Page 1 of 2 12 LastLast
Results 1 to 15 of 21

Thread: Malware on NYCAviaion...... woops... too late

  1. #1
    Senior Member Derf's Avatar
    Join Date
    May 2005
    Location
    Miller Place N.Y.
    Posts
    4,534

    Malware on NYCAviaion...... woops... too late

    The website at nycaviation.com contains elements from the site altunbilgisayar.com, which appears to host malware – software that can hurt your computer or otherwise operate without your consent. Just visiting a site that contains malware can infect your computer.
    For detailed information about the problems with these elements, visit the Google Safe Browsing diagnostic page for altunbilgisayar.com.

    ************************************************** ****************


    Diagnostic page for altunbilgisayar.com

    What is the current listing status for altunbilgisayar.com?
    Site is listed as suspicious - visiting this web site may harm your computer.

    Part of this site was listed for suspicious activity 1 time(s) over the past 90 days.

    What happened when Google visited this site?
    Of the 4 pages we tested on the site over the past 90 days, 0 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2009-11-02, and the last time suspicious content was found on this site was on 2009-11-01.
    Malicious software includes 2 scripting exploit(s), 2 trojan(s), 2 exploit(s).

    This site was hosted on 1 network(s) including AS34104 (GLOBAL).

    Has this site acted as an intermediary resulting in further distribution of malware?
    Over the past 90 days, altunbilgisayar.com did not appear to function as an intermediary for the infection of any sites.

    Has this site hosted malware?
    Yes, this site has hosted malicious software over the past 90 days. It infected 3 domain(s), including cutlerkauai.com/, halter.gov.tr/, jxcomputertech.com/.

    How did this happen?
    In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.




    MY Pc at work got infected with this today but I had 6 different websites open, Using google chrome, I got this message and found that I had it open with IE and that is why I am typing this message. It got past IE with no problem. I love Google Chrome and do not thing I am going to use IE anymore as it just sucks. It is slow, annoying and just never as quick or nice to use a Chrome. If your using IE....Sorry to say you are probably infected too :(



    Sucks to be on the attack guys, sorry to be the one to have to notify on this. Possible it is a false positive....NOT PROBABLE :(
    The three most common expressions in aviation are, "Why is it doing that?", "Where are we?" and "Oh Crap".

  2. #2
    Moderator Matt Molnar's Avatar
    Join Date
    Apr 2005
    Location
    New York
    Posts
    9,302

    Re: Malware on NYCAviaion...... woops... too late

    Thanks for the heads up, Fred.

    Just to confirm, you are just receiving a warning, correct? You have not actually been infected?

    This is related to the attack we suffered a couple of weeks ago. While we removed all the offending code that we could, there is apparently still be some difficult-to-trace badness buried somewhere.

    From the best we can tell:

    a.) Nothing from NYCA is actually infecting anyone!

    b.) Occasionally, pages on NYCA (both the forums and the main site) are attempting to load a file from altunbilgisayar.com, but the altunbilgisayar site is down and nothing is actually being downloaded, which is good.

    c.) It seems Chrome and Firefox have recently added the altunbilgisayar.com url to their blacklists, so if nyca attempts to download a file from there, you'll see a warning, even if the load fails.

    d.) Obviously, we don't want our site attempting to download anything we didn't ask it to, even if it's not successful

    e.) Unfortunately we've been unable to track down the problem, up to now. Now that blacklists are involved this will be the toppest of top priorities. Thankfully, my schedule should allow more time for this to happen this week than the past couple of weeks.

    f.) We would never knowingly put you in danger. If we have to shut down the site for a few days to fix it, we will. But hopefully we won't have to.
    Ladies and gentlemen, this is your captain speaking. We have a small problem.
    All four engines have stopped. We are doing our damnedest to get them under control.
    I trust you are not in too much distress. —Captain Eric Moody, British Airways Flight 9

  3. #3
    Senior Member Derf's Avatar
    Join Date
    May 2005
    Location
    Miller Place N.Y.
    Posts
    4,534

    Re: Malware on NYCAviaion...... woops... too late

    pc at work was infected with a Trojan but the security found it and deleted it and gave me notification. When using Google chrome I CURRENTLY get a big red STOP page that the website is currently infected and that is the info I pasted above. I still get the same message this morning and will not attemp with IE as it let's me in with no issues. My security has not seen the infection or is not picking it up. Until Google says it is safe I will post from my IPhone.



