getting a virus warning as I log in to BF.

Status
Not open for further replies.
It's showing the google malware alert on my Macbook Air (running safari), but not on the iPad 2.
 
I'm getting this from Norton.

Category: Intrusion Prevention
Date & Time,Risk,Activity,Status,Recommended Action,IPS Alert Name,Default Action,Action Taken,Attacking Computer,Attacker URL,Destination Address,Source Address,Traffic Description
12/18/2011 5:42 PM,High,An intrusion attempt by gsdgsdgsdssssssss.c0m.li was blocked.,Blocked,No Action Required,Web Attack: Malicious File Download Request 10,No Action Required,No Action Required,"gsdgsdgsdssssssss.c0m.li (78.111.51.119, 80)",gsdgsdgsdssssssss.c0m.li/content/v1.jar,"ACER-330BB84976 (192.168.1.102, 2736)",78.111.51.119 (78.111.51.119),"TCP, www-http"
 
Aside from the Google warning I'm now able to login without any virus alerts - I ran Malwarebytes and Spybot earlier today and they found a bunch of nasties on my computer which have been removed - one of the culprits was Trojan.FakeAlert ,Trojan.Agent
 
Ok, I've disabled advertising site wide in an attempt to further lock this down. Let's see if this helps
 
I'm getting this from Norton.

"Category: Intrusion Prevention
Date & Time,Risk,Activity,Status,Recommended Action,IPS Alert Name,Default Action,Action Taken,Attacking Computer,Attacker URL,Destination Address,Source Address,Traffic Description
12/18/2011 5:42 PM,High,An intrusion attempt by gsdgsdgsdssssssss.c0m.li was blocked.,Blocked,No Action Required,Web Attack: Malicious File Download Request 10,No Action Required,No Action Required,"gsdgsdgsdssssssss.c0m.li (78.111.51.119, 80)",gsdgsdgsdssssssss.c0m.li/content/v1.jar,"ACER-330BB84976 (192.168.1.102, 2736)",78.111.51.119 (78.111.51.119),"TCP, www-http""

Good Lord!!! Do you actually know what that means?

Anyway, if it helps, I only use IE 8 and run plain ole Norton Anti-Virus with Antispyware and have had no problems. Been on and off the site all day.
 
I am running kapersky and was getting warnings all yesterday and this morning. Everything seems alright tonight.
 
I've even installed avast and can't friggin replicate this
 
Firefox is telling me BF is an "attack site" and that I shouldn't visit it. I dont get a message when I visit BF via safari, just firefox.
This is what firefox tells me:

What is the current listing status for bladeforums.com?

Site is listed as suspicious - visiting this web site may harm your computer.

Part of this site was listed for suspicious activity 8 time(s) over the past 90 days.

What happened when Google visited this site?

Of the 156 pages we tested on the site over the past 90 days, 14 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2011-12-18, and the last time suspicious content was found on this site was on 2011-12-18.

Malicious software includes 21 trojan(s), 12 exploit(s), 7 scripting exploit(s). Successful infection resulted in an average of 7 new process(es) on the target machine.

Malicious software is hosted on 2 domain(s), including ggghhhhhhhh.c0m.li/, gsdgsdgsdssssssss.c0m.li/.

1 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site, including openx.net/.

This site was hosted on 1 network(s) including AS19235 (HOSTING).

Has this site acted as an intermediary resulting in further distribution of malware?

Over the past 90 days, bladeforums.com did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?

No, this site has not hosted malicious software over the past 90 days.

How did this happen?

In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.

Next steps:

* Return to the previous page.
* If you are the owner of this web site, you can request a review of your site using Google Webmaster Tools. More information about the review process is available in Google's Webmaster Help Center.


Should I be worried???
 
I got my first google block earlier today, using the latest google chrome, with avast antivirus. Not had a peep from my antivirus, it's limited to google chrome.
Funnily enough, i only get it when accessing certain sub-forums and/or threads. I got it when opening the forum index page, didn't get one when entering traditional subforum, got it again when opening two threads in there.
Could this bug be connected with image-hosting websites? Just a wild stab in the flailing dark. Don't mind me.

Edit: Doesn't seem to be related to threads with images in them. Just got a warning entering another sub-forum without images anywhere. This is weird.
 
1 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site, including openx.net/.
There's the problem. The third party banner ad provider.
 
Good Lord!!! Do you actually know what that means?

Anyway, if it helps, I only use IE 8 and run plain ole Norton Anti-Virus with Antispyware and have had no problems. Been on and off the site all day.

It means someone from Azerbaijan is trying to put something on your computer.

I think the reason that some people are getting the warning and some aren't is that everyone is running different versions of browsers and have different settings. If your browser has this security feature and it is enabled, then you will get the warning. If you don't have the security feature, then you won't get the warning. It looks as if some antivirus programs also have this type of feature (Avast.)

And if I recall correctly, this list is updated every day or so, so BF is going to be flagged for a little while.

As long as you haven't downloaded anything, been asked to download anything, or been forced to download anything, then you should be fine.
 
I have been getting the virus warning from google chrome since about noon today. I finally overrode it to get here now...what gives?
 
Firefox is telling me BF is an "attack site" and that I shouldn't visit it. I dont get a message when I visit BF via safari, just firefox.
This is what firefox tells me:

What is the current listing status for bladeforums.com?

Site is listed as suspicious - visiting this web site may harm your computer.

Part of this site was listed for suspicious activity 8 time(s) over the past 90 days.

What happened when Google visited this site?

Of the 156 pages we tested on the site over the past 90 days, 14 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2011-12-18, and the last time suspicious content was found on this site was on 2011-12-18.

Malicious software includes 21 trojan(s), 12 exploit(s), 7 scripting exploit(s). Successful infection resulted in an average of 7 new process(es) on the target machine.

Malicious software is hosted on 2 domain(s), including ggghhhhhhhh.c0m.li/, gsdgsdgsdssssssss.c0m.li/.

1 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site, including openx.net/.

This site was hosted on 1 network(s) including AS19235 (HOSTING).

Has this site acted as an intermediary resulting in further distribution of malware?

Over the past 90 days, bladeforums.com did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?

No, this site has not hosted malicious software over the past 90 days.

How did this happen?

In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.

Next steps:

* Return to the previous page.
* If you are the owner of this web site, you can request a review of your site using Google Webmaster Tools. More information about the review process is available in Google's Webmaster Help Center.


Should I be worried???

Same exact thing for me, what is the BS?? I wanna check mah threads! :D:D
 
Kaspersky warned be about 20 times last night @ 2300 hrs when logging on.
Loggin on worked fine, but the warning I got was HEUR:Trojan.Script.Iframer and ir was coming from a huge address starting with
ads.bladeforums.XXXXXXXXXXXXXXXXXXXX

Nothing got through. Full system scan and everything is fine.

Seems everything good now.
 
STOP REPORTING THE WARNING PAGE

I'm aware of that. That page is not controlled by us. We've requested that google remove it.
 
Status
Not open for further replies.
Back
Top