Author Topic: Virus on main DD site  (Read 7868 times)

Offline Yordai Dooma

  • Dansdeals Presidential Platinum Elite
  • ********
  • Join Date: May 2008
  • Posts: 4242
  • Total likes: 54
  • DansDeals.com Hat Tips 16
  • Gender: Male
    • View Profile
  • Programs: AA EXP/LT Platinum, SPG gold, Hyatt Globalist, IHG Platinum Ambassador, Hilton Gold, Marriott Gold, Hertz PC, National EE,
Virus on main DD site
« on: July 28, 2010, 10:26:34 PM »
I think the main dansdeals site is infected with a virus.

Every time i load it, i get a pop up from Kaspersky telling me a virus was blocked. It keeps trying to get at my PC as long as im on the site.

The virus it seems to be loading is called trojan.js.redirector.cq

I googled it and it seems to spread by hacking into a site...see here: http://www.latest-virus.com/trojan-js-redirector-cq-2136

Anyone know a way to reach Dan and let him know in case he doesnt know already? I dont want to bother him if he knows already and is working on it, but want him to be aware in the event he doesnt know.

Offline Dan

  • Administrator
  • Dansdeals Lifetime 50K Diamond Elite
  • **********
  • Join Date: May 2008
  • Posts: 68919
  • Total likes: 17300
  • DansDeals.com Hat Tips 16442
  • Gender: Male
    • View Profile
  • Location: CLE
  • Programs: UA GS, AA EXP, DL Dirt, Hyatt Glob, Fairmont Lifetime Plat, DD Diamond, Blocked By @NeriaKraus
Re: Virus on main DD site
« Reply #1 on: July 28, 2010, 10:32:29 PM »
Sounds to me more like you have a spyware problem or virus on your computer.

Save your time, I don't answer PM. Post it in the forum and a dedicated DDF'er will get back to you as soon as possible.

Offline A3

  • Dansdeals Presidential Platinum Elite
  • ********
  • Join Date: Nov 2009
  • Posts: 3476
  • Total likes: 98
  • DansDeals.com Hat Tips 5
  • Gender: Male
    • View Profile
Re: Virus on main DD site
« Reply #2 on: July 28, 2010, 10:33:38 PM »
Hey I have kaspersky and I just got the same Pop Up. Weird..

Offline Yordai Dooma

  • Dansdeals Presidential Platinum Elite
  • ********
  • Join Date: May 2008
  • Posts: 4242
  • Total likes: 54
  • DansDeals.com Hat Tips 16
  • Gender: Male
    • View Profile
  • Programs: AA EXP/LT Platinum, SPG gold, Hyatt Globalist, IHG Platinum Ambassador, Hilton Gold, Marriott Gold, Hertz PC, National EE,
Re: Virus on main DD site
« Reply #3 on: July 28, 2010, 10:33:52 PM »
Sounds to me more like you have a spyware problem or virus on your computer.



I really dont think i do...Dansdeals.com is the only site that is giving me issues...does no one else see this when they go to the site?

Hey I have kaspersky and I just got the same Pop Up. Weird..

Maybe its a kaspersky thing? I doubt it...that website clearly says this virus spreads by hacking into a website...

Offline Dan

  • Administrator
  • Dansdeals Lifetime 50K Diamond Elite
  • **********
  • Join Date: May 2008
  • Posts: 68919
  • Total likes: 17300
  • DansDeals.com Hat Tips 16442
  • Gender: Male
    • View Profile
  • Location: CLE
  • Programs: UA GS, AA EXP, DL Dirt, Hyatt Glob, Fairmont Lifetime Plat, DD Diamond, Blocked By @NeriaKraus
Re: Virus on main DD site
« Reply #4 on: July 28, 2010, 10:41:02 PM »
Save your time, I don't answer PM. Post it in the forum and a dedicated DDF'er will get back to you as soon as possible.

Offline A3

  • Dansdeals Presidential Platinum Elite
  • ********
  • Join Date: Nov 2009
  • Posts: 3476
  • Total likes: 98
  • DansDeals.com Hat Tips 5
  • Gender: Male
    • View Profile
Re: Virus on main DD site
« Reply #5 on: July 28, 2010, 10:45:12 PM »
it shows low hazard, but may just be a kaspersky thing.... Idk, im not to worried, but maybe something to check out.

Offline Dan

  • Administrator
  • Dansdeals Lifetime 50K Diamond Elite
  • **********
  • Join Date: May 2008
  • Posts: 68919
  • Total likes: 17300
  • DansDeals.com Hat Tips 16442
  • Gender: Male
    • View Profile
  • Location: CLE
  • Programs: UA GS, AA EXP, DL Dirt, Hyatt Glob, Fairmont Lifetime Plat, DD Diamond, Blocked By @NeriaKraus
Re: Virus on main DD site
« Reply #6 on: July 28, 2010, 10:48:18 PM »
AVG website scanner isn't finding any problem either:
http://www.avg.com.au/resources/web-page-scanner/
Save your time, I don't answer PM. Post it in the forum and a dedicated DDF'er will get back to you as soon as possible.

