|
Site Attack?
|
|
AfterDawn Addict
4 product reviews
|
21. April 2009 @ 15:34 |
Link to this message
|
so, just a couple of minutes ago i was just sitting here reading some threads. I did not click on anything, i was just reading, and this came up.... anyone know what the heck this is?
i was doing that fighting thing that everyone else was doing in that thread titled Fight Me! or whatever. and i remember someone saying that norton was reporting something fishy? maybe that thread and the links need to be closed?
This message has been edited since posting. Last time this message was edited on 21. April 2009 @ 15:37
|
|
Advertisement
|
|
|
|
Senior Member
|
21. April 2009 @ 18:58 |
Link to this message
|
I was the one that was reporting my Norton's was reporting attacks on each page. I thought it was strange that I was the only one seemingly affected. I haven't been to the site since my last visit when I beat his character.
|
AfterDawn Addict
4 product reviews
|
21. April 2009 @ 19:02 |
Link to this message
|
|
it did not ask me to download or install anything, but yea something is up with that site.
|
Senior Member
|
21. April 2009 @ 19:10 |
Link to this message
|
|
As soon as the page was loaded, Norton's popped up saying it blocked downloader.swif, and I hadn't even began to d/l anything, just accessed the page. While I was choosing the fighter, it came up again, and as soon as the fight started it popped up once more.
|
AfterDawn Addict
4 product reviews
|
21. April 2009 @ 19:20 |
Link to this message
|
|
mods, whats your take on this?
|
Moderator
|
22. April 2009 @ 00:20 |
Link to this message
|
|
No idea as i don't frequent the Safety Valve, and i avoid Norton like the plague (as it caused me, my brother and father too many problems in the past).
Teleported to relevant forum.
Main PC ~ Intel C2Q Q6600 (G0 Stepping)/Gigabyte GA-EP45-DS3/2GB Crucial Ballistix PC2-8500/Zalman CNPS9700/Antec 900/Corsair HX 620W
Network ~ DD-WRT ~ 2node WDS-WPA2/AES ~ Buffalo WHR-G54S. 3node WPA2/AES ~ WRT54GS v6 (inc. WEP BSSID), WRT54G v2, WRT54G2 v1. *** Forum Rules *** |
|
varnull
Suspended permanently
|
22. April 2009 @ 01:08 |
Link to this message
|
|
Downloader.Swif is a Macromedia Flash-based Trojan horse that downloads and executes a file. The downloaded file is typically a copy of Download.Trojan or Infostealer.Bancos.
Not exactly surprised. This is quite an old attack which I first noticed being used with video links on myspace in around 2004/5 .. I'm not sure about in this case.. to play obviously needs 2 way communication and it may be a false positive.
Anybody feel brave and actually download this thing and have a look-see what it does?
This message has been edited since posting. Last time this message was edited on 22. April 2009 @ 14:13
|
AfterDawn Addict
1 product review
|
22. April 2009 @ 14:29 |
Link to this message
|
|
I get the same message on other sites(and I don't have Norton), for example on TPB. Not sure why, it doesn't always happen. I would be surfing for a few minutes on the site, and then suddenly I get that warning( on pages that worked just fine before). I ignore the message and continue, but is frustrating, as I have no idea why it is happening. I scanned the system and all that and didn't find anything.
 Piss me off, and I Will ignore You! |
AfterDawn Addict
|
22. April 2009 @ 15:06 |
Link to this message
|
|
homey--
just got that same window as you did from AD. was looking at 360 thread that will prob get closed in a few for multiposting and a new window popped up saying site attack blah blah. schools computers are also running norton i believe.
Come talk with us on efnet at #elitemods !!! or just click ME
ALSO, DO NOT SEND ME MESSAGES ON LIVE REGARDING MODDING CONSOLES, OR HOW I PLAYED A CERTAIN GAME EARLY. I WILL NOT RESPOND. I WILL INSTEAD DELETE YOUR MESSAGE, AND BLOCK ALL COMMUNICATION FROM YOU. JUST SEND ME A PM ON HERE. |
|
varnull
Suspended permanently
|
22. April 2009 @ 19:27 |
Link to this message
|
here is the thread in question http://forums.afterdawn.com/thread_view.cfm/764956
now I guess once you have a certain cookie or whatever bit of malware installed by accessing the site then it will trigger at random times whenever you encounter any live flash content.. that could be ads and popups.
funny thing is.. the first time I tried to have a look at that game (because I'm paranoid about flash games online.. they are in the same category as free download games and screensavers.. malware traps for kids XD) I was redirected to that crustat page myself.. but I have java and flash content blocked by default anyway.. since the first redirect it seems to ignore the redirect and loads.. I have no interest in playing some stupid game.. but it looks like a cookie has been set in my browser also.. konqueror goes mad about more cookies than I can shake a stick at.. I gave up after blocking about 60.
|
AfterDawn Addict
4 product reviews
|
22. April 2009 @ 20:35 |
Link to this message
|
|
i am running norton as well (360). i think i will be staying away from that site. I am not worried about a virus eating my hard drive. just worried about key loggers and things like that.
|
AfterDawn Addict
|
22. April 2009 @ 21:42 |
Link to this message
|
Varnull-
I got the warning from a different thread than the fight me one. The one I got it from was a help me replace my xbox drive. And I haven't been to the fight me site on the computer I was using.
