Motoring Discussion > C4P: Have you got a virus (in your ads)?	Car Deals
Thread Author: Mapmaker	Replies: 52

Tue 26 Jul 11 12:34   C4P: Have you got a virus (in your ads)? - Mapmaker

Access has been blocked to "kzftfir.co.cc/showthread.php" as "Mal/HTMLGen-A" has been found at that site. And the usual ad box is empty. Reply to this message | Report message

Tue 26 Jul 11 12:37   C4P: Have you got a virus (in your ads)? - Skip

The anti virus is picking up something too on my work PC. Reply to this message | Report message

Tue 26 Jul 11 12:57   C4P: Have you got a virus (in your ads)? - VxFan

Have reported it to Stephen. Reply to this message | Report message

Tue 26 Jul 11 13:21   C4P: Have you got a virus (in your ads)? - Stuu

Ive noticed that if I press my back button, nothing happens and then looking at the list, thats because it has two 'advertisement' sites before the previous page despite not having been to any. Never seen that before, just today and only on this site. Reply to this message | Report message

Tue 26 Jul 11 13:35   C4P: Have you got a virus (in your ads)? - rtj70

I see the ads are now turned off. So Stephen is on the case. Might take a while to figure out which one as the actual ads are not entirely under the site's control and are dished up by third party. Reply to this message | Report message

Tue 26 Jul 11 13:49   C4P: Have you got a virus (in your ads)? - Iffy

...I see the ads are now turned off... I'm still getting Avis and Kia. Reply to this message | Report message

Tue 26 Jul 11 14:14   C4P: Have you got a virus (in your ads)? - rtj70

Interesting - I don't have any ads at all on here. MacOSX 10.7 here. But I had the ads since the upgrade. Reply to this message | Report message

Tue 26 Jul 11 14:22   C4P: Have you got a virus (in your ads)? - Zero

blank add space here. Reply to this message | Report message

Tue 26 Jul 11 14:26   C4P: Have you got a virus (in your ads)? - hillman1

Blank ad space here too, but still getting the 'high risk website blocked' message Reply to this message | Report message

Tue 26 Jul 11 14:59   C4P: Have you got a virus (in your ads)? - Iffy

Ads still clicking over as normal. Were it not for this thread, I wouldn't have known anything was up. Reply to this message | Report message

Tue 26 Jul 11 15:09   C4P: Have you got a virus (in your ads)? - Armel Coussine

I don't know if there's a connection, but I got three emails yesterday and two the day before, ostensibly from a forum member with whom I have corresponded privately. All untitled, all with enclosures. Looking at the list of other addressees I spotted HJ mods among them, so opened one of the enclosures. It was spam (an ad for cheap internet viagra). So I deleted the rest without opening them. I have emailed the member whose address was being used, but haven't heard back yet. Reply to this message | Report message

Tue 26 Jul 11 15:15   C4P: Have you got a virus (in your ads)? - rtj70

Mike Hannon posted in the computer thread about his hijacked AOL account. I doubt if you'll get a response from that address as he was looking to get it disabled. The two things are unlikely to be linked. And this site does not run on Windows so the site itself is not likely to be infected. But the adverts (now turned off but iffy still seeing them?) are via redirections to other sites and so if compromised are outside of Khoo Systems' control. Hence turning them off until this has been checked out. That's my guess anyway. Reply to this message | Report message

Tue 26 Jul 11 16:10   C4P: Have you got a virus (in your ads)? - Iffy

...now turned off but iffy still seeing them?... Certainly am, currently Co-op insurance and Adrian Flux. I'm on my dongle, although I doubt that would make a difference. Not had any spam mail from Mike Hannon today, so I reckon he's managed to delete the account. Reply to this message | Report message

Tue 26 Jul 11 16:44   C4P: Have you got a virus (in your ads)? - Suppose

ads are still being served. Adblock reports: ads.car4play.com/www/delivery/afr.php?frameid=.... ads.car4play.com/www/delivery/ag.php ads.car4play.com/www/delivery/ajs.php?zoneid=.... p.s. some c4p site virus activity reported in pda's post in computer questions. www.car4play.com/forum/post/index.htm?f=6&t=7294 Reply to this message | Report message

