1. Guest - Remember that Thread Prefixes are a search tool! Click on a Thread Prefix and all threads with the same Prefix in that forum will be offered to you. To dismiss this notice click on X >>>
    Dismiss Notice
  2. Our gif only content threads have a rule where all thumbs must be posted as a static thumbnail that does not play. Currently imagebam made a change where they no longer produce static thumbs. Therefore, please do not use imagebam, or any host, that provides live playing gifs in those specific threads. If you see your gif playing once you post, try to use a smaller thumbnail and if that does not work use a different approved host.
    Dismiss Notice
  3. Can't Log-in?. If your password is no longer accepted but the email address registered in your profile is working, use the "Forgot Your Password?" routine. However, if your registered email address is unusable, create a new temporary phun account and contact S-type.
    Dismiss Notice
  4. ATTN: Imagehost picpie is infected with the "internet security warning" redirect that tries to take users hostage with an inescapable redirect. Avoid using picpie as an imagehost.
    Dismiss Notice
  5. Too many Alerts? Why not adjust your "Alert Preferences" in your Profile Page?
    Dismiss Notice
Thread Prefixes Do not use Imagebam in GIF Content Threads Log-in issues picpie Alerts out of control?

Imagevenue popup tried to install virus

Discussion in 'About phun.org' started by half_a_mind, Nov 10, 2008.

Page 1 of 2
  1. half_a_mind

    half_a_mind

    Joined:
    May 6, 2008
    Messages:
    115
    Likes Received:
    770
    It looks like Imagevenue has gone over to the darkside. Be careful out there.
     
    half_a_mind, Nov 10, 2008
    #1
  2. gaphugs

    gaphugs BANNED

    Joined:
    Oct 17, 2005
    Messages:
    8,976
    Likes Received:
    10,349
    had the same problem
     
    gaphugs, Nov 10, 2008
    #2
  3. Taipan

    Taipan Reach Out And Touch Faith Staff Member ★ ★ ★ ★ ★ 15 Year Member Original Phun Crew Phun Award Holder POLL STAR ★

    Joined:
    Feb 24, 2006
    Messages:
    45,923
    Likes Received:
    166,755
    No problem here & never had.
     
    Taipan, Nov 10, 2008
    #3
  4. trigon73

    trigon73

    Joined:
    Oct 8, 2008
    Messages:
    182
    Likes Received:
    849
    It happened to me too yesterday
     
    trigon73, Nov 10, 2008
    #4
  5. wtfazzhole

    wtfazzhole Munchin on Pussy ★ ★ ☆ ☆ ☆ 15 Year Member Original Phun Crew

    Joined:
    Dec 15, 2004
    Messages:
    55,654
    Likes Received:
    11,854
    Do you guys know which ad it was that was trying to install the virus? If so let me know so i can tell the owner of imagevenue. If the problem persist we might have to remove them off our image hosting list because this is the second time.
     
    wtfazzhole, Nov 10, 2008
    #5
    demonspeedng22 likes this.
  6. half_a_mind

    half_a_mind

    Joined:
    May 6, 2008
    Messages:
    115
    Likes Received:
    770
    Sorry, My Norton caught it so I killed the browser as soon as I got the notification. If i get it again, I'll let you know which ad and which virus.
     
    half_a_mind, Nov 10, 2008
    #6
  7. Taipan

    Taipan Reach Out And Touch Faith Staff Member ★ ★ ★ ★ ★ 15 Year Member Original Phun Crew Phun Award Holder POLL STAR ★

    Joined:
    Feb 24, 2006
    Messages:
    45,923
    Likes Received:
    166,755
    I talked to the owner of imagevenue.No problem at all ;)
     
    Taipan, Nov 11, 2008
    #7
  8. half_a_mind

    half_a_mind

    Joined:
    May 6, 2008
    Messages:
    115
    Likes Received:
    770
    Caught it!!!

    Norton describes it as:
    HTTP Malicious Toolkit Variant Activity

    Attacker URL:
    ownroom.org/images/

    Destination Address:
    ownroom.org(79.143.177.37,80)

    One nasty popup
     
    half_a_mind, Nov 11, 2008
    #8
    foofie likes this.
  9. do_uno_hu

    do_uno_hu

    Joined:
    Sep 7, 2006
    Messages:
    3
    Likes Received:
    3
    Yep, just happened to me a minute ago. This popup uses the recently found exploit in Adobe Reader to run some javascript to install crap. It works by linking to a malicious PDF that gets opened but unseen by you. The latest version of Adobe Reader (9.0) is safe and there is a patch for version 8. It's also highly recommended to disable Javascript in the Adobe Reader preferences because this is the second time an exploit like this has been found in the last few months.
     
    do_uno_hu, Nov 11, 2008
    #9
    Sum Yung Gi likes this.
  10. rapids_x

    rapids_x firebrigade

    Joined:
    Apr 18, 2007
    Messages:
    2,836
    Likes Received:
    687
    Happened to me once, couple months before. Very annoying, taken my time to get the pc clean. AVG pro done nothing.
     
    rapids_x, Nov 11, 2008
    #10
  11. rapids_x

    rapids_x firebrigade

    Joined:
    Apr 18, 2007
    Messages:
    2,836
    Likes Received:
    687
    Registered 2006?
    Welcome to (the real) phun!
     
    rapids_x, Nov 11, 2008
    #11
  12. wtfazzhole

    wtfazzhole Munchin on Pussy ★ ★ ☆ ☆ ☆ 15 Year Member Original Phun Crew

    Joined:
    Dec 15, 2004
    Messages:
    55,654
    Likes Received:
    11,854
    I just sent an email to the owner of the site's personal email account so I will have him handle it. We have gone back over 4 years and he is a cool guy. I am sure he will take care of it as soon as he gets my email. ;)
     
    wtfazzhole, Nov 11, 2008
    #12
    rapids_x and half_a_mind like this.
  13. LUvNiT

    LUvNiT

    Joined:
    Jan 4, 2006
    Messages:
    4,143
    Likes Received:
    1,853
    Surely we would have to be in the top 5 or 10 of sites that use imagehosts the most?
     
    LUvNiT, Nov 11, 2008
    #13
  14. Jetstream

    Jetstream Goodnight Julia

    Joined:
    Oct 9, 2006
    Messages:
    7,324
    Likes Received:
    1,917
    We can't exist without them, so yeah. I can agree with that.
     
    Jetstream, Nov 11, 2008
    #14
  15. wtfazzhole

    wtfazzhole Munchin on Pussy ★ ★ ☆ ☆ ☆ 15 Year Member Original Phun Crew

    Joined:
    Dec 15, 2004
    Messages:
    55,654
    Likes Received:
    11,854
    I would assume we are in that upper echelon yes. ;)
     
    wtfazzhole, Nov 11, 2008
    #15
  16. imagevenuedotcom

    imagevenuedotcom

    Joined:
    Oct 13, 2008
    Messages:
    4
    Likes Received:
    18
    Imagevenue.com stuff is here.

    Thanks for your input.

    We found and banned the advertiser who tried to promote malware.

    He was pretending to promote some free adult site

    Thanks for all your input.
     
    imagevenuedotcom, Nov 11, 2008
    #16
    piroshok, rapids_x and half_a_mind like this.
  17. Noodle Panda

    Noodle Panda ★ ★ ★ ★ ☆ 15 Year Member

    Joined:
    Apr 22, 2007
    Messages:
    38,349
    Likes Received:
    77,323
    Imagevenue just tried to install malicious software on my pc too.

    For the second time. It's coming up as a reported attack site at least once per day now.

    Maybe someone with more technical experise than me (no jokes please) should look into it.
     
    Noodle Panda, Nov 14, 2008
    #17
  18. haydaddict

    haydaddict Smiley King ★ ★ ★ ★ ☆ 15 Year Member

    Joined:
    Nov 28, 2007
    Messages:
    74,064
    Likes Received:
    94,825
    [​IMG]

    Thank god i didnt have any problems with that...
     
    haydaddict, Nov 14, 2008
    #18
  19. piroshok

    piroshok

    Joined:
    Jun 21, 2007
    Messages:
    192
    Likes Received:
    49
    I wouldn't thank anyone yet if Jammsbro continues having problems after the announcement that means the site has been hijacked and some phising may be occurring too.
    I have no problems visiting with Opera or FF 3.04 but I did have three nasties hiding in sys32 directory they all have been removed.
     
    piroshok, Nov 14, 2008
    #19
  20. Stonegimp

    Stonegimp

    Joined:
    Apr 13, 2007
    Messages:
    216
    Likes Received:
    976
    Just had an attack blocked again
    here are the details
    Norton describes it as:
    HTTP Malicious Toolkit Variant Activity 2

    Attacking address
    85.12.43.126, 80

    Destination Address:
    ownroom.org(79.143.177.37,80)

    here is some infor on the IP Address
    IP Address: 85.12.43.126
    Host: 85.12.43.126.xentronix.nl
    Location: NL, Netherlands
    City: Eindhoven, 06 -
    Organization: XENTRONIX
    ISP: Euroaccess
    AS Number: AS34305 Euroaccess Global Autonomous System
     
    Stonegimp, Nov 17, 2008
    #20
Page 1 of 2

Share This Page