Operating Systems > macOS
What OSX DOESN'T look like
davidnix71:
//get-tube-porn.com/promo3/?aid=561&vname=protect
DON'T go here on a pc!!!!!
The image here is a screen cap. I'm on a Mac using Firefox and my browser uses an honest user-agent string, so they have to know this isn't a pc.
I read a story about some college student in Colorado who was pinned against a pump at a 7-11 and burned to death. Googling her name and Colorado got me a link Google said would harm my computer. a17newsu.co is part of the url
When I went to that site to read, a script interrupted the page load, so I allowed the script (using NoScript in Firefox). That redirected to the get-porn site, which attempted a fake scan.
It's so new that only one of Jotti's vendors flagged it as a "possible" trojan, based on heuristics.
" Scan taken on 19 Mar 2009 04:04:24 (GMT)
A-Squared
Found nothing
AntiVir
Found nothing
ArcaVir
Found nothing
Avast
Found nothing
AVG Antivirus
Found nothing
BitDefender
Found nothing
ClamAV
Found nothing
CPsecure
Found nothing
Dr.Web
Found nothing
F-Prot Antivirus
Found nothing
F-Secure Anti-Virus
Found nothing
Ikarus
Found nothing
Kaspersky Anti-Virus
Found nothing
NOD32
Found nothing
Norman Virus Control
Found nothing
Panda Antivirus
Found nothing
Quick Heal
Found nothing
Sophos Antivirus
Found Sus/Behav-113, Troj/FakeAle-MO (probable variant)
VirusBuster
Found nothing
VBA32
Found nothing
"
worker201:
With that tiny picture and 404'd link, this post isn't very much fun.
Refalm:
Reminds me of GNAA's Last Measure ;)
davidnix71:
I couldn't get the embedded pic any larger last night. It's in my photobucket account and much larger than that.
I just noticed the "th_" in the url on the original link. That must mean thumbnail.
This should be better.
davidnix71:
Here are working urls if you are not running Windows.
http://a17newsu.co.cc/index.php?p=whitney-hendrickson was the infected site. It seems to be cleaned up
Google these three words and look for sites with the "this site may harm your computer" warning > whitney hendrickson colorado <
liveleak.com/view?i=d95_1237428991 was where I started reading about it. LiveLeak is clean afaik. I had to remove the http://www. from the LiveLeak address because it would have embedded the video.
This is getting fun. The cleaned up site has links to other sites that look like it. After going down the rabbit hole a bit I came across this: http://scandata4.com/22/?uid=12900 (Again, not for Windows).
Navigation
[0] Message Index
[#] Next page
Go to full version