Page 3 of 5 FirstFirst 12345 LastLast
Results 21 to 30 of 46

Thread: this keeps appearing

  1. #21
    Now with more poop-smear Not Verified
    Join Date
    Sep 2010
    Owner Since
    Not Anymore

    Location
    Georgia
    Posts
    6,490
    Blog Entries
    3
    Thanks
    483
    Thanked 543 Times in 390 Posts
    Quote Originally Posted by DrGonzo View Post
    The exploit looks at the referrer in the request. Most likely your using an email client where the top level domain is also a well know search engine "IE Google, Yahoo, Etc"
    hotmail...so bing, i'm guessing?

  2. #22
    Never finishes any verified

    Join Date
    Sep 2010
    Owner Since
    2001

    Location
    Wake Forest, NC
    Posts
    2,518
    Thanks
    51
    Thanked 197 Times in 140 Posts
    Hotmail Referrer=bluXXX.mail.live.com. Live.com is probably part of the exploit check to redirect.

    The redirect is taking you to a download page were it it saying you are missing a plugin and need to install it. The EXE download is the malware from what I can see. I'm trying to determine the extent of the damage if installed.

    Check it out on Youtube!!


    93 Stealth TT - The Stealth Project

    Renegade Tech Works ECS Controller on Intrax Springs
    Chrome ECU
    Hybrid 13g's
    EVO 560cc Injectors
    Spec Stage 3 clutch
    Ninja Performance Output shaft & Input spool
    Ninja Performance Solid Tensioner & Gates racing T-Belt
    CX Racing Dual Core FMIC
    Megan SS Exhaust
    Fidanza Cam Gears and Clear Covers
    3rd Gen Lifters
    HKS BOV
    K&N FIPK
    Maximal High flow converter
    Walbro FP & FuelLab FPR
    Maximal and Seattle Solid Mounts
    All -6an Lines
    Custom -6AN coolant neck lines
    AWS/ABS/Cruise Delete
    MP Rear Control Arms
    SS Brake Lines
    99 Front Conversion
    2nd gen Rear Bumper
    99 Combat Wing
    Complete interior LED Swap
    Skillard Fuel channel
    Oohnoo FPR Bracket
    .
    .
    More to Come......

  3. #23
    1st ever COTM and COTY verified
    Join Date
    Aug 2010
    Owner Since
    Birth

    Location
    Tennessee
    Posts
    7,077
    Thanks
    649
    Thanked 451 Times in 347 Posts
    Quote Originally Posted by DrGonzo View Post
    Guys - This is not a virus on your PC. It is a hacking attempt on the 3sgto server.

    This will only affect people searching on major search engines and clicking on a link from that search engine trying to get to this site. it will redirect them to the filestore site which contains malware.
    http://www.3sgto.org/f8/unseen-all-o...gun-11070.html

    Those Iranian bastards have gone too far!!!!!

    Quote Originally Posted by HilbillyHomeboy View Post
    I bet she smells of old mustard and sawdust.
    Jeremy

  4. #24
    Administrator Alan92RTTT's Avatar
    Join Date
    Jul 2010
    Owner Since
    02/1998

    Location
    Madison Heights, Mi
    Posts
    2,958
    Blog Entries
    7
    Thanks
    16
    Thanked 675 Times in 255 Posts
    As an attempt at a temporary fix I have disabeled the SEO plugin.

    Please report if this changes anything.

  5. #25
    Now with more poop-smear Not Verified
    Join Date
    Sep 2010
    Owner Since
    Not Anymore

    Location
    Georgia
    Posts
    6,490
    Blog Entries
    3
    Thanks
    483
    Thanked 543 Times in 390 Posts
    i'll let you know the next time i get it, alan.