Tue 26 Jul 11 17:13   C4P: Have you got a virus (in your ads)? - Focusless

>> p.s. some c4p site virus activity reported in pda's post in computer questions. >> www.car4play.com/forum/post/index.htm?f=6&t=7294 That might explain why I see 'Latest forum posts' at the bottom underneath the last post rather than at the top right. EDIT: (only in that thread) Last edited by: Focus on Tue 26 Jul 11 at 17:14 Reply to this message | Report message

Tue 26 Jul 11 21:42   C4P: Have you got a virus (in your ads)? - Suppose

>> That might explain why I see 'Latest forum posts' at the bottom underneath the last >> post rather than at the top right. >> >> EDIT: (only in that thread) >> see hidden replies: www.car4play.com/forum/post/index.htm?t=7294&m=162203&v=e Reply to this message | Report message

Wed 27 Jul 11 00:52   C4P: Have you got a virus (in your ads)? - VxFan

>> see hidden replies: I've now managed to delete your post in that thread which was causing the problem with other posts not being visible. Reply to this message | Report message

Tue 26 Jul 11 15:16   C4P: Have you got a virus (in your ads)? - Robbie34

I'm having problems also. I have managed to post this but I'm unable to go back. Reply to this message | Report message

Tue 26 Jul 11 19:37   C4P: Have you got a virus (in your ads)? - Armel Coussine

I have noticed something else in the last couple of days. The tabs at the top of the screen which connect to this site are permanently 'loading' judging by the little rotating asterisk thingies. All other tabs, and those for this site normally, lose the rotating asterisk once loading has occurred. Is there anything sinister about this? Reply to this message | Report message

Tue 26 Jul 11 19:38   C4P: Have you got a virus (in your ads)? - Runfer D'Hills

Put more tonic in it AC. Mine are fine... :-) Reply to this message | Report message

Tue 26 Jul 11 19:46   C4P: Have you got a virus (in your ads)? - Zero

YES! Drink to forget! Reply to this message | Report message

Tue 26 Jul 11 19:49   C4P: Have you got a virus (in your ads)? - Armel Coussine

I can drink without forgetting and forget without drinking. But enough faffing about addictions and premature senility. What about the damn rotating asterisks? Usually they stop. Reply to this message | Report message

Tue 26 Jul 11 19:52   C4P: Have you got a virus (in your ads)? - Runfer D'Hills

Um...they're not rotating AC...er...in fact they're not there at all. Deep breaths old chum deep breaths.... :-) Reply to this message | Report message

Tue 26 Jul 11 19:53   C4P: Have you got a virus (in your ads)? - Manatee

Adverts probably? Are there some streaming ones? I don't see any unlessun I want to... Reply to this message | Report message

Tue 26 Jul 11 20:04   C4P: Have you got a virus (in your ads)? - henry k

>>The tabs at the top of the screen which connect to this site are permanently 'loading' judging by the little rotating asterisk thingies. >>All other tabs, and those for this site normally, lose the rotating asterisk once loading has occurred. >> Now you mention it my Firefox thingy is still rotating. Reply to this message | Report message

Tue 26 Jul 11 20:11   C4P: Have you got a virus (in your ads)? - Armel Coussine

>> Firefox thingy Yes, I have Firefox on a MacBook Pro. Should have specified that perhaps. Windows just has users with rotating eyeballs (he murmured waspishly). Reply to this message | Report message

Tue 26 Jul 11 20:11   C4P: Have you got a virus (in your ads)? - Stuartli

>>Now you mention it my Firefox thingy is still rotating.>> Same here, but I've seen it occur with other websites. Reply to this message | Report message

Tue 26 Jul 11 20:12   C4P: Have you got a virus (in your ads)? - Kevin

AC, are you running the NoScript plugin or perhaps have JavaScript turned off completely? Reply to this message | Report message

