Forums: Rockclimbing.com: Announcements:
Security Issue - RC safe to use (Dec 13)
RSS FeedRSS Feeds for Announcements

Premier Sponsor:

 
First page Previous page 1 2 Next page Last page  View All


ddt


Dec 13, 2008, 1:07 PM
Post #1 of 42 (5904 views)
Shortcut

Registered: May 20, 2005
Posts: 2304

Security Issue - RC safe to use (Dec 13)
Report this Post
Average: avg_1 avg_2 avg_3 avg_4 avg_5 (0 ratings)  
Can't Post

Hi everyone,

Looks like there is a security problem with one of the banner ads running on Rockclimbing.com. Some users have reported an anti-virus/malware warning when viewing certain pages on the site.

We're looking into the problem as a matter of urgency and will keep you posted as we resolve this as soon as possible.

DDT


(This post was edited by ddt on Dec 13, 2008, 2:58 PM)


limeydave


Dec 13, 2008, 1:27 PM
Post #2 of 42 (5871 views)
Shortcut

Registered: Nov 23, 2006
Posts: 2453

Re: [ddt] Possible Security Issue [In reply to]
Report this Post
Average: avg_1 avg_2 avg_3 avg_4 avg_5 (0 ratings)  
Can't Post

I got that virus this morning - took me a couple of hours to clean it up after an AVG update killed my machine and put me in a permanent reboot.

If anyone gets it, google is your friend, you just need to stop the process running and delete the .url files associated with the malware.

Ugh.

Thanks DDT for cleaning up.


blondgecko
Moderator

Dec 13, 2008, 1:58 PM
Post #3 of 42 (5839 views)
Shortcut

Registered: Jul 2, 2004
Posts: 7666

Re: [limeydave] Possible Security Issue [In reply to]
Report this Post
Average: avg_1 avg_2 avg_3 avg_4 avg_5 (0 ratings)  
Can't Post

Yeah, I picked it up too.

This appears to have worked for me in getting rid of it.


jt512


Dec 13, 2008, 2:03 PM
Post #4 of 42 (5831 views)
Shortcut

Registered: Apr 11, 2001
Posts: 21890

Re: [ddt] Possible Security Issue [In reply to]
Report this Post
Average: avg_1 avg_2 avg_3 avg_4 avg_5 (0 ratings)  
Can't Post

Windows is such an adorable little operating system.

Jay


cfal


Dec 13, 2008, 2:24 PM
Post #5 of 42 (5802 views)
Shortcut

Registered: Jun 25, 2007
Posts: 9

Re: [ddt] Possible Security Issue [In reply to]
Report this Post
Average: avg_1 avg_2 avg_3 avg_4 avg_5 (0 ratings)  
Can't Post

Hey so this is where I got that. I spent a few hours dealing with the virus. "Extra antivir" apparently is a fake antivirus software that tells you you have all sorts of trojans and worms, and to remove them, you need to buy the full version. It's very well written, and makes some registry changes that makes it look like windows is telling you to upgrade to the full version. Uses blue screen of death and the windows startup page to pretend it resets. I was very impressed. Nothing seemed to be able to get rid of it, but this http://www.besttechie.net/.../12/03/zlob-removal/ worked wonders with a full scan.

good luck if you got it.

-cfal


ddt


Dec 13, 2008, 2:25 PM
Post #6 of 42 (5801 views)
Shortcut

Registered: May 20, 2005
Posts: 2304

Re: [ddt] Possible Security Issue [In reply to]
Report this Post
Average: avg_1 avg_2 avg_3 avg_4 avg_5 (0 ratings)  
Can't Post

Please note that we have temporarily disabled ads for all users till we resolve this issue.

Thanks,
DDT


Valarc


Dec 13, 2008, 2:42 PM
Post #7 of 42 (5779 views)
Shortcut

Registered: Apr 19, 2007
Posts: 1473

Re: [jt512] Possible Security Issue [In reply to]
Report this Post
Average: avg_1 avg_2 avg_3 avg_4 avg_5 (0 ratings)  
Can't Post

jt512 wrote:
Windows is such an adorable little operating system.

Jay

indeed.

Although, to be fair, if I were on windows I still doubt I would have been infected with this either. Still, a big ha-ha to those who still use that POS OS.


axelvanettinger


Dec 13, 2008, 2:45 PM
Post #8 of 42 (5777 views)
Shortcut

Registered: Jun 2, 2005
Posts: 71

Re: [ddt] Possible Security Issue [In reply to]
Report this Post
Average: avg_1 avg_2 avg_3 avg_4 avg_5 (0 ratings)  
Can't Post

OR you just don't accept stupid pop-up spam... to prevent is better than repair...


ddt


Dec 13, 2008, 2:57 PM
Post #9 of 42 (5763 views)
Shortcut

Registered: May 20, 2005
Posts: 2304

Re: [ddt] Possible Security Issue [In reply to]
Report this Post
Average: avg_1 avg_2 avg_3 avg_4 avg_5 (0 ratings)  
Can't Post

