Getbig Bodybuilding, Figure and Fitness Forums
Getbig Misc Too Board => Getbig Comments Suggestions Complaints Board => Topic started by: wavelength on November 13, 2008, 01:30:54 AM
-
I would normally post this in the complaints board but I wanted to have a mod's attention on this thread:
"The homepage of Pacos Gym"
It looks like there is a virus or trojan "TR/Spy.Banker.vk.1 - Trojan" on the 4th page.
My guess is that it comes from the webpage where the bull pic is taken from. I would not recommend opening that thread right now.
-
>:(
-
I would normally post this in the complaints board but I wanted to have a mod's attention on this thread:
"The homepage of Pacos Gym"
It looks like there is a virus or trojan "TR/Spy.Banker.vk.1 - Trojan" on the 4th page.
My guess is that it comes from the webpage where the bull pic is taken from. I would not recommend opening that thread right now.
Did you get savagely owned on the 4th page?
-
Did you get savagely owned on the 4th page?
;D
It's not a joke, if you have a good virus scanner, you can try. Could be a false alarm of course. The pic of the bull does look suspicious however. If you open that link in another browser window, an error occurs.
-
cool wave--thanks for the heads up
-
Thats not hector, prince of troy >:(
(http://www.moviecitynews.com/reviews/images/2004/troy3.jpg)
-
I say the fucker who posted this link should get put in Time Out.
-
I say the fucker who posted this link should get put in Time Out.
I'm pretty sure the poster had no bad intentions. Maybe the website where the pic is from was hacked. Or maybe it's something completely different.
-
wavelength again spreading false rumours, first it was the google analytics now "virus".
There is no virus in that webpage, the only problem is wavelength having a mental problem.
Check the source, theres nothing embedded you mongol
-
wavelength again spreading false rumours, first it was the google analytics now "virus".
There is no virus in that webpage, the only problem is wavelength having a mental problem.
Check the source, theres nothing embedded you mongol
Huh? Ron removed the google analytics entry after I made him aware of it, and you even helped him. I don't understand what's the problem with that, Ron appreciated the heads up, he wasn't even aware of it before. In the mentioned thread, I agreed with you that if he would have put it in there intentionally, it would be 100% OK. I do think however, that in this case, people should at least be made aware of it. That's what Ron had to say on the topic:
Removed that script from the boards. I wasnt aware of it. But if there is anything else like that, please tell me. Thanks.
Actually, I am irked on that, because it was probably left over from a cut and paste on updating one of the types of themes here. You can change the theme, and there are a few others here too, although we rarely use them. And I appreciate all who actually want to help!
Secondly, how am I spreading a false rumor if I'm just stating what my virus scanner tells me? I tested it on two different PCs and on both PCs, the virus scanner pops up as soon as I go to that particular page of the thread. I did not accuse anyone of anything, could be just false alarm. I also could not find anything in the source code of the page, if I had, I would have said so.
If a mod is interested in the details my virus scanner shows, I can deliver. If not, that's fine with me too. As soon as I'm at home, I will check again and see if I can get to the root of it. No need to get aggressive, I'm just trying to help.
-
Thread deleted.
-
Thread deleted.
:'(
That was a good thread.
Wave, good catch. My McAfee snagged something recently too. That must have been it.
-
:'(
That was a good thread.
Wave, good catch. My McAfee snagged something recently too. That must have been it.
I just re-checked. It was indeed the pic of the bull that contained the trojan. There was a time when trojans or viruses used errors in some jpg viewers to install themselves on the target machine via faulty jpgs. Opening up the jpg with the wrong viewer is enough to catch the virus. I doubt that it is harmful with todays viewers, but better save than sorry.
Sorry that the thread had to go. And I hope benz didn't catch it, cheese. If you still think I'm spreading false rumors, I will gladly send you the picture in question for your own investigation.
