DIC {again?} registered as a malware site

  • (3 Pages)
  • +
  • 1
  • 2
  • 3

32 Replies - 2716 Views - Last Post: 09 January 2013 - 07:48 AM

#1 AdaHacker  Icon User is offline

  • Resident Curmudgeon

Reputation: 452
  • View blog
  • Posts: 811
  • Joined: 17-June 08

DIC {again?} registered as a malware site

Posted 18 November 2012 - 05:41 PM

In case nobody has reported it yet, I thought you guys might like to know that dreamincode.net has apparently been flagged by Yandex as a source of fraud and malware. This was helpfully pointed out to me by Opera's built-in fraud protection feature. I fired up Opera to browse DiC a few minutes ago and was greeted by this malware warning when on the front page:

Attached Image

And when I browsed to the forum listing to find the support forum, I got this lovely fraud notification in the address bar:

Attached Image

I didn't see these warnings yesterday, so apparently the site has been newly blacklisted. I figured you might want to do something about that.

Is This A Good Question/Topic? 0
  • +

Replies To: DIC {again?} registered as a malware site

#2 raghav.naganathan  Icon User is offline

  • Perfectly Squared ;)
  • member icon

Reputation: 408
  • View blog
  • Posts: 1,440
  • Joined: 14-September 12

Re: DIC {again?} registered as a malware site

Posted 18 November 2012 - 11:32 PM

I believe the reason for this is the 'Introduce yourself' forum. I have already posted about this over Here and I can assure you that a lot of effort is being taken by the concerned people in blocking these spammers.

regards,
Raghav
Was This Post Helpful? 0
  • +
  • -

#3 jon.kiparsky  Icon User is online

  • Pancakes!
  • member icon


Reputation: 7875
  • View blog
  • Posts: 13,357
  • Joined: 19-March 11

Re: DIC {again?} registered as a malware site

Posted 18 November 2012 - 11:36 PM

Absolutely, it's a fraud. I was promised boobies, but all I got was a dumb pic of some dumb birds...
Was This Post Helpful? 3
  • +
  • -

#4 Dogstopper  Icon User is offline

  • The Ninjaducky
  • member icon



Reputation: 2874
  • View blog
  • Posts: 11,047
  • Joined: 15-July 08

Re: DIC {again?} registered as a malware site

Posted 18 November 2012 - 11:56 PM

I had this problem earlier this year. Georgia Tech had blocked DIC at the server because of a hack that occurred earlier that week which pushed malware to some users of the site. As a result, a LOT of red flags went up at a lot of places, and I had to whitelist it with the IT team.

Probably the same thing happened here. Once flagged, it basically stays flagged unless explicitly added to a whitelist.
Was This Post Helpful? 0
  • +
  • -

#5 CasiOo  Icon User is offline

  • D.I.C Lover
  • member icon

Reputation: 1406
  • Posts: 3,121
  • Joined: 05-April 11

Re: DIC {again?} registered as a malware site

Posted 19 November 2012 - 10:57 AM

A week or two ago I visited dreamincode and it tried to download some unknown file to my computer (from the frontpage). My adblocker extension was not working at the time, but I doubt that would make any difference (Or maybe it was an ad that contained malware?)

So as I see it, the blocking of dreamincode is totally valid

This post has been edited by CasiOo: 19 November 2012 - 11:00 AM

Was This Post Helpful? 0
  • +
  • -

#6 AdaHacker  Icon User is offline

  • Resident Curmudgeon

Reputation: 452
  • View blog
  • Posts: 811
  • Joined: 17-June 08

Re: DIC {again?} registered as a malware site

Posted 19 November 2012 - 05:10 PM

View PostCasiOo, on 19 November 2012 - 12:57 PM, said:

A week or two ago I visited dreamincode and it tried to download some unknown file to my computer (from the frontpage).

I've not seen that on the front page, but I've occasionally gotten it on other pages. I assumed it was probably due to rogue ads. I know the site I work for has had occasional trouble with being added to malware lists due to our ad networks serving out malware - seems to be a fairly common problem.

Either way, the warning isn't showing up anymore, so apparently the problem has been resolved. :)/>
Was This Post Helpful? 0
  • +
  • -

#7 grimpirate  Icon User is offline

  • Pirate King
  • member icon

Reputation: 149
  • View blog
  • Posts: 714
  • Joined: 03-August 06

Re: DIC {again?} registered as a malware site

Posted 16 December 2012 - 02:05 PM

I use Opera as my browser as well, and as of 16 December 2012, yandex.com is still flagging this site as a malware site.

