getting a virus warning as I log in to BF.

Status
Not open for further replies.
Spark said:
Ok, I've disabled advertising site wide in an attempt to further lock this down. Let's see if this helps
Click to expand...

OK. This time I did not get any AVAST warning. I think you killed it with that, Kevin.
 
I'm still getting it. It crashed firefox twice and made me restart the computer, had to log on using Internet Explorer. I'm using Malwarebytes and Microsoft security essentials I ran two full scans on both but it tells me I have no viruses.
 
I too have been and am still getting an error on Google chrome. Every time I come onto or change pages on bladeforums I get a malware warning. I thought it was me so i checked it with all my stuff and nothing comes up.

I am running:
Google Chrome
Avira Anti-virus
Spybot
Anti-malaware

20 minutes ago it was working but now I am having trouble again.
 
I got the warning today (for the first time - from Google).
Logged on to a Linux box and logged in here.
Then I went and entered the URL at VirusTotal.com and they said that the site is clean.

Unfortunately, I had already emailed the admin - probably just adding to his aggravation.
I run a small business cleaning infected computers. It's very odd that multiple scanners, Google, etc all come up dirty.
Should be interesting to see what developes.
For now, bladeforums will be viewed on the Linux box

mike
 
russamurai said:
Started getting the warnings for the first time today on Safari on mac.
Click to expand...

Same here - just got it for the fist time a couple of minutes ago.

ETA: For those who haven't done this - un-checking the fraudulent site warning preference lets you browse BFC without the warning popping up with every click.
 
Last edited:
Now that I think about it...
Most of the resident scanners mentioned (Norton, etc) use cloud based "community" databases of sites reported as infected.
It could be that BF was infected earlier and this is just residual warnings.
 
It blew right through Panda Cloud that I was using because it was free. It loaded some god awful program that said all kinds of stuff was failing on my PC and I could not get control back. I finally restored the factory image back on it.

I've had very good luck with Trend Micro in the past and installed it on my PC after the base build was done. What a pain in the butt.

My wife's PC was hacked about a week ago the same way and Panda Cloud failed then too. That's one "freebie" that people better avoid.
 
Safari on OSX, still seeing warnings. My IPad doesnt seem to care :). Guess I'll clear the cache. Silly thing has a warning for every thread I click on.
 
http://onlinelinkscan.com/

URL scanned: http://www.bladeforums.com
PhisTank say's: Service not available.
AVG say's: Service not available.
SiteTruth say's: This site is safe.
Google Safe Browsing say's: This site is safe.
Threat Name: No Threat FOUND
Threat Definitions: 1095393
Engine Version: 0.97.3
Host IP: 199.231.142.3
Link Status: Clean
File Size: 225.55 KB
Time Finished: 6.22 secs
Overall result: This site is secure.
 
Analysis Report for http://www.bladeforums.com
http://anubis.iseclab.org/

Summary:
- Changes security settings of Internet Explorer:
This system alteration could seriously affect safety surfing the World
Wide Web.

- Performs File Modification and Destruction:
The executable modifiesand destructs files which are not temporary.

- Performs Registry Activities:
The executable creates and/or modifies registry entries.
From ANUBIS:1030 to 199.231.142.3:80 - [ www.bladeforums.com ]
Request: [ GET /forums/clientscript/yui/yuiloader-dom-event/yuiloader-dom-event.js?v=419 ], Response: [ 200 "OK" ]
2.d) iexplore.exe - Other Activities
[=============================================================================]
[=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=]
Mutexes Created:
[=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=]
Mutex: [ _SHuassist.mtx ]
 
You JUST got this warning?
 
Go here

http://anubis.iseclab.org/

enter your site.
The below results are from 10 minutes ago

Performs Registry Activities:
The executable creates and/or modifies registry entries.
From ANUBIS:1030 to 199.231.142.3:80 - [ www.bladeforums.com ]
Request: [ GET /forums/clientscript/yui/yuiloader-dom-event/yuiloader-dom-event.js?v=419 ], Response: [ 200 "OK" ]
2.d) iexplore.exe - Other Activities
[================================================== ===========================]
[=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=]
Mutexes Created:
[=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=]
Mutex: [ _SHuassist.mtx ]
 
Firefox on x64 Win7. Have norton, blah blah blah,

Reported site with trojans. I think something in the backend is exploited.

My $0.02.
 
Status
Not open for further replies.
Back
Top