-
Huh? Ron removed the google analytics entry after I made him aware of it, and you even helped him. I don't understand what's the problem with that, Ron appreciated the heads up, he wasn't even aware of it before. In the mentioned thread, I agreed with you that if he would have put it in there intentionally, it would be 100% OK. I do think however, that in this case, people should at least be made aware of it. That's what Ron had to say on the topic:
I want to be made aware of any malware, virus or something that affects the computer system. '
-
I just found out there's plenty of viruses in the Hulkster truce-thread
Might be a good idea to delete it, just to be safe
-
I just found out there's plenty of viruses in the Hulkster truce-thread
Might be a good idea to delete it, just to be safe
Yes, you're right. Ron that thread is packed with trojans, please delete post haste.
-
I just re-checked. It was indeed the pic of the bull that contained the trojan. There was a time when trojans or viruses used errors in some jpg viewers to install themselves on the target machine via faulty jpgs. Opening up the jpg with the wrong viewer is enough to catch the virus. I doubt that it is harmful with todays viewers, but better save than sorry.
Sorry that the thread had to go. And I hope benz didn't catch it, cheese. If you still think I'm spreading false rumors, I will gladly send you the picture in question for your own investigation.
please send me the picture and show me the trojan, if its not there you will ask ron to delete your account, if its there ill ask ron to del my account, deal?
-
please send me the picture and show me the trojan, if its not there you will ask ron to delete your account, if its there ill ask ron to del my account, deal?
If I send you a picture which contains a trojan, how will we determine if it was contained in a thread that has been deleted already? It's convenient of you to ask for the picture 5 days after my last post. I have deleted it now of course.
Could you tell me one reason why I should have lied? I didn't lie about the google analytics script, did I?
I wouldn't have deleted the whole thread, just that one post, but I guess, mods wanted to be safe. I really don't understand what your problem is with me. Question: if your virus scanner pops up when you open a certain thread, what would you do?
-
If I send you a picture which contains a trojan, how will we determine if it was contained in a thread that has been deleted already? It's convenient of you to ask for the picture 5 days after my last post. I have deleted it now of course.
Could you tell me one reason why I should have lied? I didn't lie about the google analytics script, did I?
I wouldn't have deleted the whole thread, just that one post, but I guess, mods wanted to be safe. I really don't understand what your problem is with me. Question: if your virus scanner pops up when you open a certain thread, what would you do?
Ok i think i played a bit rude towards you, and you are right, no need to lie, so im gonna explain it for you.
Google analytics info isnt harmful at all, but ok, the script was there, since a long time, just like a malware removed by ron a few weeks ago, that nobody noticed, not even your antivirus, but i did ;)
As for that picture, did you check the source? it was from some wiki site, and there was no virus in it, i think your antivirus is acting "weird". Which one are you using right now?
-
Ok i think i played a bit rude towards you, and you are right, no need to lie, so im gonna explain it for you.
Google analytics info isnt harmful at all, but ok, the script was there, since a long time, just like a malware removed by ron a few weeks ago, that nobody noticed, not even your antivirus, but i did ;)
As for that picture, did you check the source? it was from some wiki site, and there was no virus in it, i think your antivirus is acting "weird". Which one are you using right now?
Regarding google analytics, I never said it was harmful. I never accused Ron of anything. I just wanted to make people aware.
Regarding the picture of the bull, I made a little research and found the site. All you have to do is search in google images for "bull" and find the picture below. It comes up with a notification that the website has been taken down because of distribution of trojans. It's in German but you will sure be able to find it yourself. By the time I got my warning, the site was already taken down, that's why you couldn't reach it anymore by typing in the link directly. However, the pic was still in a proxy and thus kept loading in my browser and activating my virus scanner.
I think it's time for you to delete your account.
-
Ron, could you please delete benz's acount, he wants it deleted. Additionally, he is obviously a threat to getbig because he ridicules users who want to inform you of trojans on your board. Thankyou.
-
im deleting my account but i have a problem waveidiot
i just went to that url, checked the source of the html, also the jpg and....its all clean, no hidden code, no embedded code, no nothing, i think you have a mental problem and thats why your nazi antivirus is pissing you off.
