PDA

View Full Version : Repeated Attack Warning



Mad_Aussie
16-09-2010, 09:27 AM
Thought i'd post this up for the mods as some feedback,
Just then (i.e. two minutes ago) Firefox has started throwing back "Reported Attack Site" warnings for me.



Of the 1 pages we tested on the site over the past 90 days, 1 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2010-09-15, and the last time suspicious content was found on this site was on 2010-09-15.

Malicious software is hosted on 1 domain(s), including blamesllek.com/.

1 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site, including bannerspace.com.au/.

This site was hosted on 1 network(s) including AS9543 (WESTNET).


It only seems to be coming up on my machine, the one next to me isn't getting the warning. Just thought i'd point it out in case there is an issue, if its just my cookies gone all moldy and shit, then delete this thread and continue to merrily gleefully through fields of posies.

Cheers

stumps.
16-09-2010, 09:33 AM
I actually got this this morning when I clicked on new threads.

Alt_F4
16-09-2010, 09:33 AM
Dodgy ads again I'd say... god bless adblock

Buckas
16-09-2010, 09:38 AM
i got it this morning too, opening the site and clicking on any of the forum pages

INSINR8R
16-09-2010, 09:40 AM
Me too, Chrome keeps saying it detects malware.

I'm using firefox at the moment.

Evilteddy
16-09-2010, 09:41 AM
Hey guys,

Next time it pops up can you please let me know which Sponsorship banner is showing and also which Ads are showing as well...

Might enable me to pinpoint the problem.

Milhouse
16-09-2010, 09:42 AM
Any problems guys, PM Bouz !

yeahlow34
16-09-2010, 09:45 AM
Any problems guys, PM Bouz !

KEK

Firstround
16-09-2010, 09:50 AM
arrgh i just got it aswell, Mozilla wont let me log in aswell back to IE :(

fsbk
16-09-2010, 09:53 AM
same here

Mad_Aussie
16-09-2010, 09:59 AM
Can't actually see which ad is the problem, as the red blocking page comes up first, and when you 'ignore' it, the ad has already rotated to the next one.

ben351
16-09-2010, 10:00 AM
http://i53.tinypic.com/2mnop6h.jpg

HIKARI
16-09-2010, 10:01 AM
Same here, using firefox. Was 10mins ago. Now it's fine

Jase
16-09-2010, 10:02 AM
Me too, Chrome keeps saying it detects malware.

I'm using firefox at the moment.

Same,

Every page I have opened in the last couple min on antilag I have to click "proceed anyway"

The whole page goes red with the warning before I even get to see what Im opening



Warning: Visiting this site may harm your computer!
The website at antilag.com contains elements from the site www.antilag.com, which appears to host malware – software that can hurt your computer or otherwise operate without your consent. Just visiting a site that contains malware can infect your computer.
For detailed information about the problems with these elements, visit the Google Safe Browsing diagnostic page for www.antilag.com.
Learn more about how to protect yourself from harmful software online.

I understand that visiting this site may harm my computer.

After I click proceed I got another page that said something which I ignored (and cant make it pop up again) has a list of addresses like
www.antilag.com.. balblabla/useroffline or /shownew ost or something along those lines

Mad_Aussie
16-09-2010, 10:14 AM
blamesllek.com/ is the offending link, apparently its infected some 219 servers.

Alt_F4
16-09-2010, 10:22 AM
Safe Browsing
Diagnostic page for www.antilag.com/forums

What is the current listing status for www.antilag.com/forums?

Site is listed as suspicious - visiting this website may harm your computer.

What happened when Google visited this site?

Of the 1 pages that we tested on the site over the past 90 days, 1 page(s) resulted in malicious software being downloaded and installed without user consent. The last time that Google visited this site was on 2010-09-15, and the last time that suspicious content was found on this site was on 2010-09-15.

Malicious software is hosted on 1 domain(s), including blamesllek.com/.

1 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site, including bannerspace.com.au/.

This site was hosted on 1 network(s) including AS9543 (WESTNET).

Has this site acted as an intermediary resulting in further distribution of malware?

Over the past 90 days, www.antilag.com/forums did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?

No, this site has not hosted malicious software over the past 90 days.

How did this happen?

In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.

Next steps:

* Return to the previous page.
* If you are the owner of this website, you can request a review of your site using Google Webmaster Tools. More information about the review process is available in Google's Webmaster Help Centre.

