Argonath RPG - A World of its own

Argonath RPG Community => Forum and site ideas and information => Topic started by: Reece on July 26, 2012, 12:40:09 am

Title: Malware
Post by: Reece on July 26, 2012, 12:40:09 am
(http://i.imgur.com/Giyu4.png)

Keep getting this...

and on the panel too

(http://i.imgur.com/DiEjS.png)

derby forums too? WTF?

(http://i.imgur.com/dMLcb.png)

wiki

(http://i.imgur.com/QQOzg.png)

So yeah most sub domains.

Also Azellus

(http://i.imgur.com/jZbOb.png)
Title: Re: Malware
Post by: TheRock on July 26, 2012, 12:48:24 am
Same, was about to post, just got infront of one of these.
Title: Re: Malware
Post by: Radagast on July 26, 2012, 12:50:37 am
I hope it's not my FSPortTest link :roll:
Title: Re: Malware
Post by: Devin on July 26, 2012, 12:51:17 am
Well yeah, I just loaded a couple pages on the forum and got spammed with that too..
Title: Re: Malware
Post by: Seskom on July 26, 2012, 12:51:30 am
same for me.
Title: Re: Malware
Post by: Ted on July 26, 2012, 12:52:00 am
All is fine for me.

So I shall ask has anyone sent(that you are aware of) files to you recently which appeared to be suspicious?
Title: Re: Malware
Post by: Mariio on July 26, 2012, 12:52:50 am
i got this too on google chrome trying to open this forum some mins ago
Title: Re: Malware
Post by: [NP]Monte Montague on July 26, 2012, 12:53:25 am
They're on to us!




Eeek what do?
Title: Re: Malware
Post by: Zaila on July 26, 2012, 12:53:39 am
Got the same here.

Although, when checking why it was coming up, it practically said that nothing was wrong with the site so it might been a error on Googles side.
Title: Re: Malware
Post by: stormeus on July 26, 2012, 12:58:23 am
(http://i.imgur.com/uZcv0.png)
Title: Re: Malware
Post by: Mariio on July 26, 2012, 12:58:56 am
so what is this shit then
Title: Re: Malware
Post by: Ted on July 26, 2012, 12:59:04 am
Another question how are you accessing the forum to receive this warning? Via the address bar or Google search(Which for a regular use is a bit of an odd way to come here)?
Title: Re: Malware
Post by: Devin on July 26, 2012, 12:59:45 am
It comes up randomly which makes me think its possibly a certain advert, I opened a couple of pages on Argo forum, no issue, refreshed the page a few times then it came with the malware warning.



I just tried to modify my post and it came up with the malware warning..
Title: Re: Malware
Post by: Mariio on July 26, 2012, 01:00:48 am
Another question how are you accessing the forum to receive this warning? Via the address bar or Google search(Which for a regular use is a bit of an odd way to come here)?
with the address bar anyways search some topic on forum with an argonath forum link then you got it
Title: Re: Malware
Post by: Ted on July 26, 2012, 01:05:29 am
Still nothing even when doing as Mariio explained.
Title: Re: Malware
Post by: Reece on July 26, 2012, 01:06:42 am
Still nothing even when doing as Mariio explained.

Do you use IE?

Also when are you going ig :(
Title: Re: Malware
Post by: Ted on July 26, 2012, 01:07:21 am
No Chrome.

Googled Argonath rpg, clicked the forum link and received this:

Code: [Select]
Warning - visiting this web site may harm your computer!

Suggestions:
Return to the previous page and pick another result.
Try another search to find what you're looking for.
Or you can continue to http://www.argonathrpg.eu/forum/index.php at your own risk. For detailed information about the problems we found, visit Google's Safe Browsing diagnostic page for this site.

For more information about how to protect yourself from harmful software online, you can visit StopBadware.org.

If you are the owner of this web site, you can request a review of your site using Google's Webmaster Tools. More information about the review process is available in Google's Webmaster Help Center.
Advisory provided by

As for typical forum browsing no issues. I never use Google search to return here anyway..
Title: Re: Malware
Post by: Reece on July 26, 2012, 01:08:25 am
No Chrome.