So, how do we solve this? i can prove my points by showing the source, even hexed source of the jpg, do you have any other way to prove yours beyond your stupid and useless antivirus?
-
im deleting my account but i have a problem waveidiot
i just went to that url, checked the source of the html, also the jpg and....its all clean, no hidden code, no embedded code, no nothing, i think you have a mental problem and thats why your nazi antivirus is pissing you off.
So, how do we solve this? i can prove my points by showing the source, even hexed source of the jpg, do you have any other way to prove yours beyond your stupid and useless antivirus?
Calm down, I was only kidding. ;)
How can you check the jpg that was on that site when it's taken down? Can you give me a working URL to the jpg you claim you have investigated? If there still is such an url, I will check again. My virus scanner is Avira BTW.
My apologies, I was just busting your balls a little, I think I had the right to do so.
-
Calm down, I was only kidding. ;)
How can you check the jpg that was on that site when it's taken down? Can you give me a working URL to the jpg you claim you have investigated? If there still is such an url, I will check again. My virus scanner is Avira BTW.
My apologies, I was just busting your balls a little, I think I had the right to do so.
taken down? its just there along with the html and both are in my hdd, loaded and i see no virus breaking my balls.
I think you need to be a man and prove me wrong , else start apologizing and replace your useless antivirus, because if it didnt warn you about the malware embedded here a few weeks ago, then im sure it wont warn you when its really needed.
Thank you for fucking up a thread here without researching first.
-
taken down? its just there along with the html and both are in my hdd, loaded and i see no virus breaking my balls.
I think you need to be a man and prove me wrong , else start apologizing and replace your useless antivirus, because if it didnt warn you about the malware embedded here a few weeks ago, then im sure it wont warn you when its really needed.
Thank you for fucking up a thread here without researching first.
Regarding the malware, I have a scriptblocker installed which automatically rejects all scripts at first. The blocking is only noticable to me if something doesn't work as expected on a particular site, or if I manually check which scripts are blocked at the time (which is how I found out about google analytics).
You are right the site is online again and the pic as it is up right now is not infected anymore, I apologize for that misinformation (I took googles word for it and didn't try myself again). However, obviously the site was infected within the last days, otherwise Google would not come up with such a message (I can provide further details on the message if it doesn't pop up when you are searching for the picture, it explicitly mentions trojans). I can see no error in my behaviour. My antivirus worked as good as the mechanisms they use at google. This was the first and only time ever my virus scanner poped up at getbig. If it happens again, I will report it again. If you disagree, please settle this with Ron, not me.
I appreciate your helping Ron in getting rid of unneeded scripts and malware which is why I didn't understand your agressiveness towards me when I reported the potential trojan. I can assure you that it was not my intention to get the thread deleted, I just wanted to make people aware of a potential threat.
-
Regarding the malware, I have a scriptblocker installed which automatically rejects all scripts at first. The blocking is only noticable to me if something doesn't work as expected on a particular site, or if I manually check which scripts are blocked at the time (which is how I found out about google analytics).
You are right the site is online again and the pic as it is up right now is not infected anymore, I apologize for that misinformation (I took googles word for it and didn't try myself again). However, obviously the site was infected within the last days, otherwise Google would not come up with such a message (I can provide further details on the message if it doesn't pop up when you are searching for the picture, it explicitly mentions trojans). I can see no error in my behaviour. My antivirus worked as good as the mechanisms they use at google. This was the first and only time ever my virus scanner poped up at getbig. If it happens again, I will report it again. If you disagree, please settle this with Ron, not me.
I appreciate your helping Ron in getting rid of unneeded scripts and malware which is why I didn't understand your agressiveness towards me when I reported the potential trojan. I can assure you that it was not my intention to get the thread deleted, I just wanted to make people aware of a potential threat.
