Virus/Trojan on DVXUser???

leepback

Well-known member
I'm at work and each time I visit DVXUser my virus alert pops up advising me of blocked exe and trojans. It seems to be only this website that triggers it.

Anybody else having this occur?

Sorry if this is the wrong section feel free to move it.
 
parse error was a server issue...

Not sure what's going on with you lee... Please email me where you were next time you get that error, so we can look into it... jason at landmine dot tv

later,
Jason
 
I'm sure everyone is getting that error -- the site is totally screwed up. Every single page I load, WARNING, DVXuser has malware, blah blah, going to harm your computer, etc. Not good...

In fact as of now the site is just unuseable because it's too annoying to see that popup every page.
 
It only takes one warning to Google for these to get blocked. Check ads; a lot of times ads link to bad stuff. And then it takes a while to go away, I'm not sure how to audit one of those flags to speed it up.
 
Last edited:
Same thing popping up here in Firefox 3.5.1. Switched to Chrome which lets me get infected in peace :) I'm on a Mac so not too concerned although anything's possible of course...
 
To update what I said before: Google reports that no malicious software has been run on this site. Weird. I'm going to turn down my security settings now. I blame software over integrating and trying too hard when it comes to features and security, a common trend which has good meaning but a lot of times can be overreaching. I'm glad Firefox lets you turn it off.
 
Yeah, this is happening to me as well. But not in Camino. I'm using Firefox AND Safari and both are giving the message. Again, Camino IS NOT.
 
This is Google/Firefox's reasoning:


"What is the current listing status for www.dvxuser.com?

This site is not currently listed as suspicious.

What happened when Google visited this site?

Of the 116 pages we tested on the site over the past 90 days, 0 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2009-07-22, and suspicious content was never found on this site within the past 90 days.

This site was hosted on 1 network(s) including AS23352 (SERVERCENTRAL).

Has this site acted as an intermediary resulting in further distribution of malware?

Over the past 90 days, www.dvxuser.com did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?

No, this site has not hosted malicious software over the past 90 days."


That makes complete and perfect sense. Also, I am only getting the warning on Firefox. Camino, Opera, and Safari don't report any errors, trojans, viruses, death or famine.
 
oddly, I am now getting it too in google chrome...

The site is not dangerous, but more likely has been reported as such... either mistakenly, or with malicious intent...

Might have something to do with a recent influx of spammers using sites like dvxuser as linking beds for their spam mails by creating accounts and then editing the profile or signature of that account to contain their spam links... Causes sites like us, help.com and a few others that I've seen this occur on to get reported, rather than the actual spam sites.

Long story short, this seems like a pretty massive campaign and a new tactic (or at least one I haven't come across before) that is not isolated to dvxuser.

We identified this a few weeks ago and made some tweaks to prevent this type of spamming technique from happening on dvxuser in the future, as well as located and removed all known sig spam accounts. but, my concern is that this is a spam outbreak waiting to happen (not on dvxuser, but in general, b/c no one seems to know about it/care about it and the way a lot of social networking, bulletin board, blog, etc sites are set up, it's very easy for spammers to do this.

Of the few reported emails we received that had dvxuser member profile links in them, there were also about 5 other legitimate sites in each email that had the same tactic deployed against them. We had about 1500 of these registrations to dvxuser in about a 10 day period. So, I can only imagine how out of hand this could get around the web before people recognize what is going on, when you multiply that times x number of sites that this is likely currently occurring on, times x number of bulk spam mail.

Sadly, I informed needed folks about this but no one seemed to take it seriously. But, mark my words... This seems like a burgeoning new spamming tactic that we identified a few weeks ago and I won't be surprised if a few months down the line folks are talking about spammers using legitimate sites as middlemen for their mass spam mail campaigns... Owners of forums, blogs, social networking sites, etc... sites that have user customizable profiles and/or signatures should tweak their settings to put all new registrants in a group that cannot perform these edits until they have at least one post on the forum.

it's kind of like an old west duel between a spammer and a spam-hater... except innocent people stand between the two.... if that analogy makes sense :)

Long story :)

But, that is my suspicion of the root of the warnings, so passing it along..

Thanks for the link... confirms at least that we are indeed NOT dangerous :)

later,
Jason
 
In Firefox it's possible to turn off the warning by going into Tools->Options and unchecking the box (which I have done), but I suppose you do this at your own risk if you visit an actual attack site.
 
I getting it to on Firefox.


Reported Attack Site!

This web site at www.dvxuser.com has been reported as an attack site and has been blocked based on your security preferences.

Attack sites try to install programs that steal private information, use your computer to attack others, or damage your system.

Some attack sites intentionally distribute harmful software, but many are compromised without the knowledge or permission of their owners.
 
Last edited:
Back
Top