xbiz hacked?

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • abshard
    Confirmed User
    • Jan 2002
    • 6524

    #1

    xbiz hacked?

    Okay this is the 2nd time I have went to xbiz and got a virus warning.

    This time I didn't close the page right away. For a second everything on my screen went away except my desktop background. Then this full page, im guessing browser page poped up that said I owned money to cyber crimes division of fbi or something and need to goto 7-11 and buy a card to pay them off lol

    alt-f4 didn't do anything

    ctrl-alt-del worked but task manager didn't work from that screen so I used log off and I was able to get out of it.

    Anyone else experience this?

    this is the page I was viewing
    http://www.xbiz.com/news/164288

    Im guesing a rogue flash ad causing this?

    here is a screen cap of what I saw

  • Roald
    SecretFriends.com
    • May 2001
    • 27910

    #2
    Im getting a warning on that page "Application Blocked..."

    Name: JNLP
    Publisher: JNLP
    from: neatly-handsome-feminist_square.jar


    WE ARE BUYING PAY SITES! CONTACT ME



    ClubSweethearts | ManUpFilms | SinfulXXX | HOT * AdultPrime * HOT


    Paying webmasters since 1996! Contact: r.riepen @ sansylgroup.com | telegram: roaldr

    Comment

    • Google Expert
      Webmaster
      • Jun 2004
      • 14294

      #3
      I'm not getting any warning.

      You probably have a virus on your machine. Xbiz is fine.

      Comment

      • EddyTheDog
        Just Doing My Own Thing
        • Jan 2011
        • 25433

        #4
        It worries me that I didn't get a warning...

        Comment

        • abshard
          Confirmed User
          • Jan 2002
          • 6524

          #5
          I have got this virus warning 2 times on xbiz in the past 2 days.

          if its a rogue ad then might need to reload a few times I dunno.

          Comment

          • lezinterracial
            Confirmed User
            • Jul 2012
            • 3117

            #6
            Works fine for me. I think you have a virus on your pc. Have you run malware bytes?
            Live Sex Shows

            Comment

            • lezinterracial
              Confirmed User
              • Jul 2012
              • 3117

              #7
              http://botcrawl.com/how-to-remove-th...ivision-virus/
              Live Sex Shows

              Comment

              • abshard
                Confirmed User
                • Jan 2002
                • 6524

                #8
                Im in the process of running a full virus scan then will do the malware bytes next. I haven't actually rebooted my machine yet afraid it will pop up again.

                avast is what found the virus and gave me a warning but didn't seem to block it fully i guess

                Comment

                • lezinterracial
                  Confirmed User
                  • Jul 2012
                  • 3117

                  #9
                  Just curious, What browser you use?
                  Live Sex Shows

                  Comment

                  • Mark.Roy
                    Confirmed User
                    • Apr 2013
                    • 122

                    #10
                    everyhting is fine here, check your pc for virus.



                    email: mark[at]insanedollars[dot]com | ICQ::685~986~008

                    Flat $125 PPS Cam Site! Make Insane Dollar$!!

                    Comment

                    • abshard
                      Confirmed User
                      • Jan 2002
                      • 6524

                      #11
                      Was using IE 10 when it happened

                      Comment

                      • lezinterracial
                        Confirmed User
                        • Jul 2012
                        • 3117

                        #12
                        Originally posted by abshard
                        Was using IE 10 when it happened
                        I'm getting something in Antivirus when I use IE too.
                        Live Sex Shows

                        Comment

                        • abshard
                          Confirmed User
                          • Jan 2002
                          • 6524

                          #13
                          Originally posted by lezinterracial
                          I'm getting something in Antivirus when I use IE too.
                          So im not crazy lol

                          Comment

                          • abshard
                            Confirmed User
                            • Jan 2002
                            • 6524

                            #14
                            malware bytes found 3 things so I hope im good now

                            Comment

                            • abshard
                              Confirmed User
                              • Jan 2002
                              • 6524

                              #15
                              Also I got the warning then I proceeded to read the story then about 30sec later that thing poped up.

                              Comment

                              • lezinterracial
                                Confirmed User
                                • Jul 2012
                                • 3117

                                #16
                                Originally posted by abshard
                                So im not crazy lol
                                Microsoft Security Essentials found a file pump_file-abolish-safely. Doesn't know what it was, Just requested to send to Microsoft.
                                Live Sex Shows

                                Comment

                                • lezinterracial
                                  Confirmed User
                                  • Jul 2012
                                  • 3117

                                  #17
                                  Originally posted by abshard
                                  Also I got the warning then I proceeded to read the story then about 30sec later that thing poped up.
                                  Sorry not finding a virus though.
                                  Live Sex Shows

                                  Comment

                                  • lezinterracial
                                    Confirmed User
                                    • Jul 2012
                                    • 3117

                                    #18
                                    Originally posted by Roald
                                    Im getting a warning on that page "Application Blocked..."

                                    Name: JNLP
                                    Publisher: JNLP
                                    from: neatly-handsome-feminist_square.jar
                                    Cleared cookies and reopened in IE and I got a similar error like this, different file name. Along with the Security Essentials error file, a different file name (monarch majority).

                                    I think there is a screwed up flash ad on there somewhere.
                                    Last edited by lezinterracial; 06-21-2013, 01:09 AM.
                                    Live Sex Shows

                                    Comment

                                    • PhoneSexKing
                                      Confirmed User
                                      • Jun 2013
                                      • 190

                                      #19
                                      Oh, that's not a virus.

                                      That's just how PRISM works now.

                                      Comment

                                      • abshard
                                        Confirmed User
                                        • Jan 2002
                                        • 6524

                                        #20
                                        okay so I just rebooted and cleaned my system and everything seems fine

                                        so I went back to xbiz in the link above and I got a popup in the center of the screen to update my java

                                        3 options
                                        I think they were

                                        update
                                        block
                                        later

                                        I don't remember if that happened first last time but I just closed the browser and now when I goto it its fine.

                                        Is that normal for it to ask to update your java at a random website like that?

                                        looked like this
                                        Last edited by abshard; 06-21-2013, 01:52 AM.

                                        Comment

                                        • abshard
                                          Confirmed User
                                          • Jan 2002
                                          • 6524

                                          #21
                                          You know what i think i did get that last time and i hit later before i got the virus

                                          Comment

                                          • ctggls
                                            Confirmed User
                                            • Aug 2012
                                            • 898

                                            #22
                                            Wow... you're using Internet Explorer.... I thought IE was abolished by serious web surfers...

                                            Comment

                                            • abshard
                                              Confirmed User
                                              • Jan 2002
                                              • 6524

                                              #23
                                              Originally posted by ctggls
                                              Wow... you're using Internet Explorer.... I thought IE was abolished by serious web surfers...
                                              i have IE,chrome and ff most people use IE so i like to see my websites in IE and the others

                                              Comment

                                              • abshard
                                                Confirmed User
                                                • Jan 2002
                                                • 6524

                                                #24
                                                Pretty sure its a java hack, the computer that was infected has an older version of java so it runs unsigned java code and i tried on a computer with a new java version and its blocking the code from running. Im seeing the same stuff you guys are, jmlp and another different one also. On the computer that was infected i hit the option "later" it just ran code on my other computer. And i got the virus.

                                                Comment

                                                • Ferus
                                                  Bye - Left to do stuff
                                                  • Feb 2013
                                                  • 4108

                                                  #25
                                                  Originally posted by ctggls
                                                  Wow... you're using Internet Explorer.... I thought IE was abolished by serious web surfers...
                                                  You are a hipster, we get it already

                                                  Comment

                                                  • abshard
                                                    Confirmed User
                                                    • Jan 2002
                                                    • 6524

                                                    #26
                                                    Everytime i delete cookies and reload www.xbiz.com i get a warning about a unsecure or unsigned java code

                                                    all the ones i noticed are from this domain

                                                    randomsubdomain.sobertow.net:754/different-words-every-time.jar
                                                    Last edited by abshard; 06-21-2013, 02:38 AM.

                                                    Comment

                                                    • Ferus
                                                      Bye - Left to do stuff
                                                      • Feb 2013
                                                      • 4108

                                                      #27
                                                      Your PC is still infected, it have NOTHING to do with xbiz.

                                                      Your Java was outdated, that is how you got infected.

                                                      Start by uninstalling java, if you haven't already.
                                                      Disable system restore (google it if you don't know how)
                                                      Then go to IE setting, and reset to default under "settings"
                                                      Download and run Kaspersky rootkit detector http://www.bleepingcomputer.com/download/tdsskiller/
                                                      Reboot
                                                      Download and install this trial http://www.bitdefender.com/solutions...-security.html
                                                      Run a full scan and don't use the computer for anything in the meantime

                                                      Comment

                                                      • abshard
                                                        Confirmed User
                                                        • Jan 2002
                                                        • 6524

                                                        #28
                                                        Originally posted by Ferus
                                                        Your PC is still infected, it have NOTHING to do with xbiz.

                                                        Your Java was outdated, that is how you got infected.

                                                        Start by uninstalling java, if you haven't already.
                                                        Disable system restore (google it if you don't know how)
                                                        Then go to IE setting, and reset to default under "settings"
                                                        Download and run Kaspersky rootkit detector http://www.bleepingcomputer.com/download/tdsskiller/
                                                        Reboot
                                                        Download and install this trial http://www.bitdefender.com/solutions...-security.html
                                                        Run a full scan and don't use the computer for anything in the meantime
                                                        i got rid of the virus already. i used a totally different computer when i was checking xbiz after.

