Skinbase.org Skinbase.org

Trojans on the site

By teloiv
5,716 views 16 replies
snowman avatar
snowman
Member
OP
Could you post links to those possibly infected? <br />If these indeed are infected, we&acute;ll have them removed!
snowman avatar
snowman
Member
(links to &acute;rate&acute; page, not the actual download links)
animus avatar
animus
Member
Whenever I VISIT the site, I get two Norton Antivirus alerts, saying that this has site infected my computer with Trojan.Alwayup - it can&acute;t repair the two infected files, so it deletes them (I get an error message saying access was denied, but I confirm and the files are in fact deleted) <br /> <br />http://securityresponse.symantec.com/avcenter/venc/data/trojan.alwayup.html <br />
mikelly avatar
mikelly
Member
Snowman it happens when skinbase loads,You don&acute;t have to download a thing!
animus avatar
animus
Member
It happens about every three or four times I load skinbase - Norton catches it every time, so I&acute;m never infected, but it&acute;s one of your sponsors&acute; sites - a popup site. I saved the source file of one of the skinbase pages that did it (it&acute;s your .html in a text file) so you could look at it yourself. It&acute;s one of the sponsors on that page. <br /> <br />http://examples.com/skinbase.txt <br /> <br />Hope it helps. I tried to trace it with the .HTML banners. but if it&acute;s one of the shockwave/flash banners, I&acute;m not sure how to trace it. <br /> <br />HTH <br />
animus avatar
animus
Member
Don&acute;t know if this helps, but this is the path/name of the virus (prior to detection and deletion): <br /> <br />C:\Documents and Settings\Animus\Local Settings\Temporary Internet Files\Content.IE5\E5S7APA9\aun_0018[1].exe <br /> <br />It&acute;s a trojan called &quot;AlwayUp&quot;: <br /> <br />http://securityresponse.symantec.com/avcenter/venc/data/trojan.alwayup.html <br /> <br />If I can figure out how to trace the offending sponsor, I&acute;ll post it here.
initiatedsean441 avatar
initiatedsean441
Member
you may be onto something Animus because for at least the last week or so, I have to retry 3 times to get the Skinbase logon page to come up & ditto for the &quot;latest uploads&quot; link.....it has made me wonder if my Freedom Security & Spyware Doctor filters are working overtime for the pages to take so long to load.....this doesn&acute;t occur at DeviantART or WinCustomize.....ArtUproar is another site I suspect of Trojans & Spyware as my Spyware app always used to catch things from that site so I stopped dropping by there quite some time ago
mountainhawk avatar
mountainhawk
Member
What concerns me currently is the adware being put in my computer by the pop ups on here....or pop unders. I have firefox which blocks a lot but there are some pop unders from fast click and tribalfusion and casalmedia that are still getting through. My antispyware is constantly dumping stuff out of my computer from them. It will not stop me coming here and I recognise the need for revenue for the site....just thought you should know that some of your revenue providers are not playing particularly fair.
p1guy avatar
p1guy
Member
BASTARDS, that&acute;s what they are... BASTARDS... hahaha i hate spammers and spyware, and trojans. These people should be thrown in jail LOL
sed avatar
sed
Member
Hasnt happened here .... YET, I had my norton check one of MY uploads once but it was virus free, Just curious that Norton is. But thats good. 😎
mountainhawk avatar
mountainhawk
Member
If you have Zone Alarm sed you will catch more. I ditched Norton after their 2005 Systemworks fiasco. These pop up spyware dumps show up in adaware and in Superanti spware logs. Sentinel picks them up too and remove it pro.
saalien avatar
saalien
Member
I use Trend PC Cillin internet security 14 and it&acute;s brilliant, but for back up I also have spybot and spybot - sd resident and spywareblaster, so far these have stoped all from infecting my comp, I update then all the time and Trend runs in real time checking. Plus I run Spybot once a week and so far my comp is fine.. If you come across this one be very careful it&acute;s really bad !!! I got this info from a stationery site I&acute;m a member of and it&acute;s saved me a couple of times when the thing popped up. <br /> <br />Scumware/Scamware Warning <br />\&quot;WinFixer\&quot; AKA \&quot;ErrorFree\&quot; <br />Windows All Versions <br /> <br />We\&acute;ve recently (and unfortunately) stumbled upon another Internet scam, this one called \&quot;WinFixer\&quot; (AKA \&quot;ErrorFree\&quot;). Rarely have we encountered such a misleading advertisement or a more persistent attempt at installing software without meaningful user consent. Recognizing this malware product is the most important defense you have against it, so please visit this page (ErrorFree).http://thundercloud.net/infoave/answers/fixer/index.htm to read this very important alert and tip including actual screen shots of our encounter with \&quot;WinFixer\&quot; <br />
mountainhawk avatar
mountainhawk
Member
Spybot should show then too. I have that and it cleans them off. Watch out for Spyguard and SpyAxe.When I came in here just now...casalmedia tried to download an swf file onto my computer. I blocked that pretty easily.
mountainhawk avatar
mountainhawk
Member
Spybot should show then too. I have that and it cleans them off. Watch out for Spyguard and SpyAxe.When I came in here just now...casalmedia tried to download an swf file onto my computer. I blocked that pretty easily.
mountainhawk avatar
mountainhawk
Member
The url&acute;s showing up in Spybot are fastclick.net and target.net.
jebro avatar
jebro
Member
I have a good program called &quot;siteadvisor.&quot; <br /> <br /> It says: &quot;Skinbase.org - When we tested this site we found links to celebstation.org, which we found breaches browser security on our test PC.&quot; <br /> <br />See the result here: <br /> <br />http://www.siteadvisor.com/sites/skinbase.org?safe
taxifunk avatar
taxifunk
Member
Tx, Morten. I only had attacks or attempts before or when logging in, then its better. Must admit for speed reasons I dont always set everything to top safety. Works faster for me to delete cookies I got to know by heart every once and a while, hard to avoid completely on free sites the sponsoring thing. <br /> <br />http://www.skinbase.org/msgboard.php?topicid=1637 <br /> <br />also touched this topic a bit. Tx animus for detailed info. Nice to see you around again. Hope we can get some popUNDERS instead of overs while we are still free in the near future if possible. <br /> <br />All ZIP files or SKIN files can be scanned pretty darn well with my spyware and virus scanners in the right settings (scan all file types and levels, even compressed, but in THAT directory for the download BEFORE opening). Inside those I didnt find anything yet. Downloading logged out DOES call up more popups, though. And my IE6 and firefox then have their own counteroptions. Popups and ads on free sites - sure (or sidebars, which we dont even have much of now, luckily). But too aggressive side effects - thats where things can backfire in long term thinking. <br /> <br />Perfect free sites seem a bit imaginary though regarding these things - and REGISTERING FREE does give LESS spam here, not more! <br />
Sign in to post a reply.