This site has a virus !

dazco

New member
I have to wonder why if i am right has this not been addressed. in any case, heres the deal. I'm using "noscript" right now, and it's the only way i can post here or even load the page w/o catching the same virus i have gotten here 2 times i know of and possibly one other time. There must be some reason i'm getting it but apparently no one else or maybe only a few have this issue.



All i know is this, and i hope maybe the webmaster or whoever deals with this can fix it. when i come top autopia and click the3 forum tab, a sun java logo pops up and is working as tho it's installing a new version or whatever. Withing a few seconds a different window pops up which appears to be a virus app. This is, i'm not running a virus app. thats because the thing is a virus ! At that point i cannot open anything that is opart of windows like the start menu or task manager or anything that part of the OS. if i try to close the thing it goes away, but as soon as i click on anything it pops back up and won't allow whatever i clicked on to open. I have to use a few cleaners like combofix and malwarbytes to get rid of it. PLEASE get rid of this thing !!! I believe it's that ad in the middle of the home page because with noscript running that ad isn't allowed and it shows a little virus thing with a red circle with a line thru it which i think means the script for that ad is infected. Anyways, i hope someone here to whom it matters and has the authorization to deal with this reads this post.
 
We've been talking about this in the shout box, and several of us got hit with it. I was stupid and let my antivirus subscription lapse while holding out for the new version to come out, but now that I'm current I'm not having a problem. It was a ******* of a virus/malware whatever you want to call it, Security Tool Fraud. For me it was a Windows Defender spoof that came up and said I was being attacked by a virus, and did I want to remove it, and when I clicked "yes" that's when I got nailed. And no, I don't understand either how this happens, between the site admin and the hosting company--although someone in the shout box said it's coming thru an ad--which might be outside the purview of either, although I'm not seeing any ads and I thought there weren't supposed to be any ads anymore. I got the virus when I clicked on the "what's new" tab.
 
Yeah my work machine got some spyware junk on it from the homepage a couple days ago. The antivirus didn't pick up on it till it had installed itself. Ugh. I didn't even say yes to the prompt like Setec did.
 
I'm wrong, it was a real Windows Defender window because my history shows a successful quarantine of Trojan: Win32/Hiloti.gen!D...so I guess it must have hit me with some other stuff that Defender didn't catch.
 
I got some "Security Shield" fake antivirus stuff. I had to kill the processes with process explorer, delete the files manually and scrape the registry for remnants. it sucked, a lot.
 
What i don't get is why they aren't fixing it. It seems that all it is is one of those ads. Noscript still shows it as infected. How hard is it to remove an ad.
 
Yeah, it was a fake antivirus--maybe more than one. It would shut down any Norton or Task Manager windows before you could do anything in them.
 
dazco said:
What i don't get is why they aren't fixing it. It seems that all it is is one of those ads. Noscript still shows it as infected. How hard is it to remove an ad.



How is noscript showing an infection? Noscript is just blocking scripts until you approve autopia.org as a trusted site.
 
Because some ads run scripts, and the ad in the middle of the page does not show when using noscript, but it DOES show the placeholder outline with a noscript warning logo at the top left of it. if i am NOT running noscript it does show the ad and then infects my machine.
 
dazco said:
Because some ads run scripts, and the ad in the middle of the page does not show when using noscript, but it DOES show the placeholder outline with a noscript warning logo at the top left of it. if i am NOT running noscript it does show the ad and then infects my machine.



Well being that the rotating advertisement is a script itself, I don't know that it's those ads themselves. There could be (and are) other ********** functions on that page that could be the source.
 
There was another site with the same thing and the mod or webmaster said it was an ad. It also gave me this same virus, so i'm pretty sure thats it. Could be wrong, but things seem to be pointing to it.
 
admin,



Went to the AVG Online site you have above, ran autopia.org, got this:



Stop DANGEROUS: LinkScanner Online has found:

(********** Obfuscation (type 1600) : Exploit)

Scanned: Friday, August 27, 2010
 
I'm on here everyday and haven't seen this thing, thank goodness. Microsoft security essentials (free AV software), Windows Defender disabled, Windows 7, Firefox with adblock plus addon.
 
Sludge said:
admin,



Went to the AVG Online site you have above, ran autopia.org, got this:



Stop DANGEROUS: LinkScanner Online has found:

(********** Obfuscation (type 1600) : Exploit)

Scanned: Friday, August 27, 2010



Not deny that you get that as that is what I got earlier in the week. What I get currently is:



Stop DANGEROUS: This URL has previously been detected as a malicious site.

Scanned: Friday, August 27, 2010



I dont know why it would give different result to different people. Currently, I can find no trace of a virus on Autopia.
 
Could be cached i suppose, but whatever the reason i had it pop up what, thursday? definately after tuesday. I don't allow cookies after FF is closed, tho i guess cache is another story;
 
Back
Top