Possible malware imbedded here?

[Sam Fisher]

You're not the only one getting this type of thing{at least the last part}.

http://forums.superherohype.com/showthread.php?t=315694

 

[Kable24]

What browser are you using? What antivirus and spyware software are you using?

I suggest switching to Firefox and adding the Adblock addins. update any virus software you have. Run it. Download superantispyware, adaware, spybot S&D or malwarebytes and run full on scans to clean your pc out.

 

[Morg]

What browser are you using? What antivirus and spyware software are you using?

I suggest switching to Firefox and adding the Adblock addins. update any virus software you have. Run it. Download superantispyware, adaware, spybot S&D or malwarebytes and run full on scans to clean your pc out.

I take it you are not getting re directed? Me either and use most of the items you listed

 

[Kable24]

@Daisy: Sorry, didn't mean to come off as snooty, it's just frusterating. It's like being a doctor, and a patient walking up to you and saying "it hurts".

It's what I put up with every damn day at work. My computers broke fix it.

Or my favorite is when they obviously dropped their laptop and I get "I don't know what happened. I just opened it and pieces fell out."

 

[The Incredible Hulk]

For some reason the Hype is sending the McAffee spyware portection at my office ABSOLUTELY NUTS today. Any page in the forums I open I get a message saying that the Trojan "Exploit-IFrame.gen.c" has been detected and deleted.

Name:C:\Documents and Settings\*******\Local Settings\Temporary Internet Files\Content.IE5\QB2TKCRU\forums.superherohype[1].htm\00002232.js

Detected As: Exploit-IFrame.gen.c

 

[Dark Donnie]

You're the third person to say something, and, oddly enough, the third person to not supply enough information

What thread were you looking at? What page? What browser are you using? Any ad-filter?

Using IE from my work computer. My work filter block it. Stated possible trojan blocked. I was on the forum homepage

 

[Kable24]

I am on a Linux Box running Firefox 3.0.4 and when I first got on the Hype this morning something wanted to install. I just clicked cancel twice and haven't seen it since.

 

[Philly Phanboy]

I came across the malware too this morning. I was going to the general movies forum and instead of the proper URL being displayed which the usual URL ends in F=number of forum; it had the URL but also a bunch of letters after it (as if it was a spoof URL maybe?) and then it tried to open Adobe Acrobat.

 

[imaperson2]

For some reason the Hype is sending the McAffee spyware portection at my office ABSOLUTELY NUTS today. Any page in the forums I open I get a message saying that the Trojan "Exploit-IFrame.gen.c" has been detected and deleted.

Name:C:\Documents and Settings\*******\Local Settings\Temporary Internet Files\Content.IE5\QB2TKCRU\forums.superherohype[1].htm\00002232.js

Detected As: Exploit-IFrame.gen.c

yes, the same thing is happening to me! is this something to be worried about?

 

[Drakon]

Sent another letter to Mirko.

 

[Hunter Rider]

I came across the malware too this morning. I was going to the general movies forum and instead of the proper URL being displayed which the usual URL ends in F=number of forum; it had the URL but also a bunch of letters after it (as if it was a spoof URL maybe?) and then it tried to open Adobe Acrobat.

The rest of the stuff has not happened to me but the highlighted part did this morning when i first went into my UCP.

 

[wobbly]

Getting a malware alert here too: Avira Anti-virus webguard is reporting the following: "http://forums.superherohype.com Contains recognition pattern of the HTML/Crypted.Gen HTML script virus".

Been going on since around mid-day here (GMT)

This is happening on just about every forum page I try and go to. I can choose to ignore it to see the page, but something seems up with the scripts on the site.

 

[wobbly]

Ok, it gets worse. Now getting big pop-ups load on every page here. Not gonna ignore the virus message now as something from the Hype has sneaked in because of that.

Btw, I'm using Firefox with Adblock and this script virus/malware still keeps loading even with every script linked blocked.

 

[The Incredible Hulk]

yes, the same thing is happening to me! is this something to be worried about?

while the malware being there in the first place is an issue, if you get the deleted message that means that McAfee is doing tis job. I'd be more worried fi i wasnt getting that message and getting the pop-ups and redirected links instead.

 

[Spade]

I'm getting the same thing as The Incredible Hulk every couple of seconds now:

McAfee has automatically blocked and quarantined an infected file on your computer. You can restore quarantined files from the Restore pane in SecurityCenter.

About this Trojan
Detected: Exploit-IFrame.gen.c (Trojan)
Quarantined From: C:\Users\Yogi\AppData\Local\Mozilla\Firefox\Profiles\piemfrnn.default\Cache\2C5D549Cd01

Trojans appear as legitimate programs but can damage valuable files, disrupt performance, and allow unauthorized access to your computer.

 

[Kable24]

OK this is what I just got when I came on the site.

The page at http:\\www.akademikerzeitung.ch says:
For further viewing of the page it needs to set an update. To update it immediately press OK

Of course I clicked cancel and got this

You have chosen to open fil.exe
which is a bin file from akademikerzeitung.ch

 

[Spade]

I got that message, too.

I'm getting this Trojan warning even when popping into this thread, so I think I'll stay off for a while...

 

[SuperHeroHype]

I'm getting the trojan too. Checking on it.

 

[The Lizard]

Yup, I'm having trojans and malware warnings pop up on McAfee today too.

I've already updated and run Spybot S&D and Spyware Blaster, and it seems to be OK now, but somethings definitely up here at SHH.

 

[EdRyder]

OK this is what I just got when I came on the site.

The page at http:\\www.akademikerzeitung.ch says:
For further viewing of the page it needs to set an update. To update it immediately press OK

Of course I clicked cancel and got this

You have chosen to open fil.exe
which is a bin file from akademikerzeitung.ch

My browser kept freezing between forum topics trying to load www.akademikerzeitung.ch . It'd never get as far as you did,it would just hang.Then when I would click 'back' thats what it tried to load again rather than a shh address.
So I placed www.akademikerzeitung.ch in the URL block list filter and it seems to have taken care of the problem.For now.

 

[Magneto29]

Getting the same Trojan messages as well :/ At least they're able to delete them.

 

[JRPJCDJC]

Here is what I am getting when I come to this site:

Virus:JS/Decdec.A

and it is categorized as a virus.

I remove it, go to another page and it pops up again and I remove it again and so on.

 

[Spider-Man Luvr28]

Here's where it's been sending me.

I'm getting the Same thing. The Redirects.

Plus, this just happened to me in the Games Forum, and it happened to me once yesterday. iIhad 30 "Internet Explorer" Messages pop up saying I have a Potentially Unsafe Program, then asks if I want to continue, then Yes and No options. I ran a Spy-ware and AntiVirus Software yesterday, and it hasn't seemed to fix it.

All of this happened to me as well about a day or two ago. I was like "Wtf?" Especially the IE message pop-ups. I was like .... *Shuts down my computer.*

 

[Scissors]

I'm getting the same thing as The Incredible Hulk every couple of seconds now:

I get the same thing. I have that Trojan 13 times in a row.

 

[kingman]

OK this is what I just got when I came on the site.

The page at http:\\www.akademikerzeitung.ch says:
For further viewing of the page it needs to set an update. To update it immediately press OK

Of course I clicked cancel and got this

You have chosen to open fil.exe
which is a bin file from akademikerzeitung.ch

I had that same thing but for some reason it loads Adobe Acrobat Reader and kills my computer while doing do. Just yesterday loading a page on here used up 600Mb of RAM