ WFT?

    Yes, I see the 404 error and…..AND …. Getting a fake video pop-up with the virus.

    This site HAS a virus.

    I suggest this site be taken down until its fixed.

    Keeping this site up at this time is like driving on the interstate and tossing nails out your window. This virus will cause computer issues for innocent people who come to this site.

    It’s a non-issue when I come here via FireFox but I don’t like Firefox, I use internet explorer 8. With IE8 its a issue.
     
  2. Jun 20, 2011 #2
    floriduramax1

    floriduramax1 Active Member

    1,727
    Sep 19, 2010
    Florida
    280DA, Magic Tilt triple axle, 2006 GMC 2500 D/A
    T4.3/ Alpha
    Re: This site HAS a virus. Yes it does. I don’t care if some here are not having a

    What's wrong with FireFox? FireFox is 10 times better at surfing than IE! I only use IE when I have to!


    EDIT: I wonder if being a sponsor helps since you don't get some of the ads???
     
  3. Jun 20, 2011 #3
    Presentation

    Presentation Well-Known Member TECHNICAL Contributor

    4,404
    Oct 3, 2006
    Wisconsin - Winnebago Pool chain of lakes
    280 Sundancer, Westerbeke MPV generator
    twin 5.0's w/BIII drives
    Re: This site HAS a virus. Yes it does. I don’t care if some here are not having a

    If you like it good for you, use it.

    I do not wish to get into a debate on Ford vs Chevy, Firefox vs Windows, etc.

    My point is keeping this site up right now is intentionally spreading a virus and causing people to get the virus.

    It’s not reasonable to say it’s someone’s fault for getting the virus because they came here using the Microsoft web browser and just because you are not using this brand the virus should not be fixed and be allowed to continue to infect other peoples computers.

    This site should be taken down until the virus is removed and that is my point.
     
  4. Jun 20, 2011 #4
    Steve S

    Steve S Well-Known Member PLATINUM Sponsor

    2,809
    Jun 5, 2007
    Northern IL.
    2000 400 Sedan Bridge with twin CAT 3116's

    2000 340 Sundancer - SOLD!
    210 Monaco 1987 - SOLD!
    Twin Caterpillar 3116's 350 HP straight drives
    Re: This site HAS a virus. Yes it does. I don’t care if some here are not having a

    I don't think the site has a virus. None of my scans has picked it up using either IE8 or Chrome. However I was able to find a link in the code "http://antivirus-check.cz.cc/forum.php?tp=801f8aee" for the banner ad where the 404 error is found.

    From Wikipedia:
    The 404 or Not Found error message is a HTTP standard response code indicating that the client was able to communicate with the server, but the server could not find what was requested. A 404 error should not be confused with "server not found" or similar errors, in which a connection to the destination server could not be made at all. A 404 error indicates that the requested resource may be available again in the future.

    I would bet that link is where the virus is but the site has been taken down - hence the 404 error since the sever responds but the page does not load.

    -Steve
     
  5. Jun 20, 2011 #5
    floriduramax1

    floriduramax1 Active Member

    1,727
    Sep 19, 2010
    Florida
    280DA, Magic Tilt triple axle, 2006 GMC 2500 D/A
    T4.3/ Alpha
    Re: This site HAS a virus. Yes it does. I don’t care if some here are not having a

    Calm down, not trying to debate, trying to learn!
     
  6. Jun 20, 2011 #6
    Steve S

    Steve S Well-Known Member PLATINUM Sponsor

    2,809
    Jun 5, 2007
    Northern IL.
    2000 400 Sedan Bridge with twin CAT 3116's

    2000 340 Sundancer - SOLD!
    210 Monaco 1987 - SOLD!
    Twin Caterpillar 3116's 350 HP straight drives
    Re: This site HAS a virus. Yes it does. I don’t care if some here are not having a

    Further checks using an online site scanner showed:

    Report 2011-06-20 16:15:18 (GMT 1)
    Website antivirus-check.cz.cc
    Domain Hash 5991f7f94cbc4340203663b679a455b7
    IP Address 188.229.88.109 [SCAN]
    IP Hostname -
    IP Country RO (Romania)
    AS Number 43134
    AS Name COMPLIFE-AS CompLife Ltd
    Detections 3 / 23 (13 %)
    Status DANGEROUS


