Virus attached to ssr fanatic!!!!

ssr71 · 07-04-2010, 09:33 AM

I am getting alerts for qxitr.com as a malicious URL. It is only coming while visiting this site so I imagine one of the rotating ad displays has been hijacked.

Object: qxitr.com/ww/kzf_h_d.php

Until I jacked up my AV settings to maximum, I got hit twice last night with the fake "Windows Anti Virus Live" trojan, both whilte reading posts on this site.

Purple Penelope · 07-04-2010, 09:47 AM

Same thing happened to me. It is telling me all my exe files are corrupt.

What a pain.....I'm on here using the guest screen.

OP · 07-04-2010, 10:16 AM

Ad-muncher helps...google it, I love it.
It has been discussed on here many times.

ssr71 · 07-04-2010, 10:44 AM

AVAST is stopping it for me now -- but I had to turn up web shield to its highest level.

frose · 07-04-2010, 12:24 PM

me to

DOOPHUS · 07-04-2010, 01:42 PM

Clueless about the Virus but if this site gets any slower it'll be going BACKWARDS.

and it's ONLY this site . . . I've tried a bunch of others and they all see to be fine.

OP · 07-04-2010, 01:46 PM

I am not experiencing what y'all are...but on top of my security software...I run ad muncher...ahem, it munches ads...so sites run MUCH faster...it is NOT an anti-virus software.

MnMsToy · 07-04-2010, 01:50 PM

Quote:

Originally Posted by OP

I am not experiencing what y'all are...but on top of my security software...I run ad muncher...ahem, it munches ads...so sites run MUCH faster...it is NOT an anti-virus software.

I run ad muncher too. And it really does speed up the sites I visit.

MnMsToy · 07-05-2010, 05:57 AM

Quote:

Originally Posted by ssr71

I am getting alerts for qxitr.com as a malicious URL. It is only coming while visiting this site so I imagine one of the rotating ad displays has been hijacked.

Object: qxitr.com/ww/kzf_h_d.php

Until I jacked up my AV settings to maximum, I got hit twice last night with the fake "Windows Anti Virus Live" trojan, both whilte reading posts on this site.

I am getting the same alerts from EI8 about a malicious URL. I hope that administration will chime in on this issue ASAP.

MnMsToy · 07-05-2010, 06:19 AM

This is a copy of the notice from EI8:

Malicious software threat: This site contains links to viruses or other software programs that can reveal personal information stored or typed on your computer to malicious persons.

Rte66SSR · 07-05-2010, 06:58 AM

Quote:

Originally Posted by MnMsToy

This is a copy of the notice from EI8:

Malicious software threat: This site contains links to viruses or other software programs that can reveal personal information stored or typed on your computer to malicious persons.

VEGASSR · 07-05-2010, 07:05 AM

Microsoft is now in the act. There was a message from Microsoft warning me not to go to this site. Claims personal information is being stolen from this forum.

Rte66SSR · 07-05-2010, 07:07 AM

Quote:

Originally Posted by VEGASSR

Microsoft is now in the act. There was a message from Microsoft warning me not to go to this site. Claims personal information is being stolen from this forum.

I'm not getting any of this stuff and I have a MS firewall. Are you sure that Microsoft notice is authentic and not phishing?

Rte66SSR · 07-05-2010, 07:11 AM

Quote:

Originally Posted by OP

I am not experiencing what y'all are...but on top of my security software...I run ad muncher...ahem, it munches ads...so sites run MUCH faster...it is NOT an anti-virus software.

Any particular ad muncher--or should I just Google/Bing it?

ssr71 · 07-05-2010, 08:08 AM

2 more URLS to add to the list:

uytim.com/_e/nrtocf.php

ad.googleanaliticks.com/info/u2.html/s002102317807r0409J11000601R6a3acf9dXa522f23aYe912380fZ03007f30

I just had 2 more alerts.

Virus attached to ssr fanatic!!!!-exploit-warning.jpg

I emailed all 5 of the moderators that I know of... none responded to me yet. I emailed the site admins... no response yet.

lakecat · 07-05-2010, 08:16 AM

Just here to say same thing about the threats. MSN is telling me to stay away so I will. Have a good day all....

This website has been reported as unsafe
www.ssrfanatic.com

We recommend that you do not continue to this website.
Go to my home page instead

This website has been reported to Microsoft for containing threats to your computer that might reveal personal or financial information.

