Quiltingboard Forums

Quiltingboard Forums (https://www.quiltingboard.com/)
-   General Chit-Chat (non-quilting talk) (https://www.quiltingboard.com/general-chit-chat-non-quilting-talk-f7/)
-   -   Computer Threats (https://www.quiltingboard.com/general-chit-chat-non-quilting-talk-f7/computer-threats-t43890.html)

pvquilter 04-25-2010 01:29 PM

I was on the Quilting Board site and all of a sudden I had something that said, Computer threat on Quilt Board site. Do not go to this site as it may take financial information etc from me. What Is This?????

Born2Sew 04-25-2010 01:31 PM

Not sure about that but I was on here last night and Norton popped up a message that a trojan tried to access my system. I love this site so much, I would hate to have to stop visiting because of something like this.

sharon b 04-25-2010 01:37 PM

I wonder if it could be something trying to creep in from the adds ? Contact Admin and let him know, he needs to be aware if there is a problem

amma 04-25-2010 01:39 PM

I have Norton, and have never had anything like that pop up, or when I had Mc Caffee either here...

Admin 04-25-2010 01:47 PM

A few people have reported something similar.

Make sure it's real antivirus and not adware posing as antivirus.

For example, here is the scan information straight from Norton:

http://safeweb.norton.com/report/sho...ltingboard.com

If you have popups claiming to be Norton antivirus, it might be malware that pretends to be a Norton application, while in reality it's adware.

Born2Sew 04-25-2010 01:49 PM

This is the info that norton gave me:

Risk name: HTTP Trojan Mebroot Request
Attacking Computer: 67.18.213.122.80
access was blocked

sharon b 04-25-2010 01:50 PM

See on top of it :thumbup: thanks for the info

Admin 04-25-2010 03:09 PM


Originally Posted by Born2Sew
This is the info that norton gave me:

Risk name: HTTP Trojan Mebroot Request
Attacking Computer: 67.18.213.122.80
access was blocked

Thanks, that's good info.

This board's IP address is: 66.135.53.75. So with port 80, it would be 66.135.53.75.80 or 66.135.53.75:80. If some post was infected, it would come from the same IP, not from 67.18.213.122.80.

It's either adware or rogue ads.

Can you take a screenshot of the page next time you see it happen?
If possible, try to make sure the ads are visible. That could shed some more light.

Admin 04-25-2010 03:11 PM

It looks like someone posted about it on Norton's forums:

http://community.norton.com/t5/Norto...on/td-p/224672

If you use Norton, then you might want to keep an eye on that thread.

And here is a screenshot from someone talking on Google forums about a similar attack:

http://i117.photobucket.com/albums/o.../Capture-1.jpg

Is that the kind of popup you get?

Born2Sew 04-25-2010 03:32 PM

Yes, that's it, except the extension name was a bit different. Otherwise, yes it's the same message.


All times are GMT -8. The time now is 04:45 AM.