Clubwrx Infected or linked to something bad? - Page 3
+ Reply to Thread
Page 3 of 4 FirstFirst 1234 LastLast
Results 31 to 45 of 49

This is a discussion on Clubwrx Infected or linked to something bad? within the Clubwrx Website/Forum Support - Report Errors forums, part of the Community - Meet other Enthusiasts category; I've spotted an iframe tag inserted as the first line of many pages on this site. It tries to pull ...

  1. #31
    Registered User John M's Avatar
    Join Date
    Dec 2002
    Location
    Milledgeville, GA
    Posts
    749
    I've spotted an iframe tag inserted as the first line of many pages on this site. It tries to pull code from http://www.foresx.co.cc

    It clobbered me earlier and I spent over an hour trying to remove infections. It's a particularly new exploit and not all tools recognize it yet. I should note I do this for a living so when I say it's resilient, I mean it!
    John M
    2000 Lincoln Continental - slow DD with the DOHC 4.6 and a Superchips tune
    1992 Lexus SC400 - slow resto project
    2005 Legacy GT Limited - SOLD Feb 2011 - Forged internals, FP HTA Green @ 22 psi.

  2. Remove Advertisements
    ClubWRX.net
    Advertisements
     

  3. #32
    Registered User SpikeX's Avatar
    Join Date
    Mar 2010
    Location
    Findlay OH
    Posts
    19
    haha (pets his McBook Pro)

  4. #33
    Administrator BlazinWRX's Avatar
    Join Date
    Apr 2001
    Location
    Irvine, CA 92620
    Posts
    4,478
    I Support ClubWRX
    Quote Originally Posted by John M View Post
    I've spotted an iframe tag inserted as the first line of many pages on this site. It tries to pull code from http://www.foresx.co.cc

    It clobbered me earlier and I spent over an hour trying to remove infections. It's a particularly new exploit and not all tools recognize it yet. I should note I do this for a living so when I say it's resilient, I mean it!

    Hi John,

    We looked on the server and the software but we cannot find anything that has the iframe code in it. Do you think it might be coming from the ads?
    Tim
    Admin

  5. #34
    Registered User economatic's Avatar
    Join Date
    May 2009
    Location
    Portland, OR
    Posts
    843

    Clean up your act!!!

    Seriously, we have got to get these issues resolved. Clubwrx.net is now being blocked by Websense as a malicious website.

  6. #35
    Geriatric Ginger Mod Rogan's Avatar
    Join Date
    May 2007
    Location
    behind the wheel
    Posts
    8,188
    I Support ClubWRX
    from a few minutes ago...

    BTW, Norton Suite (on the same computer) NEVER detected anything.
    Attached Thumbnails Attached Thumbnails clubwrx_warning.gif  
    Rogan o_0
    '96 Dodge 2500 CTD @ 40psi - over 700 lb/ft TQ, 7" stack, and 5speed! - SOLD
    '01 Dodge 2500 CTD 6-holed hand-shaker - 3850# dual disk - 900 lb/ft - SOLD
    '97 Dodge 3500 CTD DUALLY built Auto - 40psi boosties - 750 lb/ft

  7. #36
    Registered User economatic's Avatar
    Join Date
    May 2009
    Location
    Portland, OR
    Posts
    843
    It seems like it is inconsistent. I run Avast as well and got the error last night but not this morning. Also, Chrome and Firefox will occasionally cry about it being a malicious website. Either way, if Websense is flagging it there is an ongoing problem.

  8. #37
    Administrator BlazinWRX's Avatar
    Join Date
    Apr 2001
    Location
    Irvine, CA 92620
    Posts
    4,478
    I Support ClubWRX
    I found the root of the problem, it's the remote file uploading from some of the plugins that we have. I'm trying to get this fixed right away.
    Tim
    Admin

  9. #38
    Registered User Pavia's Avatar
    Join Date
    Dec 2006
    Location
    Philly/DE area
    Posts
    2,934
    FYI: I tried to log on to the forum at work today during lunch and got an access denied screen, stating "website under attack"
    06 GTO M6 Quicksilver, SLP 455 Bobcat, LS7 Clutch w/ SS line (RPM tune:373rwhp/373rwtq)
    07 WRX TR M5 Garnet Red Pearl w/ Straight PPGs and Cusco front LSD (Agile tune:307whp/343wtq)

  10. #39
    Administrator BlazinWRX's Avatar
    Join Date
    Apr 2001
    Location
    Irvine, CA 92620
    Posts
    4,478
    I Support ClubWRX
    The problem stems from some of the scripts on the plugins and I'm trying to get them updated/installed ASAP. The problem is that some of the plugins have to be purchased and I haven't gotten the approval to download them yet. The issue will be fixed this weekend for sure. Hang in there and I'll keep you guys posted.
    Tim
    Admin

  11. #40
    Geriatric Ginger Mod Rogan's Avatar
    Join Date
    May 2007
    Location
    behind the wheel
    Posts
    8,188
    I Support ClubWRX
    thanks for jumping onto this, Tim.

