Anybody getting warnings about Virus on AX?

My Computer has been locking up on here for the last week. Norton says, "an intrusion attempt from cbfcygxyfn.com (85.255.121.195,80) was blocked.

Nevermind, I just got on here and was able to read the other thread, so I'm not the only one, whew....thank god.

Is it still doing it even right now?

After I removed the offending code, I don't see it prompting me to download an excel file any longer. Is anyone else?

yes I was getting that 2 days ago, but seems fine now

Just happened again to me.

My trouble has stopped after sending the little demon trojan to the slammer.

Nortons having a field day with it. and it does keep coming up each time I log on to AX

sorry Brian I am still getting a virus warning.

me too!

Hi Brian, getting same probz at home last nite. Currently accesing from hospital with no probz.

Dave Croft shows you got a top IT company in to set your network up...lol

Damn, how long does it take for them to fix this????

Hmm....It's probably still stored in your browser cache. Like Mo Islam mentioned...the virus shows up from home, but he accesses from a different location and the problem doesn't exist.

Here are instructions for clearing out your browser cache.

If it still happens after that, let me know.

Dont know if this has anything to do with this but now i cant see pics, just little white boxes with red Xs in them.

Any ideas why?????????

testing....

testing again...

and again

and again

...

From my home computer it starts to connect to a weird code and everything freeze when I try to exit internet... have to force computer shut down.

My computer at work that my dad runs our business from is well and truely buggered though - with a securityrisk.downldr virus. Norton couldn't get rid of it, we couldn't go back to previous system setting/backup and had to resort to stripping computer. We have a techie coming in monday to sort problem out as it is still buggered.

The bastards who come up with these virus's want shooting - or kicking to the head atleast lol

I`ve only just dared come back. Took me 8 hours to fix my laptop, to say I was immensely fooked off is an understatement. It was Trojan city for a few days.

Sorry if anyone's computer got smashed by the trojan virus.

As for future protection from viruses/trojans/worms, I would definitely suggest using Firefox instead of Internet Explorer. If you're ever prompted to download anything that you're not expecting, definitely hit cancel. Clear your browser cache frequently if you browse a lot of websites.

Here are a couple free antivirus programs that you can install on windows. I use AVG but I've used Avast before and it's good too.

AVG_AntiVirus_Free_Edition

Avast_Home_Edition

have a virus checker on pc which has picked up 6 trojans couple got through but as i have not opend programme has not infected pc as i know but have three programmes shown up on my shortcuts which i cannot get rid of any ideas and cant see any pics on axs threads

Not your fault Brian, shit happens. Glad it`s back to normal for you now.

I can`t see pics in threads either.

Having just moved to a new server I'd be tempted to guess that many of the global settings and file names are still at default Brian? Have you found had the time to try and hack your site since the move?

http://news.bbc.co.uk/1/hi/technology/7345990.stm

Even if the site owner has a 'duty of care', imho the onus lies with the user to protect themselves - its 2008 and we should all know to belt up, use condoms and virus check. And that includes taking a little time to research the best virus checkers and safest browsers and not simply use the first one you come accross.

I do empathize with Brian as Fightvid once sent out squillions of emails (pushing NLP of all things!).

If you google ax, it has a header underneath saying "This site may harm your computer".

Your right Beanie it does...? why?
I think it's putting a lot of people off and posting less since all this flared up.

If you get problems with this kind of virus, simplest fix is to:

- run MSConfig
- Goto Startup tab
- Disable any startup items that aren't anti-virus
- reboot, and scan computer
- if your av cannot remove the probs, as Brian says download AVG and scan using that
- Once cleared, run msconfig and switch on any required startup software. AVG should have removed any viral registry entries, but if it hasn't it will detect when they try and start - move to the vault.

Can't get on Ax on my PC, anybody else getting hit again?

