Getting Virus Signs on the Forum!

[Herbiie]

Hey,

Whenever I go onto the Forum AVG says this site may harm my computer, and just now it blocked something. Can't remember what it was and i can't work out how to get it on AVG but it started with the words fuckthis.

Just thought you should know incase there's something on the forum or in one of the ads.

[NyteMyre]

Same here... guess its global

[Conman51]

i got it too...not specifically on the forums...i think the virus is actually in my computer now, it like keeps coming up on AVG9 as a trojan downloader

[Priby]

Ya, Norton just deleted 2 trojans after i opened the page.

They were named Trojan.ByteVerify and Bloodhound.Exploit.193

[rofflesnlols]

Hey guys,
Same problem here - it's only affecting google chrome for me, firefox is working fine.

fuckthecrisis.biz/lib/index.php Is the name that AVG is giving me, and like dhl said: it's coming from centiyo.com

Did a little googling:

Google Safe Browsing
Diagnostic page for centiyo.com

What is the current listing status for centiyo.com?
Site is listed as suspicious - visiting this web site may harm your computer.

Part of this site was listed for suspicious activity 1 time(s) over the past 90 days.

What happened when Google visited this site?
Of the 2 pages we tested on the site over the past 90 days, 0 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2009-11-18, and suspicious content was never found on this site within the past 90 days.
Malicious software includes 30 trojan(s).

This site was hosted on 1 network(s) including AS39150 (VLTELECOM).

Has this site acted as an intermediary resulting in further distribution of malware?
Over the past 90 days, centiyo.com appeared to function as an intermediary for the infection of 5 site(s) including turkforum.net/, webhatti.com/, maktoob.com/.

Has this site hosted malware?
No, this site has not hosted malicious software over the past 90 days.

How did this happen?
In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.

Next steps:
Return to the previous page.
If you are the owner of this web site, you can request a review of your site using Google Webmaster Tools. More information about the review process is available in Google's Webmaster Help Center.

I also found numerous other forums on google search complaining aboout the same problem - good news is it looks like it's easy to get rid of, as all the forums complaining earlier this year seem to be working fine now.

The joys of the internet. For those of you using the infected page, well first of all... shouldn't have opened it up, however I suggest using a different browser e.g. Firefox - doesn't seem to be affected.

[Conman51]

i just updated my AVG, ill see of it helps, make sure you guys have your AV up to date


Edit: i am using fire fox and i still got it, it just comes up randomly, not specifically when im on these forums

[Rudd]

mcafee isn't saying anything...I'm suddenly worried

[dbzao]

We are trying to get slick on.

[Hunt3r]

Avast keeps giving a popup, telling me that it has aborted the connection...

[Conman51]

My problems stopped as soon as i updated my AV

[Marko]

Wait, this means my computer was infected?

[dbzao]

It's all good now.

[Twisted Helix]

mcafee isn't saying anything...I'm suddenly worried

You should be if you running Mcaffee as your AV

( I did a test ... two machines same connection over a year ... one running Kapersky one running McAfee ... McAfee found about 60% of what Kapersky did.

[Himalde]

What was it and how did it get here?



The forums were down before I entered last night.


Off topic: How I stay pretty safe

Firefox (+ NoScript)
+Comodo (firewall + shield)
+ avast anti virus
= pretty safe.

NoScript requires me to allow all scrips run on a site.
The comodo shield will require me to allow all activities on my computer (what program can access memory, keyboard, screen, write on disk, edit the register etc)
Anti Virus if I'm so stupid to allow "1337snipzorz" script to write to my windows folder and edit keys in the registry.

This takes a lot of work to set up, and makes sometimes a lot of difficulties during first launch of a full screen program. But I'm confident it keeps my computer safe, as long as I investigate what i click yes on. Does this program have a valid reason to write in my windows folder, BTW is less then one second since I allowed a script on a website?

[Saobh]

Nothing to worry guys, a bit of antubiotics and we're good.

And that happens when the PR Devs get hookers and blow for all their good work. Its the price of success (and not wearing condoms ... :rolleyes

Locked.

[Gaz]

Slick sorted this earlier. Seems we have a fan.....still, we have the details.

I would recommend that if you are in any way concerned, to update your chosen anti-virus/malware scanner to the latest definitions available and run a full system scan.

For paid AV, my own personal recommendation would be Kaspersky, as well as imo the best free AVs, Microsoft's Security Essentials, Avast and AVG Free.

Apologies for the issues.