This post has been edited by grimpirate: 17 December 2012 - 10:51 AM

Was This Post Helpful? 0
  • +
  • -

#8 Atli  Icon User is offline

  • D.I.C Lover
  • member icon

Reputation: 3719
  • View blog
  • Posts: 5,991
  • Joined: 08-June 10

Re: DIC {again?} registered as a malware site

Posted 16 December 2012 - 02:53 PM

Does it give any more details? None of the other browsers seem to have a problem with DIC. Google and Microsoft have apparently either not detected this malware, or have traced it to it's actual source (which I am assuming was a problem with one of the 3rd party ad networks.) I'm inclined to trust them over this Yandex site.
Was This Post Helpful? 0
  • +
  • -

#9 grimpirate  Icon User is offline

  • Pirate King
  • member icon

Reputation: 149
  • View blog
  • Posts: 714
  • Joined: 03-August 06

Re: DIC {again?} registered as a malware site

Posted 17 December 2012 - 01:04 AM

Yandex is a Euro equivalent of Google if you will. As Opera is developed in Europe it makes sense they would make use of a "native." Sadly, it does not offer any further details except to say that it contains malware. Obviously, I have the option to override the warning, just pointing out that it's indexed as a malware site. There is a portion at the end that states "What to do if this is your site?"

Quote

Register your site with Yandex.Webmaster to receive information about malware and infected pages. You can also request for your site to be rechecked once the malware has been removed.

So I would imagine an admin could do this and examine whatever appears to be suspect.

This post has been edited by grimpirate: 17 December 2012 - 01:05 AM

Was This Post Helpful? 0
  • +
  • -

#10 Atli  Icon User is offline

  • D.I.C Lover
  • member icon

Reputation: 3719
  • View blog
  • Posts: 5,991
  • Joined: 08-June 10

Re: DIC {again?} registered as a malware site

Posted 17 December 2012 - 10:56 AM

View Postgrimpirate, on 17 December 2012 - 08:04 AM, said:

Yandex is a Euro equivalent of Google if you will. As Opera is developed in Europe it makes sense they would make use of a "native."

I think that may be a bit to general a description. I'm European; Scandinavian even (like the Norwegians developing Opera), and I had never even heard of it before this thread. From my research, it's mainly used in Russia and countries closely related to them. - But I don't suppose it matters much. The Opera devs clearly know it.
Was This Post Helpful? 0
  • +
  • -

#11 tlhIn`toq  Icon User is offline

  • Please show what you have already tried when asking a question.
  • member icon

Reputation: 5572
  • View blog
  • Posts: 11,911
  • Joined: 02-June 10

Re: DIC {again?} registered as a malware site

Posted 29 December 2012 - 08:53 AM

This just started at 0945hrs on 29dec2012 (Central Time Zone)

Its coming up with every action and page visit making it very hard to navigate the site.
I hope someone in authority can contact the reporting site and get it off their black list ASAP.

Attached Image

Mind you, "warezzone.asia" seems rather more like a real malware site... so did the DIC registry get hacked and pointed to someplace else or something equally funky?

This post has been edited by GunnerInc: 29 December 2012 - 10:19 AM
Reason for edit:: Merged topics

Was This Post Helpful? 0
  • +
  • -

#12 CTphpnwb  Icon User is online

  • D.I.C Lover
  • member icon

Reputation: 3030
  • View blog
  • Posts: 10,556
  • Joined: 08-August 08

Re: DIC {again?} registered as a malware site

Posted 29 December 2012 - 08:54 AM

I just started getting the attached when using this site. I'm not seeing it on other sites so I'm thinking maybe there is a problem on the server?

Attached image(s)

  • Attached Image

Was This Post Helpful? 0
  • +
  • -

#13 CTphpnwb  Icon User is online

  • D.I.C Lover
  • member icon

Reputation: 3030
  • View blog
  • Posts: 10,556
  • Joined: 08-August 08

Re: DIC {again?} registered as a malware site

Posted 29 December 2012 - 09:01 AM

Oops. I see that it's already under discussion:
http://www.dreaminco...ed-for-malware/



*** Edit ***
Merged both topics

This post has been edited by GunnerInc: 29 December 2012 - 10:17 AM
Reason for edit:: Merged topics

Was This Post Helpful? 0
  • +
  • -

#14 Atli  Icon User is offline

  • D.I.C Lover
  • member icon

Reputation: 3719
  • View blog
  • Posts: 5,991
  • Joined: 08-June 10

Re: DIC {again?} registered as a malware site

Posted 29 December 2012 - 09:07 AM

Hmm. Seems Google is now flagging DIC as well. Unlike Opera, however, it does give a lot more detail.

Attached Image
Was This Post Helpful? 0
  • +
  • -

#15 modi123_1  Icon User is online

  • Suitor #2
  • member icon



Reputation: 9377
  • View blog
  • Posts: 35,220
  • Joined: 12-June 08

Re: DIC {again?} registered as a malware site

Posted 29 December 2012 - 09:15 AM

I am wondering if it's an ad. Using IE 'in private browsing' I pulled up the home page and got an error from avast:

Quote

Infection Details
URL: http://www.dreaminco...int/?js|>{gzip}
Process: C:\Program Files (x86)\Internet Explorer...
Infection: HTML:Iframe-inf


Sorry for the spotty details but the bastards at avast are not giving me much to go on.. a few page refreshes and it hasn't happened again.

Oh.. if it makes any difference.. when in firefox (and in private browsing to make sure to have a clean cache) I scroll to the bottom and see a small frame at the bottom left with the warning!

Spoiler

Was This Post Helpful? 0
  • +
  • -

  • (3 Pages)
  • +
  • 1
  • 2
  • 3