+- Forums (https://www.carpe-tdm.net)
+-- Forum: Carpe Language Valley (https://www.carpe-tdm.net/forumdisplay.php?fid=3)
+--- Forum: Associated Forum Life Line (https://www.carpe-tdm.net/forumdisplay.php?fid=13)
+--- Thread: Commuters Motorcycle Club (/showthread.php?tid=34736)
Commuters Motorcycle Club - Gary - 24-02-2009
The CMC site seems fine to me boys, if you would like to send any AV reports to me [ web at dashack (take this out) dot co dot uk] I'll have a look though, just to make sure.
I think the site is clean as a whistle but just in case there's some crappy script left on there any AV reports would be helpful for me to find out where they are.
Cheers [img]style_emoticons/<#EMO_DIR#>/smile.gif[/img]
Commuters Motorcycle Club - dapleb - 24-02-2009
How do I find that out without clickin the links again? I clicked on one of the links and it said summat about something being infected. I ran a scan immediatley after but it showed noubt!
Commuters Motorcycle Club - wicklamulla - 25-02-2009
<!--quoteo(post=112125:date=Tue 24th Feb 2009, 10:26 AM:name=dapleb)-->QUOTE(dapleb @ Tue 24th Feb 2009, 10:26 AM) <{POST_SNAPBACK}><!--quotec-->How do I find that out without clickin the links again? I clicked on one of the links and it said summat about something being infected. I ran a scan immediatley after but it showed noubt!<!--QuoteEnd--><!--QuoteEEnd--> ya i use the basic free version of AVG and the scan took over 2 hours and showed no STD's or udder infections. Prolly noubt to worry about.well this is wot is in my 'Virus Vault'. I have sent the lot below off fer analysis and will let ye know if i get a reply via email. Wicky.
"Warning";"Found Tracking cookie.Zedo";"C:\Documents and Settings\Administrator\Cookies\administrator@zedo[1].txt";"";"24/02/2009, 11:38:43""Warning";"Found Tracking cookie.Tradedoubler";"C:\Documents and Settings\Administrator\Cookies\administrator@tradedoubler[1].txt";"";"24/02/2009, 11:38:31""Warning";"Found Tracking cookie.Statcounter";"C:\Documents and Settings\Administrator\Cookies\administrator@statcounter[1].txt";"";"24/02/2009, 11:38:28""Warning";"Found Tracking cookie.Serving-sys";"C:\Documents and Settings\Administrator\Cookies\administrator@serving-sys[1].txt";"";"24/02/2009, 11:38:27""Warning";"Found Tracking cookie.Overture";"C:\Documents and Settings\Administrator\Cookies\administrator@overture[1].txt";"";"24/02/2009, 11:38:22""Warning";"Found Tracking cookie.2o7";"C:\Documents and Settings\Administrator\Cookies\administrator@msnportal.112.2o7[1].txt";"";"24/02/2009, 11:38:20""Warning";"Found Tracking cookie.Adrevolver";"C:\Documents and Settings\Administrator\Cookies\administrator@media.adrevolver[2].txt";"";"24/02/2009, 11:38:19""Warning";"Found Tracking cookie.Serving-sys";"C:\Documents and Settings\Administrator\Cookies\administrator@bs.serving-sys[2].txt";"";"24/02/2009, 11:38:04""Warning";"Found Tracking cookie.Adrevolver";"C:\Documents and Settings\Administrator\Cookies\administrator@adrevolver[3].txt";"";"24/02/2009, 11:38:00""Warning";"Found Tracking cookie.Yieldmanager";"C:\Documents and Settings\Administrator\Cookies\administrator@ad.yieldmanager[2].txt";"";"24/02/2009, 11:38:00""Warning";"Found Tracking cookie.2o7";"C:\Documents and Settings\Administrator\Cookies\administrator@2o7[2].txt";"";"24/02/2009, 11:37:59""Warning";"Found Tracking cookie.Revsci";"C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\frcy5lm7.default\cookies.sqlite";"";"24/02/2009, 11:37:13""Warning";"Found Tracking