i think the site is hacked - TriStateTuners.com :: Home of Tristate Auto Enthusiast

TJs98GT · 08-18-2010, 02:43 PM

every time i go to click a link to this forum or even type in the address it pops up with a trojan virus! its the kind that is a fake anti virus program. i cleared out the virus once and just now it did it again! wtf!!!

**Big_Jim** · 08-18-2010, 04:59 PM

Think it may be your computer, not the forums.

ambitiousCK · 08-18-2010, 05:55 PM

Stop looking at porn lol

biz · 08-18-2010, 07:28 PM

it did that for me yesterday... but everything seems to be good now...

cmr076 · 08-18-2010, 07:30 PM

get a mac i dont have any issues

mitsuboost30 · 08-18-2010, 08:39 PM

^^ that would be a mistake..........................

**TROLL** · 08-18-2010, 09:15 PM

I had one other user contact me about this... seems like just 2 or 3 people out of thousands which is strange. I had the server scanned and they did find two files that threw red flags and I had them removed.
This problem should be resolved but if you find anything else please let me know right away and with as much detail as possible.
Sorry and thanks!

jschristian44 · 08-18-2010, 10:03 PM

i got a warning threat from this forum today as well. went away but i still got it.

TJs98GT · 08-19-2010, 08:14 AM

Quote:

Originally Posted by ambitiousCK

Stop looking at porn lol

this is on one of my work computers so the furthest extent of porn surfing would be WW threads on forums. no porn sites or downloads.

Quote:

Originally Posted by cmr076

get a mac i dont have any issues

Quote:

Originally Posted by mitsuboost30

^^ that would be a mistake..........................

yeah i just got a macbook for personal use and am starting to hate it. everything i thought would be easier than on a PC has been more of a headache. sometimes i just want a PC again

Quote:

Originally Posted by TROLL

I had one other user contact me about this... seems like just 2 or 3 people out of thousands which is strange. I had the server scanned and they did find two files that threw red flags and I had them removed.
This problem should be resolved but if you find anything else please let me know right away and with as much detail as possible.
Sorry and thanks!

ok thanks. i have the company computer guy coming down to the shop today to take of the computer that got infected. i tried to clear it out myself but its still there. he claims its a real common virus lately.

461_SS · 08-19-2010, 09:45 AM

I got the virus as well. It was weird cause i clicked on the site then java popped up and started running that antimalware thing and ESET started going nuts. Luckily i copied all my important files and stuff over the day before. I just reformatted back into windows vista because I was running a non legit version of 7. I was due to reformat anyway. Now I have a legit copy of windows 7 being shipped now. Thank god for microsoft loving students! lol. I can feel the slowness of vista and it sucks!

TJs98GT · 08-19-2010, 11:35 AM

yeah he is doing a system restore to a previous date as we speak, and idk what else. not really paying attention haha.

ScoobySTi · 08-19-2010, 06:57 PM

Same things happened to me a couple days ago...I thought it was just a freak thing that happened but it seems as if a couple people on here were affected. Luckily part of my job is getting rid of spyware/virus bs so I fixed my PC relatively quick.

gdmbat85 · 08-19-2010, 07:41 PM

same thing happened to me yesterday on my work PC also, as soon as I linked toe the site. Got to spend a good portion of my day trying to figure out the log in info so i could clean it. Isnt this the second time this has happened to this site? i remember it happened to me once before also, but im not sure if it was this site or not. if so, 1 more strike and im gonna have to say goodbye to tst.

d-machine · 08-19-2010, 09:18 PM

This happened to me about a month ago I was viewing the Gallery section and all the sudden free anti spyware adds started poping up and eventually crashed the computer. I also had to do a systemrestore and that solved the problem.

**TROLL** · 08-20-2010, 01:01 AM

Sorry for the troubles guys.

Again, this should be taken care of now, and I am confident that the issue is resolved. We discontinued using the part of the site that was compromised and found a more secure solution instead.

