Sign in to follow this  
Tonysmallz

threat detected, black hole exploit.

Recommended Posts

Tonysmallz

[ATTACH=CONFIG]6405[/ATTACH]says its coming from forum runner.

Share this post


Link to post
Share on other sites
Sonny-Burnett

[ATTACH=CONFIG]6405[/ATTACH]says its coming from forum runner.

Interesting as all day yesterday I kept getting popups on our Forum that said this:
Windows Internet ExplorerAre you sure you want to leave this page?Message from webpage: Are you Shure (misspelled btw) ?>  Leave this Page> Stay on this Page

If I clicked on either selection I would be redirected to an advertising webpage. If I did nothing I would also get automatically redirected away from the Forum to another advertising webpage. This was going on all day and night last night.FYI, I'm running 64 Bit Windows 7 operating system, and I have very strong Malware and Antivirus programs running (Active- Norton Security Suite) and passive, (i.e., on -demand), where I'm running SuperAntispyware, Malwarebytes, and I use Ace Utilities for cleanup regularly. I tried cleaning with all these and nothing was found, leading me to believe that there was an infection or security breach on our Forum.Mods?

Share this post


Link to post
Share on other sites
Chloe

My McAfee was picking up malware from here yesterday

Share this post


Link to post
Share on other sites
Kavinsky

fyi I was getting the same message today and yesterday clicking on the glossary sent me to an image site yesterday when I clicked on the glossary page for S1, stopped it in time, and just now that message about such and so threat was poping up just now when running with javascript on when posting on the daytona thread and I have AVG and it was saying exactly the same thing as it did there on the first screen shot, think I may take a break for a couple of days till this is sorted out.

Share this post


Link to post
Share on other sites
KaeptnCaipi

I got the same error message yesterday. Don't know why this happens. I'm going to update our forum software to the latest version this evening and will do some research about this.BTW: I deleted all the other posts in this thread.

Share this post


Link to post
Share on other sites
Sonny-Burnett

I got the same error message yesterday. Don't know why this happens. I'm going to update our forum software to the latest version this evening and will do some research about this.BTW: I deleted all the other posts in this thread.

Thanks for deleting the other posts. After getting redirected to advertising sites the other day, Norton Security Suite now blocks and notifies me of an attempted attack by Blackhole Toolkit Website 27, an apparent RU botnet, each time the page refreshes. Here's what Norton says:Attacker URL: npxsiiwpxqqihmo.ru/runforestrun?sid=botnetAttacking computer: 94.100.27.16, 80Traffic Description: TCP, www-http

Share this post


Link to post
Share on other sites
Pandina

I was never redirected to other sites. My ESET NOD32 Antivirus notifiesThreat: JS/Kryptik.QK trojanInformation: connection terminated - quarantinedI have a total of 62 blocked attacks, the cleanup has just finished and it seems that these attacks have not been found in my computer.

Share this post


Link to post
Share on other sites
KaeptnCaipi

I updated our forum software and all our plug-ins to the latest versions.Are there still problems with malware and virus warnings???

Share this post


Link to post
Share on other sites
Britva

I updated our forum software and all our plug-ins to the latest versions.Are there still problems with malware and virus warnings???

Thank you! I had problems too, but now they're gone, forum is working OK :thumbsup:

Share this post


Link to post
Share on other sites
COOPER&BURNETT

I updated our forum software and all our plug-ins to the latest versions.Are there still problems with malware and virus warnings???

The only "problem" I experienced was not being able to get this site at all last night (it was offline for a while). I tried to get on here, and the site couldn't be found before I went to bed last night, other than that, all is well! :thumbsup:

Share this post


Link to post
Share on other sites
KaeptnCaipi
The only "problem" I experienced was not being able to get this site at all last night (it was offline for a while). I tried to get on here' date=' and the site couldn't be found before I went to bed last night, other than that, all is well! :thumbsup:[/quote']Yes, that's right. I had to restart our server this morning (european time).

Share this post


Link to post
Share on other sites
miamijimf

Thanks Chris. Virus warnings are gone.

Share this post


Link to post
Share on other sites
timm525

No issues on my end.Thanks! :thumbsup:

Share this post


Link to post
Share on other sites
KaeptnCaipi

I checked our server and our domain with several tools and anti-malware sites. Everything seems to be ok there are no malware or viruses found. Let's hope everything's all right now.If you notice anything strange or if you get a virus/malware warning, please let me know.

Share this post


Link to post
Share on other sites
juscat
I got the same error message yesterday. Don't know why this happens. I'm going to update our forum software to the latest version this evening and will do some research about this.BTW: I deleted all the other posts in this thread.
I updated our forum software and all our plug-ins to the latest versions.Are there still problems with malware and virus warnings???
Yes' date=' that's right. I had to restart our server this morning (european time).[/quote']
I checked our server and our domain with several tools and anti-malware sites. Everything seems to be ok there are no malware or viruses found. Let's hope everything's all right now.If you notice anything strange or if you get a virus/malware warning' date=' please let me know.[/quote']Thanks for the updates, Caipi. :thumbsup:I wasn't game enough to venture back in, :eek: until I heard more updates! No problems at my end, either.

Share this post


Link to post
Share on other sites
Chloe

No problems here today...[ATTACH=CONFIG]6406[/ATTACH]

post-51-1389296469377_thumb.jpg

Share this post


Link to post
Share on other sites
Sonny-Burnett
I checked our server and our domain with several tools and anti-malware sites. Everything seems to be ok there are no malware or viruses found. Let's hope everything's all right now.If you notice anything strange or if you get a virus/malware warning' date=' please let me know.[/quote']From the Norton warning I think it was a malicious Botnet that caused the problems. So far now everything is fine here. Thanks, Caipi! :clap:

Share this post


Link to post
Share on other sites
CarolineUK

Many thanks, Chris. The trojan warnings have gone now :)

Share this post


Link to post
Share on other sites
Pandina

Everything is fine now, thanks Caipi!!! :clap:

Share this post


Link to post
Share on other sites
Sonny-Burnett

Caipi, I'm just now seeing the return of the Norton warning: Web Attack: Blackhole Toolkit Website 27 (RU botnet). :evil:

Share this post


Link to post
Share on other sites
miamijimf

Just got a malware alert again.

Share this post


Link to post
Share on other sites
Morgana

Getting the pop-up threat warnings again...

Share this post


Link to post
Share on other sites
2morgen

Getting the pop-up threat warnings again...

me too

Share this post


Link to post
Share on other sites
Gecko

Es ist leider so, die Virenmeldung ist zurück.

Share this post


Link to post
Share on other sites
Mr. Calderon

Me too, with Kaspersky Internet Security 2012

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

Sign in to follow this