                                                        Comment

                                                        • Jel
                                                          Confirmed User
                                                          • Feb 2007
                                                          • 6904

                                                          #29
                                                          may as well chime in, I clicked a link yesterday to xbiz and got a warning from AVG telling me it had blocked a threat. Didn't bother checking what it was etc., just clicked 'ok', closed the xbiz page, and carried on.

                                                          Comment

                                                          • Ferus
                                                            Bye - Left to do stuff
                                                            • Feb 2013
                                                            • 4108

                                                            #30
                                                            Originally posted by abshard
                                                            i got rid of the virus already. i used a totally different computer when i was checking xbiz after.
                                                            I take it back, the site is infected.

                                                            First I tested and there were nothing, then I reloaded and Symantec Enterprise blocked the site.

                                                            My apologies

                                                            Comment

                                                            • Jamie Gardner
                                                              Registered User
                                                              • Nov 2011
                                                              • 33

                                                              #31
                                                              I can't connect with the Mike South website. I wonder if it has been hacked.

                                                              Comment

                                                              • Roald
                                                                SecretFriends.com
                                                                • May 2001
                                                                • 27910

                                                                #32
                                                                Originally posted by Jamie Gardner
                                                                I can't connect with the Mike South website. I wonder if it has been hacked.
                                                                same here


                                                                WE ARE BUYING PAY SITES! CONTACT ME



                                                                ClubSweethearts | ManUpFilms | SinfulXXX | HOT * AdultPrime * HOT


                                                                Paying webmasters since 1996! Contact: r.riepen @ sansylgroup.com | telegram: roaldr

                                                                Comment

                                                                • _Richard_
                                                                  Too lazy to set a custom title
                                                                  • Oct 2006
                                                                  • 30991

                                                                  #33
                                                                  It's not just you! http://www.mikesouth.com looks down from here.

                                                                  odd considering recent discussions

                                                                  Comment

                                                                  • Bman
                                                                    Confirmed User
                                                                    • Aug 2003
                                                                    • 1679

                                                                    #34
                                                                    Originally posted by PhoneSexKing
                                                                    Oh, that's not a virus.

                                                                    That's just how PRISM works now.
                                                                    ICQ 228211529

                                                                    Comment

                                                                    • mikesouth
                                                                      Confirmed User
                                                                      • Jun 2003
                                                                      • 6334

                                                                      #35
                                                                      Originally posted by Jamie Gardner
                                                                      I can't connect with the Mike South website. I wonder if it has been hacked.
                                                                      Im migrating servers no worries just waiting for dns propagation now
                                                                      Mike South

                                                                      It's No wonder I took up drugs and alcohol, it's the only way I could dumb myself down enough to cope with the morons in this biz.

                                                                      Comment

                                                                      • Nasty
                                                                        Confirmed User
                                                                        • Aug 2002
                                                                        • 1575

                                                                        #36
                                                                        Originally posted by mikesouth
                                                                        Im migrating servers no worries just waiting for dns propagation now
                                                                        good move, its a fuck of a lot faster for me now

                                                                        “Ours is a world of nuclear giants and ethical infants. We know more about war than we know about peace, more about killing than we know about living. If we continue to develop our technology without wisdom or prudence, our servant may prove to be our executioner.” ― Omar Bradley (1948)

                                                                        Comment

                                                                        • mikesouth
                                                                          Confirmed User
                                                                          • Jun 2003
                                                                          • 6334

                                                                          #37
                                                                          Originally posted by Nasty
                                                                          good move, its a fuck of a lot faster for me now
                                                                          Thank You HUGE props to chris at m3servers.....these guys are great

                                                                          nice article coming on them
                                                                          Mike South

                                                                          It's No wonder I took up drugs and alcohol, it's the only way I could dumb myself down enough to cope with the morons in this biz.

                                                                          Comment

                                                                          • lezinterracial
                                                                            Confirmed User
                                                                            • Jul 2012
                                                                            • 3117

                                                                            #38
                                                                            Originally posted by abshard
                                                                            i have IE,chrome and ff most people use IE so i like to see my websites in IE and the others
                                                                            Me, Too. I use firefox most of the time. I like to check things in ie and chrome too.
                                                                            Last edited by lezinterracial; 06-21-2013, 08:27 PM.
                                                                            Live Sex Shows

                                                                            Comment

                                                                            • brassmonkey
                                                                              Pay It Forward
                                                                              • Sep 2005
                                                                              • 77396

                                                                              #39
                                                                              mikewest who??
                                                                              TRUMP 2026 KEKAW!!! - The Laken Riley Act Is Law!
                                                                              DACA ENDED - SUPPORT AZ HCR 2060 52R - email: brassballz-at-techie.com

                                                                              Comment

                                                                              Working...