Yes. It's happened all the time tonight
Question anyone else getting a virus warning while visiting the site today?
- Thread starter BlackMarketMagi
- Start date
SSgt Burton
Sr Member
Re: RPF flagged as UNSAFE WEBSITE?
Well for anyone who catches this-
The virus won't run in safe mode- so it is possible to remove the virus using Malwarebytes or Spybot in safe mode.
Man was that ever ANNOYING!
Stupid hackers! :angry :thumbsdown
Kevin
Well for anyone who catches this-
The virus won't run in safe mode- so it is possible to remove the virus using Malwarebytes or Spybot in safe mode.
Man was that ever ANNOYING!
Stupid hackers! :angry :thumbsdown
Kevin
Prince NEO
Sr Member
That's already been suggest a few times, the problem is it leaves your computer open to other pages.
rkpetersen
Well-Known Member
Re: RPF flagged as UNSAFE WEBSITE?
Odd. I've been on quite a bit today and the only warnings I've gotten were the constant Firefox redpages, which are easily disabled in Options. Norton and other programs tell me that everything is perfectly clean. Perhaps because I use the Flashblock and Ad Block Plus extensions, and never load the disease-ridden graphics in the first place?
Odd. I've been on quite a bit today and the only warnings I've gotten were the constant Firefox redpages, which are easily disabled in Options. Norton and other programs tell me that everything is perfectly clean. Perhaps because I use the Flashblock and Ad Block Plus extensions, and never load the disease-ridden graphics in the first place?
mrsmartypants
Well-Known Member
Re: RPF flagged as UNSAFE WEBSITE?
They still have some work to do, it would appear. Earlier today, malicious software was being hosted on two sites via therpf. Now, it's up to 3 sites...so, so far, it's getting worse, not better.
I'm surprised vbulletin software is susceptible to iframe exploits. Those are VERY old and fixes have been around for them for a couple of years now...
They still have some work to do, it would appear. Earlier today, malicious software was being hosted on two sites via therpf. Now, it's up to 3 sites...so, so far, it's getting worse, not better.
I'm surprised vbulletin software is susceptible to iframe exploits. Those are VERY old and fixes have been around for them for a couple of years now...
mrsmartypants
Well-Known Member
Problem Solved:
Actually, that doesn't really 'solve' the problem. ;-)
You're just turning off the warnings. therpf is still an intermediary for 2 different websites that can and will try to install malware on your computer.
The problem is actually getting worse. Earlier today, Google listed the rpf as hosting two malicious software exploits via 2 websites. This evening, it has climbed to three...
What happened when Google visited this site?
Of the 113 pages we tested on the site over the past 90 days, 45 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2010-10-23, and the last time suspicious content was found on this site was on 2010-10-23.
Malicious software includes 2 exploit(s). Successful infection resulted in an average of 3 new process(es) on the target machine.
Malicious software is hosted on 3 domain(s), including personallybuild.co.cc/, requestbusforward.co.cc/, 213.5.64.0/.
2 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site, including clickme172.ipq.co/, personallybuild.co.cc/.
This site was hosted on 1 network(s) including AS26496 (PAH).
Surely vbulletin software has fixes and/or patches to remedy this iframe problem?
mrsmartypants
Well-Known Member
Art, if it's an iframe exploit, does vbulletin software have a patch or a fix to close the hole? It might be coming in through a sql injection attack. Google is listing 3 different sites now that are being fed via therpf. Earlier today, it was only 2.
You might want to check your attachments directory and the customprofilepics directory to see if there are any funny/odd files there. This only started happening today, so chances are, any files there with today's date may be the culprits. There's a good chance the files in question will be php files instead of images.
Something else to look at is the forum/clientscript/vbulletin_global.js file. There may be iframe code inserted there....
AT-AT Luvah
Sr Member
Re: RPF flagged as UNSAFE WEBSITE?
I'm having a hard time getting into this site as well.
I'm having a hard time getting into this site as well.
pennausamike
Sr Member
Re: RPF flagged as UNSAFE WEBSITE?
I'm still getting the warning.
Earlier today I got the warning, removed the block and was told by my anti-virus it was blocking a trojan.
When I unblocked and got on now,
I got the warning about the site,
but no indication that the trojan was trying to download.
Does the always-open registration increase the risk of the site being infected?
Or are the two in no way connected?
Mike
I'm still getting the warning.
Earlier today I got the warning, removed the block and was told by my anti-virus it was blocking a trojan.
When I unblocked and got on now,
I got the warning about the site,
but no indication that the trojan was trying to download.
Does the always-open registration increase the risk of the site being infected?
Or are the two in no way connected?
Mike
missileman
Active Member
Here's what I'm getting today in Google Chrome. It might help with your diagnostics.
Got two viruses today, both when I visited here. Both times it did the java update for me as well. I'm here now with my iPod. Sucks it's coming from this site, but glad to know where it's coming from...
propologist
Sr Member
this is the end of days...
pennausamike
Sr Member
The site was OK for me for a while last night, but is hosting viruses again this morning.
I won't visit the RPF again until the attack warning page no longer comes up.
Good Luck with the fix, Folks.
Mike
Similar threads