    I didn't get the error this morning, for whatever reason.
    Rogan o_0
    '96 Dodge 2500 CTD @ 40psi - over 700 lb/ft TQ, 7" stack, and 5speed! - SOLD
    '01 Dodge 2500 CTD 6-holed hand-shaker - 3850# dual disk - 900 lb/ft - SOLD
    '97 Dodge 3500 CTD DUALLY built Auto - 40psi boosties - 750 lb/ft

  12. #41

    Flirty User That's Younger Than the Chunks of Corn in Brian's Crap

    WRXie's Avatar
    Join Date
    Mar 2009
    Location
    Down South
    Posts
    3,044
    I just got something through Chrome. It took me to a malware warning page that the site was connected to bron.in.
    2002 WRX Yellow Blaze


    Bugeye Mafia #216

    High Mileage Club

  13. #42
    Geriatric Ginger Mod Rogan's Avatar
    Join Date
    May 2007
    Location
    behind the wheel
    Posts
    8,188
    I Support ClubWRX
    Via Chrome this morning...
    Attached Thumbnails Attached Thumbnails new_msg_crex.jpg  
    Rogan o_0
    '96 Dodge 2500 CTD @ 40psi - over 700 lb/ft TQ, 7" stack, and 5speed! - SOLD
    '01 Dodge 2500 CTD 6-holed hand-shaker - 3850# dual disk - 900 lb/ft - SOLD
    '97 Dodge 3500 CTD DUALLY built Auto - 40psi boosties - 750 lb/ft

  14. #43
    Registered User mudferret's Avatar
    Join Date
    Aug 2009
    Location
    Canada/Ethiopia/Madagascar
    Posts
    1,979
    FWIW I've been free of these malware warnings for a couple of months now on both my laptops (Win XP home on one, XP Pro and Snow Leopard on the other), both running FF 3.XX.

    Must be one of the advertising banners.
    ...Rob.
    MMVI WRX - VF43 Airboy Tuned @ 3500'

  15. #44
    Administrator BlazinWRX's Avatar
    Join Date
    Apr 2001
    Location
    Irvine, CA 92620
    Posts
    4,478
    I Support ClubWRX
    Are you guys still getting it right now? I've been working on the issue over the weekend but still haven't come to a conclusion. Usually there's a script on one of the site plugins that is causing this. I'm going through the plugins right now to see if any of them would be responsible for this.
    Tim
    Admin

  16. #45
    Geriatric Ginger Mod Rogan's Avatar
    Join Date
    May 2007
    Location
    behind the wheel
    Posts
    8,188
    I Support ClubWRX
    I got the one, this morning, Tim (shown above), but not since.

    I did notice that the two ads were Nissan banner (at top) and Hyundai at the bottom of the page, when I got the warning, FWIW.
    Rogan o_0
    '96 Dodge 2500 CTD @ 40psi - over 700 lb/ft TQ, 7" stack, and 5speed! - SOLD
    '01 Dodge 2500 CTD 6-holed hand-shaker - 3850# dual disk - 900 lb/ft - SOLD
    '97 Dodge 3500 CTD DUALLY built Auto - 40psi boosties - 750 lb/ft

+ Reply to Thread
Page 3 of 4 FirstFirst 1234 LastLast

Quick Reply Quick Reply

Register Now

Please enter the name by which you would like to log-in and be known on this site.
If you do not want to register, fill this field only and the name will be used as user name for your post.

Please enter a password for your user account. Note that passwords are case-sensitive.

Please enter a valid email address for yourself. We strongly suggest that you stay away from using aol, yahoo, msn, and hotmail accounts. Sometimes the mail server blocks the emails from our server. As a result you will not receive any notifications including the confirmation email.

Log-in

Human Verification

In order to verify that you are a human and not a spam bot, please enter the answer into the following box below based on the instructions contained in the graphic.


Posting Permissions

  • You may post new threads
  • You may post replies
  • You may not post attachments
  • You may not edit your posts
  •