New Malware Detected

Discussion in 'PriusChat Website Questions' started by RodJo, Dec 8, 2009.

  1. RodJo

    RodJo Member

    Joined:
    May 30, 2009
    423
    56
    0
    Location:
    Boston
    Vehicle:
    2010 Prius
    Model:
    V
    OK, PC is attempting to load this malware, as reported by Kaspersky:

    12/8/2009 1:18:41 AM http://blogcasino.org/lib/index.php Internet Explorer Denied: Exploit.JS.Agent.auw

    I get it whenever I open a forum.
     
    #1 RodJo, Dec 8, 2009
  2. djasonw

    djasonw Active Member

    Joined:
    Jul 13, 2004
    958
    119
    0
    Location:
    Coconut Creek, FL
    Vehicle:
    2004 Prius
    Model:
    N/A
    Ironically I got it too on a MAC running Safari so I loaded the forum with slower browser Firefox with no issues. WTH is going on?
     
    #2 djasonw, Dec 8, 2009
  3. Tideland Prius

    Tideland Prius Moderator of the North
    Staff Member

    Joined:
    Oct 2, 2004
    45,178
    16,403
    41
    Location:
    Canada
    Vehicle:
    Other Non-Hybrid
    Model:
    N/A
    Firefox. Got the pop-up alert for the first time. I'm using AVG.
     
    #3 Tideland Prius, Dec 8, 2009
  4. TonyPSchaefer

    TonyPSchaefer Your Friendly Moderator
    Staff Member

    Joined:
    May 11, 2004
    14,816
    2,499
    66
    Location:
    Far-North Chicagoland
    Vehicle:
    2017 Prius Prime
    Model:
    Prime Advanced
    I haven't seen a warning about it yet. That part concerns me.
     
    #4 TonyPSchaefer, Dec 8, 2009
  5. john1701a

    john1701a Prius Guru

    Joined:
    Jan 6, 2004
    12,793
    5,275
    57
    Location:
    Minnesota
    Vehicle:
    2017 Prius Prime
    Model:
    Prime Advanced
    Yup, my computer got attacked too, from "blogcasino.org" and "fqfmyvii.cn"

    Both times the SWF virus was transferred via script from a PDF automatically downloaded when opening a new page.
    .
     
    #5 john1701a, Dec 8, 2009
  6. hotbrass

    hotbrass New Member

    Joined:
    Sep 3, 2009
    312
    35
    0
    Location:
    Cowtown
    Vehicle:
    2010 Prius
    Model:
    IV
    I am getting the warning also.
     
    #6 hotbrass, Dec 8, 2009
  7. Danny

    Danny Admin/Founder
    Staff Member

    Joined:
    Nov 24, 2003
    7,093
    2,116
    1,174
    Location:
    Charlotte, NC
    Vehicle:
    2013 Prius Plug-in
    Model:
    Plug-in Base
    Odd, that malicious code found its way back into the header for the forums. I've contacted the company whose software was exploited last time and removed the malicious code. Let me know if anyone sees anything else funky.
     
    #7 Danny, Dec 8, 2009
    2 people like this.
  8. Stev0

    Stev0 Honorary Hong Kong Cavalier

    Joined:
    Sep 23, 2006
    7,201
    1,073
    0
    Location:
    Northampton, MA
    Vehicle:
    2022 Prius Prime
    Model:
    Plug-in Base
    I got it a half hour ago, not getting it now (if I was getting the warning, I wouldn't be here).
     
    #8 Stev0, Dec 8, 2009
  9. lunabelgium

    lunabelgium Member

    Joined:
    Oct 13, 2009
    269
    21
    17
    Location:
    Belgium (Liège)
    Vehicle:
    2010 Prius
    Model:
    N/A
    So do I
     
    #9 lunabelgium, Dec 8, 2009
  10. morguex

    morguex Junior Member

    Joined:
    Dec 5, 2009
    21
    2
    0
    Location:
    New Mexico
    Vehicle:
    2010 Prius
    Model:
    III
    Thanks Danny,

    I think it's fixed. I encountered it last night after coming to the forum from a Google search. I thought I had been redirected to a phony site. My AVG Free antivirus software did its job.

    Morgan
     
    #10 morguex, Dec 8, 2009
  11. TonyPSchaefer

    TonyPSchaefer Your Friendly Moderator
    Staff Member

    Joined:
    May 11, 2004
    14,816
    2,499
    66
    Location:
    Far-North Chicagoland
    Vehicle:
    2017 Prius Prime
    Model:
    Prime Advanced
    ========> [​IMG]
     
    #11 TonyPSchaefer, Dec 8, 2009
  12. Tideland Prius

    Tideland Prius Moderator of the North
    Staff Member

    Joined:
    Oct 2, 2004
    45,178
    16,403
    41
    Location:
    Canada
    Vehicle:
    Other Non-Hybrid
    Model:
    N/A
    ^ LOL


    No more pop-ups. Mine was the centiyo warning so the same one as the last attack (which I missed).
     
    #12 Tideland Prius, Dec 8, 2009
(You must log in or sign up to post here.)