More information

This website has been reported to contain the following threats:

Malicious software threat: This site contains links to viruses or other software programs that can reveal personal information stored or typed on your computer to malicious persons.

ssr71 · 07-05-2010, 10:15 AM

Here's the latest threat on the site.

Virus attached to ssr fanatic!!!!-exploit-warning-2.jpg

The warnings are coming fast and furious now.... I'm closing up until it's fixed.

2BAD2BHAD · 07-05-2010, 12:44 PM

I got this warning from AVAST and then it let me go on.

Maui Mike · 07-05-2010, 12:53 PM

Same

exactly!

Source address 218.93.248.112 qqq.losnigerad.com/j/tmp/des.jar

This crap is comin in every 5 seconds according to my log. And it's all coming from this page www.ssrfanatic.com/ The sign in page.

MnMsToy · 07-05-2010, 01:36 PM

How many nubies are being scared off. I am logging off until this is corrected.

Rte66SSR · 07-05-2010, 02:43 PM

Quote:

Originally Posted by Maui Mike

Same

exactly!

Source address 218.93.248.112 qqq.losnigerad.com/j/tmp/des.jar

This crap is comin in every 5 seconds according to my log. And it's all coming from this page www.ssrfanatic.com/ The sign in page.

Checked my Norton AV log and have a note that it took care of this intrusion attempt. Transparent to me. I never knew it was happening.

craftybeth · 07-05-2010, 02:54 PM

Viper wouldn't even let me on here til whatever it was got cleared up? All better, I guess since I'm here now!

Rte66SSR · 07-05-2010, 03:04 PM

Quote:

Originally Posted by craftybeth

Viper wouldn't even let me on here til whatever it was got cleared up? All better, I guess since I'm here now!

Welcome back.

vetteman62 · 07-05-2010, 03:43 PM

Quote:

Originally Posted by 2BAD2BHAD

I got this warning from AVAST and then it let me go on.

I had a similar window from Microsoft several times and I
finally went into "Tools" then Compatibility View Settings and
allowed SSRfanatic.com.

Cash · 07-05-2010, 04:20 PM

Quote:

Originally Posted by Maui Mike

Same

exactly!

Source address 218.93.248.112 qqq.losnigerad.com/j/tmp/des.jar

I was getting the same one.
"Los Niger Ad".
Just a wild guess but possibly a disgruntled deported illegal immigrant who was working for the AZ Tel Co and was transferred to the Admin office which is located on the tse tse fly infested banks of the Niger...and he has a bone to pick with Doophus. Like I say, just a wild guess.
If this makes absolutely no sense to you, do not adjust your set!

DOOPHUS · 07-05-2010, 05:00 PM

WHAT?

! ! ! ! ! !

MnMsToy · 07-05-2010, 05:30 PM

Quote:

Originally Posted by Cash

I was getting the same one.
"Los Niger Ad".
Just a wild guess but possibly a disgruntled deported illegal immigrant who was working for the AZ Tel Co and was transferred to the Admin office which is located on the tse tse fly infested banks of the Niger...and he has a bone to pick with Doophus. Like I say, just a wild guess.
If this makes absolutely no sense to you, do not adjust your set!

Quote:

Originally Posted by DOOPHUS

WHAT?

! ! ! ! ! !

I call your what and raise you a whatfor

Maui Mike · 07-05-2010, 06:43 PM

Quote:

Originally Posted by Cash

I was getting the same one.
"Los Niger Ad".
Just a wild guess but possibly a disgruntled deported illegal immigrant who was working for the AZ Tel Co and was transferred to the Admin office which is located on the tse tse fly infested banks of the Niger...and he has a bone to pick with Doophus. Like I say, just a wild guess.
If this makes absolutely no sense to you, do not adjust your set!

I've come to realize that your no sense nonsense makes perfect sense once one gets to know you.

MoodyBlue · 07-05-2010, 06:46 PM

Quote:

Originally Posted by Maui Mike

I've come to realize that your no sense nonsense makes perfect sense once one gets to know you.

Thats what I was thinking.

artsmart · 07-05-2010, 07:06 PM

Since some have mentioned using AVAST I am curious if this is the "free" download. Some time back I used AVG's free anti-virus and these warnings would pop up on occasion and when checking the info via google I found this was their way to encourage the purchase of the full software...I dumped them immediately.

I have not had any intrusions on my PC and my anti-virus has not blocked any attacks. I use ESET Nod-32 as well as a hardware firewall.