Virus detected!!!

[PaulIcemanMc]

Apparently there is a virus attached to the site. It keeps trying to open a video that Norton says is a heuristic virus. Please advise.....

[lukem]

I'm looking into it now but can't reproduce the error.

[ConditionOne]

Luke, I am now getting a "safe browsing warning" from my browser (Google's Chrome). Strangely, though, when I click on the link to Google's Safe Browsing diagnostic attached to the warning, it lists no detected threats. I'm not sure if this is related to the supposed virus mentioned by the OP, but I thought I'd let you know.

[Red Hat]

FireFox is blocking it also. the only way I could get here is using IE. I'll post the warning in a few minutes. Yesterday I started getting a WMP file trying to open when I backed out of a page. I tried to save it to see what it was but it wouldn't download. This may have something to do with it!




If you hit Ignore it will open the page but when you click on anything you get the same message.

[Red Hat]

I just got the WMP file again this time in IE8.

[Red Hat]

When you click on Ignore from the warning you get this page. I've never heard of them! They may be the cause of the attack.

StopBadware - This isn't an attack site... or is it?

[ricbak]

Yes LukeM, Something is going on. When I first loged in, The IE Tryed to launch Win Media Play for a Address Google....... (This Address is incomeplete.)

If you try to continue with that site, Norton Internet Security blocks that site and issues a unsafe warning.

[ricbak]

I just got the WMP file again this time in IE8.

Yup, Like that

[ConditionOne]

It's happened elsewhere. Luke, I will PM you the info I found. Looks like it could be related to the Tapatalk plugin.

[Red Hat]

It looks like StopBadware is a scam and has infected USA Carry. stopbadware.org scam - Google Search

StopBadware.org

Domain ID:D109507546-LROR
Domain Name:STOPBADWARE.ORG
Created On:14-Dec-2005 01:04:00 UTC
Last Updated On:29-Jan-2010 20:47:27 UTC
Expiration Date:14-Dec-2017 01:04:00 UTC
Sponsoring Registrar:Gandi SAS (R42-LROR)
Status:CLIENT TRANSFER PROHIBITED
Registrant ID:NA969-GANDI
Registrant Name:NIC Administrator
Registrant Organization:Berkman Center for Internet & Society
Registrant Street1:23 Everett Street
Registrant Street2:Second Floor
Registrant Street3:
Registrant City:Cambridge
Registrant State/Province:MA
Registrant Postal Code:02138
Registrant Country:US
Registrant Phone:+1.6174957547
Registrant Phone Ext.:
Registrant FAX:+1.6174957641
Registrant FAX Ext.:
Registrant Email:
Admin ID:NA969-GANDI
Admin Name:NIC Administrator
Admin Organization:Berkman Center for Internet & Society
Admin Street1:23 Everett Street
Admin Street2:Second Floor
Admin Street3:
Admin City:Cambridge
Admin State/Province:MA
Admin Postal Code:02138
Admin Country:US
Admin Phone:+1.6174957547
Admin Phone Ext.:
Admin FAX:+1.6174957641
Admin FAX Ext.:
Admin Email:
Tech ID:NA969-GANDI
Tech Name:NIC Administrator
Tech Organization:Berkman Center for Internet & Society
Tech Street1:23 Everett Street
Tech Street2:Second Floor
Tech Street3:
Tech City:Cambridge
Tech State/Province:MA
Tech Postal Code:02138
Tech Country:US
Tech Phone:+1.6174957547
Tech Phone Ext.:
Tech FAX:+1.6174957641
Tech FAX Ext.:
Tech Email:
Name Server:NS2.MYDYNDNS.ORG
Name Server:NS1.MYDYNDNS.ORG
Name Server:NS3.MYDYNDNS.ORG
Name Server:NS5.MYDYNDNS.ORG
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
DNSSEC:Unsigned