Do you use adblocker?
Title: Re: Malware
Post by: Devin on July 26, 2012, 01:08:57 am
Now that's odd, just go open random tabs of Argo forums, random boards and so on.
That's all I have to do like open 3 tabs of Argo boards then I get a malware warning.
Title: Re: Malware
Post by: BlackEagle on July 26, 2012, 01:11:57 am
Same.
Title: Re: Malware
Post by: Ted on July 26, 2012, 01:13:54 am
Do you use adblocker?

Stopped using IE in the 90's :lol:

I was so I turned it off and still no issues(yet) browsing as I typically do.
Title: Re: Malware
Post by: Jellyfish on July 26, 2012, 01:17:33 am
Stopped using IE in the 90's :lol:

I was so I turned it off and still no issues(yet) browsing as I typically do.

Same. Haven't faced any issues yet.
Title: Re: Malware
Post by: [NP]Monte Montague on July 26, 2012, 01:31:17 am
Guys.

Google scanned sites on the Saurons host networks.
It found hundreds of malicious attempts.

As a result almost if not all sites working under the same host as argonath have been treated as suspicious.

You may not have accessed via google but Google works with all the browsers, all the relink sites, ISP's maybe and they work to warn people.
So that should answer the "google?? I didn't use google".
-

Google said:

What happened when Google visited sites hosted on this network?

    Of the 202324 site(s) we tested on this network over the past 90 days, 7207 site(s), including, for example, ebest.in/, ilcignoverde.altervista.org/, motofelgusy.pl/, served content that resulted in malicious software being downloaded and installed without user consent.

    The last time Google tested a site on this network was on 2012-07-25, and the last time suspicious content was found was on 2012-07-25.

Has this network hosted sites acting as intermediaries for further malware distribution?

    Over the past 90 days, we found 369 site(s) on this network, including, for example, jrkjelzwleadyxsd.ru/, gmvdnpqbblixlgxj.ru/, 176.9.179.0/, that appeared to function as intermediaries for the infection of 17923 other site(s) including, for example, faces3.com/, etiendas.co/, animalpictures3.com/.

Has this network hosted sites that have distributed malware?

    Yes, this network has hosted sites that have distributed malicious software in the past 90 days. We found 564 site(s), including, for example, 176.9.179.0/, alapage.ru/, inqgvoeohpcsfxmn.ru/, that infected 32048 other site(s), including, for example, lolo1.p2h.info/, forexmall.net/, bags.firm.in/.
Title: Re: Malware
Post by: JasonD on July 26, 2012, 02:19:59 am
Google:

How did this happen?
In some cases, third parties can add malicious code to legitimate sites, activating our system wich will lead to us showing this warning message.
(translated from dutch)

Is this what happened?
Title: Re: Malware
Post by: stormeus on July 26, 2012, 02:26:11 am
Is this what happened?

Yes.
Title: Re: Malware
Post by: Cyril on July 26, 2012, 02:55:19 am
I'm getting this now :

"Warning: A problem was detected on this page.

Website at www.argonathrpg.eu (http://www.argonathrpg.eu) contains elements from sites that seem to host malware. These can harm your computer or otherwise operate without your knowledge. Simply visiting a site hosting this type of software can infect your computer.

The following list describes the unsafe elements on the page. Click on the link "Diagnostics" for more information about a particular item.

Malware http://www.argonathrpg.eu/forum/Themes/core/css/webkit.css (http://www.argonathrpg.eu/forum/Themes/core/css/webkit.css)
Malware http://www.argonathrpg.eu/forum/Themes/default/scripts/script.js?rc5 (http://www.argonathrpg.eu/forum/Themes/default/scripts/script.js?rc5)
Malware http://www.argonathrpg.eu/forum/Themes/core/scripts/theme.js?rc5 (http://www.argonathrpg.eu/forum/Themes/core/scripts/theme.js?rc5)
Malware http://www.argonathrpg.eu/forum/Themes/default/scripts/topic.js (http://www.argonathrpg.eu/forum/Themes/default/scripts/topic.js)

