TheCatSite.com › Forums › General Forums › TCS Support/Announcements › Forums How-To and FAQs › Virus attempt on cat site anyone else?
New Posts  All Forums:Forum Nav:

Virus attempt on cat site anyone else?

post #1 of 28
3/14/09 at 6:30am
Thread Starter 
This morning when I clicked on the thread Saturday mornings my Nortons popped up that it had blocked a virus attempt..
A browser exploit at www.thecatsite.com was blocked.browser path C:/program Files/Internet Explorere/:explore.exe
High Risk
name/ Msie ADODB.stream object File Installation weakness.

No other threads have done this..Maybe a mod should delete this thread?
Reply
post #2 of 28
3/14/09 at 6:53am
I just got something that my computer blocked, but it came up as a popup that said something about an update is needed to continue, click ok when I clicked into the Lounge, not even a specific thread. Uggg (I have windows vista so IE blocked it and didnt tell me what it was or where it was trying to download to)
Reply
post #3 of 28
3/14/09 at 7:01am
My webscanner (updated early this morning) picked up nothing.
If anything, your alert probably came from an advertising banner and not the cat site itself.
Since the banners are chosen randomly from a set list, deleting the thread itself will solve nothing.
Reply
post #4 of 28
3/14/09 at 7:15am
My Norton internet security blocked something, not sure what though.
Reply
post #5 of 28
3/14/09 at 7:45am
Here is more information on the vulnerability. http://www.symantec.com/business/sec...jsp?asid=50031

I'm not sure if there is a virus or something acting in a manner that causes the alert. We're checking into it more.

And I found this explaining the vulnerability better. http://support.microsoft.com/kb/870669
Reply
post #6 of 28
3/14/09 at 12:38pm
I was in the Fur Pictures forum and my antivirus popped up twice saying I was at risk of getting a trojan horse from typyxiolix.com/stats-xp/
Reply
post #7 of 28
3/14/09 at 10:28pm
You know, something completely locked up Firefox today when I tried composing a post. (and that's really rare) I saw something strange in the status bar, killed the processes and rebooted. It all happened so fast. What I think I saw was a sequence of maybe seven numbers, a dot, and some letters, which might have been followed by another dot, or maybe it was preceeded by a dot. It was NOT an IP address, it was NOT a filename, it was NOT an URL, at least nothing I've seen before. Does this sound like what happened to any of you guys? My anti-virus and anti-spyware did not alert.

I'm also using Spyware Blaster, so it's also possible something may have tried but been foiled by it.
Reply
post #8 of 28
3/14/09 at 10:53pm
Quote:
Originally Posted by Arlyn View Post
My webscanner (updated early this morning) picked up nothing.
If anything, your alert probably came from an advertising banner and not the cat site itself.
Since the banners are chosen randomly from a set list, deleting the thread itself will solve nothing.
Our ads are served from several large and respectable ad networks. I have seen issues in the past, so it could be an ad, in which case it needs to be reported to the network. Chances are it's already been reported and dealt with. (The way it works is that advertisers there upload their ads on their own, so it's possible to sneak something in against the network's policies, but these ads do eventually get caught and filtered out).

Let me assure you again that we do not have any kind of installers and not even pop-ups on TCS. Please, if you see anything odd, try and grab a screenshot, or at least note what ads were showing up at the time - thank you!
Reply
post #9 of 28
3/14/09 at 11:55pm
I didn't get a shot of when it actually popped up, but here's what my antivirus says now...



It happened three times Saturday and once Sunday (early am, just a few minutes ago). I'm using Mozilla Firefox and I use Windows XP. If it happens again I'll post a pic of what it looks like on my computer. Very weird!
Reply
post #10 of 28
3/15/09 at 7:19am
I also am having this happen! So far my computer has blocked it everytime, but it's happene dlike 4 times
Reply
post #11 of 28
3/15/09 at 7:24am
Quote:
Originally Posted by Anne View Post
Please, if you see anything odd, try and grab a screenshot, or at least note what ads were showing up at the time - thank you!
While I can see where this would be very helpful, a user's first reaction upon seeing anything odd is to get rid of it and right now. A screenshot has to be has to be "shot" then loaded into a paint program then saved as a file. All precious seconds going by when you don't know if something bad is happening. The detective work has to wait until you're sure your computer is clean.
Reply
post #12 of 28
3/15/09 at 8:18pm
I'm having the same problem. I just clicked onto the forum and a message popped up that I had a virus and automatically redirected me to another website that looked like it was trying to load something. I closed out of it too quickly to notice exactly what it said.
Reply
post #13 of 28
3/15/09 at 9:39pm
Too much pops up, and very quickly, to screen cap it all.

It takes IE to a fake page called "My PC online" and there's a fake warning saying:

"Warning!! Your computer contains various signs of viruses and malware programs presence.

Your system requires immediate anti viruses check! Antivirus 360 will preform a quick and free scanning of your PC for viruses and malicious programs."

The fake page looks like My Computer, and it has red numbers in parenthesis under drives and folders saying things like "155 trojans".


Those that get this, whatever you do, do not click ok or cancel! Cancel the process (IE) completely.

