Members whose system was infected by the recent virus outbreak ONLY

Closed Thread Subscribe

Thread Tools

Search this Thread

08-31-2010, 09:24 AM

#101

Black Z Eddie

New Member

Join Date: Jun 2007

Location: San Pedro

Posts: 947

Likes: 3

Received 9 Likes on 3 Posts

I'm still getting the IFramer trojan.

08-31-2010, 09:26 AM

#102

Robb M.

IB Staff

Join Date: Feb 2010

Location: Barrie, ON

Posts: 450

Likes: 23

Received 18 Likes on 15 Posts

On which page? Can you please copy the source of the page and post it here. Thank you very much.

cheers,
robb

08-31-2010, 10:41 AM

#103

Black Z Eddie

New Member

Join Date: Jun 2007

Location: San Pedro

Posts: 947

Likes: 3

Received 9 Likes on 3 Posts

Sorry, I shoulda known better:

https://my350z.com/forum/index.php

Attached Thumbnails

Members whose system was infected by the recent virus outbreak ONLY-my350z-iframer-trojan-print-screen.jpg

08-31-2010, 11:29 AM

#104

Robb M.

IB Staff

Join Date: Feb 2010

Location: Barrie, ON

Posts: 450

Likes: 23

Received 18 Likes on 15 Posts

Thanks Eddie.

09-15-2010, 03:35 PM

#105

PerfZ

New Member

iTrader: (3)

Join Date: Sep 2003

Location: hilliard ohio

Posts: 2,402

Likes: 18

Received 14 Likes on 13 Posts

I get the warning at home every time I change pages here - at work I just had Kaspersky 2011 installed and I get totally blocked there unless I suspend protection. Is anyone going to fix this problem or just keep reading posts about it? Obviously nothing has been done.

09-15-2010, 03:40 PM

#106

Robb M.

IB Staff

Join Date: Feb 2010

Location: Barrie, ON

Posts: 450

Likes: 23

Received 18 Likes on 15 Posts

hi PerZ, we had been doing well, but it seems yesterday, or today, something happened. We're removing it right now.

thank you for pointing it out.

let us know if you see more warnings tomorrow.

cheers,
robb

09-16-2010, 05:08 AM

#107

PerfZ

New Member

iTrader: (3)

Join Date: Sep 2003

Location: hilliard ohio

Posts: 2,402

Likes: 18

Received 14 Likes on 13 Posts

Still getting blocked unless I suspend kaspersky.

09-16-2010, 05:12 AM

#108

Robb M.

IB Staff

Join Date: Feb 2010

Location: Barrie, ON

Posts: 450

Likes: 23

Received 18 Likes on 15 Posts

09-18-2010, 06:50 AM

#109

Trugrider

New Member

iTrader: (13)

Join Date: Jul 2008

Location: Houston

Posts: 101

Likes: 0

Received 0 Likes on 0 Posts

I got Kaspersky also and I'm getting the same messages as PerfZ so I only log on from my iPhone. Hopefully this will get resolved soon.

10-12-2010, 03:29 PM

#110

Checkmate58

Registered User

iTrader: (11)

Join Date: Nov 2005

Location: Bay Area

Posts: 350

Likes: 0

Received 1 Like on 1 Post

Whether the admins think it's a false positive or not, it still occurs. This time it blocked IP address:
195.5.161.10
95.211.133.177

Then it tried to run Adobe Acrobat and a java screen popped up on my browser too.

Last edited by Checkmate58; 10-12-2010 at 03:30 PM.

10-12-2010, 05:06 PM

#111

DavesZ#3

350Z-holic

iTrader: (26)

Join Date: Jul 2003

Location: Louisiana

Posts: 15,887

Likes: 0

Received 22 Likes on 17 Posts

For what it's worth, I was one of the members being regularly hit by this problem. I haven't had any problems in the last couple of weeks though. Neither of those IPs looks familiar either.

10-12-2010, 09:41 PM

#112

tware

Registered User

iTrader: (12)

Join Date: Jun 2003

Location: Little Rock

Posts: 2,332

Likes: 0

Received 0 Likes on 0 Posts

I've been back a few days and haven't seen it... the .ru scripts are gone. Hopefully this report is a fluke or related to something else. would be very disappointing to have a 3rd month long round of this.

12-01-2010, 01:34 PM

#113

350zroadster

Registered User

iTrader: (1)

Join Date: Apr 2003

Location: Cambridge, MA

Posts: 5,249

Likes: 0

Received 0 Likes on 0 Posts

Problem is still there, just blocked another attack when I went to this page

https://my350z.com/forum/the-lounge-...s-only-59.html

12-01-2010, 01:42 PM

#114

Robb M.

IB Staff

Join Date: Feb 2010

Location: Barrie, ON

Posts: 450

Likes: 23

Received 18 Likes on 15 Posts

Hi, that page hasn't been posted on since 2008, I am going to guess one of the embedded images triggered a false positive. I don't see anything fishy on that page.

cheers,
robb