john1975

all my feed pages are spitting out malware now ...but only the ones that had Sextronix feeds on them.

So I checked the main sextronix.com site and it's down as well....and spitting out malware as well.

it mentioned the following IP as malware - 108.61.94.252

Captain Kawaii

Which feeds are you talking about? Sextronix seems to be up. We use blog feeds, what do you use?

john1975

I'm still getting a dead link and malware warning when viewing their home page.

anybody that has malwarebytes installed gets the same warning.

http://www.sextronix.com/

MikeRoth

Seems to be up and working for me also. I'm using their tube program.

__________________
ICQ: 64995031

Captain Kawaii

Maybe your machine is infected? I have malwarebytes, nothing. Google webmaster tools? nothing.
Strange....we're running malwarebytes and nada. Good luck.

Yngwie

no warnings on my end. Scan your pc.

__________________
ICQ: 16544251 - Skype: gator37 @ eastlink.ca - email: yngwie @ isys.ca

Itchy

Can you contact me, There is nothing coming up on my machine

__________________

Fat Panda

fine here

brassmonkey

i been there like a hour now no problems

__________________
TRUMP 2025 KEKAW!!! - Support The Laken Riley Act!!!
END DACA - SUPPORT AZ HCR 2060 52R - email: brassballz-at-techie.com

Captain Kawaii

My apologies, John
Showing up now. We have sextronix on one of our our tgps.

Malware blocked an outgoing site: 108.61.94.170

Sextronix peeps, please let us know whats up.
Thanks
RJ

Captain Kawaii

Which seems to be sextronix IP in NJ. Anything up, Sextronix or is this a false flag from malwarebytes?

2012

that really sucks

__________________
best host: Webair | best sponsor: Kink | best coder: 688218966 | Go Fuck Yourself

Captain Kawaii

Servers infected.

john1975

yup, still the same for me.

that's weird how I was getting the error first, and none of u guys were. Probably because i'm closer to the infected server. Eastern PA here. (about 75 miles out)

Feeds were fine early on Saturday. So this had to happen sometime within that 24 hour period.

shut the server down plz... before I remove all feeds.

mOrrI

Can anyone do a scan with

Www.virustotal.com/en/#url

__________________

MikeRoth

I did a scan on the hosted TGP page and RSS Feed page. Coming up clean for me. Which feed are you all seeing the malware alert on?

__________________
ICQ: 64995031

john1975

really wish webmasters (especially adult webmasters would be more careful with their sht)

10+ years as a webmaster and never been hacked.

why?

Tips :

If you have root access to your server, make sure nobody else can connect to it. Even tech support. (a little overly paranoid there, but u gotta be)

I only allow FTP, SSH access via my IP only.

I only run programs I absolutely need (PHP and MYSQL) and I shut off everything else. no perl, none of that sht. Most popular programs these days only need PHP and MYSQL , and obviously apache.

If I have a software (like Tube software) I make sure to always keep it up to date.

and boom = you'll never be hacked. Except maybe a DDos if you really piss somebody off.

If you give ANYBODY else,FTP or SSH access...make sure u really, really, really, really, really, really, really, really, absolutely trust them.

yea, doin sht this way kinda puts more stress on 1 individual (myself) ,and makes ur life a little less fun , but at-least u don't get hacked / infected , or whatever.

mOrrI

Im not seeing it also, thats why in asking to run the tool for the ones that get the infected files / urls

__________________

john1975

It's possible it might only be trying to infect certain platforms and ignoring others.

Windows 7
Firefox (19.0.2) here.
With Norton 360 and Malwayrebytes installed.

Either that or the Ping just hasn't gotten to others yet. Portugal is awhile away, so it could take longer.

helmuc

hummm.. interesting. who else is having this problem?

john1975

for the non-believers

Best-In-BC

Nothing here, but this is google, they make bad associations with malware and websites.

__________________
Vacares - Web Hosting, Domains, O365, Security & More
Unparked domains burning a hole in your pocket? 5 Simple Ways to Make Easy $$$ from Unused Domains

Supz

the pic above isnt from google . It says Malwarebytes.

Captain Kawaii

Still waiting for host scan status. We had website blocking enabled on malwarebytes. This may be giving some of the flags. We also get it now with reality kings/fling/huge traffic banners. They have been notified. Thanks for the info. John. Has been helpful.

Why

i wouldnt put it past them to do it themselves to boost revenue a bit.

afterall, what do you expect from a company that got caught red handed shaving their affiliates, earnings.

mOrrI

Using the ip:
https://www.virustotal.com/en/url/c4...is/1365443545/

gOt Nothing um vírus total...

__________________

Sid70

Ricardo !!!!!!!!!!!!!!!!!!!!!!!

__________________
Русня, идите нахуй!

mOrrI

Ricardo?

__________________

Sid70

Richard, 2+2=4?

__________________
Русня, идите нахуй!

Itchy

All of our servers have been scanned and nothing came up.
This is a false alarm and we have contacted Malwarebytes for removal and explanation

__________________

john1975

It's getting ridiculous lately and never know who to trust. NastyDollars a couple months ago I had the same issue, but only when logging into their webmaster area, i'd get the malware popups. Emailed them....and never a response.


That's exactly why it's gettin ridiculous. They can just copy and paste / install / remove the malware within a couple seconds and look the other way like they never knew what happened...

If this is still really going on, this day in age, it would really piss me the f off. Webmasters bust their ballz to re-work their sites to find trust in these programs.

Seems like any program that's been riding too high for a few years straight always gets a bad report from someone. Who to trust, if any of the remaining programs ?

Captain Kawaii

Host finally notified us nothing on our servers. I notified the programs involved. Its between them and Malwarebytes at this point. Malware is still flagging both of their servers as of this post.