Jump to content

DCP infected?


sabrefan62

Recommended Posts

I've also noticed this problem for the past three weeks or so. If I'm not at my own computer, i.e., one without DCP bookmarked, I visit the site by Googling "Drum Corps Planet". That brings up a main listing for the DCP homepage, and six sublistings below, one of which is "Forums". If I click on that link, it leads me to another site. (So I go back to Google --which the other site doesn't want to let me do-- and select the DCP homepage and proceed from there to the forums.) It's happened in both Firefox and Explorer. But it doesn't happen all the time. It just happened to me now, which is why I came to the Member Service Center to see if anyone else noticed, but now I can't make it happen again in a separate tab or in the other browser. If it's not a problem at your end, is it possibly something that should be be brought to Google's attention?

Link to comment
Share on other sites

  • 4 months later...

Yes, there seems to have been a problem at onetime in the recent past, perhaps with this site (forums) or their name servers (unlikely). Google cache files (the ones used for speedy searching) have http://www.drumcorpsplanet.com/forums/ pointing to a bogus url4short.info site. When searching for "DCP" on Google you will get an entry for dcp forums, and the first time you click the link you will see the re-direct page to a presumed trojan site (seemingly no longer there.) However once you go back and click on the Google provided search results, the 'real' Google search data will be used (no the cached version) and you will be directed to the correct URL; Http://www.drumcorpsplanet.com/forums/

I'm not sure how to remedy, as would require Google to update their cached search entries. Perhaps updating the keywords for the might prompt a change in a few days? Or if registered with adwords, maybe an update?

Link to comment
Share on other sites

An update: This is apparently caused by a security problem with vBulletin, so if that's what DCP is using, then a configuration fix is necessary. Here is one of many sites describing the problem and solution:

http://abhisays.com/...short-info.html

The bad news is the author claims the intruder (human or computer) may have access to the sql database.

If this is not a vBulletin site, do a google search on whatever your forum software is, plus url4short.info or url2short.info (both seem to be redirect targets).

Usually in a case like this I would first suspect the users' computers to be infected, but this time it may actually be the server (DCP). Then again, it could easily be malware playing with the users' hosts files.

Good luck.

Link to comment
Share on other sites

Some really strange behavior from DCP today. Asking me if I want to continue running a dangerous script when I try to bring up the forums. I've done full scans on my laptop so I know it's not me....

  • Like 1
Link to comment
Share on other sites

I've just run a couple of scans on the site and can't find any problem with 'malware' or "dangerous scripts". If you'd like to send me a screen capture / more details - I'll be happy to investigate. support@drumcorpsplanet.com

Link to comment
Share on other sites

Chrome keeps sending me to this page whenever I click any links to DCP or any links within DCP.

ZwIYSk7.jpg

Link to comment
Share on other sites

Yep - looks like a problem with our Advertising Banner server including references to a "googlecodehosting.net" site, which is tagged as being a known 'malware distributor'.

I've taken our Banner server offline until I get it sorted out.

UPDATE: The Banner server has been restored to service after the offending references were removed, the system cleared, and scanned for malware.

Link to comment
Share on other sites

I've had Java viruses on 2 workstations over the past few days both on Windows 7. I'll try to monitor and capture screen prints at both computers. It's intermitent and funky.

Link to comment
Share on other sites

  • 1 month later...

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...