BHW Exploit ??? WTF

Discussion in 'BlackHat Lounge' started by MisterF, Feb 29, 2012.

  1. MisterF

    MisterF Moderator Staff Member Moderator Jr. VIP

    Joined:
    Nov 29, 2009
    Messages:
    12,887
    Likes Received:
    13,086
    Occupation:
    Conference Organiser, Business Advisor.,
    Location:
    JADIP
    Home Page:
    Had a warning twice in 5 minutes on AVG about a blocked threat;

    hxxp://www.blackhatworld.com/blackhat-seo/external.php?type=RSS2
    Exploit Blackhole Exploit Kit 9 type 2129)

    WTF is this about ?
     
  2. MrStark

    MrStark Newbie

    Joined:
    Feb 29, 2012
    Messages:
    25
    Likes Received:
    7
    That may be False Positive
     
  3. necro

    necro Regular Member

    Joined:
    Dec 23, 2010
    Messages:
    313
    Likes Received:
    194
    This is the way how you extract RSS-feeds out of an vBulletin Board...
     
  4. MisterF

    MisterF Moderator Staff Member Moderator Jr. VIP

    Joined:
    Nov 29, 2009
    Messages:
    12,887
    Likes Received:
    13,086
    Occupation:
    Conference Organiser, Business Advisor.,
    Location:
    JADIP
    Home Page:
    I've not set anything up, this has just been flagged again by AVG.

    How do I get rid of it please ?
     
  5. jaerehan

    jaerehan Elite Member

    Joined:
    Sep 25, 2009
    Messages:
    1,500
    Likes Received:
    1,504
    Occupation:
    Time...Time is on my side..
    Location:
    EU
    uninstall AVG
     
    • Thanks Thanks x 7
  6. ExpressFans

    ExpressFans Jr. VIP Jr. VIP

    Joined:
    Dec 11, 2011
    Messages:
    1,521
    Likes Received:
    580
    Occupation:
    Service Provider
    Location:
    Probably on GitHub
    Home Page:
    I've had my antivirus, Avast professional detect this a few weeks ago. Didn't pay much attention tho. Probably a false positive.
     
  7. docmartn

    docmartn Newbie

    Joined:
    Aug 15, 2011
    Messages:
    0
    Likes Received:
    0
    If you're still getting this you might want to try a screen capture and then emailing an admin of this forum. From what I can tell/heard it could be one of the ads on the forum trying to exploit the site. BHW needs to be informed.
     
  8. rulez05

    rulez05 Power Member

    Joined:
    Feb 3, 2011
    Messages:
    751
    Likes Received:
    148
    I see it yesterday but I never mind
     
  9. meannn

    meannn Supreme Member

    Joined:
    Apr 22, 2009
    Messages:
    1,495
    Likes Received:
    1,992
    Occupation:
    Unemployed Winner
    Location:
    TR
    Probably someone's signature image contain's some shit on that thread.
     
  10. imserious

    imserious Senior Member

    Joined:
    Mar 27, 2009
    Messages:
    950
    Likes Received:
    563
    Avast also did something similar few days ago, it was related to someone's signature.
     
  11. ardley216

    ardley216 Elite Member

    Joined:
    Mar 28, 2008
    Messages:
    2,389
    Likes Received:
    2,386
    Occupation:
    Finding easy keywords
    Location:
    1,500,000,000 Keywords Re
    Yep, I had this too... See ya AVG.
     
  12. James2

    James2 Supreme Member

    Joined:
    Jun 3, 2011
    Messages:
    1,310
    Likes Received:
    1,068
    Location:
    London, England
    Use Malerwarebytes. free and better.