RadioReference on Facebook   RadioReference on Twitter   RadioReference Blog
 

Go Back   The RadioReference.com Forums > Site Administration Forums > System-wide Administration

System-wide Administration Support for issues related to subscriptions, server connectivity and commentary, and layout usability. Area specific content should be posted to its applicable forum above.

Closed Thread
 
LinkBack Thread Tools Search this Thread Display Modes
  #81 (permalink)  
Old 02-28-2013, 11:23 AM
NFR85's Avatar
Member
  Premium Subscriber
Premium Subscriber
 
Join Date: Oct 2007
Posts: 184
Default

Im still getting the malware at times
Sponsored links
  #82 (permalink)  
Old 02-28-2013, 11:53 AM
Bujinkan's Avatar
Member
  Audio Feed Provider
Audio Feed Provider
 
Join Date: May 2009
Posts: 17
Default

Quote:
Originally Posted by scnnr View Post
I think your boss is standing behind you while you are surfing the web at work.. I see him
Yeah, he listens to my scanner Good eyesight to see him from Canada.
  #83 (permalink)  
Old 02-28-2013, 3:49 PM
xmo xmo is offline
Member
   
Join Date: Aug 2009
Posts: 122
Default

Still getting messages like this from our security software:

Access Blocked - Content Alert
(h) ttp://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-0543475854053093&output=html&h=250&slotname=810109 2646&w=300&lmt=1362087713&flash=11.6.602&url=http% 3A%2F%2Fforums.radioreference.com%2Fsystem-wide-administration%2F261360-malicious-

and this:

Access Blocked - Content Alert
(h) ttp://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-0543475854053093&output=html&h=90&slotname=2434878 762&w=728&lmt=1362087927&flash=11.6.602&url=http%3 A%2F%2Fforums.radioreference.com%2Fnewreply.php%3F do%3Dpostreply%26t%3D261360&dt=1362087928340&bpp=1 1&shv=r20130225&cbv=r20130206&correlator=136208792 8628&frm=20&adk=2045205846&ga_vid=165478679.126098 1864&ga_sid=1362087929&ga_hid=2054059186&ga_fc=1&u _tz=-360&u_his=10&u_java=0&u_h=1050&u_w=1680&u_ah=1020& u_aw=1680&u_cd=24&u_nplug=28&u_nmime=108&dff=ar was blocked.
  #84 (permalink)  
Old 02-28-2013, 3:57 PM
jfhtm350's Avatar
Member
   
Join Date: Dec 2010
Location: New Market TN
Posts: 846
Default

That google stuff is in most websites along with these:
http://www.google-analytics.com/ga.js
http://ajax.googleapis.com/ajax/libs.../jquery.min.js
http://ajax.googleapis.com/ajax/libs...n-min.js?v=387
http://ajax.googleapis.com/ajax/libs...event.js?v=387

I have admuncher installed so it rids most of the junk. It automatically removes doubleclick.net and .google-analytics.*.js, but no the above. There is free program called K9 web protection that I believe removes alot of useless tracking crap and ads.
__________________
Pro-106 / Pro-197 / Uniden BC92XLT / Uniden BC355N
  #85 (permalink)  
Old 02-28-2013, 4:53 PM
ridgescan's Avatar
Member
  Shack Photos
Shack photos
 
Join Date: Apr 2008
Location: San Francisco, Ca.
Posts: 3,597
Default

Now I am curious-if I'm having no issues while others are, does that mean my MS Essentials is missing a bunch of stuff?
__________________
Unidens BC785D,BC350A on a Diamond D130J @50'
'54 Hallicrafters SX-88 #127; Icoms R71A&R75, on a Wellbrook ALA1530s+ loop @ 50'
RS Pro 2066 in truck to glass mount tribander
Sponsored links
  #86 (permalink)  
Old 02-28-2013, 5:53 PM
k3cfc's Avatar
Member
  Amateur Radio Operator
Amateur Radio
 
Join Date: Feb 2011
Location: Beavertown Pa.
Posts: 676
Default

I am upset i have VIPRE and i didn't get to see any of the above. but my computer runs straight cool and narrow. a little note i have never had a problem with my computers sense i had VIPRE just wouldn't be without it.


