Mal ware detected

Status
Not open for further replies.

Ralph T

Ultra Member
ECF Veteran
Dec 3, 2009
1,942
3,125
63
Albuquerque, NM
it will take a little time for the post cache to be rebuilt (ECF has nearly 6 million posts) so that that url is blocked in all cached posts.

Thanks for your due diligence oldsoldier! In the decaying security environment that IS the internet, these things happen with ever increasing frequency. I want to thank the staff for doing all that they do to keep this corner of the net as clean as possible! :thumbs: Its often a thankless chore, and you never get feedback when things work right, just when they go awry! So, thanks for keeping it working!!!!
 

oldsoldier

Retired ECF Forum Manager
ECF Veteran
Verified Member
Dec 17, 2010
12,503
8,000
Lurking in the shadows
www.reboot-n.com
Yeah, that is what you need to do...lol Like you did it... This kind of thing happens all the time. It is not the first time I have seen it.
This is business as usual on the internet. Thanks for reporting it so we can clean it up.

Though I doubt very much that it is necessary (this type of malware Google checks for is aimed at your computer, not the server) I've asked the server techs to run another scan on our servers just to be thorough. If this particular malware was hosted on the server Google would say it is on our server as well.
 

AG51

ECF Guru
ECF Veteran
Jan 23, 2011
82,919
390,399
Dat Way →
This is business as usual on the internet. Thanks for reporting it so we can clean it up.

Though I doubt very much that it is necessary (this type of malware Google checks for is aimed at your computer, not the server) I've asked the server techs to run another scan on our servers just to be thorough. If this particular malware was hosted on the server Google would say it is on our server as well.
Thank you Sir :wub:
 

oldsoldier

Retired ECF Forum Manager
ECF Veteran
Verified Member
Dec 17, 2010
12,503
8,000
Lurking in the shadows
www.reboot-n.com
@Tibs. This isn't the first url I've had to block for being a malware distributor, nor is it likely to be the last. Don't worry, it isn't your fault, though I would seriously consider running multiple scans on your computer using multiple AV and AM tools.

(Just in case you got trojaned -- in the not fun way! )

You may have a clean bill of health but if you used the site there is a possibility that you got the gift that keeps on giving.
 

AttyPops

Vaping Master
ECF Veteran
Jul 8, 2010
8,708
134,366
Hc Svnt Dracones - USA EST
So, I have a questions about the e-mail "spoof" post. Not related to this, but I can't comment in that area. I'm not sure it's worth a whole new thread for me to ask.

I assume that the malicious spoofer got e-mail addresses from either profiles where it is public, or posts in threads, or PIF or something. Not that ECF's internal e-mail address database was compromised. True?
 
Last edited:

oldsoldier

Retired ECF Forum Manager
ECF Veteran
Verified Member
Dec 17, 2010
12,503
8,000
Lurking in the shadows
www.reboot-n.com
Actually I'll let a little more info out. This is the guy that we banned for scraping content off of ECF. After we blocked him he started scraping NuVapor and a couple other forums until he got banned and blocked. Some people took it on themselves to email him and now he is trying to be slick and reply to these people and pretending to be a staff member.

It is actually kind of funny because one of these people emailed me and cussed at me, I simply told them to check the email address it was sent from, and that I just filter his mails straight to the trash.

I suspect that some vocal members from NV will get the same responses either as me or as one of the admins from NV. This guy really is a piece of work, I actually feel sorry for anyone that uses his services because if he doesn't screw them Google will.
 

whiskey

Moved On
Jan 13, 2010
21,843
36,854
Actually I'll let a little more info out. This is the guy that we banned for scraping content off of ECF. After we blocked him he started scraping NuVapor and a couple other forums until he got banned and blocked. Some people took it on themselves to email him and now he is trying to be slick and reply to these people and pretending to be a staff member.

It is actually kind of funny because one of these people emailed me and cussed at me, I simply told them to check the email address it was sent from, and that I just filter his mails straight to the trash.

I suspect that some vocal members from NV will get the same responses either as me or as one of the admins from NV. This guy really is a piece of work, I actually feel sorry for anyone that uses his services because if he doesn't screw them Google will.

Sarge is 100% correct on this guy...He's scum
 

oldsoldier

Retired ECF Forum Manager
ECF Veteran
Verified Member
Dec 17, 2010
12,503
8,000
Lurking in the shadows
www.reboot-n.com
So, I have a questions about the e-mail "spoof" post. Not related to this, but I can't comment in that area. I'm not sure it's worth a whole new thread for me to ask.

I assume that the malicious spoofer got e-mail addresses from either profiles where it is public, or posts in threads, or PIF or something. Not that ECF's internal e-mail address database was compromised. True?

Actually I'll let a little more info out. This is the guy that we banned for scraping content off of ECF. After we blocked him he started scraping NuVapor and a couple other forums until he got banned and blocked. Some people took it on themselves to email him and now he is trying to be slick and reply to these people and pretending to be a staff member.

It is actually kind of funny because one of these people emailed me and cussed at me, I simply told them to check the email address it was sent from, and that I just filter his mails straight to the trash.

I suspect that some vocal members from NV will get the same responses either as me or as one of the admins from NV. This guy really is a piece of work, I actually feel sorry for anyone that uses his services because if he doesn't screw them Google will.

Sarge is 100% correct on this guy...He's scum

I went ahead and updated the post in announcements since atty did bring up a valid question.
 

tiburonfirst

They call me 'Tibs"
ECF Veteran
Verified Member
Feb 23, 2010
26,883
260,344
update - since that bothered me quite a bit! :D

apparently, only chrome users got that warning yesterday but it seems it was a false alarm and google safe browsing has lifted the block by now. i had done lots of research before i decided on fotoflexer as my pic editor and i'm not alone in using it:

In March of 2008, FotoFlexer was used as the official embedded image editor for the PhotoBucket website. It is currently the embedded editor for Piczo and Tiny Pic as well.
 
Status
Not open for further replies.

Users who are viewing this thread