Learn more about how to protect yourself from harmful software online

I understand that visiting this site may harm my computer. "
Title: Re: Malware
Post by: Alcaide_PT on July 26, 2012, 02:56:40 am
for some reason this also show in my google chrome when i woke up
Title: Re: Malware
Post by: Nexxt on July 26, 2012, 03:22:00 am
That sucks! All I can say, I enjoy being on iOS at this moment <3. It might get on my iPhone, but can't do shit, lol.
Title: Re: Malware
Post by: Nathan on July 26, 2012, 03:58:19 am
I'm guessing this is why someone is using my domain name to send spam emails before I placed the verification step.
Title: Re: Malware
Post by: Kent on July 26, 2012, 12:15:24 pm
Funny enough is that you only get the malware warning at argonathrpg.eu, and not at argonathrpg.com
Title: Re: Malware
Post by: Teddy on July 26, 2012, 03:27:21 pm
To those who say having another browser (other than Google) makes this a better situation, good luck when you visit an actual site with Malware ;)

IE, Firefox, Safari, Opera users may not experience this as primarily they do not have such detection, or their scanning tools are not quite as powerful (given the comparison of Googles ability). Not saying its a bad thing, or trying to start a browser debate. Just stating why they aren't seeing it.

Nothing seems fancy, I have malwarebytes premium version which has realtime mode, and its not blocking anything. So all should be well. You should maintain normal precautions (scanning computer 2-3 times per week, clearing browsing login data, etc).
Title: Re: Malware
Post by: eymas on July 26, 2012, 04:41:13 pm
Not really a problem for me, I just click "continue anyway"
How could this happen anyway. I've seen weird things happening but this hits the nail on the head =/
Title: Re: Malware
Post by: Mikal on July 26, 2012, 05:27:27 pm
Comes up on the Argonath Minecraft forums too. :trust:
Title: Re: Malware
Post by: Teddy on July 26, 2012, 06:22:35 pm
Seems all forums/sites hosted on this IP are getting the same message :P
Title: Re: Malware
Post by: Gandalf on July 26, 2012, 06:51:31 pm
Just logged in and saw the message. <unsure what is exactly the reason, but we will check all sites.
Title: Re: Malware
Post by: Mr. Goobii on July 26, 2012, 07:33:32 pm
Got same thing today!
Title: Re: Malware
Post by: Frank_Hawk on July 26, 2012, 07:47:49 pm
CJ strikes again it seems...

(http://media.gtanet.com/gtasa/images/characters/carl-johnson-02.jpg)

Title: Re: Malware
Post by: Salmonella on July 26, 2012, 07:53:45 pm
<CJ stuff>

It's getting old now. Even I expected you to post that.
Title: Re: Malware
Post by: Gandalf on July 26, 2012, 07:56:54 pm
UPDATE: The source seems to have been a spammer profile on the main page, found yesterday.
There are no infected files or proble,s found on any of the websites at this time, access logs and other show nothing is being compromised.
Google has been reauested to rescan, if nothing is found the warning will be removed in short time.
Title: Re: Malware
Post by: Cyril on July 26, 2012, 08:05:43 pm
Good to hear.
Title: Re: Malware
Post by: SugarD on July 26, 2012, 08:22:35 pm
Just logged in and saw the message. <unsure what is exactly the reason, but we will check all sites.

I just checked over this forum page. Nothing abnormal is loading. The argonathrpg.com domain mirroring argonathrpg.eu's domain is also resulting in the .eu one only being flagged by Google, meaning it's specific to this domain only.

My bet is definitely on a bad ad rearing it's ugly face when Google happened to be browsing. :P

Edit: Yep, it's ad code causing the issue. This is the offending code, thanks to an advertisement on the bottom of the main page that is hidden:
Code: [Select]
This link removed for general user safety. Webmasters can find it via the quote link.WARNING: DO NOT VISIT THE LINKS CONTAINED IN THE ABOVE CODE. THEY ARE MALICIOUS AND MAY INFECT YOUR COMPUTER!!!

Edit 2: The code only appears on the index.php for the main website domain, (http://www.argonathrpg.eu/index.php (http://www.argonathrpg.eu/index.php)). Once removed, the Server Owners can request Google re-scan the site through their Google Webmaster Tools account and all should be resolved.



