Author Topic: Malware Detected (Read 6940 times)

Ginamos · « **on:** April 24, 2011, 09:30:27 PM »

I'm using Google Chrome and this page just came up when I refreshed alink on RAWK.

Warning: Something's Not Right Here!

www.redandwhitekop.com contains content from [snip], a site known to distribute malware. Your computer might catch a virus if you visit this site.
Google has found that malicious software may be installed onto your computer if you proceed. If you've visited this site in the past or you trust this site, it's possible that it has just recently been compromised by a hacker. You should not proceed. Why not try again tomorrow or go somewhere else?
We have already notified [snip] that we found malware on the site. For more about the problems found on [snip], visit the Google Safe Browsing diagnostic page.

Edit: Just seems to be on this page

http://www.redandwhitekop.com/forum/index.php?topic=73755.40

hoonin · « **Reply #1 on:** April 24, 2011, 11:49:44 PM »

Cheers.

Quarantined for further investigation.

hoonin · « **Reply #2 on:** April 24, 2011, 11:56:51 PM »

Offending post removed, world stability restored.

LiverpoolForever · « **Reply #3 on:** June 10, 2012, 06:29:56 PM »

Just thought i would make people aware of a ''threat blocked'' message when i opened up the main forum.

Seems to be ok the 2nd time.

Shazz · « **Reply #4 on:** June 10, 2012, 07:01:43 PM »

Had the same thing earlier today, ok now though.

lachesis · « **Reply #5 on:** June 10, 2012, 07:35:02 PM »

Just got this now:

Threat was blocked!
Exploit Javascript Obfuscation (type 156) running Opera and AVG

When running a search. More info took me here:

http://www.avgthreatlabs.com/webthreats/

Pheeny · « **Reply #6 on:** June 10, 2012, 07:46:06 PM »

we are looking into it.Or rather some other techie type mods are...

Pheeny · « **Reply #7 on:** June 10, 2012, 07:46:18 PM »

http://www.avgthreatlabs.com/sitereports/domain/redandwhitekop.com

Claire. · « **Reply #8 on:** June 10, 2012, 08:05:34 PM »

Most of these appear because of a thread where someone has posted an image from a domain deemed unsafe.

And Could He Play · « **Reply #9 on:** June 10, 2012, 10:06:50 PM »

yeah just for a heads up i was getting this

Warning: require_once(/home/rawk/public_html/forum/Settings.php) [function.require-once]: failed to open stream: Permission denied in /home/rawk/public_html/forum/index.php on line 42

Fatal error: require_once() [function.require]: Failed opening required '/home/rawk/public_html/forum/Settings.php' (include_path='.:/usr/lib/php:/usr/local/lib/php') in /home/rawk/public_html/forum/index.php on line 42

redgriffin73 · « **Reply #10 on:** June 10, 2012, 10:07:38 PM »

Just got this too when I tried to open a few threads. Seems OK now.

joel · « **Reply #11 on:** June 10, 2012, 10:08:29 PM »

Had the same as Paul just now. Working OK soon after though

Ben S · « **Reply #12 on:** June 10, 2012, 10:31:06 PM »

We have identified some naughty code thats been injected via the gallery, looking at it, it doesn't appear to be mallicious other than it being pharmacy spam. It's been removed and so has the galley to prevent it happening again.

And Could He Play · « **Reply #13 on:** June 10, 2012, 10:32:03 PM »

good stuff Ben....

did just get bad gateway just now, quick refresh its sorted.

Jagged Princess · « **Reply #14 on:** June 10, 2012, 10:32:11 PM »

Quote from: And Could He Play on June 10, 2012, 10:06:50 PM

Me too

Now I've just had 502 bad gateway as well

Ben S · « **Reply #15 on:** June 10, 2012, 10:34:56 PM »

Ignore any of them, just some updates going on.

Austin Powers · « **Reply #16 on:** June 11, 2012, 01:10:19 AM »

Mine just said a trojan had been blocked on here when I tried to search.
Is that part of the updates too?

Ycuzz · « **Reply #17 on:** June 11, 2012, 07:33:04 AM »

Using Opera, had the message pop mere minutes ago.

Closed the tab, opened a new open - no problem.

Let us know if you need us to post any information.

Le Jake · « **Reply #18 on:** June 11, 2012, 10:50:24 AM »

Quote from: Austin Powers on June 11, 2012, 01:10:19 AM

Mine just said a trojan had been blocked on here when I tried to search.
Is that part of the updates too?