Jase
16-09-2010, 10:27 AM
Same,

Every page I have opened in the last couple min on antilag I have to click "proceed anyway"

The whole page goes red with the warning before I even get to see what Im opening




After I click proceed I got another page that said something which I ignored (and cant make it pop up again) has a list of addresses like
www.antilag.com.. balblabla/useroffline or /shownew ost or something along those lines


Heres that other bit


Warning: Visiting this site may harm your computer!
The website at antilag.com contains elements from sites which appear to host malware – software that can hurt your computer or otherwise operate without your consent. Just visiting a site that contains malware can infect your computer.
Below is a list of all the unsafe elements for the page. Click on the Diagnostic link for more information on the thread for a specific element.
Malware http://www.antilag.com/forums/images/buttons/report.gif Safe Browsing diagnostic page
Malware http://www.antilag.com/forums/images/statusicon/post_old.gif Safe Browsing diagnostic page
Malware http://www.antilag.com/forums/images/statusicon/user_online.gif Safe Browsing diagnostic page
Malware http://www.antilag.com/forums/images/buttons/viewpost.gif Safe Browsing diagnostic page
Malware http://www.antilag.com/forums/images/buttons/quote.gif Safe Browsing diagnostic page
Malware http://www.antilag.com/forums/images/buttons/multiquote_off.gif Safe Browsing diagnostic page
Malware http://www.antilag.com/forums/images/buttons/quickreply.gif Safe Browsing diagnostic page
Learn more about how to protect yourself from harmful software online.
I understand that visiting this site may harm my computer.

Mad_Aussie
16-09-2010, 10:33 AM
Oh those naughty gifs

http://www.antilag.com/forums/images/buttons/viewpost.gifhttp://www.antilag.com/forums/images/buttons/viewpost.gifhttp://www.antilag.com/forums/images/buttons/viewpost.gifhttp://www.antilag.com/forums/images/buttons/viewpost.gifhttp://www.antilag.com/forums/images/buttons/viewpost.gifhttp://www.antilag.com/forums/images/buttons/viewpost.gifhttp://www.antilag.com/forums/images/buttons/viewpost.gifhttp://www.antilag.com/forums/images/buttons/viewpost.gifhttp://www.antilag.com/forums/images/buttons/viewpost.gifhttp://www.antilag.com/forums/images/buttons/viewpost.gif

Bridantay
16-09-2010, 11:16 AM
blamesllek.com/ is the offending link, apparently its infected some 219 servers.

yup I got this one as well

SimonR32
16-09-2010, 11:18 AM
Site has AIDS

Brockas life is over!

HIKARI
16-09-2010, 11:38 AM
yep, 3/4 forums im in has been attacked (including this one, im using i.explorer for now). Wtf is going on!

Wozzernux
16-09-2010, 11:42 AM
Just noticed this as well, dodgy ads are the culprit. Mate's first thought was one of a few certain disgruntled car "clubs" are trying to fuck with this site and/or forum software.

http://www1.istockphoto.com/file_thumbview_approve/349458/2/istockphoto_349458_computer_hacker.jpg

Fukushima
16-09-2010, 11:42 AM
my workplace has been blocking an ad frame too, however you've probably got enough information without me taking a screenshot

its that blamesllek.com/.

Boza
16-09-2010, 11:43 AM
explorer win, firefox fail here....

Phyber
16-09-2010, 11:59 AM
IE just lets all the garbage in :)

Same on XR6T forum. Fucking annoying using firefox!!

Mad_Aussie
16-09-2010, 12:03 PM
I absolutely refuse to use IE, but Chrome is doing it too now, ffffuuuuuu

Socrates
16-09-2010, 12:12 PM
It's happening for every link i click on here, firefox portable

e46pwa
16-09-2010, 12:26 PM
Just go to internet security and unclick 'block reported attack sites' will get rid of the problem.

mitchy
16-09-2010, 12:39 PM
lol! no, that will just get rid of the warnings.

yeahlow34
16-09-2010, 12:48 PM
I <3 IE.

Suck shit firefox fags. Google chrome can suck my left nut too.

Dirty32
16-09-2010, 12:56 PM
Been having the same problem all morning on Firefox.
Using IE now, and doesnt seem to be a problem.

Mad_Aussie
16-09-2010, 01:02 PM
I <3 IE.

Suck shit firefox fags. Google chrome can suck my left nut too.

I hope a graphic designer falls out of the sky and beats you to death with a heavy block of paper that's got CSS printed all over it.

fourseven
16-09-2010, 01:03 PM
You can turn of block reported sites in Firefox security preferences.

HIKARI
16-09-2010, 01:12 PM
Other forums suspected that it's G2S (go2space) as a culprit.

gazza750
16-09-2010, 02:02 PM
looks like lots of us updated firefox today :)
i get the attack warnings too

Mad_Aussie
16-09-2010, 02:02 PM
You can turn of block reported sites in Firefox security preferences.

I've got to keep mine on, have to be able to tell when it happens to one of our clients sites...

Annoying!

RMX
16-09-2010, 02:11 PM
Here is googles take on it: http://safebrowsing.clients.google.com/safebrowsing/diagnostic?site=http://www.antilag.com/forums/&client=googlechrome&hl=en-US


If Brockas or who ever registered the site with Google logs into Google Webmaster Tools, you can request a review of the site.

Mistikal
16-09-2010, 02:11 PM
I've got to keep mine on, have to be able to tell when it happens to one of our clients sites...

Annoying!

I know the feeling, what sucks even more is that you can't run FF Portable when you've already got a normal session of Firefox running :( We use FF at work (odd for a gov't department) and FF Portable is useless.

MMM
16-09-2010, 02:39 PM
Its coming up on mine now to

MISS 13B
16-09-2010, 03:02 PM
Woohoo good old IE letting all the malware through.
I feel dirty using IE at the moment but it sure beats using my slow ass iPhone.

yeahlow34
16-09-2010, 03:17 PM
IE haterz gon hate.

