Possible site hacking

[johnlee1933]

Don, FYI FYI I don't know if this is the right place to post this.

I just got a Google warning captioned "Something's not right here". It went on to say that FTT contained content from a russian sounding web site that might harm my computer. The explanation was longer and no doubt you can get it to read. I clicked on open anyway to send you this head's up. I plan on running a virus scan as soon as I log out.

It would be a shame if FTT got a bad rep for carrying viri or Trojans and such.

John

 

[dkh2]

I just googled this and i didn't get any thing but this website.
There is something about a website called ..

FairTradeTobacco.org out of Brea California

but this is FairTradeTobacco.com out of Peninsula, Ohio

 

[FmGrowit]

Thanks for the heads up. I've been getting email from members who have had their email addresses stolen. I also got a message from the "contact us" form from some russian address. I didn't open the email, but there have been a couple of break-ins recently.

There's a virus out there now that the anti-virus software can't detect. The only way I was able to remove it was to restore the computer. It worked and I really don't know how. I've done a lot of reading about it and the way to remove it is beyond my understanding of computers, so I crossed my fingers and did a restore and it worked.

In the past, I've had to close email accounts because my address was stolen. The virus also uses your own address book to send the virus out, so people see an address they know and open the email. That's how the thing spreads and everyone think you sent it....it really sucks. They should shoot the guy s who are doing this.

 

[FmGrowit]

Here's a screen capture of the google search I did. The infected site is Fairtradetobacco.0rg

 

[BarG]

Thanks for the heads up. I've been getting email from members who have had their email addresses stolen. I also got a message from the "contact us" form from some russian address. I didn't open the email, but there have been a couple of break-ins recently.

There's a virus out there now that the anti-virus software can't detect. The only way I was able to remove it was to restore the computer. It worked and I really don't know how. I've done a lot of reading about it and the way to remove it is beyond my understanding of computers, so I crossed my fingers and did a restore and it worked.

. That's how the thing spreads and everyone think you sent it....it really sucks. They should shoot the guy s who are doing this.

That happened to me once. No one would open an email from me till I contacted AOL to report. Always delete your spam without opening............{{sh............................it}} I have never had no ruskies tap in to my puter from this site, MERRY CHRISTMAS ALL.

 

[johnlee1933]

There has been quite a lot in the news lately about Russian hackers. Apparently they do it for profit with benign neglect from their government. New viri pop up all the time. It's just like an arms race.

The best advice is noted above DON'T OPEN ANY SPAM ! ! ! and be cautious about opening attachments, even from friends.

 

[deluxestogie]

If the Russians can figure out how to make a profit from my computer, do you think they might share that secret with me?

Bob

 

[johnlee1933]

FAT chance Sweetie ! ! !

 

[Boboro]

Im getting a alert from AVG whenI go to whats new.

 

[dkh2]

Im getting a alert from AVG whenI go to whats new.

Are you sure it's not a false positive ?
AVG is famous for them

 

[FmGrowit]

If you can tell me what the alert says or send me a screen capture of the alert, I can look into it.

 

[dkh2]

 

[dkh2]

That's from firefox
I'm on Internet explorer now it doesn't see a problem

 

[FmGrowit]

Yeah, I just got that for the first time on firefox as well. I'll try to find out what the problem is. I suspect it might have something to do with my competition since there hasn't been any unusual activity in the posts nor have there been any new members with in the last couple of days. All the warning says is that the site has been reported as an attack page. So the report is what I'm suspicious of. I'll try to find out what the problem is.

 

[johnlee1933]

Google Screen Shot

Don, I just captured a screenshot with Gadwin software and generated a Google file with a similar warning. I am having trouble attaching it to this post. If you haven't see it and want to , tell me how to attach it and I'll send along.

John

 

[dkh2]

AVG is notorious for reporting false positives also and is the main gripe about it.
That particular virus that is mentioned is one that sends emails from a persons
address book in there email programs and redirects them to a Russian site that supposedly sells merchandise
But there really after is credit card and bank account numbers
I have Microsoft Security essentials and malwarebytes and neither one
lit up a warning. But about a year and a half ago on another website they lit up like Christmas trees
with the same virus and successfully block it no such problem today.
I suspect "In My Opinion" that your under attack by a competitor or a bad report to Firefox.

 

[BigBonner]

Internet explorer . No problems here . Running Norton antivirus .

 

[dkh2]

From AVG forum

AVG False Positives - Quicktime, Chrome and Malwarebytes

Hello all,

during the prolonged Christmas weekend there were some AVG false positive detections on correct applications.

Please accept our apologies for any inconveniences caused by these incorrect detections.

Quicktime
- detected as Trojan horse Dropper.Generic2.CKPL | Trojan horse Dropper.Generic2.CKPW
- fixed with 271.1.1/3339
- fix released 12/26/2010 3:00 AM CET

Chrome
- detected as Trojan Horse BackDoor.Generic13.YYE
- fixed with 271.1.1/3337
- fix released 12/25/2010 4:20 PM CET

MalwareBytes
- detected as BackDoor.Generic13.YXN | Trojan horse BackDoor.Generic13.YXM
- fixed with 271.1.1/3336
- fix released 12/25/2010 12:55 AM CET

YouTube Downloader
- detected as Trojan horse Dropper.Generic2.CKPF
- fixed with 271.1.1/3336
- fix released 12/25/2010 12:55 AM CET

It should be enough to update AVG to latest version (currently 271.1.1/3341) and check AVG Virus Vault (menu History) for any non-recovered falsely detected files.
The detections were limited to some specific old versions of Chrome and Quicktime and also most of these false positives only appeared in AVG 8.5. AVG9 and AVG2011 users were not affected by these with the possible exception of Malwarebytes FP.

In case of any new suspicion about false positive detection persisting with latest AVG virus database version, please follow this sticky post.

Thank you
___________________AVG Team

 

[FmGrowit]

Working on it now...

It might have been Santa's gif animation...it was hot. Sorry I had to delete it Santa, but I have to try everything that's new within the past few days.

 

[Boboro]

First time Ive seen it. But it said it blocked it. IT did it a few times its gone nowI saw this and though I shoud say somthing.