cookie.Tradedoubler";"C:\Documents and Settings\Administrator\Cookies\administrator@tradedoubler[1].txt";"";"19/02/2009, 12:10:50""Warning";"Found Tracking cookie.Serving-sys";"C:\Documents and Settings\Administrator\Cookies\administrator@serving-sys[2].txt";"";"19/02/2009, 12:10:46""Warning";"Found Tracking cookie.2o7";"C:\Documents and Settings\Administrator\Cookies\administrator@msnportal.112.2o7[1].txt";"";"19/02/2009, 12:10:40""Warning";"Found Tracking cookie.Serving-sys";"C:\Documents and Settings\Administrator\Cookies\administrator@bs.serving-sys[2].txt";"";"19/02/2009, 12:10:25""Warning";"Found Tracking cookie.Adtech";"C:\Documents and Settings\Administrator\Cookies\administrator@adtech[1].txt";"";"19/02/2009, 12:10:23""Warning";"Found Tracking cookie.Euroclick";"C:\Documents and Settings\Administrator\Cookies\administrator@adopt.euroclick[2].txt";"";"19/02/2009, 12:10:22""Warning";"Found Tracking cookie.Yieldmanager";"C:\Documents and Settings\Administrator\Cookies\administrator@ad.yieldmanager[2].txt";"";"19/02/2009, 12:10:21""Warning";"Found Tracking cookie.Tradedoubler";"C:\Documents and Settings\Administrator\Cookies\administrator@tradedoubler[2].txt";"";"12/02/2009, 12:12:05""Warning";"Found Tracking cookie.Euroclick";"C:\Documents and Settings\Administrator\Cookies\administrator@adopt.euroclick[1].txt";"";"12/02/2009, 12:11:42""Warning";"Found Tracking cookie.Tribalfusion";"C:\Documents and Settings\Administrator\Cookies\administrator@tribalfusion[2].txt";"";"11/02/2009, 12:13:40""Warning";"Found Tracking cookie.Tradedoubler";"C:\Documents and Settings\Administrator\Cookies\administrator@tradedoubler[1].txt";"";"11/02/2009, 12:13:39""Warning";"Found Tracking cookie.Serving-sys";"C:\Documents and Settings\Administrator\Cookies\administrator@serving-sys[1].txt";"";"11/02/2009, 12:13:36""Warning";"Found Tracking cookie.Revsci";"C:\Documents and Settings\Administrator\Cookies\administrator@revsci[2].txt";"";"11/02/2009, 12:13:34""Warning";"Found Tracking cookie.2o7";"C:\Documents and Settings\Administrator\Cookies\administrator@msnportal.112.2o7[1].txt";"";"11/02/2009, 12:13:30""Warning";"Found Tracking cookie.Adrevolver";"C:\Documents and Settings\Administrator\Cookies\administrator@media.adrevolver[2].txt";"";"11/02/2009, 12:13:29""Warning";"Found Tracking cookie.Serving-sys";"C:\Documents and Settings\Administrator\Cookies\administrator@bs.serving-sys[1].txt";"";"11/02/2009, 12:13:17""Warning";"Found Tracking cookie.Bluestreak";"C:\Documents and Settings\Administrator\Cookies\administrator@bluestreak[2].txt";"";"11/02/2009, 12:13:16""Warning";"Found Tracking cookie.Adtech";"C:\Documents and Settings\Administrator\Cookies\administrator@adtech[1].txt";"";"11/02/2009, 12:13:14""Warning";"Found Tracking cookie.Adrevolver";"C:\Documents and Settings\Administrator\Cookies\administrator@adrevolver[1].txt";"";"11/02/2009, 12:13:13""Warning";"Found Tracking cookie.Euroclick";"C:\Documents and Settings\Administrator\Cookies\administrator@adopt.euroclick[1].txt";"";"11/02/2009, 12:13:13""Warning";"Found Tracking cookie.Yieldmanager";"C:\Documents and Settings\Administrator\Cookies\administrator@ad.yieldmanager[1].txt";"";"11/02/2009, 12:13:12""Warning";"Found Tracking cookie.Webtrends";"C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\frcy5lm7.default\cookies.sqlite";"";"11/02/2009, 12:12:22""Warning";"Found Tracking cookie.Revsci";"C:\Documents and Settings\Administrator\Local Settings\Temp\Cookies\administrator@revsci[1].txt";"";"10/02/2009, 