  6. #26
    Member Not Verified
    Join Date
    Feb 2011
    Owner Since
    2009

    Location
    Scottsbluff, NE
    Posts
    872
    Thanks
    37
    Thanked 49 Times in 36 Posts
    Quote Originally Posted by DrGonzo View Post
    Ha ha ha... You linked off to a forum Stealthee is a member on concerning this same issue!!!
    Haha... yeah I noticed that when I read through it the first time. I scrolled down and recognized the avatar. Then realized it was Stealthee. Small world LOL.
    1995 Dodge Stealth R/T Turbo
    Mods: DR750s, BC Sportsman rods, Ross pistons, ACT HD 6 puck clutch, 5 speed transmission, 300M output shaft, Broomfield racing billet transfer case housings, Spectre air filter, GM 3.75" MAF w/translator, DN Pre-turbo pipes, Pampena/CX Racing dual core FMIC, M2 Performance turbo-back exhaust, Walbro 450lph E85 pump, SXPerformance fuel filter, stainless fuel feed lines, EK2 Mfg fuel rails, SXPerformance AFPR, 1000cc Bosch injectors, 99 VR4 replica ECU w/ Chrome for tuning, Kenne Bell Boost-a-Spark, Blitz SBC i-D boost controller, IPS oil cooler, Intrax springs on KYB GR2 struts, Enkei Kojin 18X9.5 +30, Nexen N3000s, 99 front end, carbon fiber steering wheel, Pioneer AVH-X2600BT, JL C2 6.5" and 6"x9" speakers, free 4 channel amp for subs (LOL), twin Alpine 10" type E subs.

    Made 608whp/631wtrq on Pampena's dyno @ 31 psi.

  7. #27
    Frontline Fabrication verified
    Join Date
    Sep 2010
    Owner Since
    2001

    Location
    Morgantown, WV
    Posts
    210
    Thanks
    19
    Thanked 24 Times in 18 Posts
    malware.jpgSo have we black listed 3Si?? LOL ....I keep getting this on most pages I visit and it seems that its just because of a link on the pages and cant work around it unless I open in IE

    '95 Passion Red RT/TT
    www.frontlinefabrication.com

  8. #28
    Never finishes any verified

    Join Date
    Sep 2010
    Owner Since
    2001

    Location
    Wake Forest, NC
    Posts
    2,518
    Thanks
    51
    Thanked 197 Times in 140 Posts
    No it just means that someone is pulling an image or something from 3si. Probably their sig image or some other random image.

    3si is on Google's blacklist again cause one of their advertisements was flagged for serving viruses/trojans/etc. Not the first time or the last time it has happened.

  9. #29
    The one. The only. verified
    Join Date
    Sep 2010
    Owner Since
    August 28, 2002

    Location
    SWPA
    Posts
    4,042
    Thanks
    182
    Thanked 699 Times in 529 Posts
    3si probably has more malware infested ads.

    [06-05, 19:29] OhioSpyderman: Brian, finding a woman is NOT the answer, you need to shop for a good VACUUM

  10. #30
    Administrator Alan92RTTT's Avatar
    Join Date
    Jul 2010
    Owner Since
    02/1998

    Location
    Madison Heights, Mi
    Posts
    2,958
    Blog Entries
    7
    Thanks
    16
    Thanked 675 Times in 255 Posts
    Quote Originally Posted by MeTarzan View Post
    malware.jpgSo have we black listed 3Si?? LOL ....I keep getting this on most pages I visit and it seems that its just because of a link on the pages and cant work around it unless I open in IE
    http://safebrowsing.clients.google.c...://www.3si.org

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
The 3000GT/Stealth/GTO Web History Project
3000gt.com
3000GT / Stealth International WWWboard Archive
Jim's (RED3KGT) Reststop
3000GT/Stealth/GTO Information and Resources
Team 3S
3000GT / Stealth / GTO Information
daveblack.net
3000GT/Stealth/GTO Clubs and Groups
Michigan 3S
MInnesota 3S
Wisconsin 3S
Iowa, Nebraska, Kansas 3S
North California 3000GT/Stealth
United Society of 3S Owners
3000GT/Stealth/GTO Forums
3000GT/Stealth International
3000GT/Stealth/GTO Event Pages
3S National Gathering
East Coast Gathering
Upper Mid-West Gathering
Blue Ridge Gathering