Go Back   Steve's Digicams Forums > Printers > Photo Inkjet

Reply
 
Thread Tools Search this Thread
Old Sep 28, 2005, 6:50 AM   #1361
Administrator
 
Join Date: Jun 2003
Location: Savannah, GA (USA)
Posts: 22,378
Default

KnightCrawler:

Check your Private Mail ASAP.

Your web site is trying to download a trojan when members go to it.

Jim C.


JimC is offline   Reply With Quote
Old Sep 28, 2005, 6:59 AM   #1362
Senior Member
 
Join Date: May 2005
Posts: 735
Default

JimC wrote:
Quote:
KnightCrawler:

Check your Private Mail ASAP.

Your web site is trying to download a trojan when members go to it.

Jim C.

Jim C

In theory KnightCrawler resolved that issue by moving his website... according to him it was a cjb popup that triggered someone's alarm. This is the first time I heard about this complaint... and I can not presently conferm there is an issue with cjb webhosting but I'll be taking steps to move my self.

Unless you mean the issue is on http://pixma.webpal.info/ in which case I don't need to bother moving.


zakezuke is offline   Reply With Quote
Old Sep 28, 2005, 9:48 AM   #1363
Administrator
 
Join Date: Jun 2003
Location: Savannah, GA (USA)
Posts: 22,378
Default

It looks like something on the page at cbj.net host is trying to install a trojan. AVG Antivirus blocked it when I visited http://pixma.cbj.net (make sure you don't go there unless you're using very good virus protection).

I'm also running MS Antispyware (which did not generate an alert, probably because AVG trapped it first before the MS software saw it).

But, someone using MS Antispyware had it trapped by MS Antispyware, which generated an alert that a trojan was trying to install and immediately started scanning their PC

I have been unable to duplicate it (it's probably embedded in the banner ads or popups somewhere). I don't know if AVG saw the same thing when I visited yesterday (a red screen came up that it was blocking a Trojan (specifically showing a .exe file trying to download). It did not log the name.

It's probably something being generated by cbj.net (but, not often enough to be trapped consistently when testing for it). This is what the other person visiting yesterday got from MS Antispyware (but AVG may have been blocking a different Trojan, since my MS Antispyware did not alert me).


PacerDMedia.Installer

Type:
Trojan
A Trojan that silently installs other programs without consent.

Category: Trojan Downloader
A Trojan that silently installs other programs without consent.

Threat level: High
High-risk items have a large potential for harm, such as loss of computer control, and should be removed unless knowingly installed.

Author: PACERD, LTD

Description: PacerDMedia.Installer is a Trojan Downloader that contacts a remote webserver to download various adware and trojan files.

JimC is offline   Reply With Quote
Old Sep 28, 2005, 10:05 AM   #1364
Administrator
 
Join Date: Jun 2003
Location: Savannah, GA (USA)
Posts: 22,378
Default

P.S.

I found it when viewing an Ebay listing for CD trays that someone posted a link to.

The Ebay listing showed the URL for the site as a place to find instructions.

This is a very good example of why we don't like anyone posting links to their commercial sites (and if it's got banner ads, it's commercial as far as we're concerned).

You never know what a member will run into visting one (in addition to scammers trying to rip off members, and users trying to sell products by posting links to their sites, adware/viruses can be a problem, too).

I know that's not what is happening here. But, we can't police all posts and make sure they're safe.

JimC is offline   Reply With Quote
Old Sep 28, 2005, 2:43 PM   #1365
Senior Member
 
Join Date: May 2005
Posts: 735
Default

JimC wrote:
Quote:
It looks like something on the page at cbj.net host is trying to install a trojan. AVG Antivirus blocked it when I visited http://pixma.cbj.net (make sure you don't go there unless you're using very good virus protection).

You should add my site http://pixma-faq.cbj.net as well to this warning. I would have gotten started sooner but I just got the warning from knightcrawler.

http://users.cjb.net/pixma-faq/ on the other hand while the same site isn't affected by popups. I'll link to that instead till I get an account on another site. Presently waiting for e-mail.