Come talk with us on efnet at #elitemods !!! or just click ME
ALSO, DO NOT SEND ME MESSAGES ON LIVE REGARDING MODDING CONSOLES, OR HOW I PLAYED A CERTAIN GAME EARLY. I WILL NOT RESPOND. I WILL INSTEAD DELETE YOUR MESSAGE, AND BLOCK ALL COMMUNICATION FROM YOU. JUST SEND ME A PM ON HERE. |
|
varnull
Suspended permanently
|
23. April 2009 @ 01:24 |
Link to this message
|
that's very interesting. are you having any problems with the bottom of pages not loading properly too? Last night I was having strange css errors which I guess could be related. the blue bit at the bottom wasn't loading first time.
|
AfterDawn Addict
4 product reviews
|
23. April 2009 @ 09:36 |
Link to this message
|
|
could it be related to an ad trying to load on here?
|
|
varnull
Suspended permanently
|
23. April 2009 @ 13:33 |
Link to this message
|
|
It certainly could.. especially a flash based ad.
|
AfterDawn Addict
|
23. April 2009 @ 13:40 |
Link to this message
|
Originally posted by varnull:
that's very interesting. are you having any problems with the bottom of pages not loading properly too? Last night I was having strange css errors which I guess could be related. the blue bit at the bottom wasn't loading first time.
havent had that problem, but have had the page not fully load the background, it will just say the blue color that the border is, and then the thread text will be a shade darker blue, but usually if i refresh the page it will fix itself. does it prob once or twice a week on different computers i use.
Come talk with us on efnet at #elitemods !!! or just click ME
ALSO, DO NOT SEND ME MESSAGES ON LIVE REGARDING MODDING CONSOLES, OR HOW I PLAYED A CERTAIN GAME EARLY. I WILL NOT RESPOND. I WILL INSTEAD DELETE YOUR MESSAGE, AND BLOCK ALL COMMUNICATION FROM YOU. JUST SEND ME A PM ON HERE. |
|
varnull
Suspended permanently
|
23. April 2009 @ 14:40 |
Link to this message
|
|
I start to think that maybe there is a little tinkering behind the scenes testing aspects of the new site setup in preparation for the big changeover in a couple of months..
That's a guess.. anyway.. everything seems to be back to normal today after a day of cdn2 being slow as a donkey ;)
|
|
boslo
Suspended permanently
|
24. April 2009 @ 09:38 |
Link to this message
|
|
I guess your right, its a matter of testing, but very annoying.
-------
Bob at: SPAM Central
This message has been edited since posting. Last time this message was edited on 24. April 2009 @ 09:39
|
AfterDawn Addict
4 product reviews
|
24. April 2009 @ 20:33 |
Link to this message
|
|
lol i was going to say what? but hes suspended so.. nevermind. lol.
|
AfterDawn Addict
1 product review
|
25. April 2009 @ 05:46 |
Link to this message
|
If you saw such a message, you are already infected with something. My ESET has captured a few trojans from this site in the past month...here is a list:
JS/TrojanDownloader.Iframe.NDY trojan
Win32/TrojanProxy.Small.NCX trojan
JS/TrojanDownloader.Zlob.B trojan
JS/TrojanDownloader.Agent.NHJ trojan
Do yourself a favor and get a good resident scanner like I have.
|
|
varnull
Suspended permanently
|
25. April 2009 @ 09:49 |
Link to this message
|
|
I don't need one.. I have a secure OS which I am in control of.. not M$ and the malware writers.
I haven't had a redirect since the first one.. and I have cleared all the cookies out and checked my browser sigs.
Think the consensus is the flash based ads. A damn good reason to use noscript and adblock IMHO. The owners may moan.. but if their site is spreading malware and causing damage through the multitude of pop up and flash ads they want to get it fixed before people start listing it on the google bad sites lists.
This message has been edited since posting. Last time this message was edited on 25. April 2009 @ 09:52
|
AfterDawn Addict
4 product reviews
|
25. April 2009 @ 23:34 |
Link to this message
|
|
hopefully some well known eyes are reading this.
|
AfterDawn Addict
1 product review
|
27. April 2009 @ 04:00 |
Link to this message
|
I was refering to the users that are trusting windows defender, Norton, Avast, Trend, and other such scanners to secure windows. Yes, linux is more secure than windows...and not just because linux won't run most windows software...but some of us need windows to run software that does not exist in linux, even with windows emulation. Others just don't feel like learning a new operating system that does nothing more than what their existing operating system does. These people then blame others (such as afterdawn) when they get infected with viruses and spyware despite the fact that they do not take proper preventative measures.
|
|
varnull
Suspended permanently
|
27. April 2009 @ 11:21 |
Link to this message
|
well.. if that's the case then why was I redirected that first time?.. to a very similar google blocked site (harmful) page.
what's wrong with using a safe OS for browsing the net.. and whatever the hell you want which can be as insecure as you like for other things?.. not that I have any need at all for proprietary software thanks.. the nokia phone software for linux is far better than the official windoze only stuff from nokia with all it's drm and protection of their ringtones and junk in it... my scanner and printer aren't even supported for XP.. hahahahaha
where is the "better" in the pro M$ statements? I still can't see it.
just because mcdonalds is everywhere doesn't make it better.. doesn't even make it good.. just makes it everywhere :lol:
|
|
Advertisement
|
|
|
Member
|
28. April 2009 @ 02:41 |
Link to this message
|
Chances are the webmaster uses norton (which sucks by the way,i highly suggest Kaspersky Internet Security,let me know i have a few copies lying around), and the site got bugged or it was yet another screwup from Norton..if not that i would update security proticols....as i am not 100% sure what the deal is i would suggest having an admin or the webmaster PM me and i can get to work on drawing up a price list for security scans that should fix it...if not then i have no idea...here is my email: *email removed*
yall take care
This message has been edited since posting. Last time this message was edited on 28. April 2009 @ 07:09
|
