Author Topic: ATTENTION!! VIRUS AT FINDPHOTOKEYWORDS! (Read 3428 times)

Dreamframer · « **on:** June 05, 2009, 16:53 »

Please someone take care of this:

w w w.findphotokeywords.com
Malware type: Virus/Worm
VPS version: 090604-0, 04.06.2009

goldenangel · « **Reply #1 on:** June 05, 2009, 17:05 »

Thank you Whitechild!
This is the URL given by my anti virus program :

Code: [Select]

http://combinebet.cn:8080/index.phpChinese hackers?

Allen · « **Reply #2 on:** June 06, 2009, 11:01 »

Is the virus still there? I don't want to go to the website until it's safe. I have protection, but don't want to take a chance.

Hopefully it's not a serious virus and nobody's computer is infected here.

goldenangel · « **Reply #3 on:** June 06, 2009, 12:26 »

It is still there as of now.

zymmetricaldotcom · « **Reply #4 on:** June 06, 2009, 13:59 »

I would suggest removing the hyperlink and warning people not to visit there in case they ain't covered.

Dreamframer · « **Reply #5 on:** June 06, 2009, 16:05 »

Quote from: zymmetrical on June 06, 2009, 13:59

I would suggest removing the hyperlink and warning people not to visit there in case they ain't covered.

I removed it

alias · « **Reply #6 on:** June 06, 2009, 18:20 »

It won't affect many photographers since most people in the graphics world are either running on Macs or are tech savvy enough to by protected against browser scripting exploits. Most photographers use Macs.

The only Windows machine I ever saw in a graphics studio was being used to run the accounts.

UncleGene · « **Reply #7 on:** June 06, 2009, 20:08 »

It may be related to free cheese

"May 7, 2009
We found the company that will run this site free of charge with no traffic limitations. That's why we don't need to charge users for searching. No registering needed, no deposits, no charges. Enjoy it and if you want you can make donation."

null · « **Reply #8 on:** June 07, 2009, 02:42 »

Quote from: zymmetrical on June 06, 2009, 13:59

I would suggest removing the hyperlink and warning people not to visit there in case they ain't covered.

Firefox blocks it. Of course.

goldenangel · « **Reply #10 on:** June 08, 2009, 21:14 »

It is working again. Thanks!

lephotography · « **Reply #11 on:** June 10, 2009, 01:26 »

I dont believe most photographers use MAC.

JerryL5 · « **Reply #12 on:** June 16, 2009, 11:11 »

Ok. guys.
I was using findkeywords again, and got a trojan (Win32:CatWail)
that turned off my firewall. Avast warned me after
it happened, and because the firewall was off, I
just finished re-installing WinXP. At least there was some
warning.

mattb · « **Reply #13 on:** June 16, 2009, 11:54 »

Quote from: JerryL5 on June 16, 2009, 11:11

Avast warned me after
it happened, a

Yikes, can't believe Avast didn't catch it before you got infected, never had that happen before. Kind of scary, getting warned after the fact is only slightly better then getting warned at all. So did the trojan turn off your firewall or was it already off?

JerryL5 · « **Reply #14 on:** June 16, 2009, 13:40 »

I make sure it's on, so the trojan must have turned it off.
It's not so bad having to re-install 'cause all my
stock was backed up. The hard part is getting rid of all
that trial software that comes with the re-install.
Now that's scary!

Jack Schiffer · « **Reply #15 on:** June 16, 2009, 13:53 »

My subscription for AVG plus fire wall is coming up for renewal AVG plus firewall works I guess will renew

UncleGene · « **Reply #16 on:** June 17, 2009, 09:57 »

I think we have to request a site owner's public sepuku...

JerryL5 · « **Reply #17 on:** June 17, 2009, 19:16 »

Quote from: UncleGene on June 17, 2009, 09:57

I think we have to request a site owner's public sepuku...

I hope the Find guy can find another (safe) host.
That's too bad, cause he had a good thing there.

UncleGene · « **Reply #18 on:** June 17, 2009, 23:11 »

I hope too (and also hope for sharing the details about his current hosting)

BTW, somebody took Chinese sites serving the virus down. This does not mean that they will not launch a new fleet and update Find again.

P.S 06.18 - they are back online

leaf · « **Reply #19 on:** June 18, 2009, 02:25 »

a good free firewall is zonealarm.

JerryL5 · « **Reply #20 on:** June 18, 2009, 06:32 »

Quote from: leaf on June 18, 2009, 02:25

a good free firewall is zonealarm.

Thanks, leaf.
I was using ms firewall, so that may be the problem. I'm
thinking of putting my wireless router back in the loop which
has it's own firewall and a log file too.

Peter · « **Reply #21 on:** June 18, 2009, 12:30 »

zone alarm WAS good 5 years ago.

on windows XP good firewall is Sygate Personal firewall (freeware for home use).

On windows vista, or windows 7, windows firewall is very good.

danabeth555 · « **Reply #22 on:** June 23, 2009, 03:46 »

Does anyone know if the site is safe again or if there's another site for keywords? Thanks!

Jack Schiffer · « **Reply #23 on:** June 23, 2009, 05:49 »

Quote from: danabeth555 on June 23, 2009, 03:46

Does anyone know if the site is safe again or if there's another site for keywords? Thanks!

All clear looks like it's cleaned up

alias · « **Reply #24 on:** June 23, 2009, 06:04 »

Quote from: Peter on June 18, 2009, 12:30

zone alarm WAS good 5 years ago.

on windows XP good firewall is Sygate Personal firewall (freeware for home use).

On windows vista, or windows 7, windows firewall is very good.

Software firewall will not protect you from malicious scripting.

Malicious scripting may potentially also disable software security measures including AV and software firewall.

Security including AV and software firewall cannot be trusted on machines which may already be compromised.