I'll be moving to another free hosting site today till such time I can make more perminate arangements.


zakezuke is offline   Reply With Quote
Old Sep 28, 2005, 5:21 PM   #1366
Administrator
 
Join Date: Jun 2003
Location: Savannah, GA (USA)
Posts: 22,378
Default

zakezuke wrote:
Quote:
JimC wrote:
Quote:
It looks like something on the page at cbj.net host is trying to install a trojan. AVG Antivirus blocked it when I visited http://pixma.cbj.net (make sure you don't go there unless you're using very good virus protection).

You should add my site http://pixma-faq.cbj.net as well to this warning. I would have gotten started sooner but I just got the warning from knightcrawler.

http://users.cjb.net/pixma-faq/ on the other hand while the same site isn't affected by popups. I'll link to that instead till I get an account on another site. Presently waiting for e-mail.

I'll be moving to another free hosting site today till such time I can make more perminate arangements.

Well, we still don't know exactly what caused it (perhaps an infected ad server somewhere used for all of the banner ads and popups on sites hosted by cbj.net).

But, what he decided to do was post a warning on the original site (thanks KnightCrawler) versus killing the site entirely.

The problem with killing it entirely is that then the old links to the original URL went directly to http://cbj.net (with all of their ads and popups).

I didn't even see any ads and popups running on your site at http://users.cbj.net/pixma-faq before you took it down (just a quick glance, not looking for long). Now, anyone clicking on your old URL is going straight to http://cbj.net (and getting their ads, which might be source of the problem).

Isn't the internet fun? :-)

My advice, make sure you're running up to date virus and spyware protection before clicking on any link (especially the ones we're discussing in this post, since two of us got trojan alerts, from two different software packages yesterday).


JimC is offline   Reply With Quote
Old Sep 28, 2005, 5:35 PM   #1367
Senior Member
 
Join Date: May 2005
Posts: 735
Default

JimC wrote:
Quote:
The problem with killing it entirely is that then the old links to the original URL went directly to http://cbj.net (with all of their ads and popups).

I didn't even see any ads and popups running on your site at http://users.cbj.net/pixma-faq before you took it down (just a quick glance, not looking for long). Now, anyone clicking on your old URL is going straight to http://cbj.net (and getting their ads, which might be source of the problem).

Isn't the internet fun? :-)

My advice, make sure you're running up to date virus and spyware protection before clicking on any link.

http://pixma-faq.cjb.net has the popups, but you can bypass the popups by using the url http://users.cbj.net/site-name For example Knightcrawlers site can be accessed without popups at all here http://users.cjb.net/pixma/

http://pixma-faq.periastron.com is officaly up. It's not free hosting.


zakezuke is offline   Reply With Quote
Old Sep 28, 2005, 6:52 PM   #1368
Member
 
digiguy's Avatar
 
Join Date: Jun 2005
Posts: 54
Default

For the last 4 months members have been selling trays and rollers in this thread -- the most popular thread on Steve's Forums. I'm just curious, but why did it take so long to put a stop to it?


digiguy is offline   Reply With Quote
Old Sep 29, 2005, 12:50 PM   #1369
Administrator
 
Join Date: Jun 2003
Location: Savannah, GA (USA)
Posts: 22,378
Default

digiguy wrote:
Quote:
For the last 4 months members have been selling trays and rollers in this thread -- the most popular thread on Steve's Forums. I'm just curious, but why did it take so long to put a stop to it?

Nobody ever notified a moderator about it, even though it *should* be common knowledge that for sale posts are not allowed (especially since if you run your mouse cursor over the "Discussion Forums" menu choice on the main page at http://www.steves-digicams.com, you'll see this rule.

Many other forums have the identical rule (and violating it on some forums often results in an immediate ban for the member name and/or the IP addresses they connected from with no further warning).

We don't have a lot of rules here (like you'll see on many forums). Steve tries to provide an atomosphere where users can discuss Digital Cameras, Photography, and subjects that are related (like printers).

But, we don't allow Wanted, For Sale or Commercial Type Posts.


JimC is offline   Reply With Quote
Old Sep 30, 2005, 6:33 AM   #1370
Member
 
Join Date: Aug 2005
Posts: 41
Default

Hey everybody...got a quick question..wht types of ink is everyone usin for their ip4000 dvd printing and how do they look? nevr tried generic ink myself and not sure if i want to...

anyone?
coolio is offline   Reply With Quote
 
Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off



All times are GMT -5. The time now is 12:23 AM.