1.- your script blocker failed to detect it :)
2.- the image never been infected
3.- I know, google thinks all sites contain virus, especially when it can handle some scripts.
4.- no, you should research first and then provide solid evidence, else you will be forcing ron to delete threads because you are paranoid and clueless
5.- im not agressive, i just think you fucked up a good thread because your are too paranoid and clueless
6.- you look like hal turner and the amero
cheers!
-
1.- your script blocker failed to detect it :)
2.- the image never been infected
3.- I know, google thinks all sites contain virus, especially when it can handle some scripts.
4.- no, you should research first and then provide solid evidence, else you will be forcing ron to delete threads because you are paranoid and clueless
5.- im not agressive, i just think you fucked up a good thread because your are too paranoid and clueless
6.- you look like hal turner and the amero
1. Besides the point, but why do you think so?
2. So you're saying that I was lying? How do you know that with such determination?
3. It does not, but of course Google could be wrong in this case.
4. I ran the virus scanner over the pic in my cache and it said it contains a trojan. I searched for info on the trojan. I provided the exact name of the trojan as my virus scanner displayed. How is that paranoid? What research should I have done besides that? Why didn't you ask me to send you the pic when I still had it instead of 5 days later? Why didn't you investigate the pic when it was still available? Did you try to go to that link when I reported the thread? You would have seen that the page was taken down.
5. I would not have deleted the thread, and I did not expect it to be deleted. I was not aware of the procedure followed in such an incident. If I were a mod, I would investigate before deleting.
I never claimed that there actually is a trojan in the pic, nor did I claim that it would do any harm with today's viewers. I just reported what my virus scanner told me. Can you please tell me what I should do the next time my virus scanner pops up on content of a certain thread on getbig?
You seem to be more concerned about your reputation as a "guru" on all technical things rather than avoiding possible threats, at least that's how you come across here.
-
1. Besides the point, but why do you think so?
2. So you're saying that I was lying? How do you know that with such determination?
3. It does not, but of course Google could be wrong in this case.
4. I ran the virus scanner over the pic in my cache and it sayed it contains a trojan. I searched for info on the trojan. I provided the exact name of the trojan as my virus scanner displayed. How is that paranoid? What research should I have done besides that? Why didn't you ask me to send you the pic when I still had it instead of 5 days later? Why didn't you investigate the pic when it was still available? Did you try to go to that link when I reported the thread? You would have seen that the page was taken down.
5. I would not have deleted the thread, and I did not expect it to be deleted. I was not aware of the procedure followed in such an incident. If I were a mod, I would investigate before deleting.
I never claimed that there actually is a trojan in the pic, nor did I claim that it would do any harm with today's viewers. I just reported what my virus scanner told me. Can you please tell me what I should do the next time my virus scanner pops up on content of a certain thread on getbig?
You seem to be more concerned about your reputation as a "guru" on all technical things rather than avoiding possible threats, at least that's how you come across here.
Im not saying you lied, you are just clueless and paranoid. Before reporting, research, if you dont know how, then ask around.
what if your virus scanner tell you to jump off a bridge? will you do it? i guess the answer is no, but judging by how you handle with such situations, you will eventually do it.
ps: yes the day the image was posted, there was no problem with, just like it is right now, since image and html are not changed, check mod dates mr paranoid
-
Im not saying you lied, you are just clueless and paranoid. Before reporting, research, if you dont know how, then ask around.
I just did that. Please tell me what I should have done exactly.
what if your virus scanner tell you to jump off a bridge? will you do it? i guess the answer is no, but judging by how you handle with such situations, you will eventually do it.
My first reaction was of course that it's probably an error of my virus scanner (maybe checksum matches by accident, maybe the heuristics set too loose, etc.). I researched that particular trojan for false detections in certain virus scanners and couldn't find anything. Just to be save, I reported the problem after that. As I said, I didn't expect the thread to be deleted, I thought a mod will take a closer look first.
ps: yes the day the image was posted, there was no problem with, just like it is right now, since image and html are not changed, check mod dates mr paranoid
Besides insults, any explanation why my virus scanner has reported a trojan then and does not now? I tried with the Avira scanner in the exact same configuration with the image now online (no update of the scanner since) and it does not report a problem anymore.
