Malware alert when trying to open motor overheating thread

Started by 69ISH, October 01, 2013, 06:50:14 PM

Previous topic - Next topic

69ISH

I am using Google Chrome as my web browser and when I try and open the first page of the motor overheating thread Google blocks me with a

Quote

DANGER: Malware Ahead!
Google Chrome has blocked this page on
www.mustang.org.au.


Content from Shelby.org.au, a known malware distributor,
has been inserted into this webpage. Visiting this page now is
very likely to infect your computer with malware.

Malware is malicious that causes things like identity
theft, financial loss and permanent file deletion.

End Quote

But page 2 is fine, just a warning for others, I don't understand it but I won't open the 1st page.
1969 Mustang Sportsroof (8+ year Project are they ever completed)
1969 Cougar Eliminator (Sadly sold)
1972 Gran Torino Sport (Sold)
1968 Mustang Coupe (Sold)
Read about "Eliminators" below
http://eliminator.mercurycougarregistry.com/

Ash

For those who do use Malwarebytes Anti-Malware, I found this last week and it works well. I've always had the free version but this is catching lots of stuff all the time.

Malwarebytes Anti-Malware Activation Key 2013! 100% working

"I'm too drunk to taste this chicken" - Kernel Sanders

peterp

Yes it appears that the shelby site has possibly been hacked.

I will restore it from a backup and get our tech guy to check out the problem.

Regards  Peter
You only need two tools in life - WD-40 and Duct Tape. If it doesn't move and should, use the WD-40. If it shouldn't move and does, use the Duct Tape.

peterp

I'm about to take Shelby offline until tomorrow so we can repair the website.

The Mustang website is not infected and is safe.

Also the Mustang website is on a different server.

Regards Peter
You only need two tools in life - WD-40 and Duct Tape. If it doesn't move and should, use the WD-40. If it shouldn't move and does, use the Duct Tape.

peterp

Hi T-Code,
                 I actually run Webroot as my main Internet Security Program.

And I also run the full version of Malaware Bytes.

They are both excellent and can be run on the same computer without any problems.

Regards  Peter
You only need two tools in life - WD-40 and Duct Tape. If it doesn't move and should, use the WD-40. If it shouldn't move and does, use the Duct Tape.

peterp

Hi 69ish,
              I have fully tested the thread in question and it definately doesn't have any problems.

But Shelby.org.au has been compromised and has been shut down until we repair it tomorrow, it is safe to visit as all files have been removed.

Regards  Peter
You only need two tools in life - WD-40 and Duct Tape. If it doesn't move and should, use the WD-40. If it shouldn't move and does, use the Duct Tape.

69ISH

No worries Peter it is doing it to this thread now as well but I just chose to enter it anyway.
Cheers Rodney
1969 Mustang Sportsroof (8+ year Project are they ever completed)
1969 Cougar Eliminator (Sadly sold)
1972 Gran Torino Sport (Sold)
1968 Mustang Coupe (Sold)
Read about "Eliminators" below
http://eliminator.mercurycougarregistry.com/

mwizz

Quote from: Ash on October 01, 2013, 07:01:45 PM
For those who do use Malwarebytes Anti-Malware, I found this last week and it works well. I've always had the free version but this is catching lots of stuff all the time.

Malwarebytes Anti-Malware Activation Key 2013! 100% working



I also use Malwarebytes Ash but my free period has elapsed.

Ash

Quote from: mwizz on October 01, 2013, 09:46:27 PM
I also use Malwarebytes Ash but my free period has elapsed.

Follow that link, Mark. On the youtube page is the details for free verification for the full package.
"I'm too drunk to taste this chicken" - Kernel Sanders

peterp

Hi Rodney,
                 Yes the warnings are coming from your cache but only when you use Google Chrome.

I have checked the security of the Mustang Website and the Mustang Forum with Google Webmaster Tools for Malaware and all is clear.

The problem is triggered by the links to shelby.org.au unfortunately we have about 20 links on Mustang to the Shelby website.

All files on the Shelby website have been removed from the server so shelby shouldn't be triggering an alarm anymore but it is triggering from your cache.

We have been having problems with the server that Shelby is on so as a precaution I have instigated a move for Shelby to a different server just in case the server that Shelby was on is infected.

It should be propagated by the morning to the new server then we will repair the damage and re-instate Shelby.

BTW, thanks for bringing it to our attention.

Regards  Peter
You only need two tools in life - WD-40 and Duct Tape. If it doesn't move and should, use the WD-40. If it shouldn't move and does, use the Duct Tape.

peterp

Malaware Bytes is one of the best virus and malaware detectors.

I use it religiously on customers computers that are infected, it is especially good at picking up pups.

Malaware Bytes Pro which is the full version sells for about $25

Regards  Peter
You only need two tools in life - WD-40 and Duct Tape. If it doesn't move and should, use the WD-40. If it shouldn't move and does, use the Duct Tape.

peterp

Mustang is clear, see Google Webmaster Tools review below.

Shelby has been moved and all files have been removed for repair, a Google request has been lodged for review.

This may take a day before the Google robots check Shelby, after Google checks it all warning will be removed.

Regards  Peter
You only need two tools in life - WD-40 and Duct Tape. If it doesn't move and should, use the WD-40. If it shouldn't move and does, use the Duct Tape.

cam

All should be fine now lads.  It wasn't the forum but an issue from the Shelby site and cross linking.

If you still happen to get a warning on goggle chrome while in a thread or spot some broken image/avatar/signature links that use to work, give us a heads up, we may have missed one or two, but rest assure the site is safe

:hi:

Shermatt


cam