Author Topic: WARNING - VMF web site is infected and will try to infect you with virus... (Read 1144 times)

2ndgen · « **on:** July, 05, 2010, 10:37:32 AM »

I know many of us frequent both boards, just a heads up to say the VMF website is currently compromised and will attempt to infect your computer with the bogus AV security suite malware if you are running internet explorer...

Good luck,
-Rory

6t6red · « **Reply #1 on:** July, 05, 2010, 10:58:38 AM »

I noticed that last night. My anti virus kept blocking it. I won't go back for a few days so the admins. or gurus can clean it up. :scar

JBauer4363 · « **Reply #2 on:** July, 05, 2010, 11:01:14 AM »

Quote from: 6t6red on July, 05, 2010, 10:58:38 AM

I noticed that last night. My anti virus kept blocking it. :scar

+1

Laurie S. · « **Reply #3 on:** July, 05, 2010, 11:09:54 AM »

It really got confusing for me because I was running AV Freeware.

oateater · « **Reply #4 on:** July, 05, 2010, 11:24:23 AM »

Yep! It got me and took me all morning to clean it up. I never seen anything like it. I still wasn't sure thats where it came from until I read this post even though it hit soon as I clicked on it. Not going back there for a while.

Laurie S. · « **Reply #5 on:** July, 05, 2010, 11:34:59 AM »

VMF has been the focus of hacker attacks recently. They're apparently attempting to get passwords of the mods and admins. It really has opened up some serious security holes.

AzPete · « **Reply #6 on:** July, 05, 2010, 11:37:04 AM »

Do you know if they are just hitting VMF or are they going after other forums under the larger umbrella?

RyanG85 · « **Reply #7 on:** July, 05, 2010, 11:39:55 AM »

I was wondering why my AVG Free was popping up the warnings when I refreshed my browser! Just closed the window and will leave it alone till I hear otherwise...

sigtauenus · « **Reply #8 on:** July, 05, 2010, 11:44:12 AM »

How do you get a virus just viewing a forum?

Laurie S. · « **Reply #9 on:** July, 05, 2010, 11:54:01 AM »

Quote from: AzPete on July, 05, 2010, 11:37:04 AM

Do you know if they are just hitting VMF or are they going after other forums under the larger umbrella?

I don't know if they're going after the others or not. I imagine they are.

2ndgen · « **Reply #10 on:** July, 05, 2010, 05:17:48 PM »

Quote from: sigtauenus on July, 05, 2010, 11:44:12 AM

How do you get a virus just viewing a forum?

When you visit a web page, the server downloads pictures, text, and instructions on how to render (display) the web page. Hackers take advantage of security holes (bugs/errors) in the web browser by inserting instructions that do not actually display web page contents, but instead take advantage of the security holes in your web browser to deposit a virus on your computer. You do not need to do anything for this to happen other than to visit a "bad" or compromised web site with a vulnerable web browser. No clicking required!

In general, most computers run windows and most users run internet explorer, so hackers tend to target that platform/browser combination the most (as in this case).

End users should:

1) keep their systems updated with the latest security fixes
2) run anti-virus software (and keep it current too)
3) strongly consider running alternate browsers (although if the truth be told, if everyone swithced to mozilla or chrome, the hackers would target them more too).

Good luck,
-Rory

gotstang · « **Reply #11 on:** July, 05, 2010, 06:28:28 PM »

Whoa. If they are getting hit that hard and effected that badly, the software that runs VMF must be a piece of shiat. Scary too, because that package runs a LOT of forums...and it apparently has more holes than swiss cheese.

buckeyedemon · « **Reply #12 on:** July, 05, 2010, 06:38:06 PM »

how many people here are running AVG and had it indicate a virus on the VMF site? it may not be a virus but something in the file that makes the tool think it is. of course it could very well be a virus.

Gigantopithecus · « **Reply #13 on:** July, 05, 2010, 06:40:32 PM »

I'm not going to check their site, but it sounds a lot like what hit our work network a while back. It's "scare-ware" designed to trick you into paying for a AV program. Installs via security holes in Internet Exploiter and Windoze, then installs malware and a fake av program. You're cursed with constant virus warnings and popups telling you to "buy this program" to get rid of the problem. Unknowing people enter their credit card number to buy it, then wonder why their cards or bank accounts get cleaned out.

And it's a royal PITA to clean up.

sigtauenus · « **Reply #14 on:** July, 05, 2010, 06:44:31 PM »

I got hit with "anti-virus 2008" that way a little over a year ago. Couldn't clean it out, had to reformat.

cmayna · « **Reply #15 on:** July, 05, 2010, 07:52:45 PM »

What is this VMF website you guys are talking about? How dare it be infected?

66gt350 · « **Reply #16 on:** July, 05, 2010, 10:09:25 PM »

Quote from: buckeyedemon on July, 05, 2010, 06:38:06 PM

how many people here are running AVG and had it indicate a virus on the VMF site? it may not be a virus but something in the file that makes the tool think it is. of course it could very well be a virus.

I was on the VMF before I read this post, and I'm running a full version of AVG, and it's up to date with the virus definition file. It didn't tell me that the website was infected. Then after reading this post, I did a full scan on my system, and it came back clean.

John Del · « **Reply #17 on:** July, 06, 2010, 03:49:13 AM »

I was there last night, and also had no warning from my AV program. I'm using Microsoft Security Essentials, which is a free program if you have a "genuine" copy of Windows. I like it because it uses a lot less resources than Bit Defender, my old program.

John

2ndgen · « **Reply #18 on:** July, 06, 2010, 07:01:55 AM »

Quote from: buckeyedemon on July, 05, 2010, 06:38:06 PM

how many people here are running AVG and had it indicate a virus on the VMF site? it may not be a virus but something in the file that makes the tool think it is. of course it could very well be a virus.

I can guarantee you the VMF was (is?) compromised and spreading the AV Security suite malware.

The anti-virus companies are in a constant cat-and-mouse game with the hackers, and there is no way to protect against every possible threat in the current windows platform with internet explorer. The anti-virus people are for the most part reactionary, with just a few steps towards heuristic prevention.

As for myself, since I am forced to run Windows on my work laptop and cannot tolerate the possibility of being compromised on my work machines, I have for the past several years resorted to web browsing within a virtual machine that I can revert instantly to a known good state. I know for a fact that it was the VMF that infected my virtual machine, since it was repeatable.

Good luck,
-Rory