Blackhat site Infected? (Malicious Toolkit) (check image)

G

getz2thapaper

Newbie

May 20, 2009

7

1

• Jul 18, 2009

• #1

I'm fairly new to the site & when I tried to visit the home page today , Norton Firewall blocked an " HTTP Malicious Toolkit Variant Activity 8" attack from blackhatworld.com (66 .96 .251 28 ,80)...

http://www.imagechicken.com

Code:

http://www.imagechicken.com/uploads/1247941479038042200.jpg

... any1 else experience this ? Is this common?

Edit- Still get it Everytime I click the "Home" (First) link on Left "Menu" Panel

 

Last edited: Jul 18, 2009

Qball

Registered Member

Jan 1, 2008

77

21

• Jul 18, 2009

• #2

I've been having a lot of problems with my PC locking up on BHW.......

When that popup loads....my PC locks up.

I've scanned the hell out of it with eset,antispyware remover, CCleaner and a trojan/rootkit
remover......
Hmmmmmm

 

F

Fulano

Registered Member

Jul 29, 2007

85

49

• Jul 18, 2009

• #3

I got the same message since yesterday and I can't access the main page because of it. I immediately reported it to the Admins but they said it is probably a form being incorrectly flagged by Norton.

Meanwhile, I can't access the main page of BHW, not even inside a Virtual Machine

 

oxonbeef

BANNED

Jan 4, 2009

2,220

7,920

• Jul 18, 2009

• #4

No script always blocks cross-site scripting(XSS)attempts.

 

sddk

Regular Member

Dec 1, 2008

206

66

• Jul 18, 2009

• #5

I use Kaspersky Internet Security 9, the last version, I don't have any problem with BHW,

but I think that we need a confirmation from other members

with Norton or other good security software

to know the fact of this HTTP Malicious Toolkit..

 

Jcsarokin

Power Member

Mar 2, 2009

718

1,035

• Jul 18, 2009

• #6

I think it may be a good idea for an admin to lay their 2cents... Kinda scary if a bunch of people are getting the same msg.

 

sleepparalysis

Registered Member

Feb 9, 2009

84

31

• Jul 18, 2009

• #7

Yeah, always get the XSS attempt with noscript, but it could be something benign. I haven't even checked into it.

 

G

getz2thapaper

Newbie

May 20, 2009

7

1

• Jul 18, 2009
• Thread Starter Thread Starter

• #8

oxonbeef said:

No script always blocks cross-site scripting(XSS)attempts.

Click to expand...

I have No script aswell ... It doesn't do anything when I click the "HOME" link ... Norton Blocks the page & I simply cant access it , just get a error message

Also-- I think you enabled "aweber (d0t) com" in No Script , since you are seeing Ads (like the ones next to Qball's post In your Image).

 

Last edited: Jul 18, 2009

trophaeum

Senior Member

Dec 21, 2007

852

717

• Jul 18, 2009

• #9

welcome to the world of norton and false positives (its crap, go buy kaspersky internet security), no theres nothing bad on here

 

R

runbmd

Newbie

Nov 15, 2008

12

2

• Jul 19, 2009

• #10

This has been happening to me as well. I am using Symantec. Is that the same as Norton??

 

H

HaRRo

Elite Member

Oct 29, 2005

2,521

14,027

• Jul 19, 2009

• #11

I believe its tied down to the aweber form on the main page.
Theres nothing malicious on the code, and Dave has also added some DHTML popups when you signin 1 per day or so.
But its nothing malicious, i dont think we would EVER do that to loose users do you?

Anyways its false on behalf of the AV companies and we have known about it for i think over a month but its non-malicious just a web form for one of Daves mailing lists.

Hope this makes some see the light

 

S

sippick

BANNED

Oct 3, 2008

167

61

• Jul 19, 2009

• #12

getting the exact same message on symantec

 

TheMatrix

BANNED

Dec 20, 2008

3,439

7,401

• Jul 23, 2009

• #13

Guess what!! I also see the same thing every time I visit BHW.

Please do something..

 

low key

Junior Member

Jun 8, 2009

151

38

• Jul 23, 2009

• #14

That is so norton.

My ESET NOD 32 Antivirus does not say anything.

 

gr33n

Power Member

Oct 22, 2007

614

303

• Jul 23, 2009

• #15

With kaspersky I don't get anything.Norton is shit...

 

oxonbeef

BANNED

Jan 4, 2009

2,220

7,920

• Jul 23, 2009

• #16

sippick said:

getting the exact same message on symantec

Click to expand...

symantec, Norton = same thing, crap RAM eaters BHW's safe we've been through this before.

 

keinehabe

Supreme Member

Nov 4, 2008

1,207

476

• Jul 23, 2009

• #17

that's happens because you guys use crap solutions for your own protection , only one antivirus in the market who deserve well the money and that's mcafee all other are CRAPS

 

L

legoego

Regular Member

Jun 16, 2009

223

83

• Jul 23, 2009

• #18

avast is okay too..

 

oxonbeef

BANNED

Jan 4, 2009

2,220

7,920

• Jul 23, 2009

• #19

keinehabe said:

that's happens because you guys use crap solutions for your own protection , only one antivirus in the market who deserve well the money and that's mcafee all other are CRAPS

Click to expand...

llloollololo that was meant to be a joke wasn't it?

 

boozie

Power Member

Jan 6, 2009

733

318

• Jul 23, 2009

• #20

I was getting it too with my Norton, so I uninstalled it and added Avast along with AVG. Now I get nothing. This has happened to me before with Norton, I finally had enough. I don't care if I get it for free. Free shit is still shit.