TWC Today Forums
TWC Today => Questions, Comments, Suggestions => Topic started by: Eric on June 29, 2013, 09:41:44 PM
-
Serious anti-virus problems going on here this evening. When I tried logging into the forum my anti-virus program went absolutely bonkers, so I switched to my Ubuntu computer, and even here Google Chrome prevented me from accessing the forum because of malware warnings. I just barely managed to get in, and even now Google is screaming at me... but Ubuntu is generally better protected from malware than Windows, so I'm taking a chance just to post this message.
-
Serious anti-virus problems going on here this evening. When I tried logging into the forum my anti-virus program went absolutely bonkers, so I switched to my Ubuntu computer, and even here Google Chrome prevented me from accessing the forum because of malware warnings. I just barely managed to get in, and even now Google is screaming at me... but Ubuntu is generally better protected from malware than Windows, so I'm taking a chance just to post this message.
No problems on my end :no:
-
Eric, I haven't seen any issues on my end, so I'm not sure what is wrong here. Maybe someone else can help.
-
I came across Chrome's "Malware Detected" screen only once when I tried accessing the forum earlier today. No problems afterward.
-
Same here. Real bad, and AVG won't allow me to add a PUP exception. AVG classifies it as a "Exploit Blackhole Exploit Kit (type 2704)"
-
I just saw that Google has this site marked as a reported attack site. Martin, could you please check things out here?
-
I noticed starting today that if I try to go directly to the website or search for the website on Google I'm getting warning messages that this site may have malware or be harmful to my computer.Curious if you guys are aware of it and if anybody else is getting the same messages? I'm able to get around the error messages by using my phone to post this message. Thanks
-
When this problem first started for me, Norton Anti-Virus would block access to the site on my Windows computer, and Google Chrome would block access on my Ubuntu computer. Now, Google Chrome blocks access on both computers, even before Norton gets involved.
Right now the only way I can access this forum is by using Firefox on my Ubuntu computer and refreshing the page a lot.
-
In case it's useful to anyone, this is the warning screen Google Chrome gives me whenever I visit...
-
I'm putting those topics between Eric and IceManNYR into one here. I see the warnings as well, and I have emailed Martin about it. I hope he gets on it soon.
-
Chrome has given me the malware screen yet again for this site, but I went around the screen by "proceeding at my own risk". There must be a site bug that's making Chrome misidentify this forum as a "potentially dangerous site" :hmm:
-
Based on the images I have seen posted from Eric in this topic, it appears the problem is not our site. It's really our host server. I fear the server got hacked somehow, and it would impact all sites on it, including this one. As I said earlier, Martin must investigate it as he's the site owner here.
-
Got the same Chrome Error here on my end.
-
Phew! So it's not just my computer being stupid. I, too, started getting this error last night and am still getting it this afternoon. I am using IE 10 and have Kaspersky Anti-virus which is stating that ALL of TWCT (forums and site) has a Trojan virus and is thus denying me access to the page. Hopefully I'm safe typing this message on my smart phone! But... It looks like many operating systems and browsers are being affected here.
As Patrick said, this must be an issue with our host server. Unfortunately, Martin is the only one who can do something about this. I apologize we moderators cannot fix the problem.
-
I've never seen anything like this and I don't really have any ideas on how it happened or what needs to be done to fix it. I've contacted our host about it.
-
Update: While from the message given it looks like our site isn't infected I would strongly advise everyone to keep their protection software up to date while we work to resolve this issue. If you do not have any protection software download the free Windows Defender. http://www.microsoft.com/en-us/download/windows-defender-details.aspx (http://www.microsoft.com/en-us/download/windows-defender-details.aspx)
Our host security department has been contacted and we are still investigating. I will let you know as soon as I can regarding the status of the site. It could be several days before any warning messages are removed.
-
I've found that it's a trojan affecting the host: Trojan:JS/Blacole.Ref.CZ. According to Microsoft, Trojan:JS/BlacoleRef.CZ is a detection name for an obfuscated JavaScript, often found inserted into compromised websites. This threat is designed to load a hidden IFrame that loads behind the user's browser, redirecting it to an exploit server known as "Blackhole."
I get this threat when accessing this site on IE 10 no matter what setting I use (private browsing mode on or off). However, I'm safe on Firefox 22 when I have the Private Browsing mode activated. It's another reason why Firefox is still the best web browser, so please try using it for now to stay safe. Also, make sure your virus protection is up to date as it's a rather new threat, and turn your Java security settings up to high.
-
Is the host for this site still HostGo?
-
Is the host for this site still HostGo?
No, we're using HostGator now. :yes:
-
Thanks, everyone, for your help! I hope we'll be getting some answers soon.
Right now I'm using only my second laptop, which runs Ubuntu, to access this forum. Just in case anything catastrophic should happen, this computer doesn't have any personal information, and everything on it can be easily reinstalled if necessary.
-
Update: While from the message given it looks like our site isn't infected I would strongly advise everyone to keep their protection software up to date while we work to resolve this issue. If you do not have any protection software download the free Windows Defender. [url]http://www.microsoft.com/en-us/download/windows-defender-details.aspx[/url] ([url]http://www.microsoft.com/en-us/download/windows-defender-details.aspx[/url])
Our host security department has been contacted and we are still investigating. I will let you know as soon as I can regarding the status of the site. It could be several days before any warning messages are removed.
MSE (Microsoft Security Essentials) is another alternative :yes:
http://windows.microsoft.com/en-us/windows/security-essentials-download (http://windows.microsoft.com/en-us/windows/security-essentials-download)
-
I was wondering what was going on because Firefox was practically imploring me to stay away from here. I hope the issue gets resolved soon, too.
