WARNING Possible Virus!! If you get an email from hosterwebsafe.com, be careful. - GoFuckYourself.com

Tempest · 03-20-2007, 01:23 PM

Got an email from this site hosterwebsafe.com and it said they had done a security analysis of my server and there were some issues. They had a link to click in order to see a free report... So I click on it and it says it's not viewable in Opera and that I need to use IE. That was a big red flag for me so I checked the source (spoofing IE). Russian email and the javascript code that gets included is "encoded" to obscure what's in it.

High probablity it's something bad but if someone ones to test it on a spare machine and let us know for sure, that would be great.

TurboAngel · 03-20-2007, 01:33 PM

Oh boy, thanks.

Tempest · 03-20-2007, 04:55 PM

bump....

Splum · 03-20-2007, 04:57 PM

If you are still using local mail clients you deserve to get a virus.

GrouchyAdmin · 03-20-2007, 04:58 PM

Quote:

Originally Posted by Splum

If you are still using local mail clients you deserve to get a virus.

Splum, buddy... I'm only telling you this for your own good.

There are plenty of brands on the market that taste JUST AS GOOD as the caffinated brands, OK?

Tempest · 03-20-2007, 04:59 PM

Quote:

Originally Posted by Splum

If you are still using local mail clients you deserve to get a virus.

You're such a moron.. What does the email client have to do with this..

Splum · 03-20-2007, 05:01 PM

Quote:

Originally Posted by Tempest

You're such a moron.. What does the email client have to do with this..

Obviously if you used gmail or hotmail or some other service you wouldnt have this problem. BUILT IN SPAM PROTECTION.

Tempest · 03-20-2007, 05:02 PM

Quote:

Originally Posted by Splum

Obviously if you used gmail or hotmail or some other service you wouldnt have this problem.

Did you even read my post?

roly · 03-20-2007, 05:07 PM

i went to the site and some sort of applet tried to load, i didn't think much of it, but after your post i'm running a AV scan. if anyone who knows about this sort of thing wants to take a look the url was h**p://www.clean-internet.net/admin/report/Case194_18.03.07.txt

roly · 03-20-2007, 05:09 PM

looking at the whois of that address it looks like you could be right, fake whois

Tempest · 03-20-2007, 05:10 PM

Quote:

Originally Posted by roly

i went to the site and some sort of applet tried to load, i didn't think much of it, but after your post i'm running a AV scan. if anyone who knows about this sort of thing wants to take a look the url was h**p://www.clean-internet.net/admin/report/Case194_18.03.07.txt

Interesting.. I had the same url but the domain was different.

Splum · 03-20-2007, 05:11 PM

Quote:

Originally Posted by Tempest

Did you even read my post?

I got the same email and it ended up in my spam folder, obviously I wouldnt view or click a link in there.

Tempest · 03-20-2007, 05:13 PM

Quote:

Originally Posted by Splum

I got the same email and it ended up in my spam folder, obviously I wouldnt view or click a link in there.

uh huh.. I'm sure you did... You're so full of shit I don't believe anything you have to say.

Splum · 03-20-2007, 05:20 PM

Quote:

Originally Posted by Tempest

uh huh.. I'm sure you did... You're so full of shit I don't believe anything you have to say.

Hey Im not the one posting threads on GFY about how I just got owned by a script kiddy's virus. The fact that you dont have spam filters of any kind and are in this business speaks volumes about your technological prowess.

roly · 03-20-2007, 05:27 PM

Quote:

Originally Posted by Splum

Hey Im not the one posting threads on GFY about how I just got owned by a script kiddy's virus. The fact that you dont have spam filters of any kind and are in this business speaks volumes about your technological prowess.

god your an idiot. i use spamassasin on my servers and outlook 2007 with its junk mail filter locally and it got through, but as the other guy said the email client is irrelevant. infact you talk about hotmail addresses, aren't they easily hackable?

Splum · 03-20-2007, 05:28 PM

Quote:

Originally Posted by roly

god your an idiot. i use spamassasin on my servers and outlook 2007 with its junk mail filter locally and it got through, but as the other guy said the email client is irrelevant. infact you talk about hotmail addresses, aren't they easily hackable?

Nice fake nick.

Scott McD · 03-20-2007, 05:28 PM

Thanks for the heads up !!

