Virus Warning?

comments or issues with this board

Moderators: TapeOpLarry, tomb

Locked
norsehorse
gettin' sounds
Posts: 119
Joined: Thu May 14, 2009 3:59 pm
Location: LA
Contact:

Virus Warning?

Post by norsehorse » Tue Aug 03, 2010 9:37 am

When opening the main page just now (messageboard.tapeop.com) I got a Windows prompt asking to change something on my computer. I did not recognize the hyperlink, rejected the change, and then Kaspersky Anti-Virus kicked in, noting:

detected: Trojan program Exploit.Java.Agent.ca
file: (http)://homcp.info/x/f15.zip/sunny/Changes.class


Hopefully no one else is getting viruses from TapeOp. Or is this benign? I've put the "http"s in parentheses so they don't show up as hyperlinks.

8/3/2010 12:32:01 PM file: (http)://homcp.info/x/f15.zip/sunny/Changes.class detected: Trojan program 'Exploit.Java.Agent.ca'
8/3/2010 12:32:01 PM file: (http)://homcp.info/x/f15.zip/sunny/Changes.class access blocked
8/3/2010 12:32:02 PM file: (http)://homcp.info/x/f15.zip/sunny/Changes.class detected: Trojan program 'Exploit.Java.Agent.ca'
8/3/2010 12:32:02 PM file: (http)://homcp.info/x/f15.zip/sunny/Changes.class access blocked
8/3/2010 12:32:08 PM file: (http)://homcp.info/x/f15.zip/sunny/Changes.class detected: Trojan program 'Exploit.Java.Agent.ca'
8/3/2010 12:32:08 PM file: (http)://homcp.info/x/f15.zip/sunny/Changes.class access blocked
8/3/2010 12:32:09 PM file: (http)://homcp.info/x/f15.zip/sunny/Changes.class detected: Trojan program 'Exploit.Java.Agent.ca'
8/3/2010 12:32:09 PM file: (http)://homcp.info/x/f15.zip/sunny/Changes.class access blocked
[/b]

User avatar
davepinkham
gettin' sounds
Posts: 124
Joined: Wed Nov 07, 2007 11:47 pm
Location: Austin, TX
Contact:

Post by davepinkham » Tue Aug 03, 2010 10:07 am

google chrome just gave me a suspicious site warning and said that the site was linked to malware.

User avatar
blungo2
re-cappin' neve
Posts: 736
Joined: Wed Jun 23, 2010 6:08 pm
Location: so close to hell you can see sparks
Contact:

Post by blungo2 » Tue Aug 03, 2010 10:32 am

I just got the same warning...

User avatar
richierichie
ass engineer
Posts: 41
Joined: Wed Jul 30, 2008 11:49 am
Location: Edinburgh

Post by richierichie » Tue Aug 03, 2010 10:45 am

Yup, got the same thing for the first time today. Avast blocked it. Strange...
I like you mostly late at night

Corey Y
re-cappin' neve
Posts: 695
Joined: Sun Dec 30, 2007 2:42 pm

Post by Corey Y » Tue Aug 03, 2010 10:53 am

Firefox blocked the page as well. I used the alternate link from the main page and that seemed to work fine. Maybe a new banner, spammer poster or something else inserting some malware? Hopefully it's sorted out soon.

User avatar
terryb
pushin' record
Posts: 217
Joined: Wed Dec 27, 2006 5:31 pm
Location: portland

Post by terryb » Tue Aug 03, 2010 11:11 am

same hear with google chrome

User avatar
vvv
zen recordist
Posts: 10158
Joined: Tue May 13, 2003 8:08 am
Location: Chi
Contact:

Post by vvv » Tue Aug 03, 2010 12:47 pm

Me, Too!

Chrome gimme this:

Image
bandcamp;
blog.
I mix with olive juice.

User avatar
vvv
zen recordist
Posts: 10158
Joined: Tue May 13, 2003 8:08 am
Location: Chi
Contact:

Post by vvv » Tue Aug 03, 2010 12:52 pm

Per Microsoft Security Essentials:

Threat: severe

Exploit:Win32/CVE21011885.a

MSSE removed it.


I hope this helps!
bandcamp;
blog.
I mix with olive juice.

User avatar
vvv
zen recordist
Posts: 10158
Joined: Tue May 13, 2003 8:08 am
Location: Chi
Contact:

Post by vvv » Tue Aug 03, 2010 12:55 pm

With both Chrome and MSSE warning of a problem, I notified the board administrator.
bandcamp;
blog.
I mix with olive juice.

User avatar
vvv
zen recordist
Posts: 10158
Joined: Tue May 13, 2003 8:08 am
Location: Chi
Contact:

Post by vvv » Tue Aug 03, 2010 12:58 pm

More info:

Image
bandcamp;
blog.
I mix with olive juice.

User avatar
TapeOpHillary
TapeOp Admin
TapeOp Admin
Posts: 811
Joined: Thu May 01, 2003 6:58 am
Location: NYC
Contact:

Post by TapeOpHillary » Tue Aug 03, 2010 1:23 pm

update:
we fixed the problem the day this started happening and we're just waiting for big brother to leave us alone...
Status of the latest badware review for this site: A review for this site has finished. The site was found clean. The badware warnings from web search are being removed. Please note that it can take some time for this change to propagate.



we are aware of the problem and working on fixing the problem...
please be patient as we are a team of, like, 4 people, trying to sort it out.

we think it's something a member posted that got flagged causing this whole mess...
thanks.
-hillary

Locked

Who is online

Users browsing this forum: No registered users and 32 guests