Did SBR give me a virus?

[High3rEl3m3nt]

Interesting

[Bill Dozer]

Thanks Stick. There should be a place to see more details on your program. Expandable or additional reporting?

[aggieshawn]

hey bill... Avast Antivirus flagged it as this:

Infection Details

http://keyforgetrigh2funds.info/main.php?page

C:\Users\Owner\AppData\Local\Google\Chro me\Application\chrome.exe

URL:Mal

ditto

[High3rEl3m3nt]

IP hits for the URL that people are posting

[ehp6737]

Ever since last night my AVG has been blocking a threat when I log onto SBR. WTF

http://keyforgetrigh2funds.info/main.php?page

C:\Users\Owner\AppData\Local\Google\Chro me\Application\chrome.exe

URL:Mal

[sideloaded]

Hi guys,

We see this come up once in a while whenever one of the AVs sees either an ad or line of javascript it doesn't like. We'll try to determine exactly what the false-positive is in some of the programs to resolve it; but no, there is of course no way you'd get a "virus" from using SBR.

How do you know that? Have you personally audited every line of code?

[High3rEl3m3nt]

Appears to be ad related...crafty.

[Sam Odom]

Sbr = hiv+

[Optional]

If anyone is worried, this place will help check your computer for free. And they are very good.

[Bill Dozer]

50 pts for next person who can show screenshot of antivirus browser warning

going off after clearing their browser cookies and cache. Include PC clock!

[dfberger23]

fuk that, give us a winner bill

[minet123]

Bill,just admit Loshack was doing lines off the top of the server and screwed something up
(actually i was getting the avast warning all day in chrome but nothing the past hour)

[Roadtrip635]

That's the popup warning I got from Avast. I closed SBR and exited my browser and then re-opened my browser and logged back onto SBR to replicate, but it did NOT trigger my AV (Avast) this time. Avast allows me view my last pop-up warning and this is what this screenshot is from. I already sent to Lou as requested.

[DDT]

Bill,just admit Loshack was doing lines off the top of the server and screwed something up
(actually i was getting the avast warning all day in chrome but nothing the past hour)

[Sam Odom]

run an updated version of CCleaner

[King Mayan]

I've given plenty of viruses to posters!!!

[aggieshawn]

Bill it is a fukkk virus and I am drunk.

It is still on my computer after rebooting. Major Hassle..

Send me those 50 points so I can pay for my virus scan on Monday.

Thanks

[sickler]

It was happening to me earlier (late afternoon)

Not happening now....

[aggieshawn]

Still happening to me... 10:58 pm central time

[Smoke]

Loshack fukks up again lol

[Ian]

Give me an email address to send the screenshot file to. I tried posting it to the forum, but it was blurry. It will be clear if you can see it in file form.

[Mr KLC]

Its not letting me copy the Norton Antivirus report. It has this info:

Attacking Computer: keyforgetrigh2funds.info (188.190.98.77, 80)

Attacker URL: keyforgetrigh2funds.info/main.php?
page=b8c7f71aa41c9ce4

It says it matches the signature of a known attack.

The attack was resulted from \DEVICE\HARDDISKVOLUME1\PROGRAMFILES\SBR POKER\SBR.EXE.

[sickler]

Give me an email address to send the screenshot file to. I tried posting it to the forum, but it was blurry. It will be clear if you can see it in file form.

Link Not Working - Removed-)

[Iwinyourmoney]

Saloon this shit Shari. This isn't gambling related.

Bill this is your last warning before you go on post delay pal

[Al Masters]

Its not letting me copy the Norton Antivirus report. It has this info:

Attacking Computer: keyforgetrigh2funds.info (188.190.98.77, 80)

Attacker URL: keyforgetrigh2funds.info/main.php?
page=b8c7f71aa41c9ce4


It says it matches the signature of a known attack.

The attack was resulted from \DEVICE\HARDDISKVOLUME1\PROGRAMFILES\SBR POKER\SBR.EXE.

I got the same!!

[Al Masters]

Then it said it blocked this.

Blackhole exploit kit detection type 1928

[baskets]

gave my computer aids, Bill


thanks a fukking lot, Mr. Happy Times

[Ian]

forum@sbrforum.com

Email with attached screenshot sent to above address.

[Roadtrip635]

Just happened again...

[Smoke]

gave my computer aids, Bill


thanks a fukking lot, Mr. Happy Times

you already had aids

get the fukk outta here

[byronbb]

[onlooker]

What does it do? Try and redirect you to that URL?

[ttwarrior1]

i got one when i opened poker

[Roadtrip635]

What does it do? Try and redirect you to that URL?

BlackHole Exploit Kit


A type of crimeware Web application developed in Russia to help hackers take advantage of unpatched exploits in order to hack computers via malicious scripts planted on compromised websites. Unsuspecting users visiting these compromised sites would be redirected to a browser vulnerability-exploiting malware portal website in order to distribute banking Trojans or similar malware through the visiting computer.

[onlooker]

BlackHole Exploit Kit


A type of crimeware Web application developed in Russia to help hackers take advantage of unpatched exploits in order to hack computers via malicious scripts planted on compromised websites. Unsuspecting users visiting these compromised sites would be redirected to a browser vulnerability-exploiting malware portal website in order to distribute banking Trojans or similar malware through the visiting computer.

So it is trying to redirect you guys to that keyforget URL. Good thing your AV blocked it.

I haven't got any alerts. I wonder where it is planted?