Infected site

frivolous_fay

What's the protocol if you find what you believe to be a legit site, but it is very obviously infected with some kind of malware?

Any way of reporting it? Assume I don't personally have any familiarity with the company in question...

DatabaseError

contact the site owners?!
...either by a contact number on the site...or through the domain registration info.
which site?

frivolous_fay

The site is infected so immediately that just going to the site makes you not want to go any further, let alone look for contact info!

elysianhomes.co.uk

aliEnRIK

If you use FIREFOX with the NOSCRIPT plugin ~ itll stop anything nasty from happening

I cant till im home so ill check it out then if you like

fwor

Oh dear... Noscript blocks it all, but looking at the page source isn't pretty.

The website designer is supposedly:

Masters At Design Ltd.

15 Radley Mews
London
W8 6JP (Road Map)
Tel: 020 73761888

I'll take a look and see what Whois says...

aliEnRIK

Youd better scan your computer fay ~

Download MALWAREBYTES (Click 'DOWNLOAD NOW')
http://www.download.com/Malwarebytes-Anti-Malware/3000-18510_4-10804572.html?cdlPid=10997763
UPDATE and FULL scan
Post the log here after its deleted everything

Download HIJACK THIS (Click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_hijackthis/
reboot
SCAN and post the log so we can see whats running

fwor

Domaintools has the following info about the domain:

Domain name:
elysianhomes.co.uk

Registrant:
Elysian Homes Ltd

Registrant type:
UK Limited Company, (Company number: 5275444)

Registrant's address:
Chislehurst
Kent
BR7 5EP
GB

Registrar:
GX Networks Ltd t/a 123-Reg.co.uk [Tag = 123-REG]
URL: http://www.123-reg.co.uk

Relevant dates:
Registered on: 29-Oct-2004
Renewal date: 29-Oct-2010
Last updated: 05-Dec-2008

Registration status:
Registered until renewal date.

Name servers:
ns.hosteurope.com
ns2.hosteurope.com

I ~thought~ as a trading company they had to provide more info than that, but perhaps the address is sufficient to keep it within the rules. Whatever, no obvious way to contact them quickly.

frivolous_fay

aliEnRIK wrote: »

Youd better scan your computer fay ~

I had prior warning so I'm reasonably happy nothing got its foot in the door... that said, I'd do a scan but I'm not able to download apps at present.

DatabaseError

Elysian Homes Ltd

11 Mulberry Place,
LONDON, SE9 6AR view on map
Get directions 02088509911


has anyone contacted them yet? the site is a baddie (I think..noscript ftw, kis as a safety net)

frivolous_fay

I just called em, they didn't seem aware of it but said they'd pass it on.

frivolous_fay

If anyone is interested, the person who (I am fairly confident) got infected from it was apparently redirected to 'scanaoline.com' (partial address)

It started throwing up (presumably) false warnings about a trojan.

Windows Security Center
Virus (I-Worm.Trojan.b) was found on your computer!
Click 'OK' to install System Security Antivirus

Usually I'd have expected a hit on google, but nothing this time.