Good as gold brah.

duste
16-09-2010, 04:11 PM
Running On Empty taking revenge on the forums for us supposedly 'taking over' their cruise?

Brockas
16-09-2010, 04:22 PM
Other forums suspected that it's G2S (go2space) as a culprit.

Yup - correct.

Have e-mailed them and have their tech team resolving the issue.

XsQuiZiT
16-09-2010, 05:35 PM
Just received this from OzHonda:

If you've been trying to access Ozhonda today and have been receiving an error along the lines of:

"Reported Attack Page! - This web page at www.ozhonda.com has been reported as an attack page and has been blocked based on your security preferences."

This was due to a vulnerability in the software used to deliver the banner ads on the site (we simply insert a third party's code). We have since removed all code until that issue is cleared up.

We've also contacted Google in order to get the blacklisting of the site removed. I have done some quick checks on the webserver and don't see any other major problems at this stage. If I do come across anything I will let you know.

If you are concerned about the security of your system, you can update your anti-virus software and run a full system scan (as a precautionary measure). A good free antivirus program is Avast (just do a web search for it).

To get TEMPORARY access to the site, you can do the following:

For Google Chrome:
1. Click the little spanner icon on the right hand side of the menu bar
2. Click Options on the menu
3. Click the "Under the Hood" tab
4. Untick "Enable phishing and malware protection" as a TEMPORARY fix

For Firefox:
Go to Tools -> Options -> Security -> untick "Block reported attack sites" (Firefox version 3.6.10)


Please note that the above is a TEMPORARY fix only, and strongly urge you to reverse the above changes to your browser in a couple of days.

Apologies for the inconvenience but we thought it best that you be informed. We will not be putting any new third party code up until it is safe.

There is a thread in the Site Discussion forum if you wish to post any comments. Please do not reply to this email as it is not checked by anyone.

Regards

-Win (wynode)

Niva
16-09-2010, 06:24 PM
same shit, couldnt fix it myself. PM'd BOUZ... CHEERS DUDE!

shifted
16-09-2010, 07:49 PM
Same thing on supraforums and this joint so had to switch to IE otherwise I was basically being molested by the internet. Every page was a stupid block thing. Hopefully sorts soon! :D

Joe
16-09-2010, 08:08 PM
I got a nasty IE redirect Trojan today on my work pc.. I'm putting it down to this.

Steppo_GT
16-09-2010, 09:32 PM
Oh well just started for me as well. Back to good old IE... But can we catch anything by surfing Antilag or do you have to actually click on an ad?

Mistikal
16-09-2010, 11:51 PM
Must admit that I've been getting popups the last few days. Might be time for me to actually get off my ass and get some anti-spyware software!

Brockas
17-09-2010, 12:57 AM
Oh well just started for me as well. Back to good old IE... But can we catch anything by surfing Antilag or do you have to actually click on an ad?

You can't "catch" anything full-stop.


Banner ads have been removed.

Mistikal
17-09-2010, 01:18 AM
Banner ads have been removed.

Sweet, will re-add AL to my ad-block white-list again :)

Any news on what will happen as far as ad's go? New provider/etc?

Mad_Aussie
17-09-2010, 08:05 AM
I'm still getting the issue on my work computer... Firefox 3.6

INSINR8R
17-09-2010, 08:33 AM
I'm still getting it with Chrome.

V70R
17-09-2010, 08:33 AM
All forums (most) have had this warning appear over the past 2 days.

Instructions letter from other site to get around it:


"Reported Attack Page! - For examplewww.antilag.com/forums has been reported as an attack page and has been blocked based on your security preferences."

To get TEMPORARY access to the site, you can do the following:

For Google Chrome:
1. Click the little spanner icon on the right hand side of the menu bar
2. Click Options on the menu
3. Click the "Under the Hood" tab
4. Untick "Enable phishing and malware protection" as a TEMPORARY fix

For Firefox:
Go to Tools -> Options -> Security -> untick "Block reported attack sites" (Firefox version 3.6.10)

It may also help to contact google and have the black flag removed.

This was due to a vulnerability in the software used to deliver the banner ads on the site (we simply insert a third party's code).

Mad_Aussie
17-09-2010, 08:44 AM
Actually, a few of our clients sites have been getting that Online Virus Scanner Trojan attached to them, someones been logging into the sites via ftp - somehow with the password first try - and changing the index pages to redirect on load. Bloody frustrating!

7yphon
17-09-2010, 10:13 AM
You can catch aids

Slip_
17-09-2010, 10:45 AM
All your base are belong to us

vrocious
17-09-2010, 11:56 PM
still getting it now on firefox

evil1
18-09-2010, 07:09 AM
slitting wrists.

MMM
20-09-2010, 04:03 PM
this shit getting sorted?

kurbn
20-09-2010, 07:05 PM
looked pretty normal to me

http://i752.photobucket.com/albums/xx164/bangnrb25/antilag.jpg

Phyber
20-09-2010, 09:06 PM
Hahaha :)

KyeBidz
20-09-2010, 09:09 PM
oooh 2 email