I had them remove the 2 files that threw flags last night, and I went in and cleaned up some other files we're not longer using on the server today. I will have them do another virus scan right now just to triple check things because I do take this seriously and want to make sure the site is safe to use.

scooby_tuner · 08-20-2010, 01:34 AM

yea totally

Subie_sleeper · 08-20-2010, 12:56 PM

Thanks Troll!

**TROLL** · 08-20-2010, 01:03 PM

Just so you guys know, the virus scan found no issues and the site is clean now. The directory that the virus was found in has been completely removed so that vulnerability is not there any longer. I apologize again and thank everyone for their input here.

jpalamar · 08-20-2010, 03:46 PM

My work comp all of a sudden self installed 'Atimalware Doctor Protection Center' while on the site. It looks very similiar to Windows Security Center. Can't uninstall it ether. It keeps telling me I need to register and all that crap and I can't even close the program.

I'm running my works virus scan right now to hope I find it. So far it found about 10 cookies from TST that it is finding to be issues.

Just wanted to give a heads up.

EDIT: Now I have 3 different fake virus scans that I can't remove... everytime I try to start task manager or rededit it tell me it is trying to send my credit card info and closes it out...

**TROLL** · 08-20-2010, 04:31 PM

The first time you saw this was this afternoon? Has anyone else seen any problems pop up today?

08-18-2010, 02:43 PM	#1
TJs98GT Tri-State Aficionado Join Date: Apr 2009 Location: Clifton, NJ Member #13569 My Ride: 2010 Evo X GSR WW iTrader: (0)	i think the site is hacked every time i go to click a link to this forum or even type in the address it pops up with a trojan virus! its the kind that is a fake anti virus program. i cleared out the virus once and just now it did it again! wtf!!! __________________ 2010 Evo X D90

08-18-2010, 05:55 PM	#3
ambitiousCK Tri-State Post Whore Join Date: Oct 2009 Location: Reading PA Member #14943 My Ride: 2018 Pacifica Limited, 1995 F150, 2015 Hyundai Accent Sport, 06 Corvette Z06 iTrader: (12)	Stop looking at porn lol __________________ Pain is necessary, suffering is optional. *CK*

08-18-2010, 07:30 PM	#5
cmr076 Tri-State Post Whore Join Date: Aug 2006 Location: blue bell/gwynedd valley, PA Member #2319 My Ride: S4 iTrader: (8)	get a mac i dont have any issues __________________ 135 ├┼┼╕ 246R

08-19-2010, 09:45 AM	#10
461_SS Tri-State Addict Join Date: Feb 2008 Location: Holland, PA Member #6976 My Ride: 07 Mazdaspeed 3, 95 Probe SE, 86 Monte Carlo (Racecar) iTrader: (0)	I got the virus as well. It was weird cause i clicked on the site then java popped up and started running that antimalware thing and ESET started going nuts. Luckily i copied all my important files and stuff over the day before. I just reformatted back into windows vista because I was running a non legit version of 7. I was due to reformat anyway. Now I have a legit copy of windows 7 being shipped now. Thank god for microsoft loving students! lol. I can feel the slowness of vista and it sucks! __________________ To view links or images in signatures your post count must be 10 or greater. You currently have 0 signatures. There is no Replacement for Displacement! Driver of the 461 Street Stock. To view links or images in signatures your post count must be 10 or greater. You currently have 0 signatures. 2008 Mountian Speedway Street Stock Champion XBL GT: Daking Reborn

08-19-2010, 11:35 AM	#11
TJs98GT Tri-State Aficionado Join Date: Apr 2009 Location: Clifton, NJ Member #13569 My Ride: 2010 Evo X GSR WW iTrader: (0)	yeah he is doing a system restore to a previous date as we speak, and idk what else. not really paying attention haha. __________________ 2010 Evo X D90

08-18-2010, 07:28 PM	#4
biz Tri-State Aficionado Join Date: Apr 2008 Location: 215 Member #7401 My Ride: 2003.5 MSP iTrader: (8)	it did that for me yesterday... but everything seems to be good now...

