Why the hell did I almost get a Trojan on this site?

ClutchCityOwns · Post #1 » by **ClutchCityOwns** » Sat Aug 8, 2009 9:21 pm

What the hell?

I was on the Orlando Magic forum about Rashard Lewis taking steroids and my anti-virus popped up and it said a virus was about to come in. This happened 2-3 days ago. I aborted connection so I think I should be good.

Also, Another poster said the same thing when I told about the story. He said he almost got a Trojan as well but his anti-virus managed to get rid of it.

What the hell?

Post #2 » by **Manhattan Project** » Sat Aug 8, 2009 11:52 pm

Next time it happens give us the thread, there is a chance it is coming from someone's avatar. When you hotlink from another website this happens. See Tinyurl etc...

Post #3 » by **Flash3** » Sun Aug 9, 2009 5:18 am

^MP,

if one doesn't show avys or sigs, does that altogether reduce or eliminate the chance of getting a virus that way?

Post #4 » by **Manhattan Project** » Sun Aug 9, 2009 7:05 am

Flash3 wrote:^MP,

if one doesn't show avys or sigs, does that altogether reduce or eliminate the chance of getting a virus that way?

Quite possible, then again I'm not a techy. If you look at some of the problems we have had in the past it has stemmed from avatars and sigs. That plus adblock I can't see how something can get to you.

Post #5 » by **DelaneyRudd** » Sun Aug 9, 2009 4:12 pm

The warnings you are getting are 99.9% likely to be false alarms.

Post #6 » by **magnumt** » Sun Aug 9, 2009 5:22 pm

Flash3 wrote:^MP,

if one doesn't show avys or sigs, does that altogether reduce or eliminate the chance of getting a virus that way?

Yes it does.

The Avatars and SIGS don't show up period (which dramatically increases speeds btw). also disabling images does the same trick as well, and removes another layer of threat-risk by turning the images into BBCode links.

And MP is absolutely right many of these Virus threats are not coming from RealGM (only 1 or 2 actually used to come from the Ads on RealGM, which are constantly reviewed for suspicious stuff). Most of the Virus Threats accidentally come from where people are linking their Avatar or SIGs from (since these sites and their Servers may be inadvertently compromised from Ads or other methods, and you are now exposed via the image).

Post #7 » by **Flash3** » Mon Aug 10, 2009 1:25 am

^I've always had sigs/avys turned off for that very reason by default; speed and faster load times of pages. But, if it aides in the possibility of not getting viruses/ad-aware and such, I'm keeping it that way. -- Appreciate the feedback.

john2jer · Post #8 » by **john2jer** » Tue Aug 11, 2009 6:25 pm

I've had my work comp crapped on a couple times and pretty positive it was due to RealGM.com. It's awesome. ;-)

streetp0et · Post #9 » by **streetp0et** » Sat Aug 22, 2009 6:10 am

i was also browing a thread, http://www.realgm.com/boards/viewtopic.php?f=25&t=939141, on the magic board when this popped up

Post #10 » by **CR Reina** » Sat Aug 22, 2009 8:51 pm

Did it mention a specific URL? I didn't get a warning when I visited that page, so I can't tell which user's av/sig is causing this to happen.

raptorsfan_04 · Post #11 » by **raptorsfan_04** » Tue Aug 25, 2009 6:20 am

Getting a trojan from this website is like getting herpes from your gf... yeah sure some medication will cover it up but the trust just won't be the same... get on it CR Reina!

RustInPeace · Post #12 » by **RustInPeace** » Mon Aug 31, 2009 3:30 am

I just got 2 fake anti spyware popups from browsing the Pistons board (might be just a coincidence though). I'll post info if it happens again.

Post #13 » by **CR Reina** » Mon Aug 31, 2009 5:48 pm

I canceled several of our newer advertisers in order to make sure that this doesn't continue. We aren't sure if these things are happening from avs or ads, but we much rather be safe than sorry.

Speedlot · Post #14 » by **Speedlot** » Sun Sep 20, 2009 4:27 am

I got a TROJAN as well browsing the forums. This a concern for me:/

Speedlot · Post #15 » by **Speedlot** » Sun Sep 20, 2009 4:35 am

This is the link that my anti-virus manage to find. I spaced it out so as to not have anyone accidentally click on it. Please delete if I shouldn't have done that.

nevermind.. upon trying to link it, it's seems to be too dangerous.

It's called rootscan

Post #16 » by **CR Reina** » Mon Sep 21, 2009 2:59 pm

Thank you for letting us know what the name of the Trojan is because that should help us identify the source.

Post #17 » by **CR Reina** » Wed Sep 23, 2009 5:24 pm

We were able to identify the ad network that was causing this to happen and it has now been taken care of. We will continue to monitor the situation closely to ensure that it doesn't happen again and also be sending out a global announcement on the matter in the coming days.

We appreciate your patience.

Dozer! · Post #18 » by **Dozer!** » Wed Sep 23, 2009 6:20 pm

I was getting the same trojan fake computer scan. I just now got a new one that now says Alpha computer scan.