trojan/malware warning (merged threads)

Discussion in 'Website discussion' started by 92se-r, Jun 20, 2010.

  1. zee zee

    zee zee Member

    Joined:
    Jul 4, 2008
    Messages:
    380
    Likes Received:
    4
    Trophy Points:
    18
    Occupation:
    Automotive detailer
    Location:
    san gabriel
    can --Droid/My Touch-- cell phone get hit
    ps im gonna do the same im offthis site till its fixed
     
  2. fatguy1

    fatguy1 Active Member

    Joined:
    Jan 5, 2010
    Messages:
    1,077
    Likes Received:
    0
    Trophy Points:
    36
    Occupation:
    owner of auto detail co.
    Location:
    anaheim ca.
    I just use my phone too.....I don't know crap about computers so I shot mine with a 12 gauge .....problem solved. Any advise on buying a new one just for basic internet stuff....
     
  3. dstepper

    dstepper (R.I.P.) Over the hill

    Joined:
    Feb 2, 2005
    Messages:
    12,683
    Likes Received:
    34
    Trophy Points:
    48
    Occupation:
    www.themostprogram.com owner
    Location:
    Laguna Beach
    Home Page:
    I now have to use Internet Explorer 8 to use STR. My Safari Browser shows malware alert on the home page just like it did the Ride Report forum earlier. Google Crome browser keeps STR from loading warning that continuing may harm your computer. The worm seems to be spreading thru the STR site.

    Dean
     

    Attached Files:

  4. Kid A

    Kid A now with 40% more bacon

    Joined:
    Jul 8, 2006
    Messages:
    6,532
    Likes Received:
    6
    Trophy Points:
    38
    Occupation:
    working 4 da man
    Location:
    O 2 da C

    so what is being done? Getting warming on Mac/safari now in this thread. Suggests site has malware. Too much risk and not sure any evidence of being addressed? My work computer was jacked for two days before they could fix it. Can we get some update on what specifically is being done. Clearly something has to be addressed
     
  5. gray

    gray Tree Hugger

    Joined:
    Apr 27, 2008
    Messages:
    2,069
    Likes Received:
    1
    Trophy Points:
    38
    Occupation:
    Graphic Designer
    Location:
    Upper Newport Bay
    I just downloaded the new Firefox and it wont even let me view STR without hitting "This isn't an attack site" about 3 times. I have gone into the security setting and "allowed" STR twice, it still looks like this:
     

    Attached Files:

  6. Drop D

    Drop D New Member

    Joined:
    Dec 3, 2007
    Messages:
    2,176
    Likes Received:
    0
    Trophy Points:
    0
    Occupation:
    Un-Employed
    Location:
    LBC
    I'm on Firefox/Mac... all is fine, but my Firefox/PC won't even go into the main page.. My Android Mytouch Lags when I log in STR... :?:
     
  7. 2wheel_lee

    2wheel_lee Active Member

    Joined:
    Dec 7, 2006
    Messages:
    7,341
    Likes Received:
    1
    Trophy Points:
    36
    Location:
    North Orange County
    Internet Explorer 8 with Service Pack 3, and I have no idea what you guys are talking about....yet. ;)
     
  8. dubl_xl

    dubl_xl I'd rather go down

    Joined:
    Jun 29, 2007
    Messages:
    748
    Likes Received:
    0
    Trophy Points:
    16
    Occupation:
    Electrician
    Location:
    Lancaster
    All I had to do in Firefox was uncheck the block reported attack sites box and it will load STR with no problem. I trust my AVG Internet Security more than the Firefox browser security "feature".
     

    Attached Files:

  9. fatguy1

    fatguy1 Active Member

    Joined:
    Jan 5, 2010
    Messages:
    1,077
    Likes Received:
    0
    Trophy Points:
    36
    Occupation:
    owner of auto detail co.
    Location:
    anaheim ca.
    Sucks this site is dead.......I guess I will go to work now
     
  10. JoeTruth

    JoeTruth Active Member

    Joined:
    May 29, 2007
    Messages:
    4,084
    Likes Received:
    1
    Trophy Points:
    36
    Location:
    Sierra Madre, CA
    I'm almost certain the site does not contain any viruses/worms. I'm thinking maybe the host server or IP was reported for suspicious activity (maybe one of the other sites they're hosting was was compromised & got black listed). It's a false-positive sort of scenario & all a web admin should need to do is request for removal (post test). I could be slightly off but I bet not by much.
    Jorge, WTF?!
     
