fchan

discussion

Virus from advertiser: Hotfurs.com

Pages:1
1Report
Tyciol at 19 Oct 2006: 13:20

When I clicked on the banner for http://fchan.hentaiplanet.net/banners/hotfurs.jpg which led to http://www.hotfurs.com/

When it opened the site I got an intrusion attempt to put in a downloader, along with a high risk virus. Has anyone else got that problem? Maybe they should be reconsidered...

2Report
at 19 Oct 2006: 13:32

http//research.sunbelt/...

copy/paste

Type
    Malware
Type Description
    Malware ("malicious software") consists of software with clearly malicious, hostile, or harmful functionality or behavior and that is used to compromise and endanger individual PCs as well as entire networks.
Category
    Trojan
Category Description
    Trojan is a general term for malicious software that is installed under false or deceptive pretenses or is installed without the user's full knowledge and consent. Most Trojans exhibit some form of malicious, hostile, or harmful functionality or behavior.
Level
    High
Level Description
    High risk threats are typically installed without user interaction through security exploits, and can severely compromise system security. Such threats may open illicit network connections, use polymorphic tactics to self-mutate, disable security software, modify system files, and install additional malware. These threats may also collect and transmit personally identifiable information (PII) without your consent and severely degrade the performance and stability of your computer.
Advice Type
    Remove
File Traces

3Report
Kantir at 19 Oct 2006: 13:33

Which browser are you using?
with firefox, it says "additional plugins are required to view the rest of this page" and I get an "xmg.xml" or something, I cant be bothered to remember the name. No high risk.

4Report
Kantir at 19 Oct 2006: 13:34

Yikes, malware? seriously?

5Report(capped)
Xenofur at 19 Oct 2006: 13:36

You're right. Their site actually does have an iframe on it that loads the wmf exploit. Thus i have removed their banner temporarily until it is removed.
Note tho: It is probably not their fault. The link seems to be pointing at some hitcounter site which is now defunct.

6Report(capped)
Xenofur at 19 Oct 2006: 16:03

they fixed it and it's back up. :)

7Report
at 22 Oct 2006: 23:37

Cool, I hate hitcounter links. Glad they cooperated.

9Add Reply
Name Sage? - captcha =
First Page - Last 40 - Entire Thread

Powered by: Shiichan Version 3956
The contents of this page are asserted to be in the public domain by the posters.
The administrators claim no responsibility for thread content.
Manage