General MINI Talk Shared experiences, motoring minutes, and other general MINI-related discussion that applies to all MINIs, regardless of model, year or trim.
Sponsored by:
Sponsored by:

Virus warning

Thread Tools
 
Search this Thread
 
Old Apr 2, 2008 | 12:21 PM
  #1  
BSUCardinalfan's Avatar
BSUCardinalfan
Thread Starter
|
5th Gear
iTrader: (1)
Joined: May 2003
Posts: 991
Likes: 4
From: Atlanta
Virus warning

Just a warning to everyone. The last two times I've visited Aesthetic Creations website, my virus protection has identified a trojan-type virus.

didn't know where else to put this.....
 
Reply
Old Apr 2, 2008 | 01:25 PM
  #2  
NashvilleMiniStan's Avatar
NashvilleMiniStan
5th Gear
iTrader: (6)
Joined: Jan 2008
Posts: 816
Likes: 0
From: Nashville, TN
Thanks for letting us know.
 
Reply
Old Apr 2, 2008 | 02:07 PM
  #3  
Volker's Avatar
Volker
4th Gear
Joined: Jun 2007
Posts: 307
Likes: 0
From: Branford, CT
And I thought it's just me... just went to AC a few minutes ago to check out their clearance and poof, McAffee came up.
 
Reply
Old Apr 2, 2008 | 02:07 PM
  #4  
Fig Faun's Avatar
Fig Faun
3rd Gear
Joined: Mar 2008
Posts: 183
Likes: 0
From: Austin, TX
I can verify that as well. I've gotten the warning from AVG at work, and from McAffee at home (though eAccelleration hasn't seemed to have picked it up at all.)
 
Reply
Old Apr 2, 2008 | 02:19 PM
  #5  
lacning74's Avatar
lacning74
6th Gear
iTrader: (1)
Joined: May 2007
Posts: 1,361
Likes: 2
From: nyc
Doh! I just visited them and got no warning on my work computer.
 
Reply
Old Apr 2, 2008 | 05:02 PM
  #6  
Jahmills's Avatar
Jahmills
5th Gear
Joined: May 2006
Posts: 646
Likes: 1
From: Illadelphia
I've gotten it too, on the last visits. Haven't been back since. I'm running Antivir PE Classic on my laptop, and AVG on my work PC. Can't remember which computer, or both, I was on those two times.
 
Reply
Old Apr 2, 2008 | 05:51 PM
  #7  
nabeshin's Avatar
nabeshin
Functioning Lunatic
iTrader: (2)
Joined: Sep 2006
Posts: 5,237
Likes: 6
From: Lincoln, NE
I only went to that site when it first started up, I assume I am safe? I use CA anti-virus, it scans everyday and is up to date.
 
Reply
Old Apr 2, 2008 | 06:59 PM
  #8  
RaceFace's Avatar
RaceFace
3rd Gear
Joined: Mar 2008
Posts: 275
Likes: 0
From: Trabuco Canyon, CA
I had no issues on their site.....then again, I'm on an Apple, so its all good.
 
Reply
Old Apr 2, 2008 | 07:05 PM
  #9  
PGT's Avatar
PGT
Banned
iTrader: (11)
Joined: May 2006
Posts: 7,681
Likes: 1
From: DC Metro
this happened with them last year as well
 
Reply
Old Apr 2, 2008 | 10:06 PM
  #10  
Some Guy's Avatar
Some Guy
6th Gear
Joined: Aug 2007
Posts: 1,798
Likes: 11
From: CT
April fools?
 
Reply
Old Apr 3, 2008 | 08:54 AM
  #11  
dragonflyer's Avatar
dragonflyer
6th Gear
iTrader: (2)
Joined: Aug 2003
Posts: 1,395
Likes: 0
Definitely safe for viewing pictures!

Thank you for alerting us of the problem. It is being looked into, but neither of us have received any kind of warning and I'm not sure what is happening or why. It seems to be safe as far as I can find, and really there shouldn't be any reason not to be. There is nothing on the site that is downloadable, no plug ins to install. Its all very basic. Ordering is through Paypal and you are sent to the secure site through encrypted buttons even if you are not using a Paypal account so there shouldn't be any worries there.

And if this is April Fools joke, please be assured its not on you!
 
Reply
Old Apr 3, 2008 | 09:09 AM
  #12  
BSUCardinalfan's Avatar
BSUCardinalfan
Thread Starter
|
5th Gear
iTrader: (1)
Joined: May 2003
Posts: 991
Likes: 4
From: Atlanta
Just to clarify, I really am getting the virus popup, it is NOT an april fool's joke.

I got it a couple weeks ago on your site as well, but I wasn't sure if it was the site or just weird timing from my pc, but then it happened again.....
 
Reply
Old Apr 3, 2008 | 09:18 AM
  #13  
ChubbyChecker's Avatar
ChubbyChecker
4th Gear
15 Year Member
Joined: Apr 2007
Posts: 313
Likes: 0
From: Mesa, AZ
Here's the warning I'm getting.
 
Attached Thumbnails Virus warning-warning.jpg  
Reply
Old Apr 3, 2008 | 09:36 AM
  #14  
cmt52663's Avatar
cmt52663
6th Gear
15 Year Member
Liked
Loved
Community Favorite
Joined: Jun 2006
Posts: 4,164
Likes: 399
I just went over the site with a fairly fine toothed comb. I am running a current McAfee solution, and received no alerts.

I checked the source for several pages, and chased the links that reference scripts (one is sourced from www.haloscan.com for example).

