Motoring Discussion > C4P: Have you got a virus (in your ads)? Car Deals
Thread Author: Mapmaker Replies: 52

 C4P: Have you got a virus (in your ads)? - Mapmaker
Access has been blocked to "kzftfir.co.cc/showthread.php" as "Mal/HTMLGen-A" has been found at that site.

And the usual ad box is empty.
 C4P: Have you got a virus (in your ads)? - Skip
The anti virus is picking up something too on my work PC.
 C4P: Have you got a virus (in your ads)? - VxFan
Have reported it to Stephen.
 C4P: Have you got a virus (in your ads)? - Stuu
Ive noticed that if I press my back button, nothing happens and then looking at the list, thats because it has two 'advertisement' sites before the previous page despite not having been to any. Never seen that before, just today and only on this site.
 C4P: Have you got a virus (in your ads)? - rtj70
I see the ads are now turned off. So Stephen is on the case.

Might take a while to figure out which one as the actual ads are not entirely under the site's control and are dished up by third party.
 C4P: Have you got a virus (in your ads)? - Iffy
...I see the ads are now turned off...

I'm still getting Avis and Kia.

 C4P: Have you got a virus (in your ads)? - rtj70
Interesting - I don't have any ads at all on here. MacOSX 10.7 here. But I had the ads since the upgrade.
 C4P: Have you got a virus (in your ads)? - Zero
blank add space here.
 C4P: Have you got a virus (in your ads)? - hillman1
Blank ad space here too, but still getting the 'high risk website blocked' message
 C4P: Have you got a virus (in your ads)? - Iffy
Ads still clicking over as normal.

Were it not for this thread, I wouldn't have known anything was up.

 C4P: Have you got a virus (in your ads)? - Armel Coussine
I don't know if there's a connection, but I got three emails yesterday and two the day before, ostensibly from a forum member with whom I have corresponded privately. All untitled, all with enclosures. Looking at the list of other addressees I spotted HJ mods among them, so opened one of the enclosures. It was spam (an ad for cheap internet viagra). So I deleted the rest without opening them.

I have emailed the member whose address was being used, but haven't heard back yet.
 C4P: Have you got a virus (in your ads)? - rtj70
Mike Hannon posted in the computer thread about his hijacked AOL account. I doubt if you'll get a response from that address as he was looking to get it disabled.

The two things are unlikely to be linked. And this site does not run on Windows so the site itself is not likely to be infected. But the adverts (now turned off but iffy still seeing them?) are via redirections to other sites and so if compromised are outside of Khoo Systems' control. Hence turning them off until this has been checked out. That's my guess anyway.
 C4P: Have you got a virus (in your ads)? - Iffy
...now turned off but iffy still seeing them?...

Certainly am, currently Co-op insurance and Adrian Flux.

I'm on my dongle, although I doubt that would make a difference.

Not had any spam mail from Mike Hannon today, so I reckon he's managed to delete the account.

 C4P: Have you got a virus (in your ads)? - Suppose
ads are still being served. Adblock reports:

ads.car4play.com/www/delivery/afr.php?frameid=....
ads.car4play.com/www/delivery/ag.php
ads.car4play.com/www/delivery/ajs.php?zoneid=....

p.s. some c4p site virus activity reported in pda's post in computer questions.
www.car4play.com/forum/post/index.htm?f=6&t=7294

 C4P: Have you got a virus (in your ads)? - Focusless
>> p.s. some c4p site virus activity reported in pda's post in computer questions.
>> www.car4play.com/forum/post/index.htm?f=6&t=7294

That might explain why I see 'Latest forum posts' at the bottom underneath the last post rather than at the top right.

EDIT: (only in that thread)
Last edited by: Focus on Tue 26 Jul 11 at 17:14
 C4P: Have you got a virus (in your ads)? - Suppose
>> That might explain why I see 'Latest forum posts' at the bottom underneath the last
>> post rather than at the top right.
>>
>> EDIT: (only in that thread)
>>


see hidden replies:
www.car4play.com/forum/post/index.htm?t=7294&m=162203&v=e

 C4P: Have you got a virus (in your ads)? - VxFan
>> see hidden replies:

I've now managed to delete your post in that thread which was causing the problem with other posts not being visible.
 C4P: Have you got a virus (in your ads)? - Robbie34
I'm having problems also. I have managed to post this but I'm unable to go back.
 C4P: Have you got a virus (in your ads)? - Armel Coussine
I have noticed something else in the last couple of days.

