Malware Issues

[perdix]

Back on with chrome too.
​Cheers for sorting it

 

[enfieldspares]

Hello. My Kaspersky Anti-Virus 2013 programme detected and blocked two threats from this site when I landed on it today both noted as Trojan type viruses ruprecheter.at and la-diag.com for your information.

So it shows the value, I think, of a good, up to date, anti-virus programme. I won't use McAfee!

 

[csl]

Hello. My Kaspersky Anti-Virus 2013 programme detected and blocked two threats from this site when I landed on it today

When you say today you mean earlier yesterday?

So far as I can see we are completely clear now and Google has given us the all clear too. I think Safari uses google to test sites too so Safari users shouldn't be getting the warnings any more either.

 

[Yorkie]

My McAfee site advisor shows everything OK. Although from Enfieldspares comments this may not mean very much.

Yorkie.

 

[bobjs]

spy bot all clear here to Alex.

many thanks

bob.

 

[75]

I had some spam email this morning from and Edward Ng Cheng Hin who wrote "I am looking for woodland deer stalking and would be interested to know whether you take booking for outings."

Seemed like a bit more specific than your usual spam, but I don't take people out - never have done. Can only assume it could be linked to this site as I don't post on any other forums. Mods - has my email address been compromised??

 

[csl]

Mods - has my email address been compromised??

Absolutely not.

The issue we had was with code being injected into the banner ad display system. The user database is completely separate and wasn't touched.

 

[finnbear270]

I have not had any trouble, excepting that a couple of pop ups advertising tarot & other benign looking stuff has been evident since the original issue came up, just got something purporting to be from AVG (COUPONS), something is still attached somewheres?


by coupon companion?

 

[csl]

If anyone has any concerns about malware on their computers I can recommend the free version of Malwarebytes, available here:

Malwarebytes : Free anti-malware download

1. Choose the Free Download and install
2. UNTICK "enable free trial of Malwarebytres PRO"
3. TICK Update Malwarebytes
4. TICK Launch Malwarebytes

It will install and update itself and run. Choose Quick Scan and click the Scan button





​If it finds anything you will get the option to remove it.

 

[finnbear270]

If anyone has any concerns about malware on their computers I can recommend the free version of Malwarebytes, available here:

Malwarebytes : Free anti-malware download

1. Choose the Free Download and install
2. UNTICK "enable free trial of Malwarebytres PRO"
3. TICK Update Malwarebytes
4. TICK Launch Malwarebytes

View attachment 29407

It will install and update itself and run. Choose Quick Scan and click the Scan button

View attachment 29408



​If it finds anything you will get the option to remove it.

Just running it now Alex, 2 items have cropped up.

 

[75]

Absolutely not.

The issue we had was with code being injected into the banner ad display system. The user database is completely separate and wasn't touched.

OK, just thought I'd check - seemed like rather specific spamming and can't think where else they'd have got my email address and any link to deerstalking...

 

[csl]

OK, just thought I'd check - seemed like rather specific spamming and can't think where else they'd have got my email address and any link to deerstalking...

Probably worth scanning your PC though just in case there is something installed locally on your PC. Try the steps I outlined above.

Alex

 

[limulus]

Just having a look at that script now Alex....it may have come from a chinese ip but thats easily falsified....looks more local to me. I'll have a play and see if I can find a bit more info about it. Just for funzies

 

[csl]

Just having a look at that script now Alex....it may have come from a chinese ip but thats easily falsified....looks more local to me. I'll have a play and see if I can find a bit more info about it. Just for funzies

I was going to do the same thing Tony, to see what the script was trying to do but as I said, it doesn't actually exist any more (if it ever did)

​

[root@webhost ~]# wget http://www.googlecodehosting.net/openx/js/zone_functions.js--2013-06-16 14:21:58--  http://www.googlecodehosting.net/openx/js/zone_functions.js
Resolving www.googlecodehosting.net... 89.45.14.87
Connecting to www.googlecodehosting.net|89.45.14.87|:80... connected.
HTTP request sent, awaiting response... 404 Not Found
2013-06-16 14:21:58 ERROR 404: Not Found.

The domain is registered in Germany but the IP they used when they hacked our adserver was Chinese. Could have been a proxy though like you say.

 

[pheasant sniper 1]

If anyone has any concerns about malware on their computers I can recommend the free version of Malwarebytes, available here:

Malwarebytes : Free anti-malware download

1. Choose the Free Download and install
2. UNTICK "enable free trial of Malwarebytres PRO"
3. TICK Update Malwarebytes
4. TICK Launch Malwarebytes

View attachment 29407

It will install and update itself and run. Choose Quick Scan and click the Scan button

View attachment 29408



​If it finds anything you will get the option to remove it.

Hi Alex

Can i download this to my fone as im always taking a look on it and would i need to?

Hope your good mate

Terry

 

[limulus]

Very very unlikely to affect your phone Terry...runs on a different os and browser generally

 

[Roebuck]

I downloaded that malware software CSL recommended and it found 2 "Trojan Droppers" and a Adware robot??

 

[enfieldspares]

Yes, my apologies, started browsing The Stalking Directory sometime before midnight....but posted my remarks some time after. So for "today" it was, by then, "earlier yesterday".

 

[kimh]

Pigeon Watch has just been hit...

 

[Norrie1956]

Yep, getting messages when I click on the link to open the site....someone up to dodgy deeds....