-
OK, I will try to get to the root of this. Maybe it was an attack on a proxy and not on the original website. I will let you know what I find out.
-
Thanks to the help of another user (whose virus scanner also reported the virus/trojan), I could finally find the picture in question. It seems to be still online on some sites, e.g.:
_normalycorriente.com/wp-content/uploads/2007/05/gilipollas.jpg_
I added the underscores to make sure this is not displayed as a link on the board. I ran this file with an online virus scanner and it also reported the trojan. My virus scanner again reported the exact same trojan as 5 days ago.
Benz: This time I have put the file in the quarantine of my virus scanner, so I can deliver at any time, should you not be able to get access to the file in question.
-
My virus scanner picked up the exact same virus on the exact same day. 13/11/08.
Benzos, were you the guy who posted that pic? Is that what all the hubub is about?
-
Just to be sure, I also contacted the owner of the thegreenman site. Maybe I was wrong with that one and the original link in the thread was on a different site. I will also contact the owner of the site where I now found the pic. Maybe also the deleted thread can still be fetched from one of the backups and the link which was in there can be confirmed.
From the below quote, it looks like benz has investigated the problem right away, when I reported it the first time:
There is no virus in that webpage, the only problem is wavelength having a mental problem.
Check the source, theres nothing embedded you mongol
Benz, can you tell me what link you have investigated at that time? You seem to be 100% sure that no trojan was in the pic (resp. no "non-nazi" virus scanner could have possibly reported one). No rip on you, I just want to get to the root of this. Again, I'm not saying that it couldn't be just false alarm, but Avira, McAfee, and the online Kapersky scanner all report the trojan. What scanner are you using, Benz?
-
Ok so now we go through ANOTHER picture...but ok, i would like you to explain how is this a virus
<!-- INICIO - PUBLICIDAD POP-UP UNDER -->
<IFRAME SRC="http://www.ciudad.com.ar/ar/popunder/p_submit.asp?site=personales.ciudad.com.ar" width=1 height=1></IFRAME>
<SCRIPT LANGUAGE="JavaScript">
//<!--
for (var i=1; i<15; i++){
setTimeout('self.focus();',i*30);
}
//-->
</SCRIPT>
<!-- FIN - PUBLICIDAD POP-UP UNDER -->
thats what your antivirus is detecting, so again, explain how is that a virus ???
-
My virus scanner picked up the exact same virus on the exact same day. 13/11/08.
Benzos, were you the guy who posted that pic? Is that what all the hubub is about?
Do you really think myself, being a collaborator of ron, would like to post any virus here? the answer is no.
ps: i didnt post the pic either.
-
Ok so now we go through ANOTHER picture...but ok, i would like you to explain how is this a virus
<!-- INICIO - PUBLICIDAD POP-UP UNDER -->
<IFRAME SRC="http://www.ciudad.com.ar/ar/popunder/p_submit.asp?site=personales.ciudad.com.ar" width=1 height=1></IFRAME>
<SCRIPT LANGUAGE="JavaScript">
//<!--
for (var i=1; i<15; i++){
setTimeout('self.focus();',i*30);
}
//-->
</SCRIPT>
<!-- FIN - PUBLICIDAD POP-UP UNDER -->
thats what your antivirus is detecting, so again, explain how is that a virus ???
The propability is very high that this was the file from 6 days ago since Tapeworm got the same report in his McAffee on the same date. With the above link, I also got the exact same report again. After deleting this part of the file, the file is clean, so you are right, this was indeed what my scanner detected.
I never said it's a virus, I said my virus scanner reported it as a trojan (TR/Spy.Banker.vk.1). Since two other scanners report the same problem, I don't think it's a problem of my particular scanner, apparently most scanners are too cautious in this case. I didn't check the file any further because I expected one of the mods to do that. I never said "delete the whole thread". If I would have known that this is the procedure as soon as someone reports a possible threat, I would have acted differently.
