malware attack through the orchid board?

[RosieC]

Prem, that sounds like the one my Anti-virus picked up.

I sent the details to Marty. It's possible that it's not this site, but is one of the sponsor sites which has been infected. The banner add at the top of the page can cause any viruses they have to show up here as well. Not sure how you can tell where it has come from though.

I would strongly recomend that everyone makes sure they have an up to date virus checker with 'On Access' scanning. Mine caught and quarantined it before it did anything, blocking access to the site in India it was trying to redirect to.

[cb977]

Thanks for alerting Marty to the problem, Rosie...I didn't see this till now.

I'm sure he'll take care of it...but in the meantime, anybody who is EVER on a computer should make sure their computer protection is in force.

Malwarebytes is a freebie and works very well:

Malwarebytes

[ronaldhanko]

My security prevented an attack last night. I, too, would guess it's one of the sponsor sites, since I came back a little later and nothing happened.

[johnblagg]

Originally Posted by cb977

Thanks for alerting Marty to the problem, Rosie...I didn't see this till now.

I'm sure he'll take care of it...but in the meantime, anybody who is EVER on a computer should make sure their computer protection is in force.

Malwarebytes is a freebie and works very well:

Malwarebytes

Very good suggestion and in fact the only product I have ever found that would get rid on the one called antivirus 2009 or 2010 .... But it has to be on your system before the attack happens because after it is on your system it blocks you from going to any antivirus sites or even loading Malware bytes onto your system from a flashdrive.

[Marty]

Antivirus 2009 is very common and it infects a lot of machines. I scanned OB for the footprint and found none. I also scanned any external links and those came up clean. Quite possible that the infection occured earlier and when visiting OB Antivirus2009 scareware got triggered...could happen on any site, not just OB. We're clean...

...as a side note, we got 200,000 unique visitors in June, which resulted in 1.1 million pages loaded and when some kind of an exploit hits the net, often times by shear traffic that we get, I get reports of people claiming that it's OB. First thing that would happen is Google would right away block us. It happened few years ago, when a script got injected. We're visited by google constantly and they're quick to block the site

in google webmaster tools we're listed "Google has not detected any malware on this site."

Unmas Parasites report
Title: Orchid Board
URL: Orchid Board
Google: not currently listed as suspicious* (details)
Generator: vBulletin 3.8.1
Last checked: 3 minutes ago (results are cached for 1 hour)

if you get a report that you're infected. Look in your history and then run the sites that you visited through this scanner

[cb977]

Thanks Marty

[RosieC]

Thanks Marty.

Good to know we are clean and it must have come through from somewhere else.

[johnblagg]

lol I got lucky I had never had any kind of problem ...Thanks everyone

[prem]

Marty, I experienced an attempted attack again last night when the OBF was the only thing I had opened at the time...when I clicked the topic reply link from my e-mail and launched into OBF, I got a mangled piece of php script and an attempted redirect to a site in India, which my virus software trapped.

It is very intermittent. I suspect that perhaps one of the ad providers has a hacked ad that is injecting this into the forum.

However, whether or not the attack came through the OBF or some other means, there is a means of preventing this attack...upgrade your version of Java to the latest. This vulnerability was discovered in early April, and a Java patch was released mid-April to address this very issue.

This threat can happen any time via the web...apparently, one of the first sites to be hacked was a song lyric site.

Here is how to upgrade to the latest Java:

1. run your Control Panel (usually a desktop icon to launch it)
2. switch to classic view in your control panel
3. find your Java icon (64 bit machines will need to click the 32-bit control panel to find this)
4. launch the java control panel via the Java icon
5. click the Update tab
6. click the Update Now button...if you don't have the latest Java, an installer will launch and install the latest. If you do have the latest, the prompt will tell you that you're up to date.
7. feel better about the fact that you're protected from this recently discovered exploit.

---Prem

[RosieC]

Thanks for the info Prem.

I was wrong thinking I had not had a re-occurance today. Apparently it was reported to the server (by the virus checker) rather than to me. My hubby is the server administrator and saw it.

I suspect one of the adds from google seeing as Marty has checked OB and the sponsors.