  11. NipomoGuy

    NipomoGuy Tink's first sponsor

    Joined:
    Nov 5, 2009
    Messages:
    1,264
    Likes Received:
    1
    Trophy Points:
    0
    Occupation:
    flying my mental jet
    Location:
    Nipomo, CA
    i googled str and this popped up
    [​IMG]

    [​IMG]
     
  12. JoeTruth

    JoeTruth Active Member

    Joined:
    May 29, 2007
    Messages:
    4,084
    Likes Received:
    1
    Trophy Points:
    36
    Location:
    Sierra Madre, CA
    Double post. Plz delete.
     
  13. gray

    gray Tree Hugger

    Joined:
    Apr 27, 2008
    Messages:
    2,069
    Likes Received:
    1
    Trophy Points:
    38
    Occupation:
    Graphic Designer
    Location:
    Upper Newport Bay
    Yeah, I guess you're right. Good call.
     
  14. RustyIron

    RustyIron Rob S.

    Joined:
    Feb 8, 2007
    Messages:
    1,936
    Likes Received:
    0
    Trophy Points:
    36
    Location:
    La Habra
    Home Page:
    Folks, it's quite common for ordinary sites to become blacklisted for one reason or another, and it's up to the site owner or host to get the problem resolved. NipomoGuy's clue was spot on. Thanks, dude.

    If you're a Safari user, go to Preferences, Security, and uncheck "fraudulent sites." I can make the problem come and go at will.

    Rob
     
  15. calzone

    calzone Banned

    Joined:
    Sep 7, 2009
    Messages:
    810
    Likes Received:
    0
    Trophy Points:
    0
    Occupation:
    Web Whiz Looking for Work
    Location:
    Orange County: NPB
  16. RustyIron

    RustyIron Rob S.

    Joined:
    Feb 8, 2007
    Messages:
    1,936
    Likes Received:
    0
    Trophy Points:
    36
    Location:
    La Habra
    Home Page:
    Here's another thought:
    Software is often upgraded as a response to vulnerabilities. STR is running
    vBulletin 3.7.1. The latest version is 4.0.4. It's entirely possible that Google is flagging all sites running vulnerable software.
     
  17. NipomoGuy

    NipomoGuy Tink's first sponsor

    Joined:
    Nov 5, 2009
    Messages:
    1,264
    Likes Received:
    1
    Trophy Points:
    0
    Occupation:
    flying my mental jet
    Location:
    Nipomo, CA
    lol! as i read that, the bourne movies ran through my head :)
     
  18. RustyIron

    RustyIron Rob S.

    Joined:
    Feb 8, 2007
    Messages:
    1,936
    Likes Received:
    0
    Trophy Points:
    36
    Location:
    La Habra
    Home Page:

    Sorry, dude. I missed that. Good eye.

    I'll still bet it's a weakness of vBulletin 3.x. I had a similar problem in a php script a few years back. Robots roam the web looking for vulnerable sites, then change the code so that users just viewing the site automatically download a malicious file. In this case it appears to be xro.php (whatever that is).

    There is no longer any risk because the bad site has been shut down, but the hacked code is apparently still on STR. It might be difficult to get rid of without losing data.
     
  19. fatguy1

    fatguy1 Active Member

    Joined:
    Jan 5, 2010
    Messages:
    1,077
    Likes Received:
    0
    Trophy Points:
    36
    Occupation:
    owner of auto detail co.
    Location:
    anaheim ca.
    Man I hope u tech guys figure this out......if u find out who did it give me a address I will personaly go beat some ass.....that's if it is actually done by a person. I'm bored no peeps on the site no good......thanks
     
  20. calzone

    calzone Banned

    Joined:
    Sep 7, 2009
    Messages:
    810
    Likes Received:
    0
    Trophy Points:
    0
    Occupation:
    Web Whiz Looking for Work
    Location:
    Orange County: NPB

Share This Page

Help keep STR alive, please click the donation button below