Facebook Twitter

Page 1 of 4 123 ... LastLast
Results 1 to 10 of 38

Thread: Malware on the site today? "Web Attack: Mass Injection Website"

  1. #1
    Certified Oline Zealot JustAnotherBearsFan99's Avatar
    Join Date
    May 2012
    Location
    Ditkaville, Illinois
    Posts
    5,121
    Bear Bucks
    33,484
    Post Thanks / Like
    Items 63
Gift received at 04-16-2013, 02:27 PM from weneedmorelinemen
Message: Here you go, buddy.  Wear it with pride.GameballBears Head LogoGeorge Halas

    Malware on the site today? "Web Attack: Mass Injection Website"

    This afternoon my malware software protection has been giving me this message when I access dabears.com: Norton blocked an attack by: Web Attack: Mass Injection Website.
    Trestman - Kromer - Tucker - DeCamillis

    I'm looking forward to seeing these guys coach. Hope they're good.


  • #2
    Kill all the frowers.... Ski-Whiz's Avatar
    Join Date
    Jan 2007
    Location
    Key Farm, Western Australia, Australia, Australia
    Posts
    3,402
    Bear Bucks
    228,541
    Trophies
    Post Thanks / Like
    Items Pitcher O Beer!
Gift received at 10-21-2011, 07:38 AM from Bear Goggles
Message: Ride that pony!Flowers
Gift received at 10-18-2011, 08:22 PM from 4th and 26
Message: You are the frower of the siteBears CUsername Bold
Gift received at 12-30-2010, 12:56 PM from Bear GogglesUsername Bold
Gift received at 12-30-2010, 10:02 AM from Bear Goggles
    I'm looking into this, as I don't see anything on my end..

    I'll get back to you after I load up some other AV software. McAfee isn't seeing anything.
    From the guy running the Chicago Bears:

    "There aren't any teams that win year-after-year-after-year."-- Ted Phillips

  • #3
    Kill all the frowers.... Ski-Whiz's Avatar
    Join Date
    Jan 2007
    Location
    Key Farm, Western Australia, Australia, Australia
    Posts
    3,402
    Bear Bucks
    228,541
    Trophies
    Post Thanks / Like
    Items Pitcher O Beer!
Gift received at 10-21-2011, 07:38 AM from Bear Goggles
Message: Ride that pony!Flowers
Gift received at 10-18-2011, 08:22 PM from 4th and 26
Message: You are the frower of the siteBears CUsername Bold
Gift received at 12-30-2010, 12:56 PM from Bear GogglesUsername Bold
Gift received at 12-30-2010, 10:02 AM from Bear Goggles
    Ok, I've tracked this down..

    Those bastards hide two files on me. When I copied back the "/images" folder, they hide a little php file.. Funny thing is that it was called "in.php". Mighty nice of them. Guess I didn't inspect it as good as I should have.

    So I'm making sure I'm solid this time. The site is back up, but I'm doing a bunch of things in the background to secure the file system.

    Thanks for the heads up. Stoopid McAfee didn't say jack to me. So either it ignored it, or it didn't detect it. Good on AVG.. :D
    From the guy running the Chicago Bears:

    "There aren't any teams that win year-after-year-after-year."-- Ted Phillips

  • #4
    Mello Jello soulman's Avatar
    Join Date
    Oct 2004
    Location
    PEYTON'S PLACE
    Posts
    22,784
    Bear Bucks
    39,281
    Post Thanks / Like
    Blog Entries
    1
    Items Captain Morgan
Gift received at 11-07-2012, 07:28 AM from GermansbombedPH
Message: Better than that soap water guniessTequilla
Gift received at 09-22-2012, 10:24 AM from Riczaj01
Message: downhere in Northern Mexico(aka San Antonio Texas), we tend to share this....not my personal favorite, but I'm definately in the minority.Trophy
Gift received at 01-30-2012, 01:48 PM from Dagan81
Message: Because you're the best God damn poster on this message board!  And, a true friend at that!9599
    Quote Originally Posted by Ski-Whiz View Post
    Ok, I've tracked this down..

    Those bastards hide two files on me. When I copied back the "/images" folder, they hide a little php file.. Funny thing is that it was called "in.php". Mighty nice of them. Guess I didn't inspect it as good as I should have.

    So I'm making sure I'm solid this time. The site is back up, but I'm doing a bunch of things in the background to secure the file system.

    Thanks for the heads up. Stoopid McAfee didn't say jack to me. So either it ignored it, or it didn't detect it. Good on AVG.. :D
    I've been real happy with their stuff. I had a root kit infection they dug out a few months ago and it was a nasty one. I was on the phone with them and they were running programs to clean it up for over 5 hours before they were finally successful. What I like is their warnings about threats as they happen and the way they screen sites for malware or other nasty's. They've saved my ass a few times.

    Just one other heads up. When I post the system still won't break down in the paragraphs as I've typed them in. It bunches everything up into one long paragraph and the advanced functions icon is still missing. I'm not complaining. I'm just glad you were able to get us back in operation so quickly but I thought I'd just let you know about this in the event you hadn't tripped across it yet.

    Edit: Well now it's showing up in this post where it didn't a bit ago when I posted in the thread kegger put up about Cutler. Looks like we're all good.
    Last edited by soulman; 06-05-2012 at 06:41 PM.
    I'm getting to that age where a lifetime warranty just doesn't mean as much to me anymore as an afternoon nap.



    Honey Badger Don't Care. Honey Badger Don't Give a Shit.


