Everytime I open this site, I get attacked with Trojan.   

Here you post everything that is not related to other forum areas.
stuff like how you like this forum for example ;)

Postby Lowthian » Wed May 04, 2011 9:24 pm

I use firefox, not heard of adblock plus, never needed it till now. Everyone has a different set up.
The problem is, if somone visits here, & gets redirected to malware :diablo:, then thier antivirus warns them off, or blocks the site they were redirected to, then they may assume that this is a dodgy site and never return :55:.
Surely this defeats the object of a web site, which is to attract visitors.
It's the journey that matters :)
Lowthian offline


User avatar Junior Member



 
Joined: Wed Apr 27, 2011 4:49 pm
Posts: 20
Location: Doncaster UK
Has thanked: 0 time
Been thanked: 0 time

Postby Miky13 » Wed May 11, 2011 11:06 am

I was also attacked several times by Trojans on this site, sometimes when I close the browser and reopen it, the attacks stay away. Today again, the first time an attack by several Trojans, the second time they stayed away.

Grtzz, M.
Miky13 offline


User avatar Junior Member



 
Joined: Mon Nov 22, 2010 5:11 pm
Posts: 16
Has thanked: 3 times
Been thanked: 0 time

Postby Clicksor Support » Fri May 13, 2011 9:39 pm

Hello all,

The administrator of this site had asked that I come to assist directly with this issue. As I understand, there are banners that are causing malware alerts on your respective computers. I apologize for this inconvenience and would like to ask for your assistance in locating these ads and removing them from being served.

For any of the ads that you have noticed causing an alert, please provide the following information:
1. Your IP address at the time of viewing it
2. The URL of the page on this forum that you saw it from
3. The date/time zone of the occurrence
4. Any virus log information that you can provide from your antivirus software

Please know that we do not take such problems lightly and would like to resolve them just as much as you would.

Thank you for your cooperation,
Jerome Cheng
Clicksor IT Support
Clicksor Support offline


Junior Member



 
Joined: Fri May 13, 2011 9:35 pm
Posts: 10
Has thanked: 0 time
Been thanked: 0 time

Postby Clicksor Support » Mon May 16, 2011 1:48 pm

Hello all,

Additionally, for discretion, if you would like to send me a private message with the requested information, that would work to help us clean up this forum as well as keep you protected from publicly releasing your information.

Thank you,
Jerome Cheng
Clicksor IT Support

Clicksor Support wrote:Hello all,

The administrator of this site had asked that I come to assist directly with this issue. As I understand, there are banners that are causing malware alerts on your respective computers. I apologize for this inconvenience and would like to ask for your assistance in locating these ads and removing them from being served.

For any of the ads that you have noticed causing an alert, please provide the following information:
1. Your IP address at the time of viewing it
2. The URL of the page on this forum that you saw it from
3. The date/time zone of the occurrence
4. Any virus log information that you can provide from your antivirus software

Please know that we do not take such problems lightly and would like to resolve them just as much as you would.

Thank you for your cooperation,
Jerome Cheng
Clicksor IT Support
Clicksor Support offline


Junior Member



 
Joined: Fri May 13, 2011 9:35 pm
Posts: 10
Has thanked: 0 time
Been thanked: 0 time

Postby nabi » Mon May 16, 2011 4:58 pm

Jerome
Just a question: did you read the complete thread?
and this thread :http://www.navitotal.com/forums/showthread.php?4814-This-forum-has-ads-that-attempt-to-install-malware. ?
________________________________________________________________________
When I do good, no one remembers, when I do wrong, no one forgets
.
I am in a permanent state of inactivity
I won't answer to any PM, so don't send me any
nabi offline


Ex Super Mod



 
Joined: Mon Dec 28, 2009 5:22 pm
Posts: 2429
Location: somewhere unknown
Has thanked: 39 times
Been thanked: 233 times

Postby NorbertBL » Tue May 17, 2011 7:51 am

From today, 17.Mai 2011 09:36 GMT +1

Image

I was looking this page:
http://www.navitotal.com/forums-de/showthread.php?3120-Q-amp-A-zu-Primo-V-1.2&p=14535#post14535

My IP 195.145.22.46

And here the virus log:

2802

NB
Image
NorbertBL offline


User avatar Junior Member



 
Joined: Sat Nov 14, 2009 4:00 am
Posts: 61
Location: mal hier mal da
Has thanked: 0 time
Been thanked: 184 times

Postby Clicksor Support » Tue May 17, 2011 3:21 pm

Hi all,

I have tried to locate the sources base on the information you provided but have been unable to find matching entries. I have another idea that will help debug the information.

