Malware - CorvetteForum - Chevrolet Corvette Forum Discussion

Notices
Help Forum How To | General Corvetteforum Questions | Feedback

Malware

Old 12-21-2018, 05:11 PM
  #1  
jackthelad
CF Senior Member
Thread Starter
 
Member Since: Jun 2013
Location: West Virginia
Posts: 2,015
Thanked 189 Times in 162 Posts
Default Malware

When I goto Corvetteforum C5 general, I often get an unwanted screen asking me to update Flash Player. URL displayed is: toptypeonlinetheclicks.icu

This is a known malware distribution site, per Google search. Somehow, it's started by either the forum software or an ad running on the forum. Does not happen when I visit any other site.

Last edited by jackthelad; 12-21-2018 at 05:11 PM.
jackthelad is offline  
Old 12-22-2018, 08:33 AM
  #2  
FWC
CF Senior Member
Support Corvetteforum!
 
FWC's Avatar
 
Member Since: Feb 2011
Location: Chatham NY
Posts: 895
Thanked 31 Times in 30 Posts
St. Jude Donor '13, '15-'16,'18
Default

I too have been getting the update Flash Player the last 4 or 5 days, on a Mac. Also getting a blank screen that says in upper left corner, this site is using too much memory.
FWC is offline  
Old 12-22-2018, 04:18 PM
  #3  
newskatercat
CF Senior Member
 
newskatercat's Avatar
 
Member Since: Dec 2005
Location: Cape Coral Fl
Posts: 1,584
Thanked 84 Times in 53 Posts
St. Jude Donor '06-'07-'08-'09-'10-'11-'12-'13-'14-'15-'16-'17-'18-'19

Default

I have been getting it also, for several days now. I only get it here! iMac using Safari.
newskatercat is online now  
Old 12-22-2018, 05:15 PM
  #4  
SteveG75
CF Senior Member
 
SteveG75's Avatar
 
Member Since: Jun 2000
Location: FL
Posts: 7,043
Thanked 69 Times in 61 Posts
Default

Same here. iMac with Safari and uBlock. So it is getting past the blockers.
SteveG75 is offline  
Old 12-23-2018, 12:35 PM
  #5  
newskatercat
CF Senior Member
 
newskatercat's Avatar
 
Member Since: Dec 2005
Location: Cape Coral Fl
Posts: 1,584
Thanked 84 Times in 53 Posts
St. Jude Donor '06-'07-'08-'09-'10-'11-'12-'13-'14-'15-'16-'17-'18-'19

Default

I haven't had any problem today, so far? Thanks!
newskatercat is online now  
Old 12-23-2018, 05:23 PM
  #6  
jackthelad
CF Senior Member
Thread Starter
 
Member Since: Jun 2013
Location: West Virginia
Posts: 2,015
Thanked 189 Times in 162 Posts
Default

Too much memory used warning may mean you have a malware process running. As a start, go to Force Quit and see if anything unexpected is running.

It seems to occur to me whe I first go to a site Forum - I've just had it happen twice, once when I went to C5 General and just now when I came to this forum. I always kill Safari and restart.
Think I'll stay away from here for a while - don't want to pick up anything nasty.

Edit: just checked - there was something called "printer proxy" running. Killed it. And removed the cookies and cache these people dumped on me.


Here's my "all history" list of these scanmmer websites:

https://bestadbid.com/afu.php?zoneid=1850667&var=new
http://www.irony.world/static/lps/u6Fs3j2D/?installer_id=46&affiliate_id=437038&cli ck-id=5c1ffb1a7edb230001be1505
http://windowgolddealtheclicks.live/3cOcsyKjwbpAPt2aGoHt3mQiUy1FULBGtXktoUBB BrI?cid=100815352983728129&sid=1365143
https://bestadbid.com/afu.php?zoneid=1365143&var=1365143
http://toptypeonlinetheclicks.icu/SKhpkoBTmSlxmgzbaLWkGxb2W_O5rJFBQlWaxyD5 y5E?clck=5c1ffb1e7edb230001be15f8&sid=%7 Bsub%7D
http://toptypeonlinetheclicks.icu/SKhpkoBTmSlxmgzbaLWkGxb2W_O5rJFBQlWaxyD5 y5E?clck=5c1ffb1e7edb230001be15f8&sid=%7 Bsub%7D
https://www2.popgreataptitudeliteflash.icu/?dsda=r8EQL8jeZ_PWK2Pd-9wpoG2NLKSN0D20ZpELSAHoWtm1NhoyHGWnHdv7a ugbx-https://www2.popgreataptitudeliteflash.icu/?dsda=r8EQL8jeZ_PWK2Pd-9wpoG2NLKSN0D20ZpELSAHoWtm1NhoyHGWnHdv7a ugbx-WRG1zZrO004MEdkRqvOKP6lQ..&cid=wK9NHH2NI 6NP855JHUMJ1JPU&sid=wK9NHH2NI6NP855JHUMJ 1JPU&v_id=2eH_4wNnu7_A8ckeG1odrYdQPnvsLf AwOh7-2FpoqoY.

These all flash by at speed, but history shows each one was visited.

Mods: multiple reports of malware here. Please clean this up - tnks.

Last edited by jackthelad; 12-23-2018 at 05:37 PM.
jackthelad is offline  
Old 12-26-2018, 02:27 PM
  #7  
IB Jason
IB Staff
 
Member Since: Jun 2013
Posts: 295
Thanked 35 Times in 9 Posts
Default

My apologies for the Flash redirects, everyone. This issue stems from malicious code being injected into our ad partner's banners, and we're working with those partners to isolate and remove the bad code.

I noticed a few of you mentioned it's happening in Safari on your Macs. Has it occurred for any of you in any other browsers on your Mac? Or on any other devices? Can you please also let us know the forum page you were on at the time the redirect occurred?

Thanks!
IB Jason is offline  


Thread Tools
Search this Thread
Sponsored Ads
Vendor Directory

Contact Us About Us Archive Advertising Cookie Policy Privacy Statement Terms of Service

© 2018 MH Sub I, LLC dba Internet Brands

We are a participant in the Amazon Services LLC Associates Program, an affiliate advertising program designed to provide a means for us to earn fees by linking to Amazon.com and affiliated sites.
 
  • Ask a Question
    Get answers from community experts
Question Title:
Description:
Your question will be posted in: