wtf sextronix ? - GoFuckYourself.com

john1975 · 04-07-2013, 04:16 PM

all my feed pages are spitting out malware now ...but only the ones that had Sextronix feeds on them.

So I checked the main sextronix.com site and it's down as well....and spitting out malware as well.

it mentioned the following IP as malware - 108.61.94.252

Captain Kawaii · 04-07-2013, 04:52 PM

Which feeds are you talking about? Sextronix seems to be up. We use blog feeds, what do you use?

john1975 · 04-07-2013, 06:40 PM

Quote:

Originally Posted by Captain Kawaii

Which feeds are you talking about? Sextronix seems to be up. We use blog feeds, what do you use?

I'm still getting a dead link and malware warning when viewing their home page.

anybody that has malwarebytes installed gets the same warning.

http://www.sextronix.com/

MikeRoth · 04-07-2013, 06:54 PM

Seems to be up and working for me also. I'm using their tube program.

Captain Kawaii · 04-07-2013, 06:59 PM

Quote:

Originally Posted by john1975

I'm still getting a dead link and malware warning when viewing their home page.

anybody that has malwarebytes installed gets the same warning.

http://www.sextronix.com/

Maybe your machine is infected? I have malwarebytes, nothing. Google webmaster tools? nothing.
Strange....we're running malwarebytes and nada. Good luck.

Yngwie · 04-07-2013, 07:01 PM

no warnings on my end. Scan your pc.

Itchy · 04-07-2013, 07:22 PM

Can you contact me, There is nothing coming up on my machine

Fat Panda · 04-07-2013, 07:28 PM

fine here

brassmonkey · 04-07-2013, 07:33 PM

i been there like a hour now no problems

Captain Kawaii · 04-07-2013, 07:46 PM

My apologies, John
Showing up now. We have sextronix on one of our our tgps.

Malware blocked an outgoing site: 108.61.94.170

Sextronix peeps, please let us know whats up.
Thanks
RJ

Captain Kawaii · 04-07-2013, 08:00 PM

Quote:

Originally Posted by Captain Kawaii

My apologies, John
Showing up now. We have sextronix on one of our our tgps.

Malware blocked an outgoing site: 108.61.94.170

Sextronix peeps, please let us know whats up.
Thanks
RJ

Which seems to be sextronix IP in NJ. Anything up, Sextronix or is this a false flag from malwarebytes?

2012 · 04-07-2013, 08:01 PM

that really sucks

Captain Kawaii · 04-07-2013, 08:26 PM

Servers infected.

john1975 · 04-08-2013, 07:14 AM

yup, still the same for me.

that's weird how I was getting the error first, and none of u guys were. Probably because i'm closer to the infected server. Eastern PA here. (about 75 miles out)

Feeds were fine early on Saturday. So this had to happen sometime within that 24 hour period.

shut the server down plz... before I remove all feeds.

mOrrI · 04-08-2013, 07:19 AM

Can anyone do a scan with

Www.virustotal.com/en/#url

MikeRoth · 04-08-2013, 07:32 AM

Quote:

Originally Posted by mOrrI

Can anyone do a scan with

Www.virustotal.com/en/#url

I did a scan on the hosted TGP page and RSS Feed page. Coming up clean for me. Which feed are you all seeing the malware alert on?

john1975 · 04-08-2013, 07:33 AM

really wish webmasters (especially adult webmasters would be more careful with their sht)

10+ years as a webmaster and never been hacked.

why?

Tips :

If you have root access to your server, make sure nobody else can connect to it. Even tech support. (a little overly paranoid there, but u gotta be)

I only allow FTP, SSH access via my IP only.

I only run programs I absolutely need (PHP and MYSQL) and I shut off everything else. no perl, none of that sht. Most popular programs these days only need PHP and MYSQL , and obviously apache.

If I have a software (like Tube software) I make sure to always keep it up to date.

and boom = you'll never be hacked. Except maybe a DDos if you really piss somebody off.