With the (temporary) removal of all ads, RC.com is once again safe to use. Smile


blondgecko
Moderator

Dec 13, 2008, 2:58 PM
Post #10 of 42 (5760 views)
Shortcut

Registered: Jul 2, 2004
Posts: 7666

Re: [axelvanettinger] Possible Security Issue [In reply to]
Report this Post
Average: avg_1 avg_2 avg_3 avg_4 avg_5 (0 ratings)  
Can't Post

It comes in through a vulnerability in Adobe Acrobat and/or Reader. A patch is available.


kovacs69


Dec 13, 2008, 4:10 PM
Post #11 of 42 (5713 views)
Shortcut

Registered: Jun 15, 2005
Posts: 607

Re: [ddt] Security Issue - RC safe to use (Dec 13) [In reply to]
Report this Post
Average: avg_1 avg_2 avg_3 avg_4 avg_5 (0 ratings)  
Can't Post

If you were running rc.com Tweaks I believe it didn't affect you because there are no ads when you run tweaks. If I am wrong them let me know.

jb


Partner j_ung


Dec 13, 2008, 4:14 PM
Post #12 of 42 (5708 views)
Shortcut

Registered: Nov 21, 2003
Posts: 18687

Re: [blondgecko] Possible Security Issue [In reply to]
Report this Post
Average: avg_1 avg_2 avg_3 avg_4 avg_5 (0 ratings)  
Can't Post

Well, that wasn't a good day at all. Thanks guys for the tips on cleaning machines.

Edit: Scratch that. Looks like ads -- minus the evil ones -- will be back on tomorrow. I'll be online most of the day watching.


(This post was edited by j_ung on Dec 13, 2008, 6:52 PM)


Partner j_ung


Dec 13, 2008, 4:14 PM
Post #13 of 42 (5706 views)
Shortcut

Registered: Nov 21, 2003
Posts: 18687

Re: [kovacs69] Security Issue - RC safe to use (Dec 13) [In reply to]
Report this Post
Average: avg_1 avg_2 avg_3 avg_4 avg_5 (0 ratings)  
Can't Post

kovacs69 wrote:
If you were running rc.com Tweaks I believe it didn't affect you because there are no ads when you run tweaks. If I am wrong them let me know.

jb

Actually, that's probably true. The way we fixed this was to turn off the ads.


churningindawake


Dec 13, 2008, 5:30 PM
Post #14 of 42 (5668 views)
Shortcut

Registered: Jul 4, 2007
Posts: 5292

Re: [j_ung] Security Issue - RC safe to use (Dec 13) [In reply to]
Report this Post
Average: avg_1 avg_2 avg_3 avg_4 avg_5 (0 ratings)  
Can't Post

Yes. I have the same problem. Tt is called Extra Antivir. It puts sex related icons on your desktop that keep restoring themselves.


blondgecko
Moderator

Dec 13, 2008, 5:40 PM
Post #15 of 42 (5661 views)
Shortcut

Registered: Jul 2, 2004
Posts: 7666

Re: [churningindawake] Security Issue - RC safe to use (Dec 13) [In reply to]
Report this Post
Average: avg_1 avg_2 avg_3 avg_4 avg_5 (0 ratings)  
Can't Post

churningindawake wrote:
Yes. I have the same problem. Tt is called Extra Antivir. It puts sex related icons on your desktop that keep restoring themselves.

Use one of the two links above to get rid of it, and until you do, ignore any warning messages that pop up. While it doesn't seem to be directly dangerous, it does give you messages flagging essential system files as infected. Delete them and you're screwed.


tradrenn


Dec 13, 2008, 6:01 PM
Post #16 of 42 (5636 views)
Shortcut

Registered: Jan 15, 2005
Posts: 2990

Re: [jt512] Possible Security Issue [In reply to]
Report this Post
Average: avg_1 avg_2 avg_3 avg_4 avg_5 (0 ratings)  
Can't Post

jt512 wrote:
Windows is such an adorable little operating system.

Jay

Are you using Vista by any chance ?

My Vista doesn't allow me to use Adobe for now, it turned it off.

Other than that I'm good to go and I don't even have any antivirus software installed.


jt512


Dec 13, 2008, 8:13 PM
Post #17 of 42 (5584 views)
Shortcut

Registered: Apr 11, 2001
Posts: 21890

Re: [tradrenn] Possible Security Issue [In reply to]
Report this Post
Average: avg_1 avg_2 avg_3 avg_4 avg_5 (0 ratings)  
Can't Post

tradrenn wrote:
jt512 wrote:
Windows is such an adorable little operating system.

Jay

Are you using Vista by any chance ?

