Page 1 of 1

Virus Warning

Posted: Fri Apr 09, 2010 10:23 am
by Fred32v
The last two times I logged onto TireSmoke my Nortons has blocked a high risk heuristic virus called "Bloodhound.PDF!gen".
I don't know what it does but it can't be good. It seems to be attempting to load each time you login to tiresmoke. :evil:

more hacking

Posted: Fri Apr 09, 2010 8:16 pm
by Fred32v
more hacking, see GMJohnny's post of Vegas and open the picture of he and tim at the slots.
How do they get that little box to show up?

Posted: Sat Apr 10, 2010 10:46 am
by MostMint
when you upload the images, be sure to click "family safe" and the porn advertisements won't show up - at least they did not on the pics I uploaded this morning.

another attack

Posted: Mon Apr 19, 2010 9:48 pm
by Fred32v
The last several times I've launched TSO, Norton's has blocked a High Risk called
"HTTP FakeAV Scan Webpage 2" from an attack computer called
"Local Host (127.0.0.1,4317)" with a destination address
"ns1.peachtreepropainters.net(195.2.253.42.80)".
This attack is unique to my TSO site launch.
Will there be no end to these attacks.

Posted: Tue Apr 20, 2010 8:34 pm
by Basement Paul
When I logged on yesterday my AVG caught something too. So far no problems (knock on wood).

-BP

Posted: Wed Apr 21, 2010 12:16 am
by TireSmoker
I'm seeing it too, although only intermittently. This is something I'm not sure how to deal with -- yet.

Posted: Sat Apr 24, 2010 9:51 am
by TireSmoker
Ok guys, I spent a little quality time with the site tonight and I think I've got everything cleaned up. I think I found all instances of the hack and have removed them.

If you are getting any more alerts from your software when accessing TSO, please let me know right away, either a direct email or even a phone call. (well, email until I'm back in the US)

As I type this, y'all should be wandering around at Carlisle. I hope there are plenty of dealz to be had. Maybe I'll try calling Mostmint and get a live update. :)

-Dave

Still a Fungus Amongus

Posted: Mon Apr 26, 2010 1:52 am
by XeroxBill
Hi Dave and all the Guys
Hope Carlisle was a blast! Hey Dave... I've had trouble tonight with a dude called "chris 442". I've been getting hammered with norton blocks a few times trying to read his messages and responding. I'n still illiterare so I have not gotten better info on his I.P. or his "urtl"
later, XeroxBill

Posted: Mon Apr 26, 2010 6:38 am
by GMJohnny
Dave .... I know who Chris442 is. I have been hounding him to jump on Tiresmoke. I know he's not trying to hack us.

GM

Posted: Mon Apr 26, 2010 7:00 am
by TireSmoker
John, then please give him my apologies. After Bill's posting, everything just seem too coincidental, and I deleted his account. It must've actually been coincidental that he registered right around the time this stuff started happening.

-Dave

Posted: Mon May 03, 2010 2:12 am
by TireSmoker
Found/removed another problem. Hope this does it...

I've been browsing the site for a few minutes now in all the forums and nothing seems to be popping up for me. Nice to have a slow day at work. :-)

-Dave