The tabs at the top of the screen which connect to this site are permanently 'loading' judging by the little rotating asterisk thingies. All other tabs, and those for this site normally, lose the rotating asterisk once loading has occurred.

Is there anything sinister about this?
 C4P: Have you got a virus (in your ads)? - Runfer D'Hills
Put more tonic in it AC. Mine are fine...

:-)
 C4P: Have you got a virus (in your ads)? - Zero
YES! Drink to forget!
 C4P: Have you got a virus (in your ads)? - Armel Coussine
I can drink without forgetting and forget without drinking. But enough faffing about addictions and premature senility. What about the damn rotating asterisks? Usually they stop.
 C4P: Have you got a virus (in your ads)? - Runfer D'Hills
Um...they're not rotating AC...er...in fact they're not there at all. Deep breaths old chum deep breaths....

:-)
 C4P: Have you got a virus (in your ads)? - Manatee
Adverts probably? Are there some streaming ones? I don't see any unlessun I want to...
 C4P: Have you got a virus (in your ads)? - henry k
>>The tabs at the top of the screen which connect to this site are permanently 'loading' judging by the little rotating asterisk thingies.
>>All other tabs, and those for this site normally, lose the rotating asterisk once loading has occurred.
>>
Now you mention it my Firefox thingy is still rotating.
 C4P: Have you got a virus (in your ads)? - Armel Coussine
>> Firefox thingy

Yes, I have Firefox on a MacBook Pro. Should have specified that perhaps. Windows just has users with rotating eyeballs (he murmured waspishly).
 C4P: Have you got a virus (in your ads)? - Stuartli
>>Now you mention it my Firefox thingy is still rotating.>>

Same here, but I've seen it occur with other websites.
 C4P: Have you got a virus (in your ads)? - Kevin
AC,

are you running the NoScript plugin or perhaps have JavaScript turned off completely?

 C4P: Have you got a virus (in your ads)? - Armel Coussine
>> are you running the NoScript plugin or perhaps have JavaScript turned off completely?

Dunno, is the short answer.
 C4P: Have you got a virus (in your ads)? - Runfer D'Hills
Probably just as well AC. My computer whizz sister-in-law says things like that to me when I phone her to get advice. Quite sexy really but totally meaningless. Stuff like "have you got a Swahali downloaded on your hard drive?" and "is your dongle fully compatible?" I mean dear girl, I'm married to your sister, I don't think you should be asking about things like that !
Last edited by: Humph D'Bout on Tue 26 Jul 11 at 21:58
 C4P: Have you got a virus (in your ads)? - rtj70
The site is working (without adverts) for me on the Mac. Tried the laptop and that's shown up (twice) an attack from somewhere when I loaded this site. The message was not on screen long and so I need to find the error.

But some form of risk was detected as a result of this site. Oh and the back button in IE does not work either. I'd post in the other thread that pat started but the thread does not display properly either.
 C4P: Have you got a virus (in your ads)? - rtj70
Actually the IP address that got flagged was not the C4P one - something about the ads is still working I think and the threat is due to a redirection.

I don't recall the full IP address but it started something like 93.x.x.x.
 C4P: Have you got a virus (in your ads)? - Stuu
>>Oh and the back button in IE does not work either<<

I posted that earlier, glad its not just me :-)
 C4P: Have you got a virus (in your ads)? - rtj70
Pat mentioned it first - back works on the Mac though.

I have been trying to recreate the attack on my machine but because ads have always come from more than one place it's not done it since. I'll keep trying.
 C4P: Have you got a virus (in your ads)? - teabelly
For some reason it's constantly trying to get at google.com too.

I never see any ads as I always have an ad blocker running.
 C4P: Have you got a virus (in your ads)? - rtj70
A lot of the ads on here are Google ads. Hence trying to connect to Google to get an ad. The ads come from other sites and not Khoo Systems.
 C4P: Have you got a virus (in your ads)? - VxFan
I received a txt message last night saying that this will be looked into today by someone at Khoosys.
 C4P: Have you got a virus (in your ads)? - rtj70
So in the meantime anyone with a PC might be advised to go away until Khoo Systems tells us it is safe? This reminds me of a similar problem on HJ and we blamed HJ publishing mostly (including the mods). And yet this is no different.