Yeah i got that

Party Phil · « **Reply #19 on:** June 11, 2012, 10:52:24 AM »

Quote from: Ycuzz on June 11, 2012, 07:33:04 AM

Let us know if you need us to post any information.

a/s/l?

El_Pistolero · « **Reply #20 on:** June 11, 2012, 11:09:44 AM »

I get a 'Malware Blocked' warning on the main index page (whatever it's called) but nowhere else on the forum.

Better not be stealing my valubles, RAWK!

leivapool · « **Reply #21 on:** June 11, 2012, 04:14:10 PM »

I've started getting this everytime I try to load the index page. I'm using AVAST antivirus (on Xp with Firefox) and it detects malware every time. Any ideas please?

Ben S · « **Reply #22 on:** June 11, 2012, 04:52:24 PM »

I suspect it needs to update its database.

leivapool · « **Reply #23 on:** June 11, 2012, 04:54:16 PM »

Quote from: Ben S on June 11, 2012, 04:52:24 PM

I suspect it needs to update its database.

As anyone who uses avast knows, it updates it's database multiple times a day which is announced by a kindly american lady

And it's definitely up to date currently...............

Ben S · « **Reply #24 on:** June 11, 2012, 04:57:05 PM »

Your local database might be upto date but the Avast database isn't.

And Could He Play · « **Reply #25 on:** June 11, 2012, 07:43:10 PM »

I was still getting Threat detected earlier today, just thought i'd share that, seems to have stopped now.

BCCC · « **Reply #26 on:** June 11, 2012, 07:45:19 PM »

Non of the site will load for me. AVG just comes up with a message that says: 'Danger: The AVG Security Toolbar has detected active threats on this page and has blocked access for your protection.'
Everything is up to date so any suggestions if there's a problem at my end?

Ben S · « **Reply #27 on:** June 11, 2012, 08:13:10 PM »

AVG just isnt upto date, your install may be but their database needs to be refreshed.

Enemy · « **Reply #28 on:** June 11, 2012, 10:22:32 PM »

Gives me a malware warning on Opera on the main page too guys.

Austin Powers · « **Reply #29 on:** June 11, 2012, 11:12:16 PM »

The whole site isn't loading on my computer anymore. It says the page I requested is no longer here.

Pheeny · « **Reply #30 on:** June 11, 2012, 11:14:09 PM »

Quote from: Ben S on June 11, 2012, 04:57:05 PM

Your local database might be upto date but the Avast database isn't.

Ben S · « **Reply #31 on:** June 12, 2012, 01:47:49 AM »

How did you just manage to post then if the whole site isn't loading?

usernamefc · « **Reply #32 on:** June 12, 2012, 01:50:07 AM »

Quote from: Ben S on June 12, 2012, 01:47:49 AM

How did you just manage to post then if the whole site isn't loading?

Probably his phone or something.

Ben S · « **Reply #33 on:** June 12, 2012, 01:51:19 AM »

I'm glad I don't work in tech support or anything because I'm not a mind reader

.

zERo · « **Reply #34 on:** June 12, 2012, 04:30:15 AM »

Just got thread blocked message when I used the search function

Tuckwoor · « **Reply #35 on:** June 12, 2012, 05:06:57 AM »

Quote from: zERo on June 12, 2012, 04:30:15 AM

Just got thread blocked message when I used the search function

Same.

Pistolero · « **Reply #36 on:** June 12, 2012, 09:04:43 AM »

site blocked on home and work PC's......showing as 'blacklisted' in Opera

.adam · « **Reply #37 on:** June 12, 2012, 12:33:25 PM »

Whole site blacklisted by work firewall - denoted as 'Malware'.

Can access using http://64.191.65.200/forum with the only problem being that the top header image doesn't display.

leivapool · « **Reply #38 on:** June 12, 2012, 03:22:44 PM »

Quote from: Ben S on June 11, 2012, 04:57:05 PM

Your local database might be upto date but the Avast database isn't.

Solution anyone please, I'm missing RAWK!? I've even struggled to get on this page. Any other RAWK page gives me a threat detected warning quickly followed by "The connection to the server was reset while the page was loading."

Thanks

Hinesy · « **Reply #39 on:** June 12, 2012, 03:31:56 PM »

Well I'm on IE8 or 9 and full antivirus package and have no trouble getting on it. Surely you can bypass your av program to get on here?

Author Topic: Malware Detected (Read 6940 times)

hoonin

hoonin