Offline Yordai Dooma

  • Dansdeals Presidential Platinum Elite
  • ********
  • Join Date: May 2008
  • Posts: 4242
  • Total likes: 54
  • DansDeals.com Hat Tips 16
  • Gender: Male
    • View Profile
  • Programs: AA EXP/LT Platinum, SPG gold, Hyatt Globalist, IHG Platinum Ambassador, Hilton Gold, Marriott Gold, Hertz PC, National EE,
Re: Virus on main DD site
« Reply #7 on: July 28, 2010, 11:21:20 PM »
AVG website scanner isn't finding any problem either:
http://www.avg.com.au/resources/web-page-scanner/

Im not trying to defend the other tzad...just think something is going and dont want it to affect others...

http://forum.kaspersky.com/index.php?showtopic=94651

My kaspersky is still going nuts every time i load dansdeals...it keeps popping up and then blocking it.

Im trying to upload a screenshot, but the file seems to be too big and i dont know how to make a paint file smaller in size
« Last Edit: July 28, 2010, 11:28:27 PM by David »

Offline ChAiM'l

  • Dansdeals Lifetime Platinum Elite
  • *******
  • Join Date: Jan 2010
  • Posts: 1851
  • Total likes: 51
  • DansDeals.com Hat Tips 4
  • Gender: Male
    • View Profile
Re: Virus on main DD site
« Reply #8 on: July 29, 2010, 01:40:55 AM »
Upload it to photobucket and then post it with [img] code...

Offline Dan

  • Administrator
  • Dansdeals Lifetime 50K Diamond Elite
  • **********
  • Join Date: May 2008
  • Posts: 68919
  • Total likes: 17300
  • DansDeals.com Hat Tips 16442
  • Gender: Male
    • View Profile
  • Location: CLE
  • Programs: UA GS, AA EXP, DL Dirt, Hyatt Glob, Fairmont Lifetime Plat, DD Diamond, Blocked By @NeriaKraus
Re: Virus on main DD site
« Reply #9 on: July 29, 2010, 02:10:50 AM »
He sent me his screenshot and I'm having a firm look into it further.
If anyone has any issues after visiting the site definitely let me know.
Save your time, I don't answer PM. Post it in the forum and a dedicated DDF'er will get back to you as soon as possible.

Offline Chaikel

  • Global Moderator
  • Dansdeals Lifetime Presidential Platinum Elite
  • **********
  • Join Date: Jun 2008
  • Posts: 6842
  • Total likes: 174
  • DansDeals.com Hat Tips 20
  • Gender: Male
    • View Profile
  • Programs: LH SEN, SPG Plat, Hyatt Plat, Rav Kav Platinum
Re: Virus on main DD site
« Reply #10 on: July 29, 2010, 03:58:34 AM »
Could it be an affiliate redirector code that you have on the site?
Create professional looking itineraries.
Check out eliteitinerary.com

Offline Eli

  • Administrator
  • Dansdeals Lifetime Platinum Elite
  • **********
  • Join Date: May 2008
  • Posts: 1491
  • Total likes: 36
  • DansDeals.com Hat Tips 0
    • View Profile
  • Location: Ir Hakodesh
  • Programs: Starwood Platinum, Priority Club Platinum, Fairmont Premier, Avis First, Star Alliance Gold, bmi Gold and A"A Lifetime Gold
Re: Virus on main DD site
« Reply #11 on: July 29, 2010, 05:29:37 AM »
It was a legitimate Trojan worm injecting itself into word press blogs. How it got into DD we still don't know but it has been removed from the site and the passwords have all been changed. If anyone gets a virus message again when visiting the site, please post here.

Thanks to those who reported it.
-Eli

Offline ChAiM'l

  • Dansdeals Lifetime Platinum Elite
  • *******
  • Join Date: Jan 2010
  • Posts: 1851
  • Total likes: 51
  • DansDeals.com Hat Tips 4
  • Gender: Male
    • View Profile
Re: Virus on main DD site
« Reply #12 on: July 29, 2010, 08:45:44 AM »
Wow! I think I'm getting myself Kapersky...