  • #5
    Kill all the frowers.... Ski-Whiz's Avatar
    Join Date
    Jan 2007
    Location
    Key Farm, Western Australia, Australia, Australia
    Posts
    3,402
    Bear Bucks
    228,541
    Trophies
    Post Thanks / Like
    Items Pitcher O Beer!
Gift received at 10-21-2011, 07:38 AM from Bear Goggles
Message: Ride that pony!Flowers
Gift received at 10-18-2011, 08:22 PM from 4th and 26
Message: You are the frower of the siteBears CUsername Bold
Gift received at 12-30-2010, 12:56 PM from Bear GogglesUsername Bold
Gift received at 12-30-2010, 10:02 AM from Bear Goggles
    After a long battle today, I hope I have this place locked up finally!!

    They infected a lot of files.. The database is secured (never was compromised).
    From the guy running the Chicago Bears:

    "There aren't any teams that win year-after-year-after-year."-- Ted Phillips

  • High Fives ZifanQ, soulman, The Benjamin, loki520, gammabears and 1 others High-fived for this post.
  • #6
    Dent 4 HoF gammabears's Avatar
    Join Date
    Sep 2007
    Posts
    8,595
    Bear Bucks
    14,545
    Post Thanks / Like
    Blog Entries
    4
    Items 546Bears Head LogoDick ButkusWalter Payton
    You da man Ski!

  • High Fives Ski-Whiz High-fived for this post.
  • #7
    Certified Oline Zealot JustAnotherBearsFan99's Avatar
    Join Date
    May 2012
    Location
    Ditkaville, Illinois
    Posts
    5,121
    Bear Bucks
    33,484
    Post Thanks / Like
    Items 63
Gift received at 04-16-2013, 02:27 PM from weneedmorelinemen
Message: Here you go, buddy.  Wear it with pride.GameballBears Head LogoGeorge Halas
    Quote Originally Posted by gammabears View Post
    You da man Ski!
    I agree. Ski you run a great Bears site here. Top Tier all the way!!!
    Trestman - Kromer - Tucker - DeCamillis

    I'm looking forward to seeing these guys coach. Hope they're good.


  • High Fives Ski-Whiz High-fived for this post.
  • #8
    Kill all the frowers.... Ski-Whiz's Avatar
    Join Date
    Jan 2007
    Location
    Key Farm, Western Australia, Australia, Australia
    Posts
    3,402
    Bear Bucks
    228,541
    Trophies
    Post Thanks / Like
    Items Pitcher O Beer!
Gift received at 10-21-2011, 07:38 AM from Bear Goggles
Message: Ride that pony!Flowers
Gift received at 10-18-2011, 08:22 PM from 4th and 26
Message: You are the frower of the siteBears CUsername Bold
Gift received at 12-30-2010, 12:56 PM from Bear GogglesUsername Bold
Gift received at 12-30-2010, 10:02 AM from Bear Goggles
    Thanks everyone!

    I can't always be here, but when I am I try.. :D

    Hopefully I'll be retired from the military here shortly and can get back to running this site 24/7..


    I just know it suck for fans and members to see this site under attack. I hope to have squished it though.
    From the guy running the Chicago Bears:

    "There aren't any teams that win year-after-year-after-year."-- Ted Phillips

  • #9
    Mello Jello soulman's Avatar
    Join Date
    Oct 2004
    Location
    PEYTON'S PLACE
    Posts
    22,784
    Bear Bucks
    39,281
    Post Thanks / Like
    Blog Entries
    1
    Items Captain Morgan
Gift received at 11-07-2012, 07:28 AM from GermansbombedPH
Message: Better than that soap water guniessTequilla
Gift received at 09-22-2012, 10:24 AM from Riczaj01
Message: downhere in Northern Mexico(aka San Antonio Texas), we tend to share this....not my personal favorite, but I'm definately in the minority.Trophy
Gift received at 01-30-2012, 01:48 PM from Dagan81
Message: Because you're the best God damn poster on this message board!  And, a true friend at that!9599
    Quote Originally Posted by Ski-Whiz View Post
    Thanks everyone!

    I can't always be here, but when I am I try.. :D

    Hopefully I'll be retired from the military here shortly and can get back to running this site 24/7..


    I just know it suck for fans and members to see this site under attack. I hope to have squished it though.
    Nice job rooting it out and repairing it so fast. Thank you.
    I'm getting to that age where a lifetime warranty just doesn't mean as much to me anymore as an afternoon nap.



    Honey Badger Don't Care. Honey Badger Don't Give a Shit.


  • #10
    Mexipuss
    BearStuff's Avatar
    Join Date
    Feb 2006
    Location
    Behind the scenes
    Posts
    28,148
    Bear Bucks
    56,335
    Post Thanks / Like
    Blog Entries
    13
    Items Bears Head LogoBears Head LogoBears C2200
Gift received at 10-18-2011, 08:48 PM from 4th and 26
Message: I bought you the gheyest gift I could find on this site.  lol
    Quote Originally Posted by Ski-Whiz View Post
    Thanks everyone!

    I can't always be here, but when I am I try.. :D

    Hopefully I'll be retired from the military here shortly and can get back to running this site 24/7..

    socks


    Winston Churchill:
    "Since light travels faster than sound, some people appear bright until you hear them speak."

    "If you're not a liberal at twenty you have no heart, if you're not a conservative at forty you have no brain."

  • Page 1 of 4 123 ... LastLast

    Posting Permissions

    • You may not post new threads
    • You may not post replies
    • You may not post attachments
    • You may not edit your posts
    •