Results 1 to 9 of 9
  1. #1
    trail rat
    Reputation: slocaus's Avatar
    Join Date
    Jul 2005
    Posts
    7,706

    invisible jpegs are malware

    These threads get alerts from Avast about embedded invisible jpegs.
    Best Tubeless Brew? - Page 90
    Post Pictures of your 29er - Page 108
    Post pics of your Surly!!! - Page 58

    Here is the alert:

    avast! | Security Center


    DO NOT CLICK THESE LINKS!!!!!!!!!!!
    Code:
    	http://uthwic.zuiwomen.com/17.jpg
    	http://uthwic.zuiwomen.com/18.jpg
    	http://uthwic.zuiwomen.com/19.jpg
    	http://uthwic.zuiwomen.com/20.jpg
    Used the Contact Us link admin2@mtbreview.com and Gregg is out of the office for a week; his out of office email said to contact francis@mtbr.com but the MTBR server rejects that emal.

    Hope someone can take care of this before too many people get tracked by the invisible links.
    CCCMB web - Facebook
    SLO trail maps - conditions

    "The physician heals, Nature makes well" - real fortune cookie

  2. #2
    Nouveau Retrogrouch SuperModerator
    Reputation: shiggy's Avatar
    Join Date
    Dec 1998
    Posts
    48,022

    invisible jpegs are malware

    Quote Originally Posted by slocaus View Post
    These threads get alerts from Avast about embedded invisible jpegs.

    Used the Contact Us link admin2@mtbreview.com and Gregg is out of the office for a week; his out of office email said to contact francis@mtbr.com but the MTBR server rejects that emal.

    Hope someone can take care of this before too many people get tracked by the invisible links.
    Use the report post button at the bottom of the offending post for quickest results. Goes to the mods.

    Classic SPAMmer MO
    mtbtires.com
    The trouble with common sense is it is no longer common

  3. #3
    trail rat
    Reputation: slocaus's Avatar
    Join Date
    Jul 2005
    Posts
    7,706
    Quote Originally Posted by shiggy View Post
    Use the report post button at the bottom of the offending post for quickest results. Goes to the mods.

    Classic SPAMmer MO
    I could not identify a post, just the threads. Avast resets the connection with an error message. Since you posted and are a MOD, thanks for getting it fixed.
    CCCMB web - Facebook
    SLO trail maps - conditions

    "The physician heals, Nature makes well" - real fortune cookie

  4. #4
    Nouveau Retrogrouch SuperModerator
    Reputation: shiggy's Avatar
    Join Date
    Dec 1998
    Posts
    48,022

    invisible jpegs are malware

    Quote Originally Posted by slocaus View Post
    I could not identify a post, just the threads. Avast resets the connection with an error message. Since you posted and are a MOD, thanks for getting it fixed.
    Your links took me straight to the threads/posts.

    Your software seems to have reported only three of the 13 posts the SPAMmer made, all with the same image links.
    mtbtires.com
    The trouble with common sense is it is no longer common

  5. #5
    trail rat
    Reputation: slocaus's Avatar
    Join Date
    Jul 2005
    Posts
    7,706
    Quote Originally Posted by shiggy View Post
    Your links took me straight to the threads/posts.

    Your software seems to have reported only three of the 13 posts the SPAMmer made, all with the same image links.
    The Avast antivirus stops the browser page from loading, so I just know the thread from the MTBR emailed post notification, and it will only check the browser page that is loading, not the entire site.

    There is another one in the 29er thread.
    Post Pictures of your 29er - Page 108

    I'd think the site would scan uploaded items to prevent this?
    CCCMB web - Facebook
    SLO trail maps - conditions

    "The physician heals, Nature makes well" - real fortune cookie

  6. #6
    Randomhead
    Reputation:
    Join Date
    Sep 2008
    Posts
    1,036
    they also post invisible gifs, which I suspect they are going to replace later with something nasty

  7. #7
    Nouveau Retrogrouch SuperModerator
    Reputation: shiggy's Avatar
    Join Date
    Dec 1998
    Posts
    48,022

    invisible jpegs are malware

    Quote Originally Posted by slocaus View Post
    The Avast antivirus stops the browser page from loading, so I just know the thread from the MTBR emailed post notification, and it will only check the browser page that is loading, not the entire site.

    There is another one in the 29er thread.
    Post Pictures of your 29er - Page 108

    I'd think the site would scan uploaded items to prevent this?
    They are links to images (that "display" as a broken link). Nothing is uploaded.
    The SPAMmers have been doing this for years.
    mtbtires.com
    The trouble with common sense is it is no longer common

  8. #8
    workin' it Administrator
    Reputation: rockcrusher's Avatar
    Join Date
    Aug 2003
    Posts
    8,104
    These are most SEO things. It gets that website to raise its hit counts on googles crawler things. they are dead links to a site that is just looking to get itself spread around. Usually the user comes on here, copies text from previous posts and then ends it with these dead links. A lot of the time they have 2 numerals in their name at random locations like jenn77ifer. They are benign, just something to get the crappy webpage up the hit list.

    We usually delete them before crawlers would ever read them anyways. I doubt they ever help the website they are trying to help.
    Try this: HTFU

  9. #9
    Randomhead
    Reputation:
    Join Date
    Sep 2008
    Posts
    1,036
    rockcrusher, thanks for the explanation, that actually makes a lot of sense. Maybe they get links from the scammers that republish the forum on their own site?

Similar Threads

  1. Malware warnings
    By timdvm in forum Site Feedback/Issues
    Replies: 4
    Last Post: 02-21-2013, 03:54 PM
  2. Invisible Helmet
    By J3SSEB in forum Off Camber (off topic)
    Replies: 3
    Last Post: 08-17-2012, 07:06 PM
  3. Chrome Malware Warning
    By Guerdonian in forum Site Feedback/Issues
    Replies: 3
    Last Post: 07-31-2012, 11:50 AM
  4. Monday Mavic Malware
    By pliebenberg in forum California - Norcal
    Replies: 2
    Last Post: 07-09-2012, 09:55 AM
  5. Stan's Notube Website Malware?
    By ayden in forum Wheels and Tires
    Replies: 5
    Last Post: 07-02-2012, 05:56 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may edit your posts
  •