Norton security popping up
User(s) browsing this thread: 1 Guest(s)
 
Thread Rating:
  • 1 Votes - 5 Average
  • 1
  • 2
  • 3
  • 4
  • 5

Ecossev
Jealous of Freddy's Spandex Underware

Offline
Posts: 2,266
Joined: Mar 2010
Location: Akron, OH.
10-14-2011 04:28 PM
Just now when coming to the site and when logging on, Norton security alerted me of an attack from damnfineshave. It was a mass iframe injection!?

Wondering if its a cookie or something?

Gary
Quote this message in a reply
andrewjs18v
Administrator
*******

Offline
Posts: 953
Joined: Jul 2011
Location: Philadelphia, PA
10-14-2011 09:48 PM
(10-14-2011 04:28 PM)Ecosse Wrote:  Just now when coming to the site and when logging on, Norton security alerted me of an attack from damnfineshave. It was a mass iframe injection!?

Wondering if its a cookie or something?

I don't even think the forum uses any iframes whatsoever.

hmn....

can you attach a screenshot for us to see?
Quote this message in a reply
Ecossev
Jealous of Freddy's Spandex Underware

Offline
Posts: 2,266
Joined: Mar 2010
Location: Akron, OH.
10-15-2011 07:14 AM
the funny thing Andrew is it happened only the once. If it does crop up again I will

Gary
Quote this message in a reply
geneautv
Posting Freak
*****

Offline
Posts: 1,360
Joined: Jul 2010
Location: LaGrange, GA
10-15-2011 10:39 AM
I got something similar on Thursday morning at work. It was Microsoft Forefront there.
Quote this message in a reply
andrewjs18v
Administrator
*******

Offline
Posts: 953
Joined: Jul 2011
Location: Philadelphia, PA
10-15-2011 02:17 PM
if it happens again, take a screenshot and let me know.

I ran a few website scans on all of the sites I host and they all came up clean.
Quote this message in a reply
dougrv
Senior Member
****

Offline
Posts: 363
Joined: Aug 2010
Location:
10-15-2011 04:10 PM
Yes, I had an alert that said "There was an attack on your computer" when logging in yesterday. It happened twice.
Quote this message in a reply
geneautv
Posting Freak
*****

Offline
Posts: 1,360
Joined: Jul 2010
Location: LaGrange, GA
10-15-2011 04:45 PM
I also randomly get thrown to celebrity-gossip.net from here at odd times the last few days Sad
Quote this message in a reply
andrewjs18v
Administrator
*******

Offline
Posts: 953
Joined: Jul 2011
Location: Philadelphia, PA
10-16-2011 01:10 AM
is everyone who is reporting this problem using norton?

I've scanned the site using a few online tools and everything is coming back clean.

Here's a few URLs that I used to test the site which anyone is free to check for themselves:
http://www.avg.com.au/resources/web-page-scanner/
http://www.virustotal.com/url-scan
http://www.urlvoid.com/
http://onlinelinkscan.com/
http://www.phishtank.com/
Quote this message in a reply
churchilllafemmev
Member
***

Offline
Posts: 221
Joined: Sep 2011
Location:
10-16-2011 01:24 AM
I've had it happen to me twice in the last 24 hours when logging in here, with Norton Security Suite. I don't know how to do a screenshot, but if it happens again I'll write down the warning message and post it here.

John
"Well, as long as the collar and cuffs match...."
Quote this message in a reply
andrewjs18v
Administrator
*******

Offline
Posts: 953
Joined: Jul 2011
Location: Philadelphia, PA
10-16-2011 01:41 AM
(This post was last modified: 10-16-2011 01:43 AM by andrewjs18.)
(10-16-2011 01:24 AM)churchilllafemme Wrote:  I've had it happen to me twice in the last 24 hours when logging in here, with Norton Security Suite. I don't know how to do a screenshot, but if it happens again I'll write down the warning message and post it here.

I wonder if it's a false read from norton.

even when using norton's web scanning tool, it's returning 0 threats:
http://safeweb.norton.com/report/show?ur...Findex.php
Quote this message in a reply
dougrv
Senior Member
****

Offline
Posts: 363
Joined: Aug 2010
Location:
10-16-2011 01:46 PM
Yes, I am using Norton Internet security. And it scans clean
Quote this message in a reply
andrewjs18v
Administrator
*******

Offline
Posts: 953
Joined: Jul 2011
Location: Philadelphia, PA
10-16-2011 03:18 PM
(10-16-2011 01:46 PM)dougr Wrote:  Yes, I am using Norton Internet security. And it scans clean

I'm going to chalk it up to a norton false positive and just keep monitoring the site.
Quote this message in a reply
dougrv
Senior Member
****

Offline
Posts: 363
Joined: Aug 2010
Location:
10-17-2011 11:13 AM
This is the Norton message that came up when logging on at 8 AM and now at 12 PM there was no problems. My Norton message would not let me copy with a right click so this is a typed out version which is the best that I could do. Hope that this helps.

"Web Attack: Mass Iframe Injection Attack 2; An intrusion attempt by damnfineshave.com was blocked; Mon.,Oct 17, 8:42 AM; (74.220.207,80)."

Network traffic from dfs.com matches the signature of a known attack.
Quote this message in a reply
andrewjs18v
Administrator
*******

Offline
Posts: 953
Joined: Jul 2011
Location: Philadelphia, PA
10-17-2011 03:18 PM
(10-17-2011 11:13 AM)dougr Wrote:  This is the Norton message that came up when logging on at 8 AM and now at 12 PM there was no problems. My Norton message would not let me copy with a right click so this is a typed out version which is the best that I could do. Hope that this helps.

"Web Attack: Mass Iframe Injection Attack 2; An intrusion attempt by damnfineshave.com was blocked; Mon.,Oct 17, 8:42 AM; (74.220.207,80)."

Network traffic from dfs.com matches the signature of a known attack.

ok, I did find some changed files which I fixed. let me know if you receive that error again.
Quote this message in a reply
dougrv
Senior Member
****

Offline
Posts: 363
Joined: Aug 2010
Location:
10-18-2011 07:23 AM
Thanks Andrew, and everything worked perfectly this morning. I am thankful for your efforts as this was a complete mystery to me.
Quote this message in a reply

View a Printable Version
Send this Thread to a Friend
Subscribe to this thread


Contact Us | Damn Fine Shave | Mobile Version | RSS Syndication | Return to Content | Return to Top Forum Software by MyBB, © 2002-2012 MyBB Group.
Tema MyCleanRed creado por Abdón de SoporteMyBB.