: Evoxforums chat coming up as malware site.


DVDee
07-21-2009, 01:59 PM
Anyone else having this problem?

xPRimNT
07-21-2009, 02:23 PM
Actually, that did pop up while I was at work.

DVDee
07-21-2009, 02:26 PM
I last saw this message with the Hybrid R page when it got hit with a virus. May need to get the chat page checked. But that's a third party site so who knows when they'll have that fixed.

Rogue
07-21-2009, 02:49 PM
Yea but if Hybrid R has a banner with malware or something of that nature it should be removed from the banners on this site until resolved.

I should test on another computer here, since the computer I am on is not checked by our content filters

Kooldino
07-21-2009, 02:54 PM
Anyone else having this problem?

Actually, that did pop up while I was at work.

What "popped up" exactly? I need more info if we're to diagnose this.

Kooldino
07-21-2009, 02:55 PM
I last saw this message with the Hybrid R page

What Hybrid R page?

when it got hit with a virus. May need to get the chat page checked. But that's a third party site so who knows when they'll have that fixed.


The chat page is on our server.

xPRimNT
07-21-2009, 03:21 PM
What "popped up" exactly? I need more info if we're to diagnose this.

I'll check a little later.

aevo86
07-21-2009, 04:19 PM
i noticed this aswell

xPRimNT
07-21-2009, 05:02 PM
Couldn't replicate the error this morning.

Hmm.

pmoney559
07-21-2009, 05:20 PM
So i went to click on "Chat" (top right of this website) and BAM my computer is infected with this fake virus/security alert. I assume thats the malware in action...how can I get rid of it?!

DVDee
07-21-2009, 05:21 PM
I still get the warning message. PM sent Dino.

pmoney559
07-21-2009, 05:23 PM
I need help because these fake virus protection pop-ups are going crazy.

Rogue
07-21-2009, 05:23 PM
Weird when i try to go to chat it doesnt do it.. let me try another computer on another network.

Kooldino
07-21-2009, 06:03 PM
So i went to click on "Chat" (top right of this website) and BAM my computer is infected with this fake virus/security alert. I assume thats the malware in action...how can I get rid of it?!

Virus alert according to WHAT?

Rogue
07-21-2009, 06:06 PM
I still haven't got anything?

Kooldino
07-21-2009, 06:08 PM
I still haven't got anything?

Ditto. Since no one is telling me what program is alleging this "virus", then I can't really diagnose much. I'm sure there's a common theme (ie, it could be that everyone seeing this error is running Windows with Norton AntiMalware or something), but with no info, I can't diagnose it.

I have a feeling it's a false warning though.

xtremeboost
07-21-2009, 06:18 PM
What "popped up" exactly? I need more info if we're to diagnose this.


Midget porn !!!!!!!!!!



...

DVDee
07-21-2009, 06:26 PM
http://img.photobucket.com/albums/v456/dvdee/chatwarning.jpg

pmoney559
07-21-2009, 09:44 PM
Wow, after downloading 3 different malware removal tools and 3 hours of computer scanning, I finally managed to clean up my computer...:( I found out my computer had been infected with a rootkit involving this particular file:

C:\windows\system32\uacinit.dill

Hopefully, the problem is gone for good. FIY: ComboFix was the winner out of the three malware tools.

Kooldino
07-21-2009, 10:02 PM
http://img.photobucket.com/albums/v456/dvdee/chatwarning.jpg


WTF.

Looks like you're running google chrome?

Indy
07-21-2009, 10:38 PM
Could it be that you had something on your computer already and something triggered the popup? A while back a friend of mine had that very same problem on his computer and it would pop up the fake virus warning on a few sites. I'll try accessing it on my computer to see if I get the problem. If you have a root kit on your windows system I have a good program for removing it. AVG had a free program a while back to remove them but has since made it part of a pay product if memory serves me correct. But I still have the installer :-)

Indy
07-21-2009, 10:50 PM
I can get it to come up using internet exploder. So until I can figure out why I have the chat server turned off.

pmoney559
07-21-2009, 11:06 PM
Could it be that you had something on your computer already and something triggered the popup? A while back a friend of mine had that very same problem on his computer and it would pop up the fake virus warning on a few sites. I'll try accessing it on my computer to see if I get the problem. If you have a root kit on your windows system I have a good program for removing it. AVG had a free program a while back to remove them but has since made it part of a pay product if memory serves me correct. But I still have the installer :-)

I dont know if there was something already on my computer (never had this problem before), but as soon as I clicked "Chat", a fake warning popped up saying that a virus had been detected. I pretty sure it was malware mimmicking the anit-virus because it didnt look right. Then I noticed a fake windows security shield and a red dot with white X in my task bar. Then every 30 sec pop-ups and ballons in the task bar appear, wanting me install anti-virus protection (obviously fake because of the poor English). Its gone now thanks to :googlesign:.

Indy
07-21-2009, 11:53 PM
You may or may not have been infected with something prior to this but I can tell you with confidence the popup you are getting is caused by something here and I am working on fixing it.

DrasticK
07-21-2009, 11:58 PM
Midget porn !!!!!!!!!!



...


Times Frank talks about midget porn: 57
Times Dino talks about midget porn: 0

I'm on to you Frank...

Rogue
07-22-2009, 12:11 AM
If you have a root kit on your windows system I have a good program for removing it.


Which one?

pmoney559
07-22-2009, 12:24 AM
Times Frank talks about midget porn: 57
Times Dino talks about midget porn: 0

I'm on to you Frank...

LOL

DVDee
07-22-2009, 02:00 AM
WTF.

Looks like you're running google chrome?

I am. On my netbook I use Chrome because it's really light weight compared to other browsers. I'm starting to use it at home too loving the features on it.

Indy
07-22-2009, 02:04 AM
BTW chat should be back up here before too long. Just finishing up a couple of things.

xPRimNT
07-23-2009, 04:00 PM
Ok, just got it again. Here's some details this time:

http://securityresponse.symantec.com/security_response/writeup.jsp?docid=2002-101518-4323-99

"Downloader" was discovered as an infected file in Temp Internet Files. Symantec Auto-Protect flagged and deleted it.

Indy
07-24-2009, 08:36 PM
Try dumping your browser cache. I had the problem where after this was cleaned up I went to chat and did a view source and sad the problem code. Thought at first it was back. I dumped my cache and reloaded the page and it was gone.