Weird

[Penfold]

Link removed, compromised website!


:blink:

[Benny]

Aye, that is odd....although imagine it being t-boned. might be a bugger to get out of it?

[smilodon]

There might be a reason that we've stuck with 'normal' opening doors for over a hundred years. They work. Still if someone was offering to fit these new ones to my Mondeo for free :wink:

[Gandalf]

WARNING!!!

Watch out, that website is either malicious or has been compromised....


03/09/2010 09:11:42   HTTP filter   file   http://www.disappearing-car-door.com/dcd/slideshow/door-pictures/   HTML/ScrInject.B.Gen virus   connection terminated - quarantined   XXXX\XxxXxxxx Threat was detected upon access to web by the application: C:\Program Files (x86)\Mozilla Firefox\firefox.exe.

[Penfold]

Mt FF didn't pick up on that... or, if not FF,  what did pick up on it?

Thanks

[Gandalf]

My av scanner. NOD32

[Blunt]

My av scanner. NOD32

mine didn't :blink:

[Gandalf]

maybe a dodgy banner add on their site then, but figured it'd be safer to remove the link rather than have people get infected from it.

[smilodon]

I originally checked the link on my Linux PC so obviously didn't get a hit on the trojan. I went and had a fresh look on my Windows machine and it set of my GData AV as well. I'm pretty sure it uses  different AV engines to Nod32 so that's two independant hits. Good call to remove the link IMHO.

Update: it may well be a banner ad from a company called webstat.net. Acording to Avast

The scripts of webstat.net are very suspicious, they have no contacts,  no about us, no ToS and the email used in domain registration is  invalid.

UPDATE: Sent mail to 9 different @webstat.net addresses,  all of them returned as non-deliverable. Scripts are three times  obfuscated, with the bottom layer having iframe somewhere to China.