Offline steve2

  • Dansdeals Lifetime Platinum Elite
  • *******
  • Join Date: Jun 2009
  • Posts: 2077
  • Total likes: 8
  • DansDeals.com Hat Tips 0
    • View Profile
  • Location: outside some Club
Re: Virus on main DD site
« Reply #13 on: July 29, 2010, 09:51:11 AM »
Wow! I think I'm getting myself Kapersky...

 many hold it to be the best out there. Got my K Internet Security 3 PCs for $59.99 +tx and got a $60 rebate so it cost me $5 for 3 computers, then again I had to thank my bro out in LA who went to the local FRYs where it was on sale for $59.99 staples had it but it was $79.99 . DEAD NOW

 

Offline Dan

  • Administrator
  • Dansdeals Lifetime 50K Diamond Elite
  • **********
  • Join Date: May 2008
  • Posts: 68919
  • Total likes: 17300
  • DansDeals.com Hat Tips 16442
  • Gender: Male
    • View Profile
  • Location: CLE
  • Programs: UA GS, AA EXP, DL Dirt, Hyatt Glob, Fairmont Lifetime Plat, DD Diamond, Blocked By @NeriaKraus
Re: Virus on main DD site
« Reply #14 on: July 29, 2010, 11:11:53 AM »
Apparently this virus injected itself into a some 300,000 wordpress sites! 
You may want to download a free trial of kaspersky to keep yourself safe!
Save your time, I don't answer PM. Post it in the forum and a dedicated DDF'er will get back to you as soon as possible.

Offline Chaikel

  • Global Moderator
  • Dansdeals Lifetime Presidential Platinum Elite
  • **********
  • Join Date: Jun 2008
  • Posts: 6842
  • Total likes: 174
  • DansDeals.com Hat Tips 20
  • Gender: Male
    • View Profile
  • Programs: LH SEN, SPG Plat, Hyatt Plat, Rav Kav Platinum
Re: Virus on main DD site
« Reply #15 on: July 29, 2010, 11:49:14 AM »
Apparently this virus injected itself into a some 300,000 wordpress sites! 
You may want to download a free trial of kaspersky to keep yourself safe!
What does it do specifically? (the virus)
Create professional looking itineraries.
Check out eliteitinerary.com

Offline Yordai Dooma

  • Dansdeals Presidential Platinum Elite
  • ********
  • Join Date: May 2008
  • Posts: 4242
  • Total likes: 54
  • DansDeals.com Hat Tips 16
  • Gender: Male
    • View Profile
  • Programs: AA EXP/LT Platinum, SPG gold, Hyatt Globalist, IHG Platinum Ambassador, Hilton Gold, Marriott Gold, Hertz PC, National EE,
Re: Virus on main DD site
« Reply #16 on: July 29, 2010, 01:37:54 PM »
Apparently this virus injected itself into a some 300,000 wordpress sites! 
You may want to download a free trial of kaspersky to keep yourself safe!

And ya'll thought i was making it up! How did those URL scanners not pick it up?

Offline Eli

  • Administrator
  • Dansdeals Lifetime Platinum Elite
  • **********
  • Join Date: May 2008
  • Posts: 1491
  • Total likes: 36
  • DansDeals.com Hat Tips 0
    • View Profile
  • Location: Ir Hakodesh
  • Programs: Starwood Platinum, Priority Club Platinum, Fairmont Premier, Avis First, Star Alliance Gold, bmi Gold and A"A Lifetime Gold
Re: Virus on main DD site
« Reply #17 on: July 30, 2010, 12:24:39 AM »
What does it do specifically? (the virus)
Nothing. It might redirect you to come pharmaceutical site but that's it.
-Eli

Offline AsherO

  • Global Moderator
  • Dansdeals Lifetime 30K Presidential Platinum Elite
  • **********
  • Join Date: May 2008
  • Posts: 31012
  • Total likes: 7974
  • DansDeals.com Hat Tips 79
    • View Profile
  • Location: NYC
Re: Virus on main DD site
« Reply #18 on: July 30, 2010, 02:12:42 AM »
Nothing. It might redirect you to come pharmaceutical site but that's it.

Is this the virus you are referring to? This one sometimes redirects to payload sites, which download nasty viruses like this one.
DDF FFB (Forum From Birth)

Offline Dan

  • Administrator
  • Dansdeals Lifetime 50K Diamond Elite
  • **********
  • Join Date: May 2008
  • Posts: 68919
  • Total likes: 17300
  • DansDeals.com Hat Tips 16442
  • Gender: Male
    • View Profile
  • Location: CLE
  • Programs: UA GS, AA EXP, DL Dirt, Hyatt Glob, Fairmont Lifetime Plat, DD Diamond, Blocked By @NeriaKraus
Re: Virus on main DD site
« Reply #19 on: July 30, 2010, 03:25:34 AM »
Is this the virus you are referring to? This one sometimes redirects to payload sites, which download nasty viruses like this one.
Different virus.
Save your time, I don't answer PM. Post it in the forum and a dedicated DDF'er will get back to you as soon as possible.