Edit: Ahh, scratch that, you beat me to it:
UPDATE: The source seems to have been a spammer profile on the main page, found yesterday.
There are no infected files or proble,s found on any of the websites at this time, access logs and other show nothing is being compromised.
Google has been reauested to rescan, if nothing is found the warning will be removed in short time.

Title: Re: Malware
Post by: IronHiDe on July 26, 2012, 09:24:03 pm
*coughs* Im still getting the malware alert *coughs*
Title: Re: Malware
Post by: SugarD on July 26, 2012, 10:06:13 pm
*coughs* Im still getting the malware alert *coughs*
Check Gandalf's post. We have to wait on Google. ;)
Title: Re: Malware
Post by: Julio. on July 26, 2012, 10:29:59 pm
This is a separate issue from the av.exe Malicious advertisement fro two years ago right?
Title: Re: Malware
Post by: stormeus on July 26, 2012, 10:42:08 pm
This is a separate issue from the av.exe Malicious advertisement fro two years ago right?
There are no infected files or proble,s found on any of the websites at this time, access logs and other show nothing is being compromised.
Title: Re: Malware
Post by: LoHi on July 26, 2012, 11:13:08 pm
To those who say having another browser (other than Google) makes this a better situation, good luck when you visit an actual site with Malware ;)

IE, Firefox, Safari, Opera users may not experience this as primarily they do not have such detection, or their scanning tools are not quite as powerful (given the comparison of Googles ability). Not saying its a bad thing, or trying to start a browser debate. Just stating why they aren't seeing it.

Nothing seems fancy, I have malwarebytes premium version which has realtime mode, and its not blocking anything. So all should be well. You should maintain normal precautions (scanning computer 2-3 times per week, clearing browsing login data, etc).

Oh dear... While I have not looked in to this at all, an attack like this often relies on an exploit in either one of the plugins (Flash, Java) or the browser itself. In the 1st case it doesn't matter what browser you use, but in the 2nd case using a 'less-known' browser would actually be beneficial. Opera and Firefox (maybe IE and Safari too) both have a blocker like Chrome does (it does not scan every page, but rather it gets information from Google's database whether the site is infected or not).
Title: Re: Malware
Post by: SugarD on July 27, 2012, 01:09:04 am
This is a separate issue from the av.exe Malicious advertisement fro two years ago right?
Completely separate.
Title: Re: Malware
Post by: Pandalink on July 28, 2012, 02:51:32 am
IE, Firefox, Safari, Opera users may not experience this as primarily they do not have such detection, or their scanning tools are not quite as powerful (given the comparison of Googles ability).
I run firefox and I still got the malware warning, and the explanation linked to google's page. I don't even know why, I wasn't accessing the site from google.
Title: Re: Malware
Post by: SugarD on July 28, 2012, 07:52:49 am
I run firefox and I still got the malware warning, and the explanation linked to google's page. I don't even know why, I wasn't accessing the site from google.
Firefox reads from another database that also gets it's information from Google's. They just need to query Google's list again sometime soon to update the argonathrpg.eu domain as no longer malicious.

Edit: I have submitted reviews to StopBadware.Org and Mozilla Phishing And Malware Protections' sites in order to have them remove the warning messages that are still lingering around. Give them a day or so to get to it and things should be back to normal again soon. :)
Title: Re: Malware
Post by: Reece on July 29, 2012, 02:18:33 am
Uh is it back?

(http://i.reecelockwood.com/H207.png)
Title: Re: Malware
Post by: SugarD on July 29, 2012, 03:45:30 am
Uh is it back?

(http://i.reecelockwood.com/H207.png)
Ctrl+F5 and see if it continues. It may just be lingering around. DNS also may not have updated across all of the world yet, which I believe Google uses to "trick" browsers into going to that page instead.
Title: Re: Malware
Post by: Reece on July 29, 2012, 10:48:14 am
Again:

(http://i.reecelockwood.com/I113.png)

I only get it using .com
Title: Re: Malware
Post by: Pandalink on July 29, 2012, 12:48:40 pm
Yea I'm still getting it.
Title: Re: Malware
Post by: stormeus on July 29, 2012, 06:32:22 pm
Directly querying (http://www.google.com/safebrowsing/diagnostic?site=argonathrpg.com/) Google SafeBrowsing shows that Argonath is clean. However, querying VirusTotal (https://www.virustotal.com/url/ac1db4bab968b017ba1fc725ba97d946043f5ec46e242983bb97a8109f956c5b/analysis/1343579324/) still reports it as malicious. It would seem that either caches of the Google API results or some providers' records are just out of date.
Title: Re: Malware
Post by: Gandalf on July 29, 2012, 06:46:29 pm
The malware seems to be lingering in the ad software. In the next week we will clean the database, though it is likely a rogue advertiser, in any way it has been reported to the network.
It is certain that our files are clean.
Title: Re: Malware
Post by: SugarD on July 30, 2012, 02:54:05 am
The malware seems to be lingering in the ad software. In the next week we will clean the database, though it is likely a rogue advertiser, in any way it has been reported to the network.
It is certain that our files are clean.
That was my finding as well when I checked the output source, as well as ran some online "web page" scanners on it. They were all pointing to the code previously reported.
Title: Re: Malware
Post by: CrazyDude on August 02, 2012, 01:52:55 pm
Guys, you've got passive XSS (http://en.wikipedia.org/wiki/Cross-site_scripting) on some page. So if a hacker posts some link, and then some admin/user clicks it, hacker gets his Cookies(no, not food) and login for his name, after he can upload web-shell and do such bad things :( For more info - PM me.
Title: Re: Malware
Post by: Gandalf on August 02, 2012, 05:49:11 pm
Guys, you've got passive XSS (http://en.wikipedia.org/wiki/Cross-site_scripting) on some page. So if a hacker posts some link, and then some admin/user clicks it, hacker gets his Cookies(no, not food) and login for his name, after he can upload web-shell and do such bad things :( For more info - PM me.
Which is why we never click links....  :cool:
Title: Re: Malware
Post by: Teddy on August 02, 2012, 10:51:41 pm
Guys, you've got passive XSS (http://en.wikipedia.org/wiki/Cross-site_scripting) on some page. So if a hacker posts some link, and then some admin/user clicks it, hacker gets his Cookies(no, not food) and login for his name, after he can upload web-shell and do such bad things :( For more info - PM me.

:rofl: Give me a few moments to stop laughing
Title: Re: Malware
Post by: Lionel Valdes on August 02, 2012, 11:11:30 pm
Who wanted ad's in the first place  :neutral:
Title: Re: Malware
Post by: Gandalf on August 02, 2012, 11:12:48 pm
Who wanted ad's in the first place  :neutral:
Me.
Title: Re: Malware
Post by: Teddy on August 02, 2012, 11:13:18 pm
Who wanted ad's in the first place  :neutral:

Helps keep the community alive!  :D Its a funding source.
Title: Re: Malware
Post by: Lionel Valdes on August 02, 2012, 11:14:12 pm
I realize it has benefits to finance.. Sometimes you need to pick the right ad (?)

So far, in my country, I only see Moroccan real ad's.
Title: Re: Malware
Post by: Gandalf on August 02, 2012, 11:17:09 pm
I realize it has benefits to finance.. Sometimes you need to pick the right ad (?)

So far, in my country, I only see Moroccan real ad's.
We run a mix of different ads.
In general we run:
20% sponsor
30% Google
30% affiliate network
20% mixed other ads
The mixed others are often directed specific at a country, as would Google be.
In general we would prefer to have 100% sponsored ads, but companies who wish to advertise are not too often found.
Title: Re: Malware
Post by: Lionel Valdes on August 02, 2012, 11:20:44 pm
I have one question, do you receive benefit from the rogue, infected ad's as well?
Title: Re: Malware
Post by: Gandalf on August 02, 2012, 11:23:30 pm
I have one question, do you receive benefit from the rogue, infected ad's as well?
Nope, we only have to see where they come from and they are reported to the network. Then the guys trying to spread malware are punished by law.
Title: Re: Malware
Post by: SugarD on August 03, 2012, 12:32:26 am
:rofl: Give me a few moments to stop laughing
It's not really something to laugh about. He's actually correct on that.
Title: Re: Malware
Post by: CrazyDude on August 03, 2012, 12:46:08 am
So It's how you care about users safety. I can understand if it hard to fix or you just don't know what to fix and how, but you know this all. What the problem then?
Title: Re: Malware
Post by: SugarD on August 03, 2012, 01:29:12 am
So It's how you care about users safety. I can understand if it hard to fix or you just don't know what to fix and how, but you know this all. What the problem then?
It's being actively dealt with already.
Title: Re: Malware
Post by: Teddy on August 03, 2012, 03:39:47 am
It's not really something to laugh about. He's actually correct on that.

