Need someone to check a page for Virii/Trojan - GoFuckYourself.com

Fuckin Bill · 12-28-2005, 01:35 PM

I'm getting some complaints from surfers about a client's site loading Virus or Trojan programs, but when I check the page I don't see anything in the source or in the browser to confirm it.

I don't think the site owner is doing anything on purpose, but I can't rule out that one of his sponsors isn't doing something underhanded, and possibly only popping up for certain IP ranges.

Could I get a few of you in different places (With good virus protection) to check the page and tell me if you get any warnings from your AV program or anything?

http://www.galleriestriplex.com is the page. I'm told the malware is coming directly from the main page with no clicking of any links.

nnweb · 12-28-2005, 01:37 PM

yeah let me load that right up!

Dirty F · 12-28-2005, 01:37 PM

Virii is not a word. Viruses is.

Fuckin Bill · 12-28-2005, 01:41 PM

Ok, thanks for the smartass answers.

Just thought maybe some people might want to help out. Since he is using some pretty big and common sponsors with Iframes on the page. If the page does show some sort of malware, there's gonna be a ton of people who will want to investigate their own pages a little more closely.

G-Rotica · 12-28-2005, 01:43 PM

Well, I loaded it on my test system, and did a full scan afterwards. All clean.

Fuckin Bill · 12-28-2005, 01:45 PM

Quote:

Originally Posted by G-Rotica

Well, I loaded it on my test system, and did a full scan afterwards. All clean.

Cool thanks for checking it for me. I didn't get anything weird on my machine either. I'm hoping maybe a few more guys in different areas can give it a go as well, just to make sure it's not some sort of geoIP thing.

Screaming · 12-28-2005, 01:47 PM

Nothing here

Fuckin Bill · 12-28-2005, 02:00 PM

Thanks for checking guys. I appreciate the help.

Porko · 12-28-2005, 02:07 PM

looks clear here too.

Harmon · 12-28-2005, 02:08 PM

Maybe he is filtering his traffic by country

fris · 12-28-2005, 02:08 PM

if you have a dedicated box just wget http://www.url.com then load it in an editor

12-28-2005, 01:35 PM	#1
Fuckin Bill Confirmed User Join Date: Feb 2003 Posts: 1,020	Need someone to check a page for Virii/Trojan I'm getting some complaints from surfers about a client's site loading Virus or Trojan programs, but when I check the page I don't see anything in the source or in the browser to confirm it. I don't think the site owner is doing anything on purpose, but I can't rule out that one of his sponsors isn't doing something underhanded, and possibly only popping up for certain IP ranges. Could I get a few of you in different places (With good virus protection) to check the page and tell me if you get any warnings from your AV program or anything? http://www.galleriestriplex.com is the page. I'm told the malware is coming directly from the main page with no clicking of any links.

12-28-2005, 01:43 PM	#5
G-Rotica Confirmed User Industry Role: Join Date: Aug 2005 Location: Austin, TX Posts: 4,258	Well, I loaded it on my test system, and did a full scan afterwards. All clean. __________________

12-28-2005, 01:47 PM	#7
Screaming I can change this!!!!! Join Date: Feb 2004 Posts: 18,972	Nothing here __________________

12-28-2005, 02:07 PM	#9
Porko SeeMyBucks.com Industry Role: Join Date: Sep 2002 Location: USA Posts: 4,014	looks clear here too. __________________

12-28-2005, 02:08 PM	#10
Harmon ( ͡ʘ╭͜ʖ╮͡ʘ) Industry Role: Join Date: Mar 2004 Posts: 20,010	Maybe he is filtering his traffic by country __________________ [email protected]

12-28-2005, 01:37 PM	#2
nnweb Confirmed User Industry Role: Join Date: Apr 2004 Location: OC Posts: 720	yeah let me load that right up!

12-28-2005, 01:37 PM	#3
Dirty F Too lazy to set a custom title Industry Role: Join Date: Jul 2001 Posts: 59,204	Virii is not a word. Viruses is.

12-28-2005, 01:41 PM	#4
Fuckin Bill Confirmed User Join Date: Feb 2003 Posts: 1,020	Ok, thanks for the smartass answers. Just thought maybe some people might want to help out. Since he is using some pretty big and common sponsors with Iframes on the page. If the page does show some sort of malware, there's gonna be a ton of people who will want to investigate their own pages a little more closely.

12-28-2005, 02:00 PM	#8
Fuckin Bill Confirmed User Join Date: Feb 2003 Posts: 1,020	Thanks for checking guys. I appreciate the help.

12-28-2005, 02:08 PM	#11
fris Too lazy to set a custom title Industry Role: Join Date: Aug 2002 Posts: 55,372	if you have a dedicated box just wget http://www.url.com then load it in an editor __________________ Since 1999: 69 Adult Industry awards for Best Hosting Company and professional excellence. WP Stuff