Virus from guru ads/attack site

3 pages • Page 2

Metatail

Frost Gate Guardian

Joined Jul 2006

Feb 8, 2009 at 2:30 PM • #21

That's a cool pic you got there sir.

Malice Black

Site Legend

Joined Oct 2005

Feb 8, 2009 at 2:42 PM • #22

It's a running issue. It's due to goggle ads and not Inde trying to haxxor your computer. PM the details to Inde/kzap and they'll get it removed.

dan_dv

Krytan Explorer

Joined Aug 2007

Feb 8, 2009 at 2:48 PM • #23

When i browse to Guildwarsguru with IE, I get two warnings from Norton Internet Security about infected file beeing removed.

code1101

Frost Gate Guardian

Joined Jan 2007

Feb 8, 2009 at 2:48 PM • #24

I just got it on my free avg antivirus ... its true guys.

a yellow bar apears on the top of the windows asking to run a realplayer activex ... when i clicked it a virus tried to enter my PC

thig

Academy Page

A Few Good Men

Mo/

Joined Oct 2005

Feb 8, 2009 at 3:04 PM • #25

Well theres a simple solution to it all...don't use a insecure browser like Internet Explore. Switch to Firefox and install the no script plugin.

papryk

Jungle Guide

The Autonomy[?????????]

Joined Feb 2006

Feb 8, 2009 at 3:16 PM • #26

Quote: Originally Posted by code1101

I just got it on my free avg antivirus ... its true guys.

a yellow bar apears on the top of the windows asking to run a realplayer activex ... when i clicked it a virus tried to enter my PC
same here...it's true

CE Devilman

Wilds Pathfinder

Do U Trust Anet

N/Mo

Joined Jul 2006

Feb 8, 2009 at 3:16 PM • #27

just on guru webpage..

thral

Lion's Arch Merchant

Joined May 2007

Feb 8, 2009 at 3:31 PM • #28

Avast keeps blockng something for me so yeah...

Schmerdro

Krytan Explorer

Joined Apr 2006

Feb 8, 2009 at 3:38 PM • #29

I use Firefox with the NoScript extension and I never got any kind of warning from my AVG anti-virus.

Lesson: Don't use shitty web-browsers.

ag3ntblak

Academy Page

Team Flash

Joined Nov 2005

Feb 8, 2009 at 4:24 PM • #30

http://i8.photobucket.com/albums/a8/...gurutrojan.jpg

http://s8.photobucket.com/albums/a8/...consistent.jpg

Almost every thread I goto in guru is downloading this trojan into my computer. Is this why this forum is always so laggy?

baltazar knight

Frost Gate Guardian

The Myth of Phoenix [Myth]

Joined Oct 2007

Feb 8, 2009 at 4:27 PM • #31

http://www.guildwarsguru.com/forum/s...=1#post4485326

h**p://www.safe6699.com/js/index.htm

Avira detected it.
I'm using Firefox.

IattackU

Frost Gate Guardian

The Eternal Night Vanguard [TEN]

E/Mo

Joined May 2007

Feb 8, 2009 at 4:36 PM • #32

Quote: Originally Posted by Schmerdro

I use Firefox with the NoScript extension and I never got any kind of warning from my AVG anti-virus.

Lesson: Don't use shitty web-browsers. Same here except I use Avast and not AVG.

Haven't gotten a message at all and I actually just installed NoScript after I read this.

just call me jimmy

Frost Gate Guardian

just call me jimmy

W/Mo

Joined Dec 2005

Feb 8, 2009 at 4:39 PM • #33

Call me crazy but shouldn't the Moderators of Guru be informing their members of Trojans on their website? Regardless of who is at fault, the fact is people are at risk by just loading your website. I would say you have an obligation too inform people, of any risk loading Guru, what you are doing to fix it, and what your community should do if they receive these Trojan messages.

To the people that said "I use Firefox so no worries" I am sorry to say this, but you all have the IQ of a pea. Please uninstall the internet immediately, as you are a risk to it not blowing up.

Here is what my AVG picked up.

Trojan Horse Downloader Generic c .ACM - count29.51yes.com

hope you get it fixed

Inde

Site Contributor

Joined Dec 2004

Feb 8, 2009 at 4:39 PM • #34

We're aware everyone and taking care of it (and to Jimmy, sometimes we sleep. It's a bad habit I know. So when it takes us an hour or two to know of an issue it's just because my IV of caffeine hadn't started yet to wake me up). Thank you for the updates.

The Rift

Lion's Arch Merchant

Joined Sep 2005

Feb 8, 2009 at 4:51 PM • #35

I get the same message from my avg as most people here do.
my question is tough : should we ingnore it or rather leave guru off for the moment till it is fixed by you?

just call me jimmy

Frost Gate Guardian

just call me jimmy

W/Mo

Joined Dec 2005

Feb 8, 2009 at 4:54 PM • #36

http://www.youtube.com/watch?v=yo3uxqwTxk0

Hopefully makes you laugh Inde, while having what will probably be an annoying day!!!

Necro Quink

Lion's Arch Merchant

Trinity Of The Ascended [ToA]

Joined Aug 2007

Feb 8, 2009 at 5:21 PM • #37

Well, i have been on guru the whole day (using IE7) and didnt had any problem.

bsoltan

Site Contributor

[SoF]

Joined Dec 2005

Feb 8, 2009 at 6:01 PM • #38

FYI: Getting this now as soon as I visit the forums

seut

Wilds Pathfinder

Joined Jun 2005

Feb 8, 2009 at 6:15 PM • #39

firefox / google

Dmitri3

Wilds Pathfinder

Joined Jul 2005

Feb 8, 2009 at 6:31 PM • #40

http://safebrowsing.clients.google.c...rum/usercp.php

Quote: Site is listed as suspicious - visiting this web site may harm your computer.

Quote:

Of the 25 pages we tested on the site over the past 90 days, 1 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2009-02-08, and the last time suspicious content was found on this site was on 2009-02-08.

Malicious software includes 1 scripting exploit(s). Successful infection resulted in an average of 12 new processes on the target machine.

Malicious software is hosted on 1 domain(s), including safe6699.com/.

This site was hosted on 1 network(s) including AS33070 (RMH). EDIT: Had to disable safe browsing just to post this. I'd expect a drop in traffic from people who use Firefox or Google Chrome if this isn't fixed soon.