Tue 26 Jul 11 21:49   C4P: Have you got a virus (in your ads)? - Armel Coussine

>> are you running the NoScript plugin or perhaps have JavaScript turned off completely? Dunno, is the short answer. Reply to this message | Report message

Tue 26 Jul 11 21:57   C4P: Have you got a virus (in your ads)? - Runfer D'Hills

Probably just as well AC. My computer whizz sister-in-law says things like that to me when I phone her to get advice. Quite sexy really but totally meaningless. Stuff like "have you got a Swahali downloaded on your hard drive?" and "is your dongle fully compatible?" I mean dear girl, I'm married to your sister, I don't think you should be asking about things like that ! Last edited by: Humph D'Bout on Tue 26 Jul 11 at 21:58 Reply to this message | Report message

Tue 26 Jul 11 22:34   C4P: Have you got a virus (in your ads)? - rtj70

The site is working (without adverts) for me on the Mac. Tried the laptop and that's shown up (twice) an attack from somewhere when I loaded this site. The message was not on screen long and so I need to find the error. But some form of risk was detected as a result of this site. Oh and the back button in IE does not work either. I'd post in the other thread that pat started but the thread does not display properly either. Reply to this message | Report message

Tue 26 Jul 11 22:43   C4P: Have you got a virus (in your ads)? - rtj70

Actually the IP address that got flagged was not the C4P one - something about the ads is still working I think and the threat is due to a redirection. I don't recall the full IP address but it started something like 93.x.x.x. Reply to this message | Report message

Tue 26 Jul 11 23:15   C4P: Have you got a virus (in your ads)? - Stuu

>>Oh and the back button in IE does not work either<< I posted that earlier, glad its not just me :-) Reply to this message | Report message

Tue 26 Jul 11 23:21   C4P: Have you got a virus (in your ads)? - rtj70

Pat mentioned it first - back works on the Mac though. I have been trying to recreate the attack on my machine but because ads have always come from more than one place it's not done it since. I'll keep trying. Reply to this message | Report message

Tue 26 Jul 11 23:22   C4P: Have you got a virus (in your ads)? - teabelly

For some reason it's constantly trying to get at google.com too. I never see any ads as I always have an ad blocker running. Reply to this message | Report message

Tue 26 Jul 11 23:24   C4P: Have you got a virus (in your ads)? - rtj70

A lot of the ads on here are Google ads. Hence trying to connect to Google to get an ad. The ads come from other sites and not Khoo Systems. Reply to this message | Report message

Wed 27 Jul 11 00:54   C4P: Have you got a virus (in your ads)? - VxFan

I received a txt message last night saying that this will be looked into today by someone at Khoosys. Reply to this message | Report message

Wed 27 Jul 11 01:28   C4P: Have you got a virus (in your ads)? - rtj70

So in the meantime anyone with a PC might be advised to go away until Khoo Systems tells us it is safe? This reminds me of a similar problem on HJ and we blamed HJ publishing mostly (including the mods). And yet this is no different. Is this site safe? Don't forget HJ got hacked and email addresses stolen. The same basic software is in use on this site albeit a newer version. The revised HJ site then moved away from this software. I'm not bothered about that email address though - it's been stolen since as well, e.g. Play.com and Travelodge. Edit: Not saying MacOSX or Linux or Solaris or..... etc. is safe. But safer. And I am probably in a minority as a Mac user running AV. Last edited by: rtj70 on Wed 27 Jul 11 at 01:31 Reply to this message | Report message

Wed 27 Jul 11 09:28   C4P: Have you got a virus (in your ads)? - Robbie34

Back button is still not working here. The only way I can navigate the site is to go back to Favourites each time. Reply to this message | Report message

Wed 27 Jul 11 10:30   C4P: Have you got a virus (in your ads)? - hillman1

Error messages coming up again this morning having stopped for a while yesterday. Different address though this time Reply to this message | Report message

