Received a virus warning? Post a screen shot here

I didn't take a shot of the warning, but I'm posting a shot of the log which shows the partial URL of the file it considered malicious. It'll show me the full URL as a tooltip but I can't screenshot that so I'll type it in here

http://priuschat.com/forums/gen-ii-prius-modifications/90527-cheap-shorty-antenna-works.html|>{gzip}

 

I do not have a screeen shot, but also use the AVAST virus detector, and also got a virus warning on Prius Chat. Seems to me often times the users mentioning virus warnings from PriusChat are also using the AVAST.

 

I use MS Security Essentials, and just went to that page but got no warning. Not sure if that's beneficial, but figured I'd pass it along. When I visit at work, they use McAfee and I haven't come across any issues with that, either.

 

i don't know how to do a screen shot, but get a mcafee warning about once a week. i just close it and nothing ever happens.

 

With the warning on your screen...
Upper right of the keyboard "Prt Sc" key, press it once and go to your desktop, open paint (microsoft paint, it's in accessories), press paste, (the paste icon) the screen shot will open in paint, save it(notice where it's saved, or put it where you want it), now open it in photo viewer or office and resize it or crop it or whatever, now post it to your photobucket account, now post it to Prius Chat.
Actually, I'm not keen on virus threads anywhere, they spread like virii.

 

thank you ursle, you're very kind, but i lost you in the first sentence. interestingly, i got the warning right after posting to this thread. i get the mcafee M in the toolbar and when i click on it, it says my computer is at risk. when i click 'fix now' it takes me to their web site where they try to sell me their software for $47.99.
funny thing is, it only happens on prius chat and then only once in a while.

 

So true
The only time I've ever had a virus warning was Norton telling my my subscription had expired and I had to renew it to get rid of the virus, which was them...in 98', never loaded anything from Norton since.

 

I also got no warning at that page but I doubt that problems are specific to that page. I suspect some malicious content in one of the ads being served up.

I am using Norton Internet Security and have gotten alerts about blocked attacks in the past while a Priuschat page was loading. I'll take screenshots the next time it happens.

 

I figured it wasn't page specific, but with a known page that caused it for someone, I figured I'd see what happened. That said, I don't recall ever getting a warning on PC.

 

It's not thread specific. I've gotten that sort of warning on other threads and if I go back to the same page even 5 seconds later I don't get the warning.

Unfortunately it blocks the page from loading so I can't view source without disabling the AV. I'd rather do that on a test PC and I don't have one set up to do that with right now.

 

I haven't noticed anything since Optima's banner ads started running. Before that, I had about once/week where I'd get a warning about trying to run something malicious under an older version of Java as a banner ad was loading.

 

It appears that Lightspeed Systems is the one that has categorized priuschat.com with the "security.virus" tag and it was done manually by Lori per a report from malwaresurvival.net. See the Categorization Engine restults secton, "Manually moved to security.virus by LIGHTSPEED\Lori at 9/29/2011 9:37 AM (per http://malwaresurvival.net/)"

If you search malwaresurvival.net for Priuschat you get a ton of info priuschat | Search Results | MalwareSurvival

Small Excerpt:
The site called Priuschat.com (IP 67.227.135.51) is all over the map. It has quite a few redirects to Trojan and bot-net sites.
The site also redirects tobluekai.com that is dishing out the Palevo infection. The Palevo is a very nasty infection!

I used to have to deal with stuff like this daily on our domains. Our web and email servers would wind up on some black list and I'd have to work to get us removed. It's pretty bad when a Fortune 500 company can't receive email because some grandma reported us. I suspect one of more you your Priuschat users has reported the site as a problem with their own malware/virsus software. Many of them allow you to "alert the authorities" when their PC detects something. Those alerts go to black list sites like malwaresurvival.net.

 

PS, don't assume the issue is only coming from your site ads. Many users have html links in their signatures. One of those could be the culprit as well.

 

Mike James in http://priuschat.com/forums/gen-iii.../98944-winter-tire-wheels-16-17-inch-set.html says

again it could be ads, or user signatures but I doubt its just false positives.

 

If he took it to a "shop" for malware/virus problems, then he probably isn't technical. The fact that he had virus/torjans means he is already browsing unsafe content. Assuming the wife does the same or selected anti-virus protection that is really just a virus itself it is not a surprise.

I have to constantly tell my non-technical friends that when the popup box says "you have a virus! pay me $30 for this awesome software to remove it" that is the virus. Then they download and pay for it, and it just sits in the system tray redirecting pages and sending off info making your pc a potential zombie. You can't protect users from themselves.

 

I do know what you mean about users that aren't knowledgeable about computers. I've worked in IT the majority of my adult life.

But that's statement above is false logic. It's like saying the fact that someone got shot at random on the freeway means they are already driving in unsafe neighborhoods. Or like saying the fact that someone got pregnant the first time they had sex means they were having sex before and were lying about being a virgin. Or saying the fact that someone won the jackpot at the lottery means they clearly were buying tickets on a regular basis. The only way you could jump to that conclusion is if you completely discount the possibility of what they say being true. At least don't be closed minded and give the possibility some respect.

If you just said it's more likely he got infected elsewhere you might have the odds on your side and I wouldn't have bothered to write this but you'd still be whistling past the graveyard if you assume there is no chance to get a PC infected by browsing priuschat.com

 

Correct you can never rule it out, but it is extremely unlikely to happen at Priuschat. Maybe if using IE5 and a bad ad got past google review. But it is highly unlikely.

I have also done IT for quite a while. If you know what you are doing, you won't get a virus or any other malware. When you do something sketchy, something sketchy may happen...