Then you don't get what the "correct" part is.  The XSS is an SMF vulnerability due to... some really big risks left open in short. However, I'm laughing at the fact that he is beating a dead bush, and going all wikipedia. Practically everyone has been aware (who works with SMF on an administration level) of the XSS issues, and they have been slowly patched up since before 1.1.1 SMF by the developers. Not to mention, these exploits are not the same as most common skid exploits where its click, click, done.

I can understand if it hard to fix or you just don't know what to fix and how, but you know this all. What the problem then?

It isn't hard for pretty much anyone, especially for the owners. They are professionals in these fields, and I am too am a professional in the field of web development and I highly trust that my security over my account and personal information here is secure and a very high priority for the owners, leaders and even all of the members of Administration on every level. So have no doubts that something is being done, or has already.
Title: Re: Malware
Post by: CrazyDude on August 03, 2012, 07:23:19 am
Then you don't get what the "correct" part is.  The XSS is an SMF vulnerability due to... some really big risks left open in short. However, I'm laughing at the fact that he is beating a dead bush, and going all wikipedia. Practically everyone has been aware (who works with SMF on an administration level) of the XSS issues, and they have been slowly patched up since before 1.1.1 SMF by the developers. Not to mention, these exploits are not the same as most common skid exploits where its click, click, done.

It isn't hard for pretty much anyone, especially for the owners. They are professionals in these fields, and I am too am a professional in the field of web development and I highly trust that my security over my account and personal information here is secure and a very high priority for the owners, leaders and even all of the members of Administration on every level. So have no doubts that something is being done, or has already.

You mad bro. I used link to wikipedia for let USERS know about that, i don't think that everyone knows what XSS is. And this XSS is not at SMF.
Title: Re: Malware
Post by: Julio. on August 03, 2012, 09:37:58 am
l0l web developer fight.

>Hardware is still better :D
Title: Re: Malware
Post by: CrazyDude on August 03, 2012, 09:53:13 am
But I'm not web-developer, I'm software developer. But ofcourse i tried to learn Django, but I leaved it for a while.
Title: Re: Malware
Post by: Marcoo on August 03, 2012, 02:51:28 pm
Alright, Humm i have been in a wierd situation with the Windows Technicall support so i'll explain my story.


Was playing as normal one day when i recived a phonecall from a weird number, i picked it up and they started to tell about themself, "Hi my name is hbalbalbal im calling from here and there" and i was aha alright how can i help you. Then they were talking about Malware spyware and how harming that can be and so on, They told me to go and search for my computer logs and so on, So i did it and found some red crosses which mean "Something is wrong". So i told them about it and so on. Then they asked me to check my CLSID code from the CMD on my computer and he started to read my code and everything was correct. Then from nowhere the subject were changed and she asked me do you got a bankcard with you, I was like no i dont sorry and she asked how old i were so i responded 17, They were like Oh my god , Oh my god in the backround, And then they were talking to eachother in diffrentlanguages and they putted the phonecall on hold serveval of times so i couldn't hear them and so on. After all i said that they shall call back when my mom is home. And then the conservation were finished.... Very strange phonecall and im asking you guys if you have been experiencing any kind of this shit?

Would be awesome with some respons.
Title: Re: Malware
Post by: Teddy on August 03, 2012, 03:36:27 pm
You mad bro.

Real mature, I'm sure with this maturity you've gotten far in your career.

l0l web developer fight.

I don't fight with kids, actually, I don't argue with anyone if I can help it. Confrontation isn't a solution to problems more a road to more problems.

Hardware is still better :D

Without software, hardware (for PC's) would be useless. So one can not be better as they complete each other.

Alright, Humm i have been in a wierd situation with the Windows Technicall support so i'll explain my story.

Would be awesome with some respons.