Maybe we can get something positive out of this thread by defining an appropriate procedure for such cases, which does not get the whole thread deleted.
-
The propability is very high that this was the file from 6 days ago since Tapeworm got the same report in his McAffee on the same date. With the above link, I also got the exact same report again. After deleting this part of the file, the file is clean, so you are right, this was indeed what my scanner detected.
I never said it's a virus, I said my virus scanner reported it as a trojan (TR/Spy.Banker.vk.1). Since two other scanners report the same problem, I don't think it's a problem of my particular scanner, apparently most scanners are too cautious in this case. I didn't check the file any further because I expected one of the mods to do that. I never said "delete the whole thread". If I would have known that this is the procedure as soon as someone reports a possible threat, I would have acted differently.
Maybe we can get something positive out of this thread by defining an appropriate procedure for such cases, which does not get the whole thread deleted.
1.- useless if its going to detect even a iframe tag.
2.- quick actions always lead to wrong determinations, as i said, no research ends in a total failure, just like it happened here.
3.- the most appropiated thing is to research before acting like a clueless, no doubt
I hope you learned something today, no need to be a guru like you called me, just have some patience.
-
1.- useless if its going to detect even a iframe tag.
2.- quick actions always lead to wrong determinations, as i said, no research ends in a total failure, just like it happened here.
3.- the most appropiated thing is to research before acting like a clueless, no doubt
I hope you learned something today, no need to be a guru like you called me, just have some patience.
1. My virus scanner has never before reported on a picture or any other media on the web. It was the first time ever I got such a report on a picture. Apparently Avira, McAffee, and Kapersky are all completely useless in this regard (in default setup). I must admit that I wasn't aware of that.
2. I don't think you can expect the avarage user of such a board to do more than I did. I thought mods would have experience with such cases and take it from there. I know now that this is not the case.
3. As I said, I would have done more research if I had known that the reaction is to have the thread deleted immediately without checkin out the problem.
I will refrain from reporting any more alerts from my virus scanner as long as there is no procedure defined to report the problem without the thread being instantly removed.
-
1. My virus scanner has never before reported on a picture or any other media on the web. It was the first time ever I got such a report on a picture. Apparently Avira, McAffee, and Kapersky are all completely useless in this regard (in default setup). I must admit that I wasn't aware of that.
2. I don't think you can expect the avarage user of such a board to do more than I did. I thought mods would have experience with such cases and take it from there. I know now that this is not the case.
3. As I said, I would have done more research if I had known that the reaction is to have the thread deleted immediately without checkin out the problem.
I will refrain from reporting any more alerts from my virus scanner as long as there is no procedure defined to report the problem without the thread being instantly removed.
1.- must be, thanks to them and one paranoid idiot a thread has been deleted, and we were enjoying paco's bashing >:(
2.- you are right, nothing can be expected from a paranoid
3.- you didnt, nothing to do anymore, thread is gone, bashing is gone, all is gone thanks to you >:(
4.- dont report anything, its gonna be better and will keep threads alive :)
-
1.- must be, thanks to them and one paranoid idiot a thread has been deleted, and we were enjoying paco's bashing >:(
2.- you are right, nothing can be expected from a paranoid
3.- you didnt, nothing to do anymore, thread is gone, bashing is gone, all is gone thanks to you >:(
4.- dont report anything, its gonna be better and will keep threads alive :)
:D :D :D
Haha, I guess I diserved that, no problem.
Ron appreciated my reporting of the google analytics script though.
In this case, the mods didn't delete the whole board now, did they? :)
-
:D :D :D
Haha, I guess I diserved that, no problem.
Ron appreciated my reporting of the google analytics script though.
In this case, the mods didn't delete the whole board now, did they? :)
that would've been epic no doubt lol
-
I thought this thread would be about condoms ???