Is this site safe? Don't forget HJ got hacked and email addresses stolen. The same basic software is in use on this site albeit a newer version. The revised HJ site then moved away from this software.

I'm not bothered about that email address though - it's been stolen since as well, e.g. Play.com and Travelodge.

Edit: Not saying MacOSX or Linux or Solaris or..... etc. is safe. But safer. And I am probably in a minority as a Mac user running AV.
Last edited by: rtj70 on Wed 27 Jul 11 at 01:31
 C4P: Have you got a virus (in your ads)? - Robbie34
Back button is still not working here. The only way I can navigate the site is to go back to Favourites each time.
 C4P: Have you got a virus (in your ads)? - hillman1
Error messages coming up again this morning having stopped for a while yesterday.

Different address though this time
 C4P: Have you got a virus (in your ads)? - Focusless
>> Back button is still not working here. The only way I can navigate the site
>> is to go back to Favourites each time.

Sorry to be dim but why use the back button? If it's to get back from a thread to the list of threads then I always use one of the red left arrows at the top of each post. Don't think I use back on this site at all.

EDIT: any problem should still be fixed though
Last edited by: Focus on Wed 27 Jul 11 at 11:34
 C4P: Have you got a virus (in your ads)? - rtj70
Back is working on my Mac but not on PCs with IE here. I don't use the back button but do use back. Instead of clicking on any buttons or hyperlinks I simply press the back button on the mouse. Or you could hit backspace too.

More concerning than no back button is the malware that this site is redirecting people to.

I see the ads are now back on - did anyone find anything I wonder?
 C4P: virus (in your ads)? FIXED - LEDFoot
Hi one of the site devs here. We have had an issue with some of the adverts and the system that delivers them - which is separate from our site.

This has been fixed.

You shouldn't experience any further issues
Please let us know if that's not the case.
 C4P: virus (in your ads)? FIXED - Pat
The back button works for me now in IE thanks LEDfoot.

Pat
 C4P: virus (in your ads)? FIXED - VxFan
On my cheapy cordless Logitech keyboard (from Tesco for £12.99 along with cordless mouse) there are a few other buttons that you can customise. Two of which I have programmed for back and forward operation. They're just to the left of the caps lock key and easily reachable with my little finger. Saves having to move the mouse to the top of the screen to press the back key.

Last edited by: VxFan on Wed 27 Jul 11 at 12:24
 C4P: virus (in your ads)? FIXED - Armel Coussine
Whatever has been done, the rotating asterisks that signal 'loading' are now disappearing in the normal way once loading is complete.

I have a feeling that the animated ads normally present on the right side of my screen have also reappeared after not being visible for a couple of days. Since I don't usually look at them I can't be sure though. But perhaps the asterisks continued to rotate because these ads were trying to load, but couldn't for some reason. That would seem logical.
 C4P: virus (in your ads)? FIXED - Stuu
My back button is working now so agreed, whatever it was is fixed :-)
 C4P: virus (in your ads)? FIXED - Iffy
Speaking of ads, I have the impression the site's attracting better-quality ones than it once was.

The likes of Vodafone, Sky, Avis, Kia, More Than - all big names.

 C4P: virus (in your ads)? FIXED - Bromptonaut
>> Speaking of ads, I have the impression the site's attracting better-quality ones than it once
>> was.
>>
>> The likes of Vodafone, Sky, Avis, Kia, More Than - all big names

At home in Uk I see CoOp insurance a lot but atm I'm in France and am seeing ads in French.
 C4P: virus (in your ads)? FIXED - Dutchie
Also had problem with back button.Working now but letters are smaller.
 C4P: virus (in your ads)? FIXED - VxFan
Have you accidentally reduced the size of the font by holding down the ctrl key and moving the scroll wheel of your mouse?
 C4P: virus (in your ads)? FIXED - Dutchie
No mouse on here Vx laptop.I problaby have done something .I figure it out thanks.
 C4P: virus (in your ads)? FIXED - VxFan
Pressing ctrl & the + or - key can also change the size as well.

Alternately, click on "View > Text size" or "View > zoom" in the toolbar and change the setting there, providing of course you're using IE.
Latest Forum Posts