08-18-2010, 08:39 PM	#6
mitsuboost30 Tri-State Addict Join Date: Jul 2008 Member #8197 My Ride: look at the picture..... iTrader: (3)	^^ that would be a mistake..........................

08-18-2010, 10:03 PM	#8
jschristian44 Tri-State Aficionado Join Date: Aug 2010 Member #17143 My Ride: 2003 Chevrolet Cavalier iTrader: (0)	i got a warning threat from this forum today as well. went away but i still got it.

08-19-2010, 06:57 PM	#12
ScoobySTi Tri-State Aficionado Join Date: Feb 2008 Location: Bensalem, PA Member #6974 My Ride: 2005 Subaru Impreza WRX STi; 92 Mustang LX 5.0 iTrader: (0)	Same things happened to me a couple days ago...I thought it was just a freak thing that happened but it seems as if a couple people on here were affected. Luckily part of my job is getting rid of spyware/virus bs so I fixed my PC relatively quick. __________________ 2005 Subaru Impreza WRX STi (Stage 2) -New ACT clutch Installed Thanks Ryan and Drake(Area1320) 1992 Ford Mustang LX 5.0 -The fully primered beast!

08-19-2010, 07:41 PM	#13
gdmbat85 Tri-State Aficionado Join Date: Feb 2007 Location: Bergen County, NJ Member #3780 My Ride: 99 eclipse spyder gsx iTrader: (1)	same thing happened to me yesterday on my work PC also, as soon as I linked toe the site. Got to spend a good portion of my day trying to figure out the log in info so i could clean it. Isnt this the second time this has happened to this site? i remember it happened to me once before also, but im not sure if it was this site or not. if so, 1 more strike and im gonna have to say goodbye to tst.

08-19-2010, 09:18 PM	#14
d-machine Tri-State Training Wheels Join Date: Jan 2008 Location: N. Wilmington, DE Member #6799 My Ride: 05 Evo 8 (Sold), 2011 Toyota 4Runner (sold), 2012 VW GLI iTrader: (0)	This happened to me about a month ago I was viewing the Gallery section and all the sudden free anti spyware adds started poping up and eventually crashed the computer. I also had to do a systemrestore and that solved the problem.

08-20-2010, 01:34 AM	#16
scooby_tuner Noob-Jersey Join Date: Aug 2010 Member #17183 iTrader: (0)	yea totally

08-20-2010, 12:56 PM	#17
Subie_sleeper Tri-State Post Whore Join Date: Sep 2007 Location: Center Valley Pa. Member #5775 My Ride: '06 Subaru Baja Turbo. Cash consuming vortex from HELL iTrader: (1)	Thanks Troll! __________________ Time to concentrate on the damn leaky axle & gettin my exhaust straightened. To view links or images in signatures your post count must be 10 or greater. You currently have 0 signatures.

08-20-2010, 03:46 PM	#19
jpalamar TST Ruined My Life! Join Date: May 2009 Location: Collegeville, PA Member #13773 My Ride: 03 Corvette Z06 iTrader: (3)	My work comp all of a sudden self installed 'Atimalware Doctor Protection Center' while on the site. It looks very similiar to Windows Security Center. Can't uninstall it ether. It keeps telling me I need to register and all that crap and I can't even close the program. I'm running my works virus scan right now to hope I find it. So far it found about 10 cookies from TST that it is finding to be issues. Just wanted to give a heads up. EDIT: Now I have 3 different fake virus scans that I can't remove... everytime I try to start task manager or rededit it tell me it is trying to send my credit card info and closes it out... Last edited by jpalamar; 08-20-2010 at 04:17 PM.

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Santa's G-Mail Hacked	TurboTagTeam	Off-Topic	13	12-03-2008 11:19 PM
TST Hacked?	teh DIRT	Off-Topic	33	12-01-2006 11:52 PM
i hacked into my work computer. . .	WKderF	Off-Topic	10	12-23-2005 03:40 AM