Tempest · 03-20-2007, 05:32 PM

Quote:

Originally Posted by Splum

Hey Im not the one posting threads on GFY about how I just got owned by a script kiddy's virus. The fact that you dont have spam filters of any kind and are in this business speaks volumes about your technological prowess.

A. I never said I got owned... and I didn't get owned.

B. I never said I didn't have any filters.. In fact, that email got thru TWO sets of filters.

You constantly ASSume things.

As I've said before.. You're a moron.. Keep on proving me right.

roly · 03-20-2007, 05:36 PM

i'm still running av scan nothing yet, when i went to the page i got some sort of java error at the bottom left of the screen "applet java8 notinited" if that makes sense to anyone. definatly very fishy.

Splum · 03-20-2007, 05:37 PM

Quote:

Originally Posted by Tempest

They had a link to click in order to see a free report... So I click on it and it says it's not viewable in Opera and that I need to use IE. That was a big red flag for me so I checked the source (spoofing IE). Russian email and the javascript code that gets included is "encoded" to obscure what's in it.

The big red flag should have been the "FREE REPORT" lol.

Splum · 03-20-2007, 05:38 PM

Quote:

Originally Posted by roly

i'm still running av scan nothing yet, when i went to the page i got some sort of java error at the bottom left of the screen "applet java8 notinited" if that makes sense to anyone. definatly very fishy.

I do good work dont I?

AD_Jake · 03-20-2007, 05:39 PM

Thanks for the heads up!

Calvinguy · 03-20-2007, 11:21 PM

I got the same info but submitted through a contact form on my site.

03-20-2007, 01:23 PM	#1
Tempest Too lazy to set a custom title Industry Role: Join Date: May 2004 Location: West Coast, Canada. Posts: 10,217	WARNING Possible Virus!! If you get an email from hosterwebsafe.com, be careful. Got an email from this site hosterwebsafe.com and it said they had done a security analysis of my server and there were some issues. They had a link to click in order to see a free report... So I click on it and it says it's not viewable in Opera and that I need to use IE. That was a big red flag for me so I checked the source (spoofing IE). Russian email and the javascript code that gets included is "encoded" to obscure what's in it. High probablity it's something bad but if someone ones to test it on a spare machine and let us know for sure, that would be great.

03-20-2007, 05:28 PM	#17
Scott McD Too lazy to set a custom title Join Date: Nov 2002 Location: Glasgow, Scotland Posts: 67,795	Thanks for the heads up !! __________________ I Buy My High Quality Traffic Here, You Should Too!

03-20-2007, 01:33 PM	#2
TurboAngel H.B.I.C. Industry Role: Join Date: Jun 2003 Location: NC Posts: 30,122	Oh boy, thanks.

03-20-2007, 04:55 PM	#3
Tempest Too lazy to set a custom title Industry Role: Join Date: May 2004 Location: West Coast, Canada. Posts: 10,217	bump....

03-20-2007, 04:57 PM	#4
Splum Confirmed User Join Date: May 2003 Location: USA Posts: 6,195	If you are still using local mail clients you deserve to get a virus.

03-20-2007, 05:07 PM	#9
roly Confirmed User Join Date: Aug 2002 Posts: 1,844	i went to the site and some sort of applet tried to load, i didn't think much of it, but after your post i'm running a AV scan. if anyone who knows about this sort of thing wants to take a look the url was h**p://www.clean-internet.net/admin/report/Case194_18.03.07.txt

03-20-2007, 05:09 PM	#10
roly Confirmed User Join Date: Aug 2002 Posts: 1,844	looking at the whois of that address it looks like you could be right, fake whois

03-20-2007, 05:36 PM	#19
roly Confirmed User Join Date: Aug 2002 Posts: 1,844	i'm still running av scan nothing yet, when i went to the page i got some sort of java error at the bottom left of the screen "applet java8 notinited" if that makes sense to anyone. definatly very fishy.

03-20-2007, 05:39 PM	#22
AD_Jake Confirmed User Join Date: Mar 2007 Location: Kansas Posts: 154	Thanks for the heads up!

03-20-2007, 11:21 PM	#23
Calvinguy Confirmed User Join Date: Oct 2002 Location: European Union Posts: 1,752	I got the same info but submitted through a contact form on my site.