RootsChat.Com

General => Technical Help => Topic started by: GrahamSimons on Sunday 29 July 12 10:37 BST (UK)

Title: Cyndi's List - Phoenix Exploit
Post by: GrahamSimons on Sunday 29 July 12 10:37 BST (UK)

I am using AVG antivirus and am getting warnings that Cyndi's List www.cyndislist.com is infected with the Phoenix Exploit kit. There's a posting on the AVG site, ostensibly from the site owner, to say that the site is free of threats. Has anybody else had similar experience - and in particular do other anti-virus programs pick up this threat?

Thanks

Graham

Title: Re: Cyndi's List - Phoenix Exploit
Post by: jim1 on Sunday 29 July 12 12:15 BST (UK)

I've got AVG & it's not flagging up anything from this site.
jim

Title: Re: Cyndi's List - Phoenix Exploit
Post by: mhg on Sunday 29 July 12 12:35 BST (UK)

I've just checked.  Cyndi's list is flagging up the Phoenix Exploit using AVG.

Phoenix feeds false links to the browser, hoping that you click on one to get infected.

Title: Re: Cyndi's List - Phoenix Exploit
Post by: Nick29 on Monday 30 July 12 10:37 BST (UK)

AVG is famous for its 'false alarms'.  I've just visited the page and my Kaspersky AV and Web Security isn't phased by it  :)

Title: Re: Cyndi's List - Phoenix Exploit
Post by: roopat on Thursday 16 August 12 17:09 BST (UK)

I've just tried twice to get onto the site and each time my anti-virus (ESET) blocked it, mentioning a trojan and advised me to reboot to clean the infection. (I think that's what it said) Nothing about Phoenix. I don't have AVG.

Any ideas?

Pat

Title: Re: Cyndi's List - Phoenix Exploit
Post by: jim1 on Thursday 16 August 12 17:40 BST (UK)

I've just tried it & it's done the same.It's called a false positive & won't do any harm.

Title: Re: Cyndi's List - Phoenix Exploit
Post by: stanmapstone on Thursday 16 August 12 18:41 BST (UK)

McAfee SiteAdvisor, cyndislist.com  We tested this site and didn't find any significant problems.

Stan

Title: Re: Cyndi's List - Phoenix Exploit
Post by: roopat on Thursday 16 August 12 20:50 BST (UK)

Thank you all.

ESET has 'quarantined' the site, not quite sure what that means exactly so will ring my local friendly computer boffins tomorrow (who know our computers well!) just to be on the safe side.

Title: Re: Cyndi's List - Phoenix Exploit
Post by: Nick29 on Friday 17 August 12 08:39 BST (UK)

My Kaspersky Internet Security is now blocking the site.  It alleges that the site is infected with the iFramer trojan which can attempt to access information on the remote computer by using hidden iFrames in the website code.

Title: Re: Cyndi's List - Phoenix Exploit
Post by: KGarrad on Friday 17 August 12 08:45 BST (UK)

Just tried the website - and Norton 360 is reporting:

"An intrusion attempt by healthybabyboomersnetwork.com was blocked."