[sdiy] Massive processor collection.

[Ullrich Peter]

Hi Paul and Chromatest!

Thank you for your information - it was an Javascript-Virusredirector that had been appended to my index.htm page!

Here is some info on it:
http://sucuri.net/malware/entry/MW:JS:151

I put up a clean version of my webpage after changing my webaccount password from a clean PC.
Now the webpages looks clean for me.

I am very sorry for that, I don't know when and where (on which PC it happended) - will check all my PCs now...

Ciao
Peter

________________________________________
Von: chromatest at gmail.com [chromatest at gmail.com] im Auftrag von Chromatest J. Pantsmaker [chromatest at azburners.org]
Gesendet: Samstag, 31. Juli 2010 23:11
An: Ullrich Peter
Betreff: Re: [sdiy] Massive processor collection.

This page is also claiming to have the script infection.
http://home.pages.at/pullrich

This page works fine:
http://go.to/datadial


On Sat, Jul 31, 2010 at 1:26 PM, Ullrich Peter <Peter.Ullrich at kapsch.net> wrote:
>
> Hi!
>
> As Paul said this is not a virus - it is caused by the redirection service that gives me the free URL www.ullrich.at.tt
> or the http://come.to/ullrich .
>
> You can get my homepage free from these redirections via http://home.pages.at/pullrich
> This is where the redirection services point to...
>
> Sorry.
>
> You might also get these messages if you select my datadial page http://go.to/datadial
> But I cannot say as my virus scanner doesn't shout...
>
> Ciao
> Peter
>
> ________________________________________
> Von: synth-diy-bounces at dropmix.xs4all.nl [synth-diy-bounces at dropmix.xs4all.nl] im Auftrag von Paul Burns [paul at fitvideo.co.uk]
> Gesendet: Samstag, 31. Juli 2010 22:15
> An: synth-diy at dropmix.xs4all.nl
> Betreff: [sdiy]  Massive processor collection.
>
> No, JS/Redir not HTML ...
>
> To quote "Trojan:JS/Redirector.BK is the detection for obfuscated JavaScript
> contained within Web pages. This JavaScript trojan may be present on a
> malicious Web site, and may redirect users to Web sites other than
> expected."
>
> Still,  it is spurious code ...
>
> Regards
>
> Paul
>
>
>
>
> -----Original Message-----
> From: synth-diy-bounces at dropmix.xs4all.nl
> [mailto:synth-diy-bounces at dropmix.xs4all.nl] On Behalf Of Chromatest J.
> Pantsmaker
> Sent: 31 July 2010 18:48
> To: Ullrich Peter
> Cc: synth-diy at dropmix.xs4all.nl
> Subject: Re: [sdiy] Massive processor collection.
>
> Peter, my Avast anti-virus says that your site has an HTML-script
> infection, which is some malware.
>
> Could you please check that page and make sure there is no javascript
> that isn't supposed to be there?
>
> On Sat, Jul 31, 2010 at 4:11 AM, Ullrich Peter <Peter.Ullrich at kapsch.net>
> wrote:
>>
>>>I have tons of 8 bit 40 pin processors like 8080, Z80, 6502, 6809, 6802,
>>>6803, 6809, S2650, 8039, 8088, 8085, etc in my arcade game stuff. Rarely
>>
>>> Ram chips like 2114, 4116, and 2101....different story.
>>>Always causing problems.
>>
>>>> Even I have still have several 6502's and I think a couple of 6809's
>>>> from 25 years ago.
>>
>> Beside PC processors I have a some Z80s, 8085, V20, 8086, 80188, some
> 6502, some 68B09 and tons of 8051
>> derivates and maybe my oldest one: a 2650 development system running at
> 600kHz ;-)
>>
>> And I still have an old IBM PC motherboard with Basic ROMs and cassette
> interface... cool...
>> I put a photo of it on my webpage...
> http://home.pages.at/pullrich/index8.htm
>>
>> Ciao
>> Peter
>>
>> http://www.ullrich.at.tt
>> The information contained in this e-mail message is privileged and
>> confidential and is for the exclusive use of the addressee. The person
>> who receives this message and who is not the addressee, one of his
>> employees or an agent entitled to hand it over to the addressee, is
>> informed that he may not use, disclose or reproduce the contents
>> thereof, and is kindly asked to notify the sender and delete the e-mail
>> immediately.
>>
>>
>> _______________________________________________
>> Synth-diy mailing list
>> Synth-diy at dropmix.xs4all.nl
>> http://dropmix.xs4all.nl/mailman/listinfo/synth-diy
>>
>
>
>
> --
> .sig
> -Chromatest J. Pantsmaker
> http://www.chromatest.net
> _______________________________________________
> Synth-diy mailing list
> Synth-diy at dropmix.xs4all.nl
> http://dropmix.xs4all.nl/mailman/listinfo/synth-diy
> No virus found in this incoming message.
> Checked by AVG - www.avg.com
> Version: 9.0.851 / Virus Database: 271.1.1/3041 - Release Date: 07/31/10
> 07:34:00
>
> _______________________________________________
> Synth-diy mailing list
> Synth-diy at dropmix.xs4all.nl
> http://dropmix.xs4all.nl/mailman/listinfo/synth-diy
> The information contained in this e-mail message is privileged and
> confidential and is for the exclusive use of the addressee. The person
> who receives this message and who is not the addressee, one of his
> employees or an agent entitled to hand it over to the addressee, is
> informed that he may not use, disclose or reproduce the contents
> thereof, and is kindly asked to notify the sender and delete the e-mail
> immediately.
>
>
> _______________________________________________
> Synth-diy mailing list
> Synth-diy at dropmix.xs4all.nl
> http://dropmix.xs4all.nl/mailman/listinfo/synth-diy
>



--
.sig
-Chromatest J. Pantsmaker
http://www.chromatest.net
The information contained in this e-mail message is privileged and
confidential and is for the exclusive use of the addressee. The person
who receives this message and who is not the addressee, one of his
employees or an agent entitled to hand it over to the addressee, is
informed that he may not use, disclose or reproduce the contents
thereof, and is kindly asked to notify the sender and delete the e-mail
immediately.