Hacking Malware on 0shippingzone

[tj_cool]

My avast blocks something from another site.

Though I can't find it anywhere on the site.

 

[FireGrey]

Yay, earlier i went on the site, skipped the warning and i have not AV, I'M SCREWED!

 

[chyyran]

Yay, earlier i went on the site, skipped the warning and i have not AV, I'M SCREWED!

YAY

But is Costello gonna take this off the partner sites box?

 

[Slyakin]

I have a Mac.

No problems here!

 

[FireGrey]

Hmm what will this virus do to this PC?

 

[GH0ST]

Anything like collecting data of customers on the site or worst if the code reach your computer. A hacker can place a backdoor onto their server or perhaps they didn't clean it well enough or didn't patch the server. Perhaps it came from an ads too... or just a false/positive.

 

[ThatDudeWithTheFood]

Well, kaspersky internet security is rated very highly by most reviewers. So I doubt this is false. Maybe they have malware on their site that only attacks intermittently?

Humm, that might mean that MSE sucks!

Well, I'll switch over to AVIRA (which is rated higher) and I'll check if it also happens with that.

It pays to have paid security.

Free antiviruses and not being stupid is better than paying.

 

[GH0ST]

You can prevent and vaccine your computer against some of these threats ( more than 14000 so far ) with SpywareBlaster from javacoolsoftware.com ( you don't have to keep it running ). Same with Spybot Search & Destroy.

There is no absolute protection and paid programs like free can be bypass by many ways/exploits.

 

[thegame07]

I have a Mac.

No problems here!

Let's not turn this into a pc/mac debate. I hate to burst your bubble your not safe just because your on a mac.

 

[DSDisco]

I've made MANY purchases off of 0ShippingZone & I've never had a problem..... except for me forgetting my paypal info & not being able to get it back (that's my fault) Now I just buy off of GamePlayFun.com , best prices I've seen around for an american dealer.

 

[GH0ST]

As said it could be nothing like a false positive but if you need to check your computer against infection here is an almost complete list of antirootkits tools :

http://www.ntinternals.org/anti_rootkits.php and http://www.kernelmode.info/forum/viewtopic...=10&start=0

Be careful most of them are under development and can freeze your computer if your antivirus/security suite is enabled

 

[Wombo Combo]

And yet everyone ignored my post about this.

http://gbatemp.net/t270087-what-do-you-thi...t&p=3338102

 

[hankchill]

I got the same error, it was blocked by Spybot but Chrome warned me that there was spyware. Didn't catch any of it

I hope it gets fixed though, they seem decent. I ordered my GBAtemp DSTwo from them so I better get it!

 

[whoomph]

I got the same warning from 0shipping.

Would these be a help to anyone with infection worries? They only just got released and look so cool...

Spoiler

 

[dreamseller]

i lol'd
well even if there "IS" malware on that site how are you going to get infected by just visiting it? and not downloading shady .exes

 

[GH0ST]

There is many ways to get infected nowadays with an umpatched windows system, flash, scripts etc

If you install Adblocker Plus addon for Firefox you should surf without most of these malvertising ads.

With Noscript ( allowing only the flash and scripts you want ) you can surf a bit safer too. Of course a good firewall will deny most of the incoming threats.

I've got no warning so far from this particular site since the malware url was not allowed.

URL analysis tool ( http://www.virustotal.com/url-scan/report....4ebf-1293111687 )
Firefox Malware site
G-Data Malware site
Google Safebrowsing Malware site
Opera Clean site
ParetoLogic Clean site
Phishtank Clean site

The requested URL was removed from the server.

 

[pasc]

Hmm opera blocked me from visiting there aswell... this is weird as I ordered something from them previously....

 

[Rydian]

Heuristic, Generic... guys, look up these words some time, would you?

Besides, the screenshots showed the offending script was from 5675.in, not 0shippingzone.com, meaning it was an ad.