    Sent from my iPhone and don't*forget to check out my web site WWW.Longislandwallpapers.com
    The three most common expressions in aviation are, "Why is it doing that?", "Where are we?" and "Oh Crap".

  4. #4
    Moderator Matt Molnar's Avatar
    Join Date
    Apr 2005
    Location
    New York
    Posts
    9,302

    Re: Malware on NYCAviaion...... woops... too late

    Darn. Okay.
    Ladies and gentlemen, this is your captain speaking. We have a small problem.
    All four engines have stopped. We are doing our damnedest to get them under control.
    I trust you are not in too much distress. —Captain Eric Moody, British Airways Flight 9

  5. #5
    Administrator PhilDernerJr's Avatar
    Join Date
    Apr 2005
    Location
    Queens, NY
    Posts
    12,470

    Re: Malware on NYCAviaion...... woops... too late

    I would just like to clarify that it is not sure that what Derf encountered was caused by NYCAviation. We have no other indication that there is a threat to anyone by coming to the site. regardless, we are working to cleanse the entire site.
    Email me anytime at [email protected].

  6. #6
    Senior Member NIKV69's Avatar
    Join Date
    Apr 2005
    Location
    IFP, ISP, JFK, IGM, SAN, VCV, LGA, LAX, SEE, LAS
    Posts
    4,258

    Re: Malware on NYCAviaion...... woops... too late

    If it helps you guys my virus blocked a trojan on 10/24 (exploit i frame) 4 times around 6pm not sure what I was surfiing at the time
    'My idea of a good picture is one that's in focus and of a famous person doing something unfamous.' Andy Warhol

  7. #7
    Moderator mirrodie's Avatar
    Join Date
    May 2005
    Location
    Me like the Robert Downey Jr of cooooooookies!
    Posts
    5,747

    Re: Malware on NYCAviaion...... woops... too late

    Actually, our IT at work said I had a trojan virus on my PC. Of the dozen in my office, only my personal PC was affected. This was found on ....last Firday 10/30. NO idea on whether or not its site related.
    And I, I took the path less traveled by
    and that has made all the difference......yet...
    I have a feeling a handle of people are going to be very interested in what I post in the near future.

    http://www.jetphotos.net/showphotos.php?userid=187

  8. #8
    Senior Member
    Join Date
    Sep 2006
    Location
    A word to the wise...keep it under your hat...no one is to know...
    Posts
    3,027

    Re: Malware on NYCAviaion...... woops... too late

    My computer is fine so far but lately, I've been experiencing a burning sensation every time I tinkle. Not sure iffin it's site related.
    R.I.P. Matt Molnar 1979-2013
    #DeleteThePickleSmoocher
    LETS GO CAPS!
    [URL]http://www.sopicturethis.net[/URL]

  9. #9
    Moderator mirrodie's Avatar
    Join Date
    May 2005
    Location
    Me like the Robert Downey Jr of cooooooookies!
    Posts
    5,747

    Re: Malware on NYCAviaion...... woops... too late

    Nah. Ever take sex ed? It might be some OTHER type of virus.


    -your friendly neighborhood doctor.
    And I, I took the path less traveled by
    and that has made all the difference......yet...
    I have a feeling a handle of people are going to be very interested in what I post in the near future.

    http://www.jetphotos.net/showphotos.php?userid=187

  10. #10
    Senior Member Derf's Avatar
    Join Date
    May 2005
    Location
    Miller Place N.Y.
    Posts
    4,534

    Re: Malware on NYCAviaion...... woops... too late

    Now the homepage is going to a different site...the same one that had given me the trojan a few days ago.
    IT notified me at work ad asked that I not visit the site. I told them off ten ways to China (on the inside).