If you give ANYBODY else,FTP or SSH access...make sure u really, really, really, really, really, really, really, really, absolutely trust them.

yea, doin sht this way kinda puts more stress on 1 individual (myself) ,and makes ur life a little less fun , but at-least u don't get hacked / infected , or whatever.

mOrrI · 04-08-2013, 07:36 AM

Quote:

Originally Posted by MikeRoth

I did a scan on the hosted TGP page and RSS Feed page. Coming up clean for me. Which feed are you all seeing the malware alert on?

Im not seeing it also, thats why in asking to run the tool for the ones that get the infected files / urls

john1975 · 04-08-2013, 07:40 AM

It's possible it might only be trying to infect certain platforms and ignoring others.

Windows 7
Firefox (19.0.2) here.
With Norton 360 and Malwayrebytes installed.

Either that or the Ping just hasn't gotten to others yet. Portugal is awhile away, so it could take longer.

helmuc · 04-08-2013, 07:44 AM

hummm.. interesting. who else is having this problem?

john1975 · 04-08-2013, 07:53 AM

for the non-believers

Best-In-BC · 04-08-2013, 08:11 AM

Nothing here, but this is google, they make bad associations with malware and websites.

Supz · 04-08-2013, 08:22 AM

Quote:

Originally Posted by Best-In-BC

Nothing here, but this is google, they make bad associations with malware and websites.

the pic above isnt from google . It says Malwarebytes.

Captain Kawaii · 04-08-2013, 09:41 AM

Still waiting for host scan status. We had website blocking enabled on malwarebytes. This may be giving some of the flags. We also get it now with reality kings/fling/huge traffic banners. They have been notified. Thanks for the info. John. Has been helpful.

Why · 04-08-2013, 09:45 AM

i wouldnt put it past them to do it themselves to boost revenue a bit.

afterall, what do you expect from a company that got caught red handed shaving their affiliates, earnings.

mOrrI · 04-08-2013, 10:51 AM

Using the ip:
https://www.virustotal.com/en/url/c4...is/1365443545/

gOt Nothing um vírus total...

Sid70 · 04-08-2013, 10:53 AM

Ricardo !!!!!!!!!!!!!!!!!!!!!!!

mOrrI · 04-08-2013, 10:59 AM

Ricardo?

Sid70 · 04-08-2013, 11:08 AM

Quote:

Originally Posted by mOrrI

Ricardo?

Richard, 2+2=4?

Itchy · 04-08-2013, 11:29 AM

All of our servers have been scanned and nothing came up.
This is a false alarm and we have contacted Malwarebytes for removal and explanation

john1975 · 04-08-2013, 12:58 PM

Quote:

Originally Posted by Captain Kawaii

Still waiting for host scan status. We had website blocking enabled on malwarebytes. This may be giving some of the flags. We also get it now with reality kings/fling/huge traffic banners. They have been notified. Thanks for the info. John. Has been helpful.

It's getting ridiculous lately and never know who to trust. NastyDollars a couple months ago I had the same issue, but only when logging into their webmaster area, i'd get the malware popups. Emailed them....and never a response.

Quote:

Originally Posted by Why

i wouldnt put it past them to do it themselves to boost revenue a bit.

That's exactly why it's gettin ridiculous. They can just copy and paste / install / remove the malware within a couple seconds and look the other way like they never knew what happened...

Quote:

afterall, what do you expect from a company that got caught red handed shaving their affiliates, earnings.

If this is still really going on, this day in age, it would really piss me the f off. Webmasters bust their ballz to re-work their sites to find trust in these programs.

Seems like any program that's been riding too high for a few years straight always gets a bad report from someone. Who to trust, if any of the remaining programs ?

Captain Kawaii · 04-08-2013, 05:48 PM

Host finally notified us nothing on our servers. I notified the programs involved. Its between them and Malwarebytes at this point. Malware is still flagging both of their servers as of this post.

