Infected site ....Trojan.Asprox .. Post and link removed

 

Interesting, My virus protection blocked something like an attack when I tried to access the ozfirestorm website.

 

My riding and Trestles surfing buddy from here in San Clemente is down in Melbourne right now staying with friends. He owns 2 Duc's, 851 and 998, but he respects the VTR. His friend also owns Duc's and he's hoping to get in a couple of laps at Phillips Island while he's down there for 3 or 4 weeks.
Have you and your mates gotten some laps in there?

 

Welcome aboard!

 

Nice to see another vtr the fastest color

 

Trojan.Asprox Infected.. Yes it was an infected site.

Link removed

 

Thanks for blocking that TX. Trojan bad, well, when your talkin' software. No wait, I mean computers... Ah jeez.

 

I know this guy, he is a regular on Ozfirestorm, so his post shouldn't be malicious.

What was the problem with it?

 

Hey Shane, Andrew here. Not to sure whats happened. There is...as you know no trojan connected with our site.

A

 

Hey guys, here is the details of our verified site www.ozfirestorm.com

I cant see why it has a trojan attached to it.


PROBOARDS34.COM

proboards34.com site has been verified as safe to access and to send information.

The site ownership has been identified.
The owner of the site has been identified as actively conducting business.
The site and its owner are located in countries that are not likely suspected.
The site is not on a scamming or phishing blacklist.


Owner: ProBoards.com

Consumers rating: None

Domain details

The data contained in GoDaddy.com, Inc.'s WhoIs database,
while believed by the company to be reliable, is provided "as is"
with no guarantee or warranties regarding its accuracy. This
information is provided for the sole purpose of assisting you
in obtaining information about domain name registration records.
Any use of this data for any other purpose is expressly forbidden without the prior written
permission of GoDaddy.com, Inc. By submitting an inquiry,
you agree to these terms of usage and limitations of warranty. In particular,
you agree not to use this data to allow, enable, or otherwise make possible,
dissemination or collection of this data, in part or in its entirety, for any
purpose, such as the transmission of unsolicited advertising and
and solicitations of any kind, including spam. You further agree
not to use this data to enable high volume, automated or robotic electronic
processes designed to collect or compile this data for any purpose,
including mining this data for your own personal or commercial purposes.

Please note: the registrant of the domain name is specified
in the "registrant" field. In most cases, GoDaddy.com, Inc.
is not the registrant of domain names listed in this database.

Registrant:
ProBoards

Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)
Domain Name: PROBOARDS34.COM

Domain servers in listed order:
NS.PROBOARDS.COM
NS2.PROBOARDS.COM
NS4.PROBOARDS.COM

For complete domain details go to:
http://who.godaddy.com/whoischeck.as...ROBOARDS34.COM


Server details

OrgName: ThePlanet.com Internet Services, Inc.
OrgID: TPCM
Address: 315 Capitol
Address: Suite 205
City: Houston
StateProv: TX
PostalCode: 77002
Country: US

ReferralServer: rwhois://rwhois.theplanet.com:4321

NetRange: 69.93.0.0 - 69.93.255.255
CIDR: 69.93.0.0/16
NetName: NETBLK-THEPLANET-BLK-9
NetHandle: NET-69-93-0-0-1
Parent: NET-69-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.THEPLANET.COM
NameServer: NS2.THEPLANET.COM
Comment:
RegDate: 2003-11-19
Updated: 2004-03-15

RTechHandle: PP46-ARIN
RTechName: Pathos, Peter
RTechPhone: +1-214-782-7800
RTechEmail: admins@theplanet.com

OrgAbuseHandle: ABUSE271-ARIN
OrgAbuseName: The Planet Abuse
OrgAbusePhone: +1-281-714-3560
OrgAbuseEmail: abuse@theplanet.com

OrgNOCHandle: THEPL-ARIN
OrgNOCName: The Planet NOC
OrgNOCPhone: +1-281-714-3555
OrgNOCEmail: noc@theplanet.com

OrgTechHandle: TECHN33-ARIN
OrgTechName: Technical Support
OrgTechPhone: +1-214-782-7800
OrgTechEmail: admins@theplanet.com

# ARIN WHOIS database, last updated 2008-08-01 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.

 

AVAST says trojan JS:Packed-D [Trj]

 

Hi AFL,
Welcome aboard. The second addy you gave still seems to have malicious code attached to it. It may not be the Ozfirestorm site itself, but a DNS server problem. It recently came to light that the DNS servers (which associate web names to IP addresses) could be hacked to redirect people to other sites. When I click on your link, it actually tries to take me to "google-analysis.com" It is listed on my virus protection as a high security risk, so anyone who doesn't have virus protection, don't click on it.

 

Very strange. I have friends in other countries.. UK, Holland, India that have no problems with the link.

Hmmmm