Site Feedback Open forum for discussion of this site. Post your kudos or criticism so that we can continually improve service to the new MINI community.

casalemedia.com used by this site is attacking - evidence enclosed - urgent security!

Thread Tools
 
Search this Thread
 
Old Feb 9, 2017 | 05:26 PM
  #1  
cmt52663's Avatar
cmt52663
Thread Starter
|
6th Gear
15 Year Member
Liked
Loved
Community Favorite
Joined: Jun 2006
Posts: 4,166
Likes: 401
casalemedia.com used by this site is attacking - evidence enclosed - urgent security!

Folks - this is not cool.

Avast caught this attack on my computer. Better find and remedy quickly!



The attack goes off with this phony website that imitates Firefox.

 
Reply
Old Feb 9, 2017 | 06:15 PM
  #2  
cmt52663's Avatar
cmt52663
Thread Starter
|
6th Gear
15 Year Member
Liked
Loved
Community Favorite
Joined: Jun 2006
Posts: 4,166
Likes: 401
C:\Users\Charles>ping axeikkliniken.net

Pinging axeikkliniken.net [192.129.162.109] with 32 bytes of data:
Reply from 192.129.162.109: bytes=32 time=69ms TTL=52
Reply from 192.129.162.109: bytes=32 time=81ms TTL=52
Reply from 192.129.162.109: bytes=32 time=78ms TTL=52
Reply from 192.129.162.109: bytes=32 time=71ms TTL=52

Ping statistics for 192.129.162.109:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 69ms, Maximum = 81ms, Average = 74ms

C:\Users\Charles>
 
Reply
Old Feb 9, 2017 | 06:17 PM
  #3  
cmt52663's Avatar
cmt52663
Thread Starter
|
6th Gear
15 Year Member
Liked
Loved
Community Favorite
Joined: Jun 2006
Posts: 4,166
Likes: 401
https://whois.arin.net/rest/net/NET-...92.129.162.109

The infection is located at a network address registered by:

Hostwinds LLC.
1002 Reunion Center, 9 East 4th Street
Tulsa, OK 74103
 
Reply
Old Feb 9, 2017 | 06:46 PM
  #4  
MiniRyder's Avatar
MiniRyder
Neutral
Joined: Jan 2017
Posts: 5
Likes: 0
I had a fake flash player try to download 2 days ago as I tried to log in but it was blocked. So yeah there's definitely something going on......Phil
 
Reply
Old Feb 9, 2017 | 11:48 PM
  #5  
rkw's Avatar
rkw
OVERDRIVE
Joined: May 2005
Posts: 8,233
Likes: 128
From: San Francisco
I think your computer or Firefox may be infected, and it just happened to surface while you were on NAM.

Google "casalemedia": https://www.google.com/search?q=casalemedia
An interesting search result: http://www.removemalwarevirus.com/ho...ll-casalemedia
 
Reply




All times are GMT -7. The time now is 06:19 AM.