12:13:01""Warning";"Found Tracking cookie.2o7";"C:\Documents and Settings\Administrator\Local Settings\Temp\Cookies\administrator@msnportal.112.2o7[1].txt";"";"10/02/2009, 12:12:59""Warning";"Found Tracking cookie.Adrevolver";"C:\Documents and Settings\Administrator\Local Settings\Temp\Cookies\administrator@media.adrevolver[2].txt";"";"10/02/2009, 12:12:59""Warning";"Found Tracking cookie.Euroclick";"C:\Documents and Settings\Administrator\Local Settings\Temp\Cookies\administrator@adopt.euroclick[2].txt";"";"10/02/2009, 12:12:57""Warning";"Found Tracking cookie.Yieldmanager";"C:\Documents and Settings\Administrator\Local Settings\Temp\Cookies\administrator@ad.yieldmanager[1].txt";"";"10/02/2009, 12:12:56""Warning";"Found Tracking cookie.Zedo";"C:\Documents and Settings\Administrator\Cookies\administrator@zedo[1].txt";"";"10/02/2009, 12:11:45""Warning";"Found Tracking cookie.Tribalfusion";"C:\Documents and Settings\Administrator\Cookies\administrator@tribalfusion[2].txt";"";"10/02/2009, 12:11:34""Warning";"Found Tracking cookie.Tradedoubler";"C:\Documents and Settings\Administrator\Cookies\administrator@tradedoubler[2].txt";"";"10/02/2009, 12:11:34""Warning";"Found Tracking cookie.Tacoda";"C:\Documents and Settings\Administrator\Cookies\administrator@tacoda[2].txt";"";"10/02/2009, 12:11:32""Warning";"Found Tracking cookie.Statcounter";"C:\Documents and Settings\Administrator\Cookies\administrator@statcounter[1].txt";"";"10/02/2009, 12:11:30""Warning";"Found Tracking cookie.Serving-sys";"C:\Documents and Settings\Administrator\Cookies\administrator@serving-sys[2].txt";"";"10/02/2009, 12:11:29""Warning";"Found Tracking cookie.Information";"C:\Documents and Settings\Administrator\Cookies\administrator@searchportal.information[1].txt";"";"10/02/2009, 12:11:27""Warning";"Found Tracking cookie.Revsci";"C:\Documents and Settings\Administrator\Cookies\administrator@revsci[1].txt";"";"10/02/2009, 12:11:23""Warning";"Found Tracking cookie.Questionmarket";"C:\Documents and Settings\Administrator\Cookies\administrator@questionmarket[1].txt";"";"10/02/2009, 12:11:22""Warning";"Found Tracking cookie.2o7";"C:\Documents and Settings\Administrator\Cookies\administrator@msnportal.112.2o7[1].txt";"";"10/02/2009, 12:11:18""Warning";"Found Tracking cookie.Adrevolver";"C:\Documents and Settings\Administrator\Cookies\administrator@media.adrevolver[2].txt";"";"10/02/2009, 12:11:16""Warning";"Found Tracking cookie.Webtrends";"C:\Documents and Settings\Administrator\Cookies\administrator@m.webtrends[2].txt";"";"10/02/2009, 12:11:16""Warning";"Found Tracking cookie.Adbureau";"C:\Documents and Settings\Administrator\Cookies\administrator@haynet.adbureau[2].txt";"";"10/02/2009, 12:11:11""Warning";"Found Tracking cookie.Dealtime";"C:\Documents and Settings\Administrator\Cookies\administrator@dealtime[1].txt";"";"10/02/2009, 12:11:03""Warning";"Found Tracking cookie.Burstnet";"C:\Documents and Settings\Administrator\Cookies\administrator@burstnet[2].txt";"";"10/02/2009, 12:11:00""Warning";"Found Tracking cookie.Serving-sys";"C:\Documents and Settings\Administrator\Cookies\administrator@bs.serving-sys[2].txt";"";"10/02/2009, 12:11:00""Warning";"Found Tracking cookie.Bluestreak";"C:\Documents and Settings\Administrator\Cookies\administrator@bluestreak[1].txt";"";"10/02/2009, 12:10:59""Warning";"Found Tracking cookie.Adtech";"C:\Documents and Settings\Administrator\Cookies\administrator@adtech[2].txt";"";"10/02/2009, 12:10:57""Warning";"Found Tracking cookie.Adrevolver";"C:\Documents