God, no. Linux.


sbaclimber


Dec 14, 2008, 12:35 AM
Post #18 of 42 (5536 views)
Shortcut

Registered: Jan 21, 2004
Posts: 3066

Re: [blondgecko] Possible Security Issue [In reply to]
Report this Post
Average: avg_1 avg_2 avg_3 avg_4 avg_5 (0 ratings)  
Can't Post

blondgecko wrote:
It comes in through a vulnerability in Adobe Acrobat and/or Reader. A patch is available.
Ah, thanks for that! I was wondering why acrobat was running the background after I had manually removed ~.exe from my system, even though I hadn't opened any pdfsCrazy
Didn't have time, or interest, to find out where it came from though.
(anything that only drops one .exe, one prefetch and 1 registry entry onto my system is hardly evil enough for me to be too concerned aboutLaugh)

BTW, was it the beer ad?? That one kind of surprised me....


caleb_danner


Dec 14, 2008, 12:38 AM
Post #19 of 42 (5535 views)
Shortcut

Registered: Nov 17, 2007
Posts: 226

Re: [jt512] Possible Security Issue [In reply to]
Report this Post
Average: avg_1 avg_2 avg_3 avg_4 avg_5 (0 ratings)  
Can't Post

 
go mac/linux we don't have that problem


(This post was edited by caleb_danner on Dec 14, 2008, 12:38 AM)


caleb_danner


Dec 14, 2008, 12:40 AM
Post #20 of 42 (5530 views)
Shortcut

Registered: Nov 17, 2007
Posts: 226

Re: [caleb_danner] Possible Security Issue [In reply to]
Report this Post
Average: avg_1 avg_2 avg_3 avg_4 avg_5 (0 ratings)  
Can't Post

how much would we have to pitch in to not have adds?

i like not having them


jt512


Dec 14, 2008, 6:31 AM
Post #21 of 42 (5508 views)
Shortcut

Registered: Apr 11, 2001
Posts: 21890

Re: [caleb_danner] Possible Security Issue [In reply to]
Report this Post
Average: avg_1 avg_2 avg_3 avg_4 avg_5 (0 ratings)  
Can't Post

caleb_danner wrote:
how much would we have to pitch in to not have adds?

i like not having them

"Ads" is spelled with one "d," and you don't have to pitch in anything. Get Rc.com Tweaks from userscripts.org (also available from my web site (but it is down through 12/20/08), and/or use Privoxy.

Jay


(This post was edited by jt512 on Dec 14, 2008, 6:32 AM)


Valarc


Dec 14, 2008, 6:57 AM
Post #22 of 42 (5501 views)
Shortcut

Registered: Apr 19, 2007
Posts: 1473

Re: [jt512] Possible Security Issue [In reply to]
Report this Post
Average: avg_1 avg_2 avg_3 avg_4 avg_5 (0 ratings)  
Can't Post

Or alternatively, use the "Adblock" plugin for firefox to remove ads from everything you visit.

I sometimes feel slightly guilty about browsing the web mostly ad-free, but then I see some malware shit like this happen, and I'm reminded why I started using ad blockers in the first place.

Ads have gone from simple banners to animated monstrosities that play sound and spread to cover what you're reading, eat up CPU cycles, and occasionally infect your computer with some nastiness. Do yourself a favor and block them, it saves a lot of headaches.


churningindawake


Dec 14, 2008, 8:19 AM
Post #23 of 42 (5486 views)
Shortcut

Registered: Jul 4, 2007
Posts: 5292

Re: [blondgecko] Possible Security Issue [In reply to]
Report this Post
Average: avg_1 avg_2 avg_3 avg_4 avg_5 (0 ratings)  
Can't Post

blondgecko wrote:
Yeah, I picked it up too.

This appears to have worked for me in getting rid of it.

Worked for me as well!


fitzontherocks


Dec 14, 2008, 6:20 PM
Post #24 of 42 (5331 views)
Shortcut

Registered: Jun 11, 2003
Posts: 857

Re: [churningindawake] Possible Security Issue [In reply to]
Report this Post
Average: avg_1 avg_2 avg_3 avg_4 avg_5 (0 ratings)  
Can't Post

j, are you going to say which ad it was?


Partner j_ung


Dec 14, 2008, 6:31 PM
Post #25 of 42 (5327 views)
Shortcut

Registered: Nov 21, 2003
Posts: 18687

Re: [fitzontherocks] Possible Security Issue [In reply to]
Report this Post
Average: avg_1 avg_2 avg_3 avg_4 avg_5 (0 ratings)  
Can't Post

Oh, yeah, I'm sorry. I thought it had been mentioned. It was a Coors Light bit that came in from one of the ad networks.

First page Previous page 1 2 Next page Last page  View All

Forums : Rockclimbing.com : Announcements

 


Search for (options)

Log In:

Username:
Password: Remember me:

Go Register
Go Lost Password?



Follow us on Twiter Become a Fan on Facebook