Possible Malware on the Vishnu site?

mmmmQuattro · 06-12-2010, 04:37 AM

I get this error when going to the Vishnu site.

Is this something to worry about?

e.n335 · 06-12-2010, 06:20 AM

no problems and pretty good protected laptop here ...

Funkmob · 06-12-2010, 07:25 AM

I like the "Proceed annyway" button

lamia2super · 06-12-2010, 07:39 AM

same thing happened to me

Javier · 06-12-2010, 08:13 AM

Proceed lol

roadkillrob · 06-12-2010, 08:40 AM

It's not the website, just the forum site, probably some malware was uploaded to a thread on the forum!

a32guy · 06-12-2010, 08:57 AM

Whats malware? I have a Mac.

335e92tx · 06-12-2010, 09:04 AM

Quote:

Originally Posted by a32guy

Whats malware? I have a Mac.

Still can happen.

Seems Shiv got pwnd - on the server this time. ;-)

slowSwede · 06-12-2010, 09:07 AM

Not sure but usually on forums they use javascript injection, and if you have decent protection on your computer it shouldn't be a problem.

Surfing the web, as everything else is dangerous

protium · 06-12-2010, 06:11 PM

Trying to access the shiv's forum from
http://www.vishnutuningforum.com/forum/forumdisplay.php
you are directed to:
http://awm-bsd.ru/world/ncc.php?&uid=2071
which takes you to http://www1.creatsensation31-pr.co.cc/

Here some flash is loaded and your then prompted to "remove" some supposed viruses/trojans if you click on the link your giving an executable "packupdate" to install. (the file is coming from www1.cleansof43-pd.co.cc)

Looks like another vBulletin javascript injection.

kjrulz · 06-12-2010, 07:55 PM

jb attack!!!!!!!!!!!!!

OpenFlash · 06-12-2010, 08:07 PM

yep... getting kinda tired of this. I'll have our web guy take care of this on Monday. Thanks for the heas up guys.

Shiv
imac user

badass335 · 06-12-2010, 08:54 PM

Quote:

Originally Posted by kjrulz

jb attack!!!!!!!!!!!!!

06-12-2010, 04:37 AM	#1
mmmmQuattro Major 266 Rep 1,169 Posts Drives: f83 / E93 335 / E70 X5 40d Join Date: Sep 2007 Location: Adelaide, South Australia iTrader: (0) Garage List 2007 320 E91 M-Spor ... [0.00] 2009 335-E93 M-Sport [0.00]	Possible Malware on the Vishnu site? I get this error when going to the Vishnu site. Is this something to worry about? Attached Images
	Appreciate 0 Tweet Quote

06-12-2010, 06:20 AM	#2
e.n335 Moderator 281 Rep 4,481 Posts Drives: e93 ///M3 DCT, 07/2009 Join Date: Feb 2007 Location: Switzerland, ZH iTrader: (0)	no problems and pretty good protected laptop here ...
	Appreciate 0 Quote

06-12-2010, 07:25 AM	#3
Funkmob First Lieutenant 22 Rep 306 Posts Drives: 335i E92 space grey Join Date: Oct 2009 Location: Belgium iTrader: (0)	I like the "Proceed annyway" button __________________ 335I AT 2007. Vishnu V5 / UR CAI / HPF Intercooler / ER Charge pipe / Synapse BOV / Macht Shnell dp's / Vanguard catless exhaust / BSH occ / Labonte S4 Meth injection / Quiafe LSD / Full M3 suspension parts / Bilstein PSS10 / EBC brakes and lines / RB turbo's
	Appreciate 0 Quote

06-12-2010, 07:39 AM	#4
lamia2super Colonel 147 Rep 2,661 Posts Drives: 335i Join Date: May 2008 Location: Miami Beach, FL iTrader: (4) Garage List 2007 335i [10.00]	same thing happened to me __________________ FOR SALE https://www.e90post.com/forums/showt...0#post25342440
	Appreciate 0 Quote

06-12-2010, 08:13 AM	#5
Javier Major 89 Rep 1,109 Posts Drives: 335i E92 Join Date: Nov 2006 Location: Puerto Rico iTrader: (0)	Proceed lol __________________ 2007 328i Crimson Red SOLD 2010 335i MSport AW E92
	Appreciate 0 Quote

06-12-2010, 08:40 AM	#6
roadkillrob Major General 892 Rep 5,475 Posts Drives: 08 335i,22 X3M, 2012 C63 Black Join Date: Jul 2007 Location: NH iTrader: (15)	It's not the website, just the forum site, probably some malware was uploaded to a thread on the forum! __________________ 2025 X5 Msport 2008 E93 335i FBO 2012 Mercedes C63 Black Series Alanite Grey
	Appreciate 0 Quote

06-12-2010, 08:57 AM	#7
a32guy First Lieutenant 31 Rep 374 Posts Drives: AW 335i Join Date: Dec 2009 Location: CT iTrader: (2)	Whats malware? I have a Mac. __________________
	Appreciate 0 Quote

06-12-2010, 09:07 AM	#9
slowSwede Lieutenant 22 Rep 549 Posts Drives: 335 coupe Join Date: Jan 2010 Location: Skåne iTrader: (0)	Not sure but usually on forums they use javascript injection, and if you have decent protection on your computer it shouldn't be a problem. Surfing the web, as everything else is dangerous
	Appreciate 0 Quote

06-12-2010, 06:11 PM	#10
protium Enlisted Member 1 Rep 45 Posts Drives: 135i Join Date: Dec 2009 Location: USA iTrader: (0)	Trying to access the shiv's forum from http://www.vishnutuningforum.com/forum/forumdisplay.php you are directed to: http://awm-bsd.ru/world/ncc.php?&uid=2071 which takes you to http://www1.creatsensation31-pr.co.cc/ Here some flash is loaded and your then prompted to "remove" some supposed viruses/trojans if you click on the link your giving an executable "packupdate" to install. (the file is coming from www1.cleansof43-pd.co.cc) Looks like another vBulletin javascript injection.
	Appreciate 0 Quote

06-12-2010, 07:55 PM	#11
kjrulz Mastermind 71 Rep 1,360 Posts Drives: girls krazy Join Date: Jan 2009 Location: your mother iTrader: (5)	jb attack!!!!!!!!!!!!!
	Appreciate 0 Quote

06-12-2010, 08:07 PM	#12
OpenFlash 1806 Rep 17,960 Posts Drives: A Lot Join Date: Sep 2006 Location: SF Bay, CA iTrader: (0) Garage List 2018 Ducati Panigal ... [0.00] 2016 Mazda CX5 [0.00] 2017 Aprilia Tuono ... [0.00] 2019 BMW M2 Competi ... [0.00] 2015 BMW M5 Competi ... [10.00] 2016 Ducati XDiavel S [0.00] 2016 AMG GT S [0.00] 2011 Ferrari 458 It ... [0.00] 2017 Charger Hellcat [0.00] 2015 KTM Super Duke ... [0.00] 2016 KTM RC390 [0.00]	yep... getting kinda tired of this. I'll have our web guy take care of this on Monday. Thanks for the heas up guys. Shiv imac user
	Appreciate 0 Quote