-
Many thanks the updates, Patrick and Martin. Hopefully this will be resolved soon.
-
Kaspersky is no longer blocking me from the site, but Google still lists it as a site that may harm my computer. Hopefully this means that the issue is slowly being resolved. Thanks for everyone's help!
-
Here's the site that is seen on firefox (https://www.stopbadware.org/firefox?hl=en-US&url=http%253A%252F%252Ftwctodayforums.com%252Fforums%252Findex.php) trying to access the forums.
-
No error for me this time! :D
-
Google Chrome is still being argumentative. :hmm:
-
I'm glad someone started a topic about this. I'm having the same problem on Google Chrome. At first it totally denied me access to this site. But I finally got in.
-
I haven't seen any issues on my end.
-
Good news, everyone! I just checked our forum on Internet Explorer, which is when my antivirus program detected the trojan that I was able to explain in an earlier post. There's nothing now, and my Microsoft Security Essentials is quiet. :happy: It will take a few days before Google removes the warnings, so those of you on Chrome and Firefox will still see them. However, it appears we are safe now. B)
-
That's good news! I'll just keep clicking through the warnings on Chrome, then.
-
It will take a few days before Google removes the warnings, so those of you on Chrome and Firefox will still see them.
Not me (using Firefox).
-
Not me (using Firefox).
I still see the warnings now, but the reason we're different is because of our Firefox settings. In the Options menu under the Security tab, there are two settings that can be checked on or off: "Block reported attack sites" and "Block reported web forgeries." Mine are both checked on, while yours are not.
-
I'm using FF 23 and the warnings are gone.
-
Glad to hear this situation is improving :) Hopefully the warning screens will disappear from Chrome soon.
This whole thing kinda makes you wonder, why would an individual or a party infect websites with malware and other viruses? They should have better things to do than hacking :fear: :nono:
-
It will take a few days before Google removes the warnings, so those of you on Chrome and Firefox will still see them.
Not me (using Firefox).
Scratch that. It was just at home. Still getting it at work.
-
I use primarily Google Chrome, and the warnings are still there.
I could use Firefox, but then I'd have to manually copy URLs, and... I just don't like Firefox.
-
Well, I proceeded at my own risk in Chrome :bleh: I figured it would be some code that could have triggered the warning, but tested the site on all browsers and only Chrome seemed to get the warning.
Glad things are working out. :)
-
I haven't had any trouble...yet. I will do a search for this site on google and see what comes up. I did a google search and yes it said "This site may harm your computer". This obviously in a concern, not only for me, but for every member of this forum.
-
I've had no warnings to this site.
-
Chrome is still throwing red flags...
-
The Firefox warnings are gone now on my end. Martin and I have taken care of requesting malware reviews on this site to eliminate all the warnings. Martin notified Google, and I went to stopbadware.org to request a review so that this site is removed from all possible blacklists. Hopefully, all warnings will be gone in a day or two.
-
I am not experiencing any warnings on Firefox, Chrome, IE or Safari at this time
-
Chrome is no longer showing malware warnings for this site on my end.
-
Just a summary about this issue.
Because we share a sever with potentially hundreds of other sites there is always the threat that one of those sites could infect ours or that the server would be blacklisted because of attacks originating from this server. Some of our internal files were briefly compromised but any attacks were primarily the result of other parties on this server. At no time were any users of this site in danger of any malicious software or code.
The only way to prevent this in the future is to move to a dedicated host which can range from $40-100 each month. Unfortunately thats just not economically feasible unless someone wants to make a massive donation. :P We've never had a problem like this in the many years this site has been up so I think its ok to continue operating like normal. We can look into changing host but I am quite happy with our current provider especially since they were very quick to fix the problem and help us out.
Glad to have things back to normal :)
-
No more warnings from Google Chrome on either of my computers now.
Many, many thanks to Martin for working to sort this all out and for explaining things to us! :clap:
-
Yay, that's great! No more warnings from my version of Firefox either. Glad this site didn't have any serious issues because it didn't appear to be a false alarm.
-
Yay, that's great! No more warnings from my version of Firefox either. Glad this site didn't have any serious issues because it didn't appear to be a false alarm.
It was definitely not a false alarm, Christina. I actually had a trojan downloaded on to my computer without my permission, but I thankfully had Mircosoft Security Essentials to stop it. You can't be online without any protection these days thanks to hackers and others who seriously need a life.
Martin, thanks for your help! I doubt changing hosts would prevent everything as it's still the internet and anything can happen.
-
Glad to see this issue resolved. I've stayed off the website when Norton first stated giving me warnings. Then Google Chrome started giving me warnings. Now that I checked this morning, it's all clear. Sorry Patrick for not being able to respond back to your messages lately, been kinda busy with other stuff.
-
I must have those features disabled. It worked fine for me the entire time from both SeaMonkey under Slackware and xombrero under OpenBSD: http://wlair.us.to/remote/img/shots/1372873238.png (http://wlair.us.to/remote/img/shots/1372873238.png)
-
Today's the first time this week I haven't had that ominous red warning message appear. I'm glad the issue's resolved, because I was scared away from the site for the past few days.
-
No more warnings on mine. All clear.:) My browser is internet explorer, btw.
-
The issue has been marked as "resolved" and "fixed".... (well, on the hypothetical bug tracker that is, lol)....
If this ever happens again, please let us know in a new thread, since this one is now resolved. Thanks in advance guys and gals~! ^_^