04-07-2013, 04:16 PM	#1
john1975 Confirmed User Industry Role: Join Date: Dec 2009 Posts: 985	wtf sextronix ? all my feed pages are spitting out malware now ...but only the ones that had Sextronix feeds on them. So I checked the main sextronix.com site and it's down as well....and spitting out malware as well. it mentioned the following IP as malware - 108.61.94.252

04-07-2013, 06:54 PM	#4
MikeRoth Confirmed User Industry Role: Join Date: Jan 2011 Location: Washington DC Posts: 361	Seems to be up and working for me also. I'm using their tube program. __________________ ICQ: 64995031

04-07-2013, 07:01 PM	#6
Yngwie I am an Alien from space Industry Role: Join Date: May 2003 Location: Ontario, Canada Posts: 11,118	no warnings on my end. Scan your pc. __________________ ICQ: 16544251 - Skype: gator37 @ eastlink.ca - email: yngwie @ isys.ca

04-07-2013, 07:22 PM	#7
Itchy Datetronix.com Industry Role: Join Date: Jan 2001 Location: Chill-A-Wack BC Posts: 6,524	Can you contact me, There is nothing coming up on my machine __________________ ICQ: 2588560 Skype: Pornocop

04-07-2013, 07:33 PM	#9
brassmonkey Pay It Forward Industry Role: Join Date: Sep 2005 Location: Yo Mama House Posts: 76,912	i been there like a hour now no problems __________________ TRUMP 2025 KEKAW!!! - Support The Laken Riley Act!!! END DACA - SUPPORT AZ HCR 2060 52R - email: brassballz-at-techie.com

04-07-2013, 04:52 PM	#2
Captain Kawaii So Fucking Banned Industry Role: Join Date: Oct 2007 Posts: 6,748	Which feeds are you talking about? Sextronix seems to be up. We use blog feeds, what do you use?

04-07-2013, 07:28 PM	#8
Fat Panda Porn is Dead. Move along. Industry Role: Join Date: Aug 2006 Posts: 13,295	fine here

04-07-2013, 07:46 PM	#10
Captain Kawaii So Fucking Banned Industry Role: Join Date: Oct 2007 Posts: 6,748	My apologies, John Showing up now. We have sextronix on one of our our tgps. Malware blocked an outgoing site: 108.61.94.170 Sextronix peeps, please let us know whats up. Thanks RJ Last edited by Captain Kawaii; 04-07-2013 at 07:48 PM..

04-07-2013, 08:01 PM	#12
2012 So Fucking What Industry Role: Join Date: Jul 2006 Posts: 17,189	that really sucks __________________ best host: Webair \| best sponsor: Kink \| best coder: 688218966 \| Go Fuck Yourself

04-07-2013, 08:26 PM	#13
Captain Kawaii So Fucking Banned Industry Role: Join Date: Oct 2007 Posts: 6,748	Servers infected.

04-08-2013, 07:14 AM	#14
john1975 Confirmed User Industry Role: Join Date: Dec 2009 Posts: 985	yup, still the same for me. that's weird how I was getting the error first, and none of u guys were. Probably because i'm closer to the infected server. Eastern PA here. (about 75 miles out) Feeds were fine early on Saturday. So this had to happen sometime within that 24 hour period. shut the server down plz... before I remove all feeds. Last edited by john1975; 04-08-2013 at 07:24 AM..

04-08-2013, 07:19 AM	#15
mOrrI It's over there... Industry Role: Join Date: Nov 2004 Location: Portugal Posts: 4,212	Can anyone do a scan with Www.virustotal.com/en/#url __________________ Get Your Binance Account

04-08-2013, 07:33 AM	#17
john1975 Confirmed User Industry Role: Join Date: Dec 2009 Posts: 985	really wish webmasters (especially adult webmasters would be more careful with their sht) 10+ years as a webmaster and never been hacked. why? Tips : If you have root access to your server, make sure nobody else can connect to it. Even tech support. (a little overly paranoid there, but u gotta be) I only allow FTP, SSH access via my IP only. I only run programs I absolutely need (PHP and MYSQL) and I shut off everything else. no perl, none of that sht. Most popular programs these days only need PHP and MYSQL , and obviously apache. If I have a software (like Tube software) I make sure to always keep it up to date. and boom = you'll never be hacked. Except maybe a DDos if you really piss somebody off. If you give ANYBODY else,FTP or SSH access...make sure u really, really, really, really, really, really, really, really, absolutely trust them. yea, doin sht this way kinda puts more stress on 1 individual (myself) ,and makes ur life a little less fun , but at-least u don't get hacked / infected , or whatever. Last edited by john1975; 04-08-2013 at 07:37 AM..

04-08-2013, 07:40 AM	#19
john1975 Confirmed User Industry Role: Join Date: Dec 2009 Posts: 985	It's possible it might only be trying to infect certain platforms and ignoring others. Windows 7 Firefox (19.0.2) here. With Norton 360 and Malwayrebytes installed. Either that or the Ping just hasn't gotten to others yet. Portugal is awhile away, so it could take longer.

04-08-2013, 07:44 AM	#20
helmuc HostMaria Industry Role: Join Date: Aug 2012 Location: UK Posts: 438	hummm.. interesting. who else is having this problem?

04-08-2013, 07:53 AM	#21
john1975 Confirmed User Industry Role: Join Date: Dec 2009 Posts: 985	for the non-believers

04-08-2013, 08:11 AM	#22
Best-In-BC Confirmed User Join Date: Jun 2002 Posts: 9,506	Nothing here, but this is google, they make bad associations with malware and websites. __________________ Vacares - Web Hosting, Domains, O365, Security & More Unparked domains burning a hole in your pocket? 5 Simple Ways to Make Easy $$$ from Unused Domains

04-08-2013, 09:41 AM	#24
Captain Kawaii So Fucking Banned Industry Role: Join Date: Oct 2007 Posts: 6,748	Still waiting for host scan status. We had website blocking enabled on malwarebytes. This may be giving some of the flags. We also get it now with reality kings/fling/huge traffic banners. They have been notified. Thanks for the info. John. Has been helpful.

04-08-2013, 09:45 AM	#25
Why MFBA Industry Role: Join Date: Mar 2003 Location: PNW Posts: 7,230	i wouldnt put it past them to do it themselves to boost revenue a bit. afterall, what do you expect from a company that got caught red handed shaving their affiliates, earnings.

04-08-2013, 10:51 AM	#26
mOrrI It's over there... Industry Role: Join Date: Nov 2004 Location: Portugal Posts: 4,212	Using the ip: https://www.virustotal.com/en/url/c4...is/1365443545/ gOt Nothing um vírus total... __________________ Get Your Binance Account

04-08-2013, 10:53 AM	#27
Sid70 Downshifter Industry Role: Join Date: Dec 2002 Location: Road trip Posts: 16,413	Ricardo !!!!!!!!!!!!!!!!!!!!!!! __________________ Русня, идите нахуй!

04-08-2013, 10:59 AM	#28
mOrrI It's over there... Industry Role: Join Date: Nov 2004 Location: Portugal Posts: 4,212	Ricardo? __________________ Get Your Binance Account

04-08-2013, 11:29 AM	#30
Itchy Datetronix.com Industry Role: Join Date: Jan 2001 Location: Chill-A-Wack BC Posts: 6,524	All of our servers have been scanned and nothing came up. This is a false alarm and we have contacted Malwarebytes for removal and explanation __________________ ICQ: 2588560 Skype: Pornocop

04-08-2013, 05:48 PM	#32
Captain Kawaii So Fucking Banned Industry Role: Join Date: Oct 2007 Posts: 6,748	Host finally notified us nothing on our servers. I notified the programs involved. Its between them and Malwarebytes at this point. Malware is still flagging both of their servers as of this post.