{"id":4131,"date":"2015-01-29T14:45:53","date_gmt":"2015-01-29T14:45:53","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=4131"},"modified":"2018-05-29T12:00:59","modified_gmt":"2018-05-29T12:00:59","slug":"http-503-temporarily-closed-for-maintainance-on-freefixer-com-and-other-anti-malware-sites","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/http-503-temporarily-closed-for-maintainance-on-freefixer-com-and-other-anti-malware-sites\/","title":{"rendered":"HTTP 503 – “temporarily closed for maintainance” on FreeFixer.com and other anti-malware sites"},"content":{"rendered":"

Just wanted let you know about a nasty piece of malware that blocks access to many of the anti-virus sites out there. Freefixer.com is one of them. If you see a HTTP 503<\/strong> error message saying:<\/p>\n

“The site is temporarily closed for maintainance<\/strong>. Please try again later.”<\/p><\/blockquote>\n

when visiting freefixer.com<\/a>\u00a0and other sites you have this infection, or some variant of it. Notice that “maintainance” is spelled incorrectly. A few users had already reported this issue to me, starting in the beginning of January 2015. I first thought I had made some configuration error at the web server but I could not find any issue, nor that spelling error.<\/p>\n

Today, Martin who is located in Hamburg, Germany, reported that he had been able to track down the root caused. I’ve not been able to get my hands on this malware myself, so I cannot verify it, but according to him nothing showed up in FreeFixer, nor in any of the 3 anti-rootkit scanners he tried.<\/p>\n

However, after rebooting from the live Knoppix Linux DVD<\/a> he was able to track down a malware driver called\u00a0msreadyboost.sys<\/strong>, located in C:\\WINDOWS\\system32\\drivers. After deleting this driver the system operated normally again.<\/p>\n

Thanks Martin! \u00a0Good job!<\/p>\n

Do you also see the HTTP 503 message? Did the removal of msreadyboost.sys solve the problem?<\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

Just wanted let you know about a nasty piece of malware that blocks access to many of the anti-virus sites out there. Freefixer.com is one of them. If you see a HTTP 503 error message saying: “The site is temporarily closed for maintainance. Please try again later.” when visiting freefixer.com\u00a0and other sites you have this … Continue reading HTTP 503 – “temporarily closed for maintainance” on FreeFixer.com and other anti-malware sites<\/span> →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/4131"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=4131"}],"version-history":[{"count":5,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/4131\/revisions"}],"predecessor-version":[{"id":4136,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/4131\/revisions\/4136"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=4131"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=4131"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=4131"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}