Are you sure it was Windows Technical Support? Surely doesn't sound like it. You'd have to call them, I don't see a reason in them calling you unless you've opened some sort of support ticket online or something.
Title: Re: Malware
Post by: CrazyDude on August 03, 2012, 03:40:43 pm
Real mature, I'm sure with this maturity you've gotten far in your career.

Don't worry about my career. It will be okay.
Title: Re: Malware
Post by: Gandalf on August 03, 2012, 04:09:35 pm
Alright, Humm i have been in a wierd situation with the Windows Technicall support so i'll explain my story.


Was playing as normal one day when i recived a phonecall from a weird number, i picked it up and they started to tell about themself, "Hi my name is hbalbalbal im calling from here and there" and i was aha alright how can i help you. Then they were talking about Malware spyware and how harming that can be and so on, They told me to go and search for my computer logs and so on, So i did it and found some red crosses which mean "Something is wrong". So i told them about it and so on. Then they asked me to check my CLSID code from the CMD on my computer and he started to read my code and everything was correct. Then from nowhere the subject were changed and she asked me do you got a bankcard with you, I was like no i dont sorry and she asked how old i were so i responded 17, They were like Oh my god , Oh my god in the backround, And then they were talking to eachother in diffrentlanguages and they putted the phonecall on hold serveval of times so i couldn't hear them and so on. After all i said that they shall call back when my mom is home. And then the conservation were finished.... Very strange phonecall and im asking you guys if you have been experiencing any kind of this shit?

Would be awesome with some respons.
It is a known scam they already got your serial number so do not be surprised if it will be blocked one day because of it being spread for piracy. Unfortunately you were too young as you took their bait so they would have gotten a good amount from you as well as access to your bank card had you had one.

No company will ever ask you to give them your private data over the phone. They already have them when you became their client.
Title: Re: Malware
Post by: Marcoo on August 03, 2012, 04:12:02 pm
It is a known scam they already got your serial number so do not be surprised if it will be blocked one day because of it being spread for piracy. Unfortunately you were too young as you took their bait so they would have gotten a good amount from you as well as access to your bank card had you had one.

No company will ever ask you to give them your private data over the phone. They already have them when you became their client.

Ahaa!!!! Alright, Appericated Gandalf, Told them to call me back tommarow, Will fool the shit out of them haha
Title: Re: Malware
Post by: Gandalf on August 03, 2012, 04:13:46 pm
Ahaa!!!! Alright, Appericated Gandalf, Told them to call me back tommarow, Will fool the shit out of them haha
Would be even better if you have some contact to local cops or FBI who could trace their number and pay them a visit.  ;)
Title: Re: Malware
Post by: Marcoo on August 03, 2012, 04:15:09 pm
Would be even better if you have some contact to local cops or FBI who could trace their number and pay them a visit.  ;)

Well that would been better hah, I'll talk with them tommarow if i catch them, I'll see how far they will go.
Title: Re: Malware
Post by: Gandalf on August 03, 2012, 04:21:00 pm
Well that would been better hah, I'll talk with them tommarow if i catch them, I'll see how far they will go.
Here are some tips: tell them that to verify they are ok you need to call them back so they should give you their phone number. If you can, record the conversation. For going pro, tell them to send you an e-mail and $10 per Paypal as verification....but be carefult thse guys are most likely professional criminals, not the SA:MP types...
Title: Re: Malware
Post by: Marcoo on August 03, 2012, 04:27:57 pm
Here are some tips: tell them that to verify they are ok you need to call them back so they should give you their phone number. If you can, record the conversation. For going pro, tell them to send you an e-mail and $10 per Paypal as verification....but be carefult thse guys are most likely professional criminals, not the SA:MP types...

Alright, Thanks, I might try out those tips.

When i relized something was wrong and i came here because of the malware talk you guys had here. That phoneman was saying that Malware was the worst virus blabla he will help me to remove those things and i was like alright lets go, Then he took me to suspicous places and started to put on hold WITHOUT notifying me or anything, and in the backround someone was talking in hindu? i think it was and telling him how to do. I was talking with 4 people within 5 minutes hah. So by then, i was like something is wrong with those peoples
SimplePortal 2.3.7 © 2008-2025, SimplePortal