Might be a false alarm but who knows - FMVperformance.com : The site for all your Ford Mazda and Volvo needs
Reply
 
LinkBack Thread Tools
post #1 of 13 (permalink) Old 09-06-2010, 10:56 PM Thread Starter
Senior Member
 
seasonalskier's Avatar
 
Join Date: Feb 2009
Location: Livonia, MI
Posts: 13,371
Send a message via AIM to seasonalskier Send a message via Yahoo to seasonalskier
Might be a false alarm but who knows

Recently my antivirus is throwing a Trojan alert for the Steeda banner. Its happening for a few different styles of their banner but still the same Trojan risk. Is any one else experiencing this warning? For now I have blocked the banners until I can figure this out.

Here is the warning that I am getting. BTW I am using Kaspersky Internet Security 2010

9/6/2010 10:33:41 PM Denied: HEUR:Trojan.Script.Iframer
http://www.steeda.net/ads/adjs.php?n...Dunreadreplies


To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.


To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
seasonalskier is offline  
Sponsored Links
Advertisement
 
post #2 of 13 (permalink) Old 09-06-2010, 11:05 PM Thread Starter
Senior Member
 
seasonalskier's Avatar
 
Join Date: Feb 2009
Location: Livonia, MI
Posts: 13,371
Send a message via AIM to seasonalskier Send a message via Yahoo to seasonalskier
Re: Might be a false alarm but who knows

Ok so this banner is now trying to access my history reports on my browser, this is definitely a hacked Trojan banner. It is in both the large and small banner on the top of the screen.


To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.


To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
seasonalskier is offline  
post #3 of 13 (permalink) Old 09-08-2010, 05:19 PM
F1 Driver
 
Join Date: Jul 2003
Location: New Haven, CT
Posts: 14,337
Re: Might be a false alarm but who knows

I'll contact Steeda about it.
mz6zoomzoom is offline  
Sponsored Links
Advertisement
 
post #4 of 13 (permalink) Old 09-08-2010, 05:42 PM Thread Starter
Senior Member
 
seasonalskier's Avatar
 
Join Date: Feb 2009
Location: Livonia, MI
Posts: 13,371
Send a message via AIM to seasonalskier Send a message via Yahoo to seasonalskier
Re: Might be a false alarm but who knows

Thanks for looking into this


To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.


To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
seasonalskier is offline  
post #5 of 13 (permalink) Old 09-08-2010, 05:59 PM
Le Mans: Prototype Class
 
Join Date: Oct 2006
Location: South Florida
Posts: 2,096
Re: Might be a false alarm but who knows

WTF!!! Looking into this now. Wonder if we were hacked.
larryinfl is offline  
post #6 of 13 (permalink) Old 09-08-2010, 06:06 PM
Le Mans: Prototype Class
 
Join Date: Oct 2006
Location: South Florida
Posts: 2,096
Re: Might be a false alarm but who knows

Looks like someone hacked into our banner system and changed every banner I've ever done for the last 5 years. Over 100 banners.

A quick fix is to restore the banner database from a week old backup. That will get rid of what they did since the date of the hack is showing today.

I'm going to have to look into this further.

Sorry everyone.
larryinfl is offline  
post #7 of 13 (permalink) Old 09-08-2010, 06:18 PM
Le Mans: Prototype Class
 
Join Date: Oct 2006
Location: South Florida
Posts: 2,096
Re: Might be a false alarm but who knows

I've finished the restore.

I'm on a Mac so I don't have anti-virus software.

Are you still getting the message?
larryinfl is offline  
post #8 of 13 (permalink) Old 09-08-2010, 06:20 PM Thread Starter
Senior Member
 
seasonalskier's Avatar
 
Join Date: Feb 2009
Location: Livonia, MI
Posts: 13,371
Send a message via AIM to seasonalskier Send a message via Yahoo to seasonalskier
Re: Might be a false alarm but who knows

Yup I just let down the block, there are no more warnings, thank you very much Larry! :P


To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.


To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
seasonalskier is offline  
post #9 of 13 (permalink) Old 09-08-2010, 06:21 PM
Le Mans: Prototype Class
 
Join Date: Oct 2006
Location: South Florida
Posts: 2,096
Re: Might be a false alarm but who knows

We use OpenX, a very popular banner system.

I checked their forums and don't see anyone posting recent issues with this happening. Please PM me right away if you see this happen again.

I HATE hackers!
larryinfl is offline  
post #10 of 13 (permalink) Old 09-08-2010, 06:24 PM Thread Starter
Senior Member
 
seasonalskier's Avatar
 
Join Date: Feb 2009
Location: Livonia, MI
Posts: 13,371
Send a message via AIM to seasonalskier Send a message via Yahoo to seasonalskier
Re: Might be a false alarm but who knows

No problem man I have a heavy duty blocker so I don't worry about it at all, just figured to keep others on the site protected I should bring it up :P But if I see it coming up again I will be sure to let you know. And sorry about the hackers, they are the scum of the earth thats for sure.


To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.


To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
seasonalskier is offline  
Sponsored Links
Advertisement
 
Reply

  FMVperformance.com : The site for all your Ford Mazda and Volvo needs > Misc > Site Suggestions / Problems

Quick Reply
Message:
Options

Register Now



In order to be able to post messages on the FMVperformance.com : The site for all your Ford Mazda and Volvo needs forums, you must first register.
Please enter your desired user name, your email address and other required details in the form below.

User Name:
Password
Please enter a password for your user account. Note that passwords are case-sensitive.

Password:


Confirm Password:
Email Address
Please enter a valid email address for yourself.

Email Address:
OR

Log-in










Thread Tools
Show Printable Version Show Printable Version
Email this Page Email this Page



Posting Rules  
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On

 
For the best viewing experience please update your browser to Google Chrome