No ActiveX objects are referenced, nor does the site do anything clever that I can find (other than work properly and showcase some cool stuff).

The site does appear to source page elements from at least three different servers, but does not use frames so IE security settings do not object. HaloScan is at 72.9.234.77, Aesthetic Creations is at 208.73.212.12, and some graphics are sourced from 195.93.218.25.

My review was done using XP/IE 6.0 SP1 and Win98/IE 6.0 SP1.

So I'm stumped - perhaps a screenshot mailed to the server owners would help them a little...but I'm really not sure why this behavior occurs for you.

EDIT: thanks for the screenshot! It would appear to suggest that a client side JavaScript is being sent to you (the .js extension) that is not friendly! Can you describe the clicks that you use on the site to trigger this? Does it occur on the entry page for the site for example?
 

Last edited by cmt52663; Apr 3, 2008 at 09:38 AM.
Reply
Old Apr 3, 2008 | 09:50 AM
  #15  
Volker's Avatar
Volker
4th Gear
Joined: Jun 2007
Posts: 307
Likes: 0
From: Branford, CT
My McAffee showed it as index[1].htm and the second time as index[5].htm.
I just tried it again and this time the virus scan didn't come up. browsed the side a bit and still nothing.
 
Reply
Old Apr 3, 2008 | 09:55 AM
  #16  
cmt52663's Avatar
cmt52663
6th Gear
15 Year Member
Liked
Loved
Community Favorite
Joined: Jun 2006
Posts: 4,164
Likes: 399
if you have the patience, ya might delete your temporary internet files and try one more time...

just to grasp at straws, you might also try a "ping aestheticcreations.net" in a command window, and make sure you get the same IP address that I do...

 
Reply
Old Apr 3, 2008 | 10:08 AM
  #17  
SilverRocket's Avatar
SilverRocket
4th Gear
Joined: Feb 2006
Posts: 319
Likes: 0
From: Cincinnati, OH
Does that site serve banner ads from an external provider?

If so the problem might be with one of them and not the site itself.

This would also explain why it's only happening for some people at certain times.
 
Reply
Old Apr 3, 2008 | 10:12 AM
  #18  
Ex-Pat Brit's Avatar
Ex-Pat Brit
4th Gear
Joined: Mar 2007
Posts: 374
Likes: 0
From: Narberth, PA
Today it is fine, yesterday it was not. Very
strange
 
Reply
Old Apr 3, 2008 | 05:30 PM
  #19  
JohnBLZ's Avatar
JohnBLZ
5th Gear
Joined: Nov 2006
Posts: 810
Likes: 0
From: Charlotte NC
Originally Posted by lacning74
Doh! I just visited them and got no warning on my work computer.
You're the type of guy that makes IT guys like me beat my head against the wall...

(job security at it's finest)
 
Reply
Old Apr 3, 2008 | 07:36 PM
  #20  
RaceFace's Avatar
RaceFace
3rd Gear
Joined: Mar 2008
Posts: 275
Likes: 0
From: Trabuco Canyon, CA
Originally Posted by JohnBLZ
You're the type of guy that makes IT guys like me beat my head against the wall...

(job security at it's finest)
LOL!!! I was thinking the EXACT same thing!!!
 
Reply
Old Apr 3, 2008 | 07:40 PM
  #21  
lacning74's Avatar
lacning74
6th Gear
iTrader: (1)
Joined: May 2007
Posts: 1,361
Likes: 2
From: nyc
Originally Posted by RaceFace
LOL!!! I was thinking the EXACT same thing!!!
Y'all probably wouldn't like that I often disable the virus detector. I hope my work's servers are well protected.
 
Reply
Old Apr 3, 2008 | 08:17 PM
  #22  
RaceFace's Avatar
RaceFace
3rd Gear
Joined: Mar 2008
Posts: 275
Likes: 0
From: Trabuco Canyon, CA
Originally Posted by lacning74
Y'all probably wouldn't like that I often disable the virus detector. I hope my work's servers are well protected.
LOL! Its probably a good thing you don't work for my company. If caught, you wouldn't work for my company anymore.
 
Reply
Old Apr 3, 2008 | 08:25 PM
  #23  
checkercoop's Avatar
checkercoop
6th Gear
iTrader: (1)
Joined: Sep 2007
Posts: 1,154
Likes: 2
From: Pompano
Originally Posted by RaceFace
I had no issues on their site.....then again, I'm on an Apple, so its all good.
haha same here +1 apple
 
Reply
Old Apr 4, 2008 | 11:03 PM
  #24  
afinley's Avatar
afinley
2nd Gear
Joined: Feb 2008
Posts: 86
Likes: 0
From: Raleigh, NC
Originally Posted by Volker
My McAffee showed it as index[1].htm and the second time as index[5].htm.
the numbers are just different versions of the same file. the fact that not every version is alerting you most likely means its either an ad or a counter.
 
Reply
Old Apr 5, 2008 | 04:39 AM
  #25  
Volker's Avatar
Volker
4th Gear
Joined: Jun 2007
Posts: 307
Likes: 0
From: Branford, CT
yep, makes sense
 
Reply
Related Topics
Thread
Thread Starter
Forum
Replies
Last Post
randeez
Stock Problems/Issues
18
Oct 5, 2015 09:23 AM
OldElvis
Tires, Wheels, & Brakes
2
Oct 1, 2015 06:21 AM
ericf1993
R56 :: Hatch Talk (2007+)
0
Sep 26, 2015 03:58 PM
rt808
1st Gear
6
Sep 25, 2015 01:59 PM




All times are GMT -7. The time now is 08:32 PM.