Yeah mine x

My Norton just picked one up again called 'Downloader'

Gotcha. Towards the bottom of the page just before the send button there's a bit of obfuscated Javascript (which begins with document.write('\u0065). Decode it and you get an iframe which links to draftingshoppe.com/files/storage/fourseasons/www2/index.php. Checking this in a safe web browser (I have a specialist one for doing this kind of thing; don't try this at home!) currently brings up a 404, although a couple of minutes before that it was just a blank page consisting of a single character so it looks like the site owner is aware.

The malicious Javascript is probably being injected from somewhere (are there any strange script src= blocks in the source code for these pages?) so it'll probably be changed to point to another site unless it's removed.

I hate hackers. I can access the site on my Blackberry, am I likely to get the virus on my phone?

It's a Javascript attack so you can disable it by adding message.axkickboxing.com to the restricted zone on IE (Tools/Internet Options/Security, then click "Restricted Sites" followed by the sites button and enter message.axkickboxing.com in the top box), or use the No Script extension on Firefox.

On Blackberries, go to Blackberry Browser/Options/Browser Configuration/Support Javascript/Change option and set it to disabled. This will affect all websites rather than just AX. I don't have a Blackberry here so I'm getting the instructions from some other website.

Also seriously wondering if I should volunteer to join the AX team. I've been doing admin and mod stuff for the Bad Company forum for about 18 months including maintaining it. My personal website uses PHP and MySQL and I'm doing stuff for work in ASP, ASP.net, VB Script, C# and SQL Server. I've also been interested in computer security since I was at university 10 years ago and got to experience the activities of spammers for the first time.

Cheers for that mate, appreciate it!

i'm getting virus warnings again :(

just got an email from info@axkickboxing with something about a screensaver and a zip attachment looks like a standard spam mail also

my pc crashed everytime i opened ax so only dared come back on last week. we used a trojan remover now everything is fine

my pc crashed everytime i opened ax so only dared come back on last week. we used a trojan remover now everything is fine

It`s still knocking about.

I sent an email to the Ax Team with the name of the infected file...

Thanks for the heads up guys. I've been really busy these past three days with other projects.

I have someone who has been helping me with tightening up the server security and clean up the infected files, but apparently the hacker still has a hole that he uses to insert his code into some Ax files. The person helping me is doing so in their spare time. After doing the server move and a large increase in monthly server costs, I currently don't have the funds to pay someone to do more server work, so I have to rely on offered help for now.

Basically, this is just really really bad timing. If this had happened 6 months ago, I would've had the funds to pay someone to take care of it.

mh, if you wanna help out, I'll certainly accept your help. Send an email to axteam @ ax.

mh sounds like a Dude Nice-1 :-)))
wish i knew what he means lol ( ref; Java Balaclava and P.C. McMad Stuff ) lol

Looks like the malicious Javascript has gone. I train hard and take my Thai boxing seriously but it's the techy stuff that pays the bills. There's an article in The Guardian and another one on BBC news which explains what has been going on. Most of these viruses (and spam) come from gangs of crooks wanting to make (or steal) money, and sometimes they annoy the wrong person. In that spammer murder case police were said to be wanting to speak to 3 billion suspects.

I'm still getting virus warnings, about 4 times this week - anyone else ?

Yes, everytime I come on Ax. Same 'downloader' virus.

Same problem as I mention above. There's a bit on these pages which links to the index.php file on draftingshoppe.com/files/storage/fourseasons/www2/. That page doesn't do anything but it's worth keeping an eye on. Hopefully I'll be able to fix it fairly soon but I know real life can sometimes get in the way.

On antiviruses, I have to say I'm not impressed with AVG version 8. It takes ages to scan (6 hours on this machine) and I have to keep going back and restoring files that it thinks are viruses but aren't.

I'm now looking after the code for this site so let me know if there any more problems. Either posting here or using the email address on this post will reach me pretty quickly. I'm also planning on making a few changes behind the scenes which should make it harder to get viruses on here in the first place.

mh...how come I dont see the virus or the warning?

Dave J


Ax Team

It's gone now. I think Brian fixed it over the weekend.