and Settings\Administrator\Cookies\administrator@adrevolver[2].txt";"";"10/02/2009, 12:10:56""Warning";"Found Tracking cookie.Euroclick";"C:\Documents and Settings\Administrator\Cookies\administrator@adopt.euroclick[2].txt";"";"10/02/2009, 12:10:55""Warning";"Found Tracking cookie.Yieldmanager";"C:\Documents and Settings\Administrator\Cookies\administrator@ad.yieldmanager[1].txt";"";"10/02/2009, 12:10:55""Warning";"Found Tracking cookie.Doubleclick";"C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\frcy5lm7.default\cookies.sqlite";"";"10/02/2009, 12:10:11""Infection";"Trojan horse PSW.Generic6.AQPD";"C:\WINNT\system32\Macromed\Flash\FlashUtil10a.exe";"";"14/11/2008, 15:46:21""PUP";"Potentially harmful program Dialer.BYH";"C:\WINNT\Downloaded Program Files\btmailcontrol.dll";"";"15/08/2008, 19:26:17""PUP";"Adware Generic2.PJO";"C:\Program Files\Starware353\bin\Starware353.dll";"";"09/08/2008, 13:20:55"
Commuters Motorcycle Club - Gary - 01-05-2009
<!--quoteo(post=112217:date=Wed 25th Feb 2009, 02:25 PM:name=wicklamulla)-->QUOTE(wicklamulla @ Wed 25th Feb 2009, 02:25 PM) <{POST_SNAPBACK}><!--quotec--><snip>:
C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\frcy5lm7.default\cookies.sqlite";"";"10/02/2009, 12:10:11""Infection";"Trojan horse PSW.Generic6.AQPD";"C:\WINNT\system32\Macromed\Flash\FlashUtil10a.exe";"";"14/11/2008, 15:46:21""PUP";"Potentially harmful program Dialer.BYH";"C:\WINNT\Downloaded Program Files\btmailcontrol.dll";"";"15/08/2008, 19:26:17""PUP";"Adware Generic2.PJO";"C:\Program Files\Starware353\bin\Starware353.dll";"";"09/08/2008, 13:20:55"<!--QuoteEnd--><!--QuoteEEnd-->
Did anything come back about those Wicky?
Commuters Motorcycle Club - Readmarx - 11-08-2009
Has she gone down on us boys?
Commuters Motorcycle Club - David_H - 11-08-2009
<!--quoteo(post=131647:date=Tue 11th Aug 2009, 05:53 PM:name=Readmarx)-->QUOTE(Readmarx @ Tue 11th Aug 2009, 05:53 PM) <{POST_SNAPBACK}><!--quotec-->Has she gone down on us boys?<!--QuoteEnd--><!--QuoteEEnd-->
S'ok fer me although was initially slow to load. [img]style_emoticons/<#EMO_DIR#>/dunno.gif[/img]
Commuters Motorcycle Club - Readmarx - 08-10-2009
I'm getting a "malware warning" and then this:
Parse error: syntax error, unexpected T_STRING, expecting ',' or ';' in /var/www/vhosts/dashack.co.uk/httpdocs/gocmc/Sources/Subs-Auth.php on line 378
[img]style_emoticons/<#EMO_DIR#>/blink.gif[/img]
Commuters Motorcycle Club - TonyDevil - 08-10-2009
i get malware warnings all the time from CMC
websense has it listed as a permant attack site..... [img]style_emoticons/<#EMO_DIR#>/huh.gif[/img]
Commuters Motorcycle Club - Readmarx - 08-10-2009
<!--quoteo(post=137295:date=Thu 8th Oct 2009, 12:53 PM:name=TonyDevil)-->QUOTE(TonyDevil @ Thu 8th Oct 2009, 12:53 PM) <{POST_SNAPBACK}><!--quotec-->i get malware warnings all the time from CMC
websense has it listed as a permant attack site..... [img]style_emoticons/<#EMO_DIR#>/huh.gif[/img]<!--QuoteEnd--><!--QuoteEEnd-->
nope, no chance - can't get in at all, I get some sort of page error and all sorts. Something this end with our server firewall?
Commuters Motorcycle Club - Matlock - 08-10-2009
<!--quoteo(post=137301:date=Thu 8th Oct 2009, 01:26 PM:name=Readmarx)-->QUOTE(Readmarx @ Thu 8th Oct 2009, 01:26 PM) <{POST_SNAPBACK}><!--quotec-->nope, no chance - can't get in at all, I get some sort of page error and all sorts. Something this end with our server firewall?<!--QuoteEnd--><!--QuoteEEnd-->
I can get on the site OK today, no problems.