    What is the current listing status for altunbilgisayar.com?
    Site is listed as suspicious - visiting this web site may harm your computer.

    What happened when Google visited this site?
    Of the 4 pages we tested on the site over the past 90 days, 0 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2009-11-05, and the last time suspicious content was found on this site was on 2009-11-05.
    Malicious software includes 2 scripting exploit(s), 2 trojan(s), 2 exploit(s).

    This site was hosted on 2 network(s) including AS34104 (GLOBAL), AS21844 (THEPLANET).

    Has this site acted as an intermediary resulting in further distribution of malware?
    Over the past 90 days, altunbilgisayar.com did not appear to function as an intermediary for the infection of any sites.

    Has this site hosted malware?
    Yes, this site has hosted malicious software over the past 90 days. It infected 10 domain(s), including olimpianet.net/, samojede.org/, cutlerkauai.com/.

    How did this happen?
    In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.

    Next steps:
    Return to the previous page.
    If you are the owner of this web site, you can request a review of your site using Google Webmaster Tools. More information about the review process is available in Google's Webmaster Help Center.
    The three most common expressions in aviation are, "Why is it doing that?", "Where are we?" and "Oh Crap".

  11. #11
    Administrator PhilDernerJr's Avatar
    Join Date
    Apr 2005
    Location
    Queens, NY
    Posts
    12,470

    Re: Malware on NYCAviaion...... woops... too late

    Workin on it...
    Email me anytime at [email protected].

  12. #12
    Senior Member Fighting_falcon_51's Avatar
    Join Date
    Mar 2009
    Location
    Copiague, NY
    Posts
    1,211

    Re: Malware on NYCAviaion...... woops... too late

    There was another attack today..... If you visited this site and you were unprotected I strongly recommend that you download these two programs to make sure you did not pick anything up.

    http://download.cnet.com/AVG-Anti-Virus ... ?tag=mncol

    http://download.cnet.com/Malwarebytes-A ... ?tag=mncol
    http://www.kjpgallery.com << Photography Collection
    http://www.nyasinfo.com << Jones Beach Airshow Information (Updates continue in November)

  13. #13
    Senior Member
    Join Date
    Jan 2006
    Location
    San Diego, CA
    Posts
    2,323

    Re: Malware on NYCAviaion...... woops... too late

    You guys...if you go to the homepage and are redirected to that strange site, just don't click anything. The "warning" that it gives you is not a virus software, it's just the homepage to the bot site. You can't get infected if you don't click anything. Do people realize this? In the meantime, just come straight to the forums: www.nycaviation.com/forum

  14. #14
    Senior Member Fighting_falcon_51's Avatar
    Join Date
    Mar 2009
    Location
    Copiague, NY
    Posts
    1,211

    Re: Malware on NYCAviaion...... woops... too late

    Mellyrose I am not trying to knock you down or anything but malware is designed to loads itself on to your computer without user consent, so you just have to visit a malware infected website to get it on your computer. This is why I stress having protection. Anyway I bet the NYCA team is working around the clock to get this issue sorted out.

    btw- Im not talking about www.nycaviation.com but malware in general.
    http://www.kjpgallery.com << Photography Collection
    http://www.nyasinfo.com << Jones Beach Airshow Information (Updates continue in November)

  15. #15
    Senior Member
    Join Date
    Jan 2006
    Location
    San Diego, CA
    Posts
    2,323

    Re: Malware on NYCAviaion...... woops... too late

    I know you aren't trying to knock me down...what I meant though, is that some people are quoting the warning that the website is giving, as what their anti-virus is giving as a warning. If your virus software isn't showing something, I don't think you have reason to worry.

    And yes, I can vouch that the NYCAviation staff is working diligently to fix this problem...I live at NYCA HQ :)

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •