malware on site

How do I.... ?

Moderator: Team Cub

User avatar
Into Tractors
10+ Years
10+ Years
501 Club
501 Club
Posts: 1603
Joined: Sat Jun 03, 2006 8:09 am
Zip Code: 45387
Location: Yellow Springs, Ohio

Re: malware on site

Postby Into Tractors » Thu Dec 15, 2011 6:16 pm

I got it last night as well, my virus software caught it quarantined it right away as I have real tight contraints on my system, no harm to my system. Only item I had up and running was the Forum Site so I'm pretty certain it was from it.
Mike Duncan

User avatar
Don McCombs
Team Cub Mentor
Team Cub Mentor
501 Club
501 Club
Posts: 12102
Joined: Mon Feb 03, 2003 6:45 am
Zip Code: 21550
Tractors Owned: "1950 Something" Farmall Cub
1957 Farmall Cub w/FH
1977 International Cub w/FH
1978 International Cub
1948 Farmall Super A
1951 Farmall Super C w/FH
Circle of Safety: Y
Location: MD, Deep Creek Lake

Re: malware on site

Postby Don McCombs » Thu Dec 15, 2011 6:43 pm

Verizon DSL, Windows XP, IE8
Don McCombs
MD, Deep Creek Lake

Image
Proud Member of Maryland Chapter 39

Former Member
5+ Years
5+ Years

Re: malware on site

Postby Former Member » Thu Dec 15, 2011 7:07 pm

I have not been hit---yet --and my time is nearly exclusive to the site. I have:
Frontier
Dsl
Mozilla Firefox

User avatar
Dennis
Site Admin
501 Club
501 Club
Posts: 3261
Joined: Sat Feb 01, 2003 9:53 pm
Zip Code: 64075
Tractors Owned: 1947 Farmall Cub
104 Cub Cadet
Cub Cadet Original
Circle of Safety: Y
Twitter ID: @farmallcubcom
Location: MO, Oak Grove

Re: malware on site

Postby Dennis » Thu Dec 15, 2011 8:33 pm

Thanks Roy, it looks like a rogue ad slipped through on Google's ad network... from what I've read online, this is a nasty little piece of malware.

Question: Did any of you get a pop-up message while visiting this site that said you had a computer virus and needed to scan your computer? (One that was not your installed anti-virus software.)
Image Proud Member
Are you a member? Copy this code below and paste it in your signature to display it proudly!

Code: Select all

[url=http://nationalihcollectors.com/index.html][img]http://farmallcub.com/images/ihcc.jpg[/img][/url]

Circle of Safety Passed the "Circle of Safety" test? Add your signature badge using

Code: Select all

[cos][/cos]

User avatar
Don McCombs
Team Cub Mentor
Team Cub Mentor
501 Club
501 Club
Posts: 12102
Joined: Mon Feb 03, 2003 6:45 am
Zip Code: 21550
Tractors Owned: "1950 Something" Farmall Cub
1957 Farmall Cub w/FH
1977 International Cub w/FH
1978 International Cub
1948 Farmall Super A
1951 Farmall Super C w/FH
Circle of Safety: Y
Location: MD, Deep Creek Lake

Re: malware on site

Postby Don McCombs » Thu Dec 15, 2011 8:43 pm

I was hit about 4 days ago. When it hit, it closed the Farmall Cub window and opened the XP Internet Security 2012 window. From then on, every time I tried to open an IE window, all I could get was the malware. After about 24 hours of trying everything I could think of, I googled XP Internet Security 2012 on my iPad. I finally found a link that told me to register using a bogus key number. I did that and it went away. I then ran Sptbot SD, and that got rid of the malware (I think). :D

Spybot SD, sorry.

I will be using my iPad, exclusively, to access this site until this is resolved.
Don McCombs
MD, Deep Creek Lake

Image
Proud Member of Maryland Chapter 39

User avatar
indy61
5+ Years
5+ Years
501 Club
501 Club
Posts: 669
Joined: Fri Jan 25, 2008 9:02 am
Zip Code: 00000
Circle of Safety: Y

Re: malware on site

Postby indy61 » Thu Dec 15, 2011 8:56 pm

Dennis wrote:Thanks Roy, it looks like a rogue ad slipped through on Google's ad network... from what I've read online, this is a nasty little piece of malware.

Question: Did any of you get a pop-up message while visiting this site that said you had a computer virus and needed to scan your computer? (One that was not your installed anti-virus software.)


Sounds like you need to get rid of Google ad's, there are probably many others that have been hit and can't even post .

I have never seen a pop-up of any kind on this site.

User avatar
clodhopper
5+ Years
5+ Years
501 Club
501 Club
Posts: 785
Joined: Sat May 07, 2011 8:20 pm
Zip Code: 27526
Tractors Owned: 1950 Cub Demo
1978 Cub Cadet 1650
cub 193 plow
cub 174 planter
cub sidedresser
cub 144 cultivator
cadet 50a deck
60A grader blade
Circle of Safety: Y

Re: malware on site

Postby clodhopper » Thu Dec 15, 2011 8:59 pm

I am using my business computer almost exclusively now. For the last three nights, when I open this site, my computer gets hit. Our companies' anti virus and malware software catches it as soon as the site opens. On my personal computers, I run malwarebytes. Its free and works great. I cant count the number of computers I have fixed with that software. Like everyone else has said, beware of the popups!!

59cub
5+ Years
5+ Years
Cub Star!!
Cub Star!!
Posts: 259
Joined: Sun Nov 04, 2007 9:07 pm
Zip Code: 44234
Tractors Owned: (2) 1959 Cubs (1) 1951 Cub 1947 Circle Cub. 1957 Cub.
Circle of Safety: Y
Location: Ohio, Hiram

Re: malware on site

Postby 59cub » Thu Dec 15, 2011 9:10 pm

Norton just blocked an attempt on my computer. I jumped from main forum of Farmall Cub, to for sale. I see the history in Norton. Looks like it blocked an attack from zarerd,,,, dot com.?? Dennis, I have the IP address stored in Norton History if you like.

User avatar
Dennis
Site Admin
501 Club
501 Club
Posts: 3261
Joined: Sat Feb 01, 2003 9:53 pm
Zip Code: 64075
Tractors Owned: 1947 Farmall Cub
104 Cub Cadet
Cub Cadet Original
Circle of Safety: Y
Twitter ID: @farmallcubcom
Location: MO, Oak Grove

Re: malware on site

Postby Dennis » Thu Dec 15, 2011 9:25 pm

59cub wrote:Norton just blocked an attempt on my computer. I jumped from main forum of Farmall Cub, to for sale. I see the history in Norton. Looks like it blocked an attack from zarerd,,,, dot com.?? Dennis, I have the IP address stored in Norton History if you like.


Please PM me any info you have collected.

Thanks,
Dennis
Image Proud Member
Are you a member? Copy this code below and paste it in your signature to display it proudly!

Code: Select all

[url=http://nationalihcollectors.com/index.html][img]http://farmallcub.com/images/ihcc.jpg[/img][/url]

Circle of Safety Passed the "Circle of Safety" test? Add your signature badge using

Code: Select all

[cos][/cos]

User avatar
Rudi
Cub Pro
Cub Pro
501 Club
501 Club
Posts: 28707
Joined: Sun Feb 02, 2003 8:37 pm
Zip Code: E1A7J3
eBay ID: ve9rhs
Skype Name: R.H. "Rudi" Saueracker, SSM
Tractors Owned: 1947 Cub "Granny"
1948 Cub "Ellie-Mae"
1968 Cub Lo-Boy
Dad's Putt-Putt
IH 129 CC
McCormick 100 Manure Spreader
McCormick 100-H Manure Spreader
Post Hole Digger
M-H #1 Potato Digger
Circle of Safety: Y
Twitter ID: Rudi Saueracker, SSM
Location: NB Dieppe, Canada

Re: malware on site

Postby Rudi » Thu Dec 15, 2011 10:02 pm

Wow :shock: :!:

I usually visit the forum in Opera v 11.60 on Windows Vista Business Edition with all patches. So far I have not seen this pop up or any popups on the forums. With luck Opera might be immune? I seldom use IE8, Safari, Chrome or FireFox on the forum mostly cause I like some of Opera's

I also use Malwarebytes, Spybot SD, SuperAntiSpyware in concert with System Mechanic Professional with System Shield and of course the basic Windows Defender. I haven't had a virus on my laptop as long as I have had it basically.
Confusion breeds Discussion which breeds Knowledge which breeds Confidence which breeds Friendship


User avatar
RaymondDurban
Team Cub Mentor
Team Cub Mentor
501 Club
501 Club
Posts: 4386
Joined: Wed Dec 26, 2007 7:45 pm
Zip Code: 32536
Circle of Safety: Y
Location: FL, Crestview

Re: malware on site

Postby RaymondDurban » Thu Dec 15, 2011 10:04 pm

Don McCombs wrote:I will be using my iPad, exclusively, to access this site until this is resolved.

Me too!!

Preacherman108
Posts: 5
Joined: Sun Dec 11, 2011 10:13 pm
Zip Code: 24523

Re: malware on site

Postby Preacherman108 » Thu Dec 15, 2011 11:28 pm

I was hit 2 nights ago while on the forum. Same thing, Win 7 Home Security. Took several hours to get my computer back up and running properly.

User avatar
grumpy
10+ Years
10+ Years
501 Club
501 Club
Posts: 2781
Joined: Tue Jan 10, 2006 12:03 am
Zip Code: 15522
eBay ID: grumpysales
Circle of Safety: Y
Location: PA. Bedford (Centerville)

Re: malware on site

Postby grumpy » Thu Dec 15, 2011 11:32 pm

I'm not on my computer right now because I got it too. Said " XP antivirus 2012 alert. Internet explorer alert. Visiting this site may pose a security threat to your system". Well, it did. Not sure how to fix. I didn't click on anything to fix and now I can't open any programs at all. Later guys, this may take a while. :-( Grump
David Dee Mock-Leonard

Nothing is foolproof to a sufficiently talented fool.

Some days it's not worth chewing through the restraints

Former Member
5+ Years
5+ Years

Re: malware on site

Postby Former Member » Thu Dec 15, 2011 11:53 pm

Is there going to be a warning posted or mass e-mail to warn other members and users of the problem until it is resolved. Could be a bunch of problems if it persists.

Would hate for it to affect anyone without the means to fix t.

coppersmythe
5+ Years
5+ Years
501 Club
501 Club
Posts: 936
Joined: Thu Dec 24, 2009 9:19 am
Zip Code: 70785
Tractors Owned: '48 trimmed dash high crop cub, '78 3/4 cub , lo-boy , cub-6 toolbar, mowers, 54 blade, disc.
Circle of Safety: Y
Location: walker, louisiana

Re: malware on site

Postby coppersmythe » Fri Dec 16, 2011 8:05 am

im at work now , im sure LSU has pretty good defenses :wink: i can look and get whatever might help from my computer, i just dont know what/where to look for it. i'll have to bring it to someone to fix. coppersmythe..........................


Return to “Message Board & Computer Questions”

Who is online

Users browsing this forum: No registered users and 0 guests