AirNav Forum Trojan?

[Sun Worshipper]

Obviously the work on yet another satisfied Air Nav customer.

The company that never stops giving  

[Bethsalem]

That's what AirNav gets for trying to enforce it's 24x7 feeder agreement with the Russians. 

[Anmer]

AirNav's response:

"Further checks were done and following smf forum bug patches and server bug patches as well we haven't been able to find a cause of this yet. So far we have not found any viruses or code on the forum which has been exploited.

We are however keeping an eye on the situation."

[Anmer]

"My AVG blocked the following at 0815 local today:

EXPLOIT BLACKHOLE EXPLOIT KIT (TYPE 2146)

www.airnavsystems.com/forum/index.php?board


I think I'll stay clear of here until further notice."

I use AVG and it's not reporting any threats?

[viking9]

Blackhole Exploit Kit! Not the Nigerians again? 

[Anmer]

There's been no further news from AirNav and I still can't replicate a security alert using AVG, Microsoft Security Essentinals, Malwarebytes or any of the removal utilities mentioned on the AirNav forum.

However, I did notice this recent post by a well-known security expert:

"i havent really followed it on there forum
but it does look like they got hacked to me"

Not sure what forensic tools and analysis he applied but he seems convinced that something was 'hacked'! 

So be cautious.

[Anmer]

Look forward to AirNav's response:

"Don't want to appear pedantic or banging on about this, but not having had any alerts or warnings since the 19th, and assuming that as nobody else is reporting further problems the forum is now clean, what did you find to be the cause of the problem and are you satisfied the site is indeed now clean?
The reason I ask is because a relative of mine,  involved in 'nasties' removal for an IT company, who spent a lot of time cleaning and checking my machine whilst this situation was going on is interested to know.
As he says, recurring infections don't go away on their own so they must have been eliminated at source."

http://www.airnavsystems.com/forum/index.php?topic=6913.msg79384#msg79384

[Anmer]

Still not a peep from AirNav.

Worrying as one might expect a robust statement if nothing were amiss?

"It would seem that  the general problem has now been resolved but a response from AND to my last posting could perhaps reassure us that this is the case."

http://www.airnavsystems.com/forum/index.php?topic=6913.msg79467#msg79467

[Anmer]

Well. well, well (as they say).

Just went to the AirNav forum to view Latest Posts (done this a few times already this morning) and guess what?

AVG popup window "Threat was Blocked".

See attached screenshot.

VERY WORRYING.

[Attachment deleted by Admin to save file space]

[Hamish McTorsk]

Same here, I would advise keeping away from the Airnav forum especially if you are not protected or have a good AV running, if you have a free AV then don't go there at all.



[Attachment deleted by Admin to save file space]

[Bethsalem]

Hamish,

I love what's lurking below the AVG warning box 

"Sorry Guest, you are banned" and "This ban is not set to expire"

My posts were censored and I was only threatened with the chop.

You went the whole 9 yards. 

Stephen

[Hamish McTorsk]

"Sorry Guest, you are banned" and "This ban is not set to expire"
Stephen

I am so used to seeing that message that I don't notice it any more, I got banned for being the owner of Radarspotters even though I am an Airnav BungleBox  customer.

[Sun Worshipper]

Who is Stephen?

[mhm]

that warning came up on radarspotters site after dan the ban took over

[Sun Worshipper]

that warning came up on radarspotters site after dan the ban took over

Maybe in response to that epic unboxing video!