Malware Warning on my Plusnet Space
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Plusnet Community
- :
- Forum
- :
- Help with my Plusnet services
- :
- Broadband
- :
- Re: Malware Warning on my Plusnet Space
Malware Warning on my Plusnet Space
02-07-2010 10:32 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
I am getting a Malware warning on my webspace (which I have completely emptied aside from the linked image below) as follows:
It is reported as URL:MAL and references blog.eurekajewelrydesign.com, as site I've never seen or heard of before now.
This is triggered in both AVG and Avast through Google Chrome and Firefox, but NOT IE8.
I am puzzled as it even came up when there were absolutely NO files uploaded.
Has anyone else seen this?
Thanks,
Pete.
Re: Malware Warning on my Plusnet Space
03-07-2010 1:08 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
I think the reason is blog.eurekajewelrydesign.com may be a malicious website And is linking to your site. If you pay for your webspace @ plusnet i would contact customer support on 01142965198 Immediately.
Good luck
Re: Malware Warning on my Plusnet Space
03-07-2010 1:21 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
"In The Beginning Was The Word, And The Word Was Aardvark."
Re: Malware Warning on my Plusnet Space
03-07-2010 4:30 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
However i have again tried to access it and avg popped up.
Results
Danger: AVG Active Surf-Shield has detected active threats on this page and has blocked access for your protection.
The page you are trying to access has been identified as a known exploit, phishing, or social engineering web site and therefore has been blocked for your safety. Without protection, such as that in the AVG Security Toolbar and AVG, your computer is at risk of being compromised, corrupted or having your identity stolen. Please follow one of the suggestions below to continue.
URL: blog.eurekajewelrydesign.com/main.php?h=www.badrick.plus.com&i=J8mtjdIVqP6liRj+XsRCzJEZ&e=4
Name: Rogue Scanner (type 1144)
Re: Malware Warning on my Plusnet Space
03-07-2010 9:22 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
[DIR] Parent Directory 27-Jun-2005 09:22 -
[IMG] glitch.jpg 02-Jul-2010 22:28 25k
[IMG] warning.jpg 02-Jul-2010 22:28 26k
Avast didnt like it either
I have been getting a lot of spam emails recently that have modified redirects to genuine URL's just like your one, I think that they are all to do with a Facebook address list that I can trace back to an ex friend - the list is several years old and the URL's are also on French and German Facebook
Re: Malware Warning on my Plusnet Space
03-07-2010 1:35 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
"In The Beginning Was The Word, And The Word Was Aardvark."
Re: Malware Warning on my Plusnet Space
04-07-2010 12:01 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Quote from: A simply because it doesn't have an index.html file in it?
No, mirror sites (CentOS,Apache etc) do not have a Index. Just because the files are not visable, does not meen they are not there.
Re: Malware Warning on my Plusnet Space
04-07-2010 11:06 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Quote from: pierre_pierre the contents of your site are
[DIR] Parent Directory 27-Jun-2005 09:22 -
[IMG] glitch.jpg 02-Jul-2010 22:28 25k
[IMG] warning.jpg 02-Jul-2010 22:28 26k
Avast didnt like it either
I have been getting a lot of spam emails recently that have modified redirects to genuine URL's just like your one, I think that they are all to do with a Facebook address list that I can trace back to an ex friend - the list is several years old and the URL's are also on French and German Facebook
I do have a Facebook account, but there is no reference to my plusnet spare on there. My sign in is a gmail account. I've raised a ticket on this issue and they told me it is my local machine, which clearly isn't the case.
Pete
Re: Malware Warning on my Plusnet Space
05-07-2010 3:48 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Re: Malware Warning on my Plusnet Space
05-07-2010 9:46 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
B.
Re: Malware Warning on my Plusnet Space
05-07-2010 10:29 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
I also tried the link with the eurekajewelrydesign URL in there and it didn't load - that may be that it was a dodgy site (and the cause of the errors) and is now down, but I also use the mvps hosts file mod so it could be that too.
I suspect that the cause of this is either malware on the OPs PC redirecting any queries via a dodgy site, or possibly as Barry says a false positive due to the link.
Where did you end up with the blog.eurekajewelrydesign link?
Re: Malware Warning on my Plusnet Space
06-07-2010 1:02 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Also AVG reports the problem as well as Avast.
I have contacted the domain provider for eureka from the whois information, but am yet to have any reply.
I hope someone puts their hands up very soon as I have removed my Son's site from Plusnet space as lots of people were complaining about it to him. Another indication that it isn't MY machine.
Pete.
Re: Malware Warning on my Plusnet Space
06-07-2010 7:48 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Phil
Superusers are not staff, but they do have a direct line of communication into the business in order to raise issues, concerns and feedback from the community.
Re: Malware Warning on my Plusnet Space
06-07-2010 7:58 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Re: Malware Warning on my Plusnet Space
06-07-2010 8:48 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Quote Do you have a dodgy .htaccess file in there that is doing the redirect?
Bingo, just removing it from the webspace now.
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Plusnet Community
- :
- Forum
- :
- Help with my Plusnet services
- :
- Broadband
- :
- Re: Malware Warning on my Plusnet Space