Wed 27 Jul 11 11:33   C4P: Have you got a virus (in your ads)? - Focusless

>> Back button is still not working here. The only way I can navigate the site >> is to go back to Favourites each time. Sorry to be dim but why use the back button? If it's to get back from a thread to the list of threads then I always use one of the red left arrows at the top of each post. Don't think I use back on this site at all. EDIT: any problem should still be fixed though Last edited by: Focus on Wed 27 Jul 11 at 11:34 Reply to this message | Report message

Wed 27 Jul 11 11:36   C4P: Have you got a virus (in your ads)? - rtj70

Back is working on my Mac but not on PCs with IE here. I don't use the back button but do use back. Instead of clicking on any buttons or hyperlinks I simply press the back button on the mouse. Or you could hit backspace too. More concerning than no back button is the malware that this site is redirecting people to. I see the ads are now back on - did anyone find anything I wonder? Reply to this message | Report message

Wed 27 Jul 11 11:44   C4P: virus (in your ads)? FIXED - LEDFoot

Hi one of the site devs here. We have had an issue with some of the adverts and the system that delivers them - which is separate from our site. This has been fixed. You shouldn't experience any further issues Please let us know if that's not the case. Reply to this message | Report message

Wed 27 Jul 11 11:58   C4P: virus (in your ads)? FIXED - Pat

The back button works for me now in IE thanks LEDfoot. Pat Reply to this message | Report message

Wed 27 Jul 11 12:24   C4P: virus (in your ads)? FIXED - VxFan

On my cheapy cordless Logitech keyboard (from Tesco for £12.99 along with cordless mouse) there are a few other buttons that you can customise. Two of which I have programmed for back and forward operation. They're just to the left of the caps lock key and easily reachable with my little finger. Saves having to move the mouse to the top of the screen to press the back key. Last edited by: VxFan on Wed 27 Jul 11 at 12:24 Reply to this message | Report message

Wed 27 Jul 11 13:54   C4P: virus (in your ads)? FIXED - Armel Coussine

Whatever has been done, the rotating asterisks that signal 'loading' are now disappearing in the normal way once loading is complete. I have a feeling that the animated ads normally present on the right side of my screen have also reappeared after not being visible for a couple of days. Since I don't usually look at them I can't be sure though. But perhaps the asterisks continued to rotate because these ads were trying to load, but couldn't for some reason. That would seem logical. Reply to this message | Report message

Wed 27 Jul 11 14:26   C4P: virus (in your ads)? FIXED - Stuu

My back button is working now so agreed, whatever it was is fixed :-) Reply to this message | Report message

Wed 27 Jul 11 17:38   C4P: virus (in your ads)? FIXED - Iffy

Speaking of ads, I have the impression the site's attracting better-quality ones than it once was. The likes of Vodafone, Sky, Avis, Kia, More Than - all big names. Reply to this message | Report message

Wed 27 Jul 11 19:12   C4P: virus (in your ads)? FIXED - Bromptonaut

>> Speaking of ads, I have the impression the site's attracting better-quality ones than it once >> was. >> >> The likes of Vodafone, Sky, Avis, Kia, More Than - all big names At home in Uk I see CoOp insurance a lot but atm I'm in France and am seeing ads in French. Reply to this message | Report message

Thu 28 Jul 11 00:10   C4P: virus (in your ads)? FIXED - Dutchie

Also had problem with back button.Working now but letters are smaller. Reply to this message | Report message

Thu 28 Jul 11 01:12   C4P: virus (in your ads)? FIXED - VxFan

Have you accidentally reduced the size of the font by holding down the ctrl key and moving the scroll wheel of your mouse? Reply to this message | Report message

Thu 28 Jul 11 01:34   C4P: virus (in your ads)? FIXED - Dutchie

No mouse on here Vx laptop.I problaby have done something .I figure it out thanks. Reply to this message | Report message

Thu 28 Jul 11 10:26   C4P: virus (in your ads)? FIXED - VxFan

Pressing ctrl & the + or - key can also change the size as well. Alternately, click on "View > Text size" or "View > zoom" in the toolbar and change the setting there, providing of course you're using IE. Reply to this message | Report message