Appreciate the help, unfortunately it appears to still be up and their ads are still running. As long as their ads get cancelled users should be safe, waiting on google still.
Looks like godaddy guys are lazy, filed a report again.
Topic: ANN: Someone made a PD clone and put a virus on their clone. Please Report (Read 1099 times)
October 14, 2013, 05:15:18 AM
Looks like godaddy guys are lazy, filed a report again.
October 14, 2013, 05:04:46 AM
I think I find a time based sql injection place for the file host of the virus. Is too unethical to try to remove virus from host? Host not seem care what file kind it host.
Depends on how legal that is in your jurisdiction.
October 13, 2013, 02:24:37 PM
Thanks for the heads up Stunna, reported it, hopefully it gets taken down soon.
October 13, 2013, 01:18:41 PM
I think I find a time based sql injection place for the file host of the virus. Is too unethical to try to remove virus from host? Host not seem care what file kind it host.
October 13, 2013, 04:09:50 AM
Appreciate the help, unfortunately it appears to still be up and their ads are still running. As long as their ads get cancelled users should be safe, waiting on google still.
October 12, 2013, 11:37:19 PM
reported to Google too
October 12, 2013, 05:59:54 AM
Reported, hopefully it gets taken down soon
October 12, 2013, 05:55:41 AM
Reported !!!!
October 12, 2013, 05:43:07 AM
Reported, hope this clears!
October 12, 2013, 03:39:35 AM
I have checked that java file, some stupid guy from HF is probably doing this.
This Java driveby downloads exe file from here
Virus scan of jar : 0/48 (It's FUD)
https://www.virustotal.com/en/file/4be0944c1ba24240798c1de430c9592c0d56e6338c84c18a7c2084aecb227aa8/analysis/1381564324/
Virus scan of exe file: 2/48 (It's crypted)
https://www.virustotal.com/en/file/c2c20a1f614402b93fe79d11bffda53b35c07e37eebd44e1455cd80ad590aa00/analysis/1381564166/
This Java driveby downloads exe file from here
Virus scan of jar : 0/48 (It's FUD)
https://www.virustotal.com/en/file/4be0944c1ba24240798c1de430c9592c0d56e6338c84c18a7c2084aecb227aa8/analysis/1381564324/
Virus scan of exe file: 2/48 (It's crypted)
https://www.virustotal.com/en/file/c2c20a1f614402b93fe79d11bffda53b35c07e37eebd44e1455cd80ad590aa00/analysis/1381564166/
October 12, 2013, 03:36:16 AM
Reported to google and godaddy.
Reported, hopefully google take down the website before someone lost their wallet.
Really appreciate it, thanks
October 12, 2013, 03:30:30 AM
Reported, hopefully google take down the website before someone lost their wallet.
October 12, 2013, 03:21:52 AM
Reported to google and godaddy.
October 12, 2013, 12:52:17 AM
Wow. Well at least you know you've made it when people start trying to impersonate you 
October 12, 2013, 12:49:44 AM
Re-Posting http://www.reddit.com/r/Bitcoin/comments/1o9tmi/ann_someone_has_cloned_my_bitcoin_website_and_put/ for increased awareness.
Hey Everyone,
I run www.primedice.com , unfortunately right now when you google primedice the first result is a google ad for a clone called [PLEASE DO NOT VISIT THIS SITE]: (Primedicebot.com) which prompts you to download the latest version of java which will thus infect your computer. They even appear slightly convincing as they have copy and pasted the source to our site.
I'd strongly appreciate it if everyone could report that malware/clone website (primedicebot.com) to http://www.google.com/safebrowsing/report_badware/
Thank you
Hey Everyone,
I run www.primedice.com , unfortunately right now when you google primedice the first result is a google ad for a clone called [PLEASE DO NOT VISIT THIS SITE]: (Primedicebot.com) which prompts you to download the latest version of java which will thus infect your computer. They even appear slightly convincing as they have copy and pasted the source to our site.
I'd strongly appreciate it if everyone could report that malware/clone website (primedicebot.com) to http://www.google.com/safebrowsing/report_badware/
Thank you
Jump to: