PDA

View Full Version : Autopia.org bad for you?



Pages : [1] 2 3 4 5 6 7

davidc
08-29-2010, 12:46 PM
I was going to look at recent posts on autopia.org and found that google blocked it and I received this message.

Safe Browsing

Diagnostic page for autopia.org

What is the current listing status for autopia.org?

Site is listed as suspicious - visiting this web site may harm your computer.
Part of this site was listed for suspicious activity 3 time(s) over the past 90 days.
What happened when Google visited this site?

Of the 433 pages we tested on the site over the past 90 days, 82 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2010-08-29, and the last time suspicious content was found on this site was on 2010-08-29.Malicious software includes 7 scripting exploit(s), 7 trojan(s), 5 exploit(s). Successful infection resulted in an average of 3 new process(es) on the target machine.
Malicious software is hosted on 7 domain(s), including plotecco.co.cc/ (http://safebrowsing.clients.google.com/safebrowsing/diagnostic?client=Firefox&hl=en-US&site=plotecco.co.cc/), autourl.in/ (http://safebrowsing.clients.google.com/safebrowsing/diagnostic?client=Firefox&hl=en-US&site=autourl.in/), browserservices.in/ (http://safebrowsing.clients.google.com/safebrowsing/diagnostic?client=Firefox&hl=en-US&site=browserservices.in/).
1 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site, including plotecco.co.cc/ (http://safebrowsing.clients.google.com/safebrowsing/diagnostic?client=Firefox&hl=en-US&site=plotecco.co.cc/).
This site was hosted on 2 network(s) including AS31815 (MEDIATEMPLE) (http://safebrowsing.clients.google.com/safebrowsing/diagnostic?client=Firefox&hl=en-US&site=AS:31815), AS26496 (PAH) (http://safebrowsing.clients.google.com/safebrowsing/diagnostic?client=Firefox&hl=en-US&site=AS:26496).
Has this site acted as an intermediary resulting in further distribution of malware?

Over the past 90 days, autopia.org did not appear to function as an intermediary for the infection of any sites.
Has this site hosted malware?

No, this site has not hosted malicious software over the past 90 days.
How did this happen?

In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.
Next steps:


Return to the previous page. (http://safebrowsing.clients.google.com/safebrowsing/diagnostic?client=Firefox&hl=en-US&site=http://autopia.org/#)
If you are the owner of this web site, you can request a review of your site using Google Webmaster Tools (http://www.google.com/webmasters/tools/). More information about the review process is available in Google's Webmaster Help Center (http://www.google.com/support/webmasters/bin/answer.py?answer=45432).

Updated 8 hours ago
©2008 Google - Google Home (http://www.google.com/)

Southern Stang
08-29-2010, 01:11 PM
It recently aquired a virus that is trying to be taken care of.

redg35
08-29-2010, 02:38 PM
Firefox wont even load the site.

Mindflux
08-29-2010, 02:44 PM
Yeah their pages got hijacked by malware. Firefox flagged them (rightly so), it'll take a while to get sorted out.

VISITOR
08-29-2010, 03:30 PM
i've experienced this as well, but i'm sure it will taken care of fairly soon. thank goodness i have the norton anti-virus...

Pats300zx
08-29-2010, 03:59 PM
Just signed on and got the site blocked via Firefox..Not good

What is the current listing status for autopia.org?

Site is listed as suspicious - visiting this web site may harm your computer.

Part of this site was listed for suspicious activity 3 time(s) over the past 90 days.

What happened when Google visited this site?

Of the 442 pages we tested on the site over the past 90 days, 91 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2010-08-29, and the last time suspicious content was found on this site was on 2010-08-29.

Malicious software includes 7 scripting exploit(s), 7 trojan(s), 5 exploit(s). Successful infection resulted in an average of 3 new process(es) on the target machine.

Malicious software is hosted on 7 domain(s), including plotecco.co.cc/, autourl.in/, browserservices.in/.

1 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site, including plotecco.co.cc/.

This site was hosted on 2 network(s) including AS31815 (MEDIATEMPLE), AS26496 (PAH).

Has this site acted as an intermediary resulting in further distribution of malware?

Over the past 90 days, autopia.org did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?

No, this site has not hosted malicious software over the past 90 days.

How did this happen?

In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.

Next steps:

* Return to the previous page.
* If you are the owner of this web site, you can request a review of your site using Google Webmaster Tools. More information about the review process is available in Google's Webmaster Help Center.

I hope the admins address this ASAP...

sullysdetailing
08-29-2010, 04:11 PM
Glad I read this I as going to post a write up on there. I dont want to get my computer all messed up lol

mchess1
08-29-2010, 04:16 PM
It happens all the time. I was on the Nikonrumors site the other day and Chrome flagged the site.

It usually takes 2 days after for Google to clear it. Not sure how fast Mozilla works on Firefox.

ScottB
08-29-2010, 04:34 PM
I noticed this several times last week where page looked slightly different in color and Norton popped up a warning. I deleted site temporarily and noted GOOGLE put up a big warning.

Bmorris
08-29-2010, 06:32 PM
I noticed this several times last week where page looked slightly different in color and Norton popped up a warning. I deleted site temporarily and noted GOOGLE put up a big warning.

I as well, noticed this exact same problem. There are ways to "bypass" this if wanted.

BobbyG
08-29-2010, 06:51 PM
I noticed this several times last week where page looked slightly different in color and Norton popped up a warning. I deleted site temporarily and noted GOOGLE put up a big warning.

Same here. I'll wait a week and check it again......

newbdetailer
08-29-2010, 10:18 PM
Luckily MS Security Essenstials sort of caught it for me. It opened Java as well. I ran a scan and it found 4 viruses total. (2 were from Autopia)

This was several days ago.

Mindflux
08-29-2010, 10:26 PM
Luckily MS Security Essenstials sort of caught it for me. It opened Java as well. I ran a scan and it found 4 viruses total. (2 were from Autopia)

This was several days ago.

Same thing, Java opened and blamo, got hit by spyware/virus'. I think part of it was the fact there was a java update (recently) that fixed a security hole where it would allow unauthorized installations without prompts. :nomore:

akimel
08-29-2010, 10:53 PM
This may be a silly question, but if the administrators of a chat forum are following ordinary security protocols, how does malware get installed onto their forum?

gewb
08-31-2010, 07:18 PM
This may be a silly question, but if the administrators of a chat forum are following ordinary security protocols, how does malware get installed onto their forum?

I can give a possible/plausable explanation - it comes from third parties, i.e., advertising. Larger sites do not host the ads you see on the site, they are served up by other companies. This chain can go many layers deep:

Site you are visiting has three advertisements: A, B and C

Ad A is serverd by farm D which is server by by farms/servers E, F and G
Ad B is...well you get the idea.

Your target site does not have control over the ads that are served up or at least not the farms/servers that push the ads. It is THOSE farms/servers that are pushing the nasties.

Several years ago I had to clean up a computer that had visited a news site, such as CNN, and that site had several Flash based ads on the home page. One of those ads, from a third party server, loaded a trojan via Flash. Before long there were numerous infection that placed 163,000 files in one directory on the hard drive and Windows fell to it's knees - this despite an up-to-date Norton AV program.

It took me six hours to clean up the mess but I saved all of the data.

Autogeek doesn't APPEAR to have these "outside" ads and I hope they never do, despite the lure of advertising revenue.

Regards,
GEWB