    Scanning site with: AMaDa CLEAN
    Scanning site with: BrowserDefender CLEAN
    Scanning site with: DNS-BH CLEAN
    Scanning site with: DShield SDL CLEAN
    Scanning site with: Google Diagnostic CLEAN
    Scanning site with: hpHosts UNRATED:huh:
    Scanning site with: joewein.de LLC CLEAN
    Scanning site with: Malc0de CLEAN
    Scanning site with: Malware Domain List CLEAN
    Scanning site with: Malware Patrol CLEAN
    Scanning site with: MyWOT SUSPICIOUS :wow:
    Scanning site with: Norton SafeWeb CLEAN
    Scanning site with: ParetoLogic URL Clearing House CLEAN
    Scanning site with: PhishTank CLEAN
    Scanning site with: SCUMWARE CLEAN
    Scanning site with: SpamhausDBL CLEAN
    Scanning site with: SURBL DETECTED :smt021
    Scanning site with: Threat Log CLEAN
    Scanning site with: Trend Micro Site Safety Center DETECTED :smt021
    Scanning site with: URIBL CLEAN
    Scanning site with: VSCAN CLEAN
    Scanning site with: Web Security Guard UNRATED :huh:
    Scanning site with: ZeuS Tracker CLEAN
     
  7. Jun 20, 2011 #7
    Presentation

    Presentation Well-Known Member TECHNICAL Contributor

    4,404
    Oct 3, 2006
    Wisconsin - Winnebago Pool chain of lakes
    280 Sundancer, Westerbeke MPV generator
    twin 5.0's w/BIII drives
    Re: This site HAS a virus. Yes it does. I don’t care if some here are not having a

    Could you please explain what this means?
     
  8. Jun 20, 2011 #8
    Steve S

    Steve S Well-Known Member PLATINUM Sponsor

    2,809
    Jun 5, 2007
    Northern IL.
    2000 400 Sedan Bridge with twin CAT 3116's

    2000 340 Sundancer - SOLD!
    210 Monaco 1987 - SOLD!
    Twin Caterpillar 3116's 350 HP straight drives
    Re: This site HAS a virus. Yes it does. I don’t care if some here are not having a

    I used a site called URLVOID.COM. It runs various security scanners (available on the web for free) that checks websites for viruses BEFORE you go to the site. That is the long list near the bottom.

    I ran it on clubsearay.com and got a clean bill of health.

    Then I ran it on the website link that is embedded in the "404" box. (Right click in IE on the 404 box and choose "properties". You can see the embedded URL address)

    That scan came back "Dangerous" and I posted the complete scan list.

    So as I mentioned. As far as I can tell the Club Searay" site is clean BUT it may have been hacked and they posted a link for that site in Romania that was actually the virus.

    If it is a video link - it is not the video that is the "payload". Typically when you try and run the video you will get a notice that you need to "Update your browser or video player". That update carries the virus and will harm your computer. And you give it permission by allowing it to do the update so it can install the virus.

    -S
     
  9. Jun 20, 2011 #9
    Presentation

    Presentation Well-Known Member TECHNICAL Contributor

    4,404
    Oct 3, 2006
    Wisconsin - Winnebago Pool chain of lakes
    280 Sundancer, Westerbeke MPV generator
    twin 5.0's w/BIII drives
    Re: This site HAS a virus. Yes it does. I don’t care if some here are not having a

    Thank you for the excellent explanation.

    If I understand your reply, if a site administrator removes that ad from the top of the page that is only seen if you are not logged in or not a sponsor the issue will be resolved.

    Also logged in site sponsors will not see this ad with the virus.

    Is the above correct?
     
  10. Jun 20, 2011 #10
    Larry Lyons

    Larry Lyons New Member

    18
    Apr 19, 2009
    We boat out of Galena, IL. on the Mississippi
    2002, 320 Sundancer
    V-drive, 350 cu. in.
    Re: This site HAS a virus. Yes it does. I don’t care if some here are not having a

    Yep I saw that 404 too and wondered what it meant. Thanks for the update. Larry
     
  11. Jun 20, 2011 #11
    Steve S

    Steve S Well-Known Member PLATINUM Sponsor

    2,809
    Jun 5, 2007
    Northern IL.
    2000 400 Sedan Bridge with twin CAT 3116's

    2000 340 Sundancer - SOLD!
    210 Monaco 1987 - SOLD!
    Twin Caterpillar 3116's 350 HP straight drives
    Re: This site HAS a virus. Yes it does. I don’t care if some here are not having a

    That is correct. Since I am a site sponsor and logged in I do not see the ad at all. I had to log out and then I saw the offending ad box.
     
  12. Jun 20, 2011 #12
    CSR_Admin

    CSR_Admin Administrator Staff Member

    5,078
    Mar 10, 2004
    Re: This site HAS a virus. Yes it does. I don’t care if some here are not having a

    Looking into it now. Its not a banner, its the welcome message for non-registered people.
     
  13. Jun 20, 2011 #13
    MonacoMike

    MonacoMike Well-Known Member

    14,719
    Sep 15, 2009
    Indiana lakes and Lake Michigan
    2000 Cruisers 3870
    8.2 Mercs
    85 Sea Ray Monaco 197
    260hp Alpha 1
    Re: This site HAS a virus. Yes it does. I don’t care if some here are not having a

    It probably does as we don't get the adds that may have virus.
     
  14. Jun 20, 2011 #14
    CSR_Admin

    CSR_Admin Administrator Staff Member

    5,078
    Mar 10, 2004
    Re: This site HAS a virus. Yes it does. I don’t care if some here are not having a

    It is not from an ad. It was embedded in the code. I have removed it, but it may re-appear. The programmer is going to look at it.
     
  15. Jun 20, 2011 #15
    Phlorida

    Phlorida New Member

    867
    Sep 15, 2010
    Satellite Beach, FL
    1995 250 Sundancer
    5.7L Mercruiser w/Bravo II
    Re: This site HAS a virus. Yes it does. I don’t care if some here are not having a

    Jim - I believe that I started the ad rumor with my original post this weekend. I couldn't remember what was in that box on the home page - I only see it ten times a day.

     
  16. Jun 20, 2011 #16
    Presentation

    Presentation Well-Known Member TECHNICAL Contributor

    4,404
    Oct 3, 2006
    Wisconsin - Winnebago Pool chain of lakes
    280 Sundancer, Westerbeke MPV generator
    twin 5.0's w/BIII drives
    Re: This site HAS a virus. Yes it does. I don’t care if some here are not having a

    Thank you Jim. Seems fine now.
     
  17. Jun 20, 2011 #17
    Mark Bolyard

    Mark Bolyard Administrator PLATINUM Sponsor

    34
    Feb 3, 2009
    Maryland
    Boatless
    Boatless
    Re: This site HAS a virus. Yes it does. I don’t care if some here are not having a

    I see that Jim removed the code. I would have to assume that someone injected the HTML code into the site's welcome message (And this has been confirmed by vBulletin for this particular version that there was in fact a injection security issue). Jim, I'll look through my info and see if I have the latest logins, then perform a upgrade as soon as I can.
     
  18. Jun 20, 2011 #18
    tdschafer

    tdschafer Well-Known Member

    6,149
    Aug 24, 2009
    Long island , NY
    1997 330 sundancer
    twin 454's, Carb, V-Drives
    Re: This site HAS a virus. Yes it does. I don’t care if some here are not having a

    I guess the lesson here is to become a sponsor!:grin:

    Just kidding (although it's not a bad idea). That must be why I have had no problems here!
    But, Presentation is right, this site can affect newbies that obviously won't be sponsors when they log on unsuspectingly and then get a virus. Hopefully admin can do something about this!:smt024
     
  19. Jun 20, 2011 #19
    tbirdvet

    tbirdvet Active Member

    1,568
    Sep 24, 2009
    Michigan
    Previous boat: 2008 330 Sundancer
    Vetus Bow Thruster
    Kohler Gen.
    Twin 496 MAG, 375HP Bravo III,
    Re: This site HAS a virus. Yes it does. I don’t care if some here are not having a

    No issue on a Mac!
     
  20. Jun 20, 2011 #20
    rondds

    rondds Well-Known Member

    8,859
    Oct 3, 2006
    Jersey Shore
    2001 380DA
    Merc 8.1s (2008)...Hurth ZF 63 V-drives...WB 7.0 BCGD (2013), Garmin 8208 & 740 MFDs, GMR 24xHD dome
    Re: This site HAS a virus. Yes it does. I don’t care if some here are not having a

    No issue on Google Chrome.
     
Page 1 of 2
Thread Status:
Not open for further replies.

Share This Page

Show Sidebar
Welcome to our site! Please take a moment and Register today!