Page 1 of 1

XITED.ORG seems unsafe ATM

Posted: Fri Nov 25, 2011 2:37 pm
by Sounddesigner
I get strange messages when i go to http://www.xited.org. The last one stated the content of this page is unsafe. There was weird text on top of the XITE-1 picture. Several times i went there there was some sort of pop-up box trying to get me to click it. I believe i contracted a virus from there a couple months ago but was not sure it came from there, now it seems as the same strange things are happening again like when i caught the virus. Joel is your site under attack? Has anyone else experienced strange things visiting there?

Re: XITED.ORG seems unsafe ATM

Posted: Fri Nov 25, 2011 2:59 pm
by garyb
hacked.
someone loves hacking that site....

Re: XITED.ORG seems unsafe ATM

Posted: Fri Nov 25, 2011 4:40 pm
by dante
Sounddesigner wrote:I get strange messages when i go to http://www.xited.org. The last one stated the content of this page is unsafe. There was weird text on top of the XITE-1 picture. Several times i went there there was some sort of pop-up box trying to get me to click it. I believe i contracted a virus from there a couple months ago but was not sure it came from there, now it seems as the same strange things are happening again like when i caught the virus. Joel is your site under attack? Has anyone else experienced strange things visiting there?
Yep one of my workstations got infected around that time a couple of months ago, which means network drop-outs/denial of service every 20 minutes or so for about 5 minutes. Luckily I have another laptop to work on until I get it re-formatted. Meanwhile if anyone knows a quicker fix Im interested...will save me some time.

Re: XITED.ORG seems unsafe ATM

Posted: Fri Nov 25, 2011 5:45 pm
by garyb
a scan by a good antivirus and antispyware?

malwarebytes or avira and spybot.....

Re: XITED.ORG seems unsafe ATM

Posted: Fri Nov 25, 2011 11:08 pm
by Sounddesigner
garyb wrote:hacked.
someone loves hacking that site....

Ah, i figured something was wrong. Hopefully Joel can solve that problem or get better control. Might wanna host the site on a more secure place.

Re: XITED.ORG seems unsafe ATM

Posted: Sat Nov 26, 2011 6:18 am
by siriusbliss
Joel's been busy....

Greg

Re: XITED.ORG seems unsafe ATM

Posted: Sat Nov 26, 2011 10:15 am
by dawman
Yeah, he decided to put in a Moat around his castle in upper Wisconsin..

I was excited to see DJMicron now has an XITE-1 and he always made some really cool Modular stuff.
CAT Oscillators, etc.
I have Analog synths, but have always liked the sound that digital synths get when using Sync. It's more controllable and just sounds prettier without that massive gain that seems to occur using analog circuits, its like a double feedback loop or something.
But his CAT Oscillator is the very best Sync sound you can get in Scope or Native or hardware.

Re: XITED.ORG seems unsafe ATM

Posted: Sat Nov 26, 2011 11:10 am
by dante
garyb wrote:a scan by a good antivirus and antispyware?

malwarebytes or avira and spybot.....
I got the IT department to check it out, they installed the latest corporate antivirus software, did scans, checked my network settings and it made no difference. I could try some others or registry repairers etc but Im more at a point of rebuild unless someone knows a specific cure. I noticed a dialog box came up on the laptop on the most recent xited crash about msxml4.dll so maybe thats a clue.

Anyway looks liked xited.org is back up again now so thats more important than my infected PC :lol:

Re: XITED.ORG seems unsafe ATM

Posted: Sat Nov 26, 2011 3:42 pm
by dawman
It's a Virus by Access.
They invented the Virus and are pissed off about the Modular and especially the knobs on Solaris.

Re: XITED.ORG seems unsafe ATM

Posted: Sat Nov 26, 2011 11:30 pm
by Sounddesigner
XITE-1/4LIVE wrote:It's a Virus by Access.
They invented the Virus and are pissed off about the Modular and especially the knobs on Solaris.

I figured it was some type of 'Viral Marketing' .

Re: XITED.ORG seems unsafe ATM

Posted: Mon Nov 28, 2011 6:57 pm
by dante
Can't say definitively but this is my number #1 suspect at the moment :
Suspected Trojan
Suspected Trojan
trojan.JPG (40.41 KiB) Viewed 872 times
XITE-1/4LIVE wrote:It's a Virus by Access.
They invented the Virus and are pissed off about the Modular and especially the knobs on Solaris.
In jest you may have accidentally stumbled on something close to the mark ... the virus name does actually contain the word 'ACCESS' :lol:

Investigation continues...

Re: XITED.ORG seems unsafe ATM

Posted: Mon Nov 28, 2011 7:49 pm
by garyb
nothing to investigate, Joel has cleaned his site already.

Re: XITED.ORG seems unsafe ATM

Posted: Mon Nov 28, 2011 10:26 pm
by dante
Thats server side, I'm looking at client side.

Re: XITED.ORG seems unsafe ATM

Posted: Mon Nov 28, 2011 11:55 pm
by garyb
well, it looks like your antivirus caught it. mine did. it's a pretty typical trojan as far as i can see. it's downloaded with the webpage.

Re: XITED.ORG seems unsafe ATM

Posted: Tue Nov 29, 2011 12:11 am
by dante
Well, wierd thing is, my good machine reported it when copying the entire C drive from the infected machine, which has the same anti-virus but didnt pick it up.

Re: XITED.ORG seems unsafe ATM

Posted: Tue Nov 29, 2011 1:09 am
by garyb
it's just sitting in a temp file, so unless it was scanned it wouldn't be noticed. your system shouldn't have allowed it to actually do anything. my firewall and Avira definitely blocked it. anyway, that's why you want to do a virus and malware scan occasionally.