Kitz Forum

Computer Software => Security => Topic started by: Widmerpool on July 22, 2010, 04:57:30 PM

Title: DSLZone showing a virus on the homepage
Post by: Widmerpool on July 22, 2010, 04:57:30 PM
reports are appearing on DSLzone of a virus on the home page being picked up by avast 5.
dunno if they're right
Title: Re: DSLZone showing a virus on the homepage
Post by: UncleUB on July 22, 2010, 05:51:44 PM
Not again..........Thought all this had been sorted.Glad I kept away after last time

http://forum.kitz.co.uk/index.php/topic,7030.0.html
Title: Re: DSLZone showing a virus on the homepage
Post by: AdrianH on July 22, 2010, 05:58:44 PM
Indeed there is a malicious redirect to an .ru domain from the forum index so best stay away for now.
Title: Re: DSLZone showing a virus on the homepage
Post by: CurlyWhirly on July 22, 2010, 06:53:31 PM
I'm glad I stopped visiting there as I also caught malware when I visited there in March  :o

It was thanks to kitz who posted over there that I was made aware of the site security risks caused by lack of security updates and general Admin upkeep.

I wonder if guests would also be affected as there used to be quite a few quests online there compared to members ?
Title: Re: DSLZone showing a virus on the homepage
Post by: CurlyWhirly on July 23, 2010, 06:03:49 AM
For the first time in 6 months I visited DSL Zone as a guest and am unsure whether the site is really infected or whether it's a false positive  :-\

Apparently Avast picks it up whilst most other antivirus products don't ?
Title: Re: DSLZone showing a virus on the homepage
Post by: cakei3 on July 23, 2010, 08:22:15 AM
For the first time in 6 months I visited DSL Zone as a guest and am unsure whether the site is really infected or whether it's a false positive  :-\

Apparently Avast picks it up whilst most other antivirus products don't ?
yeah i got caught first time round but give it another chance, wish i hadn't cos avast is going nuts over there.
so thats it for me no more dslzone any more
Title: Re: DSLZone showing a virus on the homepage
Post by: tuftedduck on July 23, 2010, 08:31:40 AM
It's strange that there has been no mention of this on the Avast forum..........which is where you may expect to find any query as to this being a FP or real.

Does anyone have a screenshot of the Avast warning message ?
Title: Re: DSLZone showing a virus on the homepage
Post by: cakei3 on July 23, 2010, 08:56:25 AM
It's strange that there has been no mention of this on the Avast forum..........which is where you may expect to find any query as to this being a FP or real.

Does anyone have a screenshot of the Avast warning message ?
any good to you

[attachment deleted by admin]
Title: Re: DSLZone showing a virus on the homepage
Post by: tuftedduck on July 23, 2010, 09:09:51 AM
Thank you cakei3.....that will do nicely.. :)

Have posted at Avast and will see what transpires.
Title: Re: DSLZone showing a virus on the homepage
Post by: Widmerpool on July 23, 2010, 10:44:40 AM
Just checked Avast forum and they say that the latest virus defs don't detect it.
All I can say is theirs must be later than mine, as Avast says I'm fully updated and it still flags the threat.

Edit: You posted the wrong url I'm afraid tuftedduck. That one comes up clean.
This is the bad one http://wxw.dslzoneuk.net/forum/index.php
Title: Re: DSLZone showing a virus on the homepage
Post by: tuftedduck on July 23, 2010, 10:52:47 AM
Yes, Sirmer states that the latest defs. don't pick this up, but a later post in the same thread contradicts that (as does your experience)..........so waiting to see further worf from Avast team.
Title: Re: DSLZone showing a virus on the homepage
Post by: AdrianH on July 23, 2010, 10:57:24 AM
Probably they are not picking it up because it has been removed?

I checked it earlier today and the warning still came up.......... checking now with the same definitions I had loaded yestereday there is no warning flagged.
Title: Re: DSLZone showing a virus on the homepage
Post by: silversurfer44 on July 23, 2010, 11:03:21 AM
Just a thought but are you gents flushing the buffer or refreshing the page to make sure you are getting the latest page?
Title: Re: DSLZone showing a virus on the homepage
Post by: Widmerpool on July 23, 2010, 11:08:56 AM
Just a thought but are you gents flushing the buffer or refreshing the page to make sure you are getting the latest page?

Yes. It only comes up on the index page though http://wxw.dslzoneuk.net/forum/index.php.
Title: Re: DSLZone showing a virus on the homepage
Post by: AdrianH on July 23, 2010, 11:13:52 AM
Just a thought but are you gents flushing the buffer or refreshing the page to make sure you are getting the latest page?

I run CCleaner before shutting down at night so all caches including DNs are flushed, I have the same AVAST defs as yesterday. This morning the warning was still there, NOW without any change to my machine it is not.......
Title: Re: DSLZone showing a virus on the homepage
Post by: Widmerpool on July 23, 2010, 12:01:28 PM
Update

It's clean now, and I notice James, the site owner has visited the forum this morning, so assume he sorted it out.
Title: Re: DSLZone showing a virus on the homepage
Post by: CurlyWhirly on July 23, 2010, 05:44:07 PM
Update

It's clean now, and I notice James, the site owner has visited the forum this morning, so assume he sorted it out.
Good news for the members  :thumbs:
Title: Re: DSLZone showing a virus on the homepage
Post by: UncleUB on July 23, 2010, 06:17:42 PM
Update

It's clean now, and I notice James, the site owner has visited the forum this morning, so assume he sorted it out.
Good news for the members  :thumbs:

Till the next time...... :-\
Title: Re: DSLZone showing a virus on the homepage
Post by: CurlyWhirly on July 23, 2010, 07:59:55 PM
Apparently Avast picks it up whilst most other antivirus products don't ?
I've recently posted a thread about what antivirus to go to next here (http://forum.kitz.co.uk/index.php/topic,7706.msg160821.html#msg160821)

As this is the second time that Avast has detected the malware at dslzone (whilst other antivirus products haven't), I've decided to try Avast out when my current NOD32 licence runs out !


Edit: corrected URL link
Title: Re: DSLZone showing a virus on the homepage
Post by: cakei3 on July 23, 2010, 08:28:57 PM
good move curly. avast has been o.k for me  so far
Title: Re: DSLZone showing a virus on the homepage
Post by: Widmerpool on July 23, 2010, 08:35:38 PM
Anybody know if the PCs not running Avast will have been infected with anything?
Avast free seems to be a good AV.