Commuters Motorcycle Club - TDMick - 09-10-2009
I just tried to log in and got this
Parse error: syntax error, unexpected T_STRING, expecting ',' or ';' in /var/www/vhosts/dashack.co.uk/httpdocs/gocmc/Sources/Subs-Auth.php on line 378
haven't got a scooby what it means but it might help someone?
Mick
Commuters Motorcycle Club - ChrisG - 04-07-2010
Avast is blocking CMC and saying it's detected a Trojan horse JS:Redirector-CJ[Trj]
Commuters Motorcycle Club - dapleb - 04-07-2010
Yup I got something like that too a while ago whilst following a CMC linky dink. Weird innit.
Commuters Motorcycle Club - Mikey B - 04-07-2010
Same here, just had a warning from AVAST saying there was a trojan detected. Has it as I went to the rideout/meetings page
Commuters Motorcycle Club - dapleb - 04-07-2010
Has someone contacted Gazamataz?
Commuters Motorcycle Club - TonyDevil - 04-07-2010
<!--quoteo(post=168821:date=Sun 4th Jul 2010, 04:07 PM:name=dapleb)-->QUOTE(dapleb @ Sun 4th Jul 2010, 04:07 PM) <{POST_SNAPBACK}><!--quotec-->Has someone contacted Gazamataz?<!--QuoteEnd--><!--QuoteEEnd-->
yarp. put an OI ADMIN topic in the news room
Commuters Motorcycle Club - Gary - 04-07-2010
<!--quoteo(post=168825:date=Sun 4th Jul 2010, 04:40 PM:name=TonyDevil)-->QUOTE(TonyDevil @ Sun 4th Jul 2010, 04:40 PM) <{POST_SNAPBACK}><!--quotec-->yarp. put an OI ADMIN topic in the news room<!--QuoteEnd--><!--QuoteEEnd-->
Looking at it now. Can't see owt yet but will keep going [img]style_emoticons/<#EMO_DIR#>/smile.gif[/img]
I know this happened before but no-one found anything, even the host. Will report back here though [img]style_emoticons/<#EMO_DIR#>/good.gif[/img]
Thanks guys [img]style_emoticons/<#EMO_DIR#>/smile.gif[/img]
I've checked everything and just posted this on CMC:
"McAfuck isn't doing a thing :tink
Right, it's something to do with a smiley pop up window. I don't think it's malicious just yet but there is deffo something up with the smiley window.
Nope, something is up with the smiley popup window and I think that's tripping the Avast! AV.
Its still fooked on the formatting so I'll have to look at reloading some of the files.
I dont think this is the JS: Redirector trojan because I can't find the trigger code in any HTML and I don't think it's an SQL attack.
Will change some files now and see how we go.
EDIT: Changed lots of files but never found a thing in any of the usual places JS:Redirector is supposed to be, that's not to say it wasn't something new but all the files have been replaced now. We should be ok from now on.
Can you let me know if you still get Avast! alerts?"
Let me know if you still get alerts and I'll get on to the host, cheers all [img]style_emoticons/<#EMO_DIR#>/smile.gif[/img] Sorry about the alerts. I blame Neil.
Commuters Motorcycle Club - TonyDevil - 04-07-2010
<!--quoteo(post=168841:date=Sun 4th Jul 2010, 07:05 PM:name=Radio_am)-->QUOTE(Radio_am @ Sun 4th Jul 2010, 07:05 PM) <{POST_SNAPBACK}><!--quotec-->I blame Neil.<!--QuoteEnd--><!--QuoteEEnd-->thats fair [img]style_emoticons/<#EMO_DIR#>/good.gif[/img]
Commuters Motorcycle Club - ChrisG - 06-07-2010
Working fine for me again, obviously booting Neil fixed it.
Commuters Motorcycle Club - Petrust - 10-07-2010
Cannot get into CMC this afternoon - all I get is "message from webpage"
"Warning! your computer contains various signs of viruses and malware prescence........ etc etc . System Security will perform a quick & free scanning of your PC"
A full AVG scan revealed absolutely nothing, and I can access all other web pages but not CMC.
Anyone else got problems?