If you could record a session while viewing this site using the application Fiddler2 ([Please Register or Login to download file] ), you could send the attached session and I should be able to see the sources in them. You can also take a screenshot using the application while it is recording for further information.

NB, I checked and could not find anything matching your IP address. Could you confirm that?

Otherwise, I will keep searching.

Thank you,
Clicksor Support
Clicksor Support offline


Junior Member



 
Joined: Fri May 13, 2011 9:35 pm
Posts: 10
Has thanked: 0 time
Been thanked: 0 time

Postby NorbertBL » Tue May 17, 2011 5:00 pm

Ok, some information: [Please Register or Login to download file] = IP 178.162.190.120 = ISP Leaseweb Germany GmbH (previously netdirekt e. K.)
Whois Record for shippingint.com:
Registrant:
Domains by Proxy, Inc.

Domain Name: SHIPPINGINT.COM

Domain servers in listed order:
NS41.DOMAINCONTROL.COM
NS42.DOMAINCONTROL.COM
I know this does not help so much, but it is your job to find out more.

About my IP:
inetnum: 195.145.0.0 - 195.145.255.255
org: ORG-DTA2-RIPE
netname: DE-TELEKOM-970516
descr: Deutsche Telekom AG
country: DE
admin-c: DTAG-RIPE
tech-c: DTAG-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-lower: DTAG-NIC
mnt-routes: DTAG-RR
source: RIPE # Filtered

NB
Image
NorbertBL offline


User avatar Junior Member



 
Joined: Sat Nov 14, 2009 4:00 am
Posts: 61
Location: mal hier mal da
Has thanked: 0 time
Been thanked: 184 times

Postby NorbertBL » Wed May 18, 2011 7:26 am

This morning (18.Mai.2011 09:04) I using the application Fiddler2 the first time.
I hope the result will help you

NB
Image
NorbertBL offline


User avatar Junior Member



 
Joined: Sat Nov 14, 2009 4:00 am
Posts: 61
Location: mal hier mal da
Has thanked: 0 time
Been thanked: 184 times

Postby Clicksor Support » Wed May 18, 2011 2:05 pm

Hi NB,

That was perfect. The information was located in there and I can pass it to our traffic team to take care of the ad. If any other occurrences happen, please have them do the same with Fiddler2 and send the results.

Thank you,
Clicksor Support
Clicksor Support offline


Junior Member



 
Joined: Fri May 13, 2011 9:35 pm
Posts: 10
Has thanked: 0 time
Been thanked: 0 time

Postby jake224 » Thu May 19, 2011 4:26 am

Just had a malicious java script from an add try to install the JS/Kyptik.AI trojan. From web site http:/oiasdl.net
Blocked by eset.
jake224 offline


Junior Member



 
Joined: Wed Dec 22, 2010 6:07 am
Posts: 14
Has thanked: 0 time
Been thanked: 0 time

Postby nabi » Thu May 19, 2011 6:45 am

It would be nice when you had followed the instructions (see previous page where it has been repeated for the nth time) to help us and Clicksor to eliminate all trojans.
Can you as yet?
________________________________________________________________________
When I do good, no one remembers, when I do wrong, no one forgets
.
I am in a permanent state of inactivity
I won't answer to any PM, so don't send me any
nabi offline


Ex Super Mod



 
Joined: Mon Dec 28, 2009 5:22 pm
Posts: 2429
Location: somewhere unknown
Has thanked: 39 times
Been thanked: 233 times

Postby NorbertBL » Thu May 19, 2011 6:50 am

Good morning, here's the next result:

Thursday, 19 - mai 2011 08:27

Image

NB
Image
NorbertBL offline


User avatar Junior Member



 
Joined: Sat Nov 14, 2009 4:00 am
Posts: 61
Location: mal hier mal da
Has thanked: 0 time
Been thanked: 184 times

Postby Clicksor Support » Thu May 19, 2011 1:31 pm

Hi NB,

Thank you. Forwarded.

Clicksor Support
Clicksor Support offline


Junior Member



 
Joined: Fri May 13, 2011 9:35 pm
Posts: 10
Has thanked: 0 time
Been thanked: 0 time

Postby waterboa » Thu May 19, 2011 9:45 pm

I have not problem with kaspesky internet security.
thanks
waterboa offline


Junior Member



 
Joined: Thu May 19, 2011 9:38 pm
Posts: 2
Has thanked: 0 time
Been thanked: 0 time

PreviousNext

Return to Chit-Chat

 


  • Related topics
    Replies
    Views
    Last post

Who is online

Users browsing this forum: No registered users and 19 guests