...now I need to go make sure DH computer is fine - obviously I'm seeing none of this on my pc.
Reply
post #14 of 28
3/16/09 at 6:43am
I have had no problems, but I'm using firefox. I'm wondering if this is an IE issue?
Reply
post #15 of 28
3/16/09 at 6:46am
Quote:
Originally Posted by AlleyGirl View Post
I have had no problems, but I'm using firefox. I'm wondering if this is an IE issue?
I'm using Firefox on Mac and it's happening to me almost every time I try to access the forum now.
Reply
post #16 of 28
3/16/09 at 7:10am
Gee, I thought FireFox and Macs were immune to these things?

It hasn't happened to me at all, and I'm using FireFox.
Reply
post #17 of 28
3/16/09 at 9:45am
Quote:
Originally Posted by mrblanche View Post
Gee, I thought FireFox and Macs were immune to these things?

It hasn't happened to me at all, and I'm using FireFox.
Macs are immune to the viruses, but not to people's attempts to pass them along.
Reply
post #18 of 28
3/16/09 at 9:55am
I haven't had any problems at home or work either one.

ETA: As a subscriber, I have the ads turned off so I'm wondering if its related to those? Anyone have ads off, and still getting issues?
Reply
post #19 of 28
3/16/09 at 10:10am
^Probably. That didn't pop up on DH computer until ads started loading.

I'm using firefox on linux with adblocker plus and seeing absolutely none of this when I go to the site.

Just something for people to think about - the only time I ever got a trojan (virus, etc) when using windows was the result of one being hidden in a site's ad. At the very least everyone should be using an adblocker if one is available to them.
Reply
post #20 of 28
3/16/09 at 10:29am
Shouldn't your AV catch that, though?

Mine caught one once hidden in a .gif file on a website. I looked at the file in a text editor and there was javascript executable inserted at the tale end of the file after some blank space (gif files allow metadata) using the javascript function that evaluates binary data as executable code. The webmaster was flabbergasted when I emailed him.
Reply
post #21 of 28
3/16/09 at 11:09am
Quote:
Originally Posted by coaster View Post
Shouldn't your AV catch that, though?
Actually, his didn't, but that may be because his computer wasn't infected last night. Whatever it was didn't do anything bad or wasn't able to. I'll do a more thorough inspection later to make sure nothing slipped by, but I doubt I'll find anything.

In the past when my windows pc was infected by that trojan Avast did alert me that something was happening, but it didn't stop it and wasn't able to get rid of it. I had to manually remove it - simple enough as it wasn't able to do much due to how I had everything set up in the os.
Reply
post #22 of 28
3/16/09 at 5:53pm
Quote:
Originally Posted by whiteforest View Post
I'm using Firefox on Mac and it's happening to me almost every time I try to access the forum now.
i'm using Camino on a mac, no issues - but i also have ads turned off. sounds like it's from one of those.
Reply
post #23 of 28
3/16/09 at 6:11pm
Quote:
Originally Posted by strange_wings View Post
Too much pops up, and very quickly, to screen cap it all.

It takes IE to a fake page called "My PC online" and there's a fake warning saying:

"Warning!! Your computer contains various signs of viruses and malware programs presence.

Your system requires immediate anti viruses check! Antivirus 360 will preform a quick and free scanning of your PC for viruses and malicious programs."

The fake page looks like My Computer, and it has red numbers in parenthesis under drives and folders saying things like "155 trojans".


Those that get this, whatever you do, do not click ok or cancel! Cancel the process (IE) completely.

...now I need to go make sure DH computer is fine - obviously I'm seeing none of this on my pc.

I experienced this yesterday as well.
Reply
post #24 of 28
3/16/09 at 6:29pm
I have firefox and i had a lock up yesterday while on TCS.. Looked like some pdf was trying to download.. I shut down and rebooted.
Reply
post #25 of 28
3/16/09 at 7:04pm
Quote:
Originally Posted by ms cat love View Post
I have firefox and i had a lock up yesterday while on TCS.. Looked like some pdf was trying to download.. I shut down and rebooted.
Yes!! That's exactly what happened to me!! I remember now -- thank you!! It was like a filename except all numbers ending in PDF, right?

Whatever ad is the culprit is still out there.
Reply
post #26 of 28
3/16/09 at 9:05pm
I had the trojan horse warning too...and I agree that it seems to be ad related. I noticed that it only happened when the thread I clicked on was advertising voomba wallpaper site? or something similar to that name.
Reply
post #27 of 28
3/17/09 at 7:34am
Well, that's a good clue. We should be looking for that so we have something to report.
Reply
post #28 of 28
3/17/09 at 7:40pm
Quote:
Originally Posted by coaster View Post
Yes!! That's exactly what happened to me!! I remember now -- thank you!! It was like a filename except all numbers ending in PDF, right?

Whatever ad is the culprit is still out there.
Yes.. It only happened to me once when i tried to click on a new post.. Only i cant remember what post!!
Reply
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Forums How-To and FAQs
TheCatSite.com › Forums › General Forums › TCS Support/Announcements › Forums How-To and FAQs › Virus attempt on cat site anyone else?