K3CFC
__________________
Don't confuse my personality with my attitude.
My personality is who I am.
My attitude depends on who you are.
This message is hidden because n9mxq is on your ignore list.
  #87 (permalink)  
Old 02-28-2013, 6:04 PM
bear780ks's Avatar
Member
  Shack Photos
Shack photos
 
Join Date: Sep 2009
Location: Central KS
Posts: 934
Lightbulb

Quote:
Originally Posted by ridgescan View Post
Now I am curious-if I'm having no issues while others are, does that mean my MS Essentials is missing a bunch of stuff?
Have a Look File Hippo.com M.S.E had a recent Update it will show for Vista but if you click on in on that area it will show for XP as well if your Computer use's XP or you can follow through this Link: Enjoy Ra


Download Microsoft Security Essentials - FileHippo.com
  #88 (permalink)  
Old 02-28-2013, 7:09 PM
ridgescan's Avatar
Member
  Shack Photos
Shack photos
 
Join Date: Apr 2008
Location: San Francisco, Ca.
Posts: 3,597
Default

Quote:
Originally Posted by bear780ks View Post
Have a Look File Hippo.com M.S.E had a recent Update it will show for Vista but if you click on in on that area it will show for XP as well if your Computer use's XP or you can follow through this Link: Enjoy Ra


Download Microsoft Security Essentials - FileHippo.com
thanks for the link I'll check it out.
__________________
Unidens BC785D,BC350A on a Diamond D130J @50'
'54 Hallicrafters SX-88 #127; Icoms R71A&R75, on a Wellbrook ALA1530s+ loop @ 50'
RS Pro 2066 in truck to glass mount tribander
  #89 (permalink)  
Old 02-28-2013, 9:47 PM
bear780ks's Avatar
Member
  Shack Photos
Shack photos
 
Join Date: Sep 2009
Location: Central KS
Posts: 934
Default

Quote:
Originally Posted by ridgescan View Post
thanks for the link I'll check it out.
Cool: hey like the pics especially the Hallicrafter i think my Uncle had one of those K0IEB i know he a few radios he loved the Hobby) and the 785 which i thought at first was a 780 i miss that old Girl one of the best Damn radios i ever Owned.. Ra

Last edited by bear780ks; 02-28-2013 at 9:51 PM..
Sponsored links
  #90 (permalink)  
Old 02-28-2013, 10:28 PM
ridgescan's Avatar
Member
  Shack Photos
Shack photos
 
Join Date: Apr 2008
Location: San Francisco, Ca.
Posts: 3,597
Default

Thanks a lot sorry about the OT
__________________
Unidens BC785D,BC350A on a Diamond D130J @50'
'54 Hallicrafters SX-88 #127; Icoms R71A&R75, on a Wellbrook ALA1530s+ loop @ 50'
RS Pro 2066 in truck to glass mount tribander
  #91 (permalink)  
Old 03-01-2013, 4:42 PM
Bujinkan's Avatar
Member
  Audio Feed Provider
Audio Feed Provider
 
Join Date: May 2009
Posts: 17
Default

Quote:
Originally Posted by jfhtm350 View Post
That google stuff is in most websites along with these:
http://www.google-analytics.com/ga.js
http://ajax.googleapis.com/ajax/libs.../jquery.min.js
http://ajax.googleapis.com/ajax/libs...n-min.js?v=387
http://ajax.googleapis.com/ajax/libs...event.js?v=387

I have admuncher installed so it rids most of the junk. It automatically removes doubleclick.net and .google-analytics.*.js, but no the above. There is free program called K9 web protection that I believe removes alot of useless tracking crap and ads.
I don't see most advertisements online. I edit the hosts file with a copy from http://winhelp2002.mvps.org/hosts.txt . Blocks doubleclick, google-analytics, etc
  #92 (permalink)  
Old 03-09-2013, 7:05 AM
QwKiE's Avatar
Member
   
Join Date: Mar 2010
Location: Warren, Michigan
Posts: 309
Default ? Wayne H

For the last 3 days when I come to the RR web page I have got a Norton message blocked a web attack attempt.
ISP aleart name Web Attack: Red Exploit Kit Website.
Risk High
This has used 3 different names.com
Are you aware of any bugs on this web site this has happened to me the last 3 days only on this web page.
Live Police, Fire, EMS, Aircraft, and Rail Scanners on RadioReference.com
This is for your information so you might look in to this my Norton blocks it everytime it happens and its just on entering this page in the (AM)
The 3 names are
mayberrytoyland.com
fonorosas.com/wqvc.htm
shz7.com/onzu.htm
They are the attackers names
__________________
Doug: Even when you are right, you are wrong. Go figure.

Pro-38 - Pro-2006 - Pro-2020 - HomePatrol 1E and a HP 1 Can you hear me now?
  #93 (permalink)  
Old 03-09-2013, 7:40 AM
W9BU's Avatar
Lead Wiki Manager
  RadioReference Database Admininstrator
Database Admin
Amateur Radio Operator
Amateur Radio
 
Join Date: Jul 2004
Location: Brownsburg, Indiana
Posts: 2,911
Default

Two answers until Wayne has a chance to respond:

1. See this thread and read the posts from Lindsay:
Malicious Site Warnings

2. Make sure the virus definitions being used by your installation of Norton AV are up to date.
__________________
Lead Wiki Manager and Moderator for the Radio Reference Amateur Radio Forums.

"The whole world's living in a digital dream. It's not really there, it's all on the screen." -- Joe Walsh WB6ACU
  #94 (permalink)  
Old 03-09-2013, 7:47 AM
Member
  Premium Subscriber
Premium Subscriber
 
Join Date: Jan 2008
Posts: 737
Default

I just received the Page you are viewing requires Java message on the RR homepage again this morning...
  #95 (permalink)  
Old 03-09-2013, 7:54 AM
NHdave's Avatar
Member
  Premium Subscriber
Premium Subscriber
 
Join Date: Oct 2011
Location: Southeast NH, USA
Posts: 339
Default

I got a block alert from Norton, IP address of 50.62.65.1, domain of qdgllc.com/eueu.htm, which seems to belong to a grain distiller.
__________________
________________________________
BCD996XT, Pro 106, Pro 2053, BC350A, BC120xlt
Sponsored links
  #96 (permalink)  
Old 03-09-2013, 9:07 AM
Member
   
Join Date: Feb 2005
Posts: 118
Default Web Attack

I also have this problem:

Name:  WEB ATTACK.jpg
Views: 239
Size:  36.6 KB
  #97 (permalink)  
Old 03-09-2013, 11:42 AM
Member
  Premium Subscriber
Premium Subscriber
 
Join Date: May 2002
Posts: 2,175
Default

Looks like most Anti-virus programs are catching this latest thing that exploits the website cerificate system; main thing is if some program jumps up with an update or anything while you are on RR, Don't let it do whatever a popup might suggest.

I have had 3 different IP addys try to get in this morning; upon checking the IP's out, most have over 100 different spoofed domain names listed--this is a real threat if users are not vigilant.
  #98 (permalink)  
Old 03-09-2013, 12:43 PM
KK6BDZ's Avatar
Member
  Audio Feed Provider
Audio Feed Provider
Amateur Radio Operator
Amateur Radio
 
Join Date: Nov 2007
Location: Gridley, CA - Butte County
Posts: 219
Default

i also got this hit twice this morning when i tried going to radioref. also using norton.
__________________
http://buttewxspotter.com/
G.R.E. PSR-600/500
Cobra 29 LTD NW WX
Kenwood TM-281
  #99 (permalink)  
Old 03-09-2013, 6:52 PM
Member
  Premium Subscriber
Premium Subscriber
 
Join Date: Feb 2012
Posts: 755
Default Warning of Red Exploit Kit

Like others, I received Norton warnings several times when visiting RR yesterday.

In case it helps admins with their troubleshooting, the following occured on 2013-03-08:
  • Intrusion attempt by 173.192.192.2,80 blocked
    • attacking URL: facebookkapaklari.org/orvz.htm
    • Risk: high
    • IPS Alert Name: Web Attack: Red Exploit Kit Website
    • Traffic Description: TCP, www-http
    • date/time: 2013-03-08/12:10:25EST
  • Intrusion attempt by 98.131.164.1,80 blocked
    • attacking URL: bill.bcrta.ca/wqvc.htm
    • Risk: high
    • IPS Alert Name: Web Attack: Red Exploit Kit Website
    • Traffic Description: TCP, www-http
    • date/time: 2013-03-08/19:44:57EST

Edit: So, far such warnings are not happening today.

Hope this helps,
__________________
73 QDP
[106/2SRA]

Last edited by QDP2012; 03-09-2013 at 7:11 PM.. Reason: added comment
  #100 (permalink)  
Old 03-09-2013, 6:58 PM
jfhtm350's Avatar
Member
   
Join Date: Dec 2010
Location: New Market TN
Posts: 846
Default

People that dont know, you can easily look up ip addresses to see who has registered it.
Whois-RWS (North America and Canda)
https://apps.db.ripe.net/search/query.html
APNIC - Query the APNIC Whois Database
Registration Services - Whois

I have noticed 9 out of 10 attacks come from China. The 1 out of 10 comes from RoadRunnerHold internet provider here in USA.
__________________
Pro-106 / Pro-197 / Uniden BC92XLT / Uniden BC355N
Closed Thread

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -5. The time now is 4:58 PM.


Powered by vBulletin® Version 3.8.2
Copyright ©2000 - 2014, vBulletin Solutions, Inc.
All information here is Copyright 2012 by RadioReference.com LLC and Lindsay C. Blanton III.Ad Management by RedTyger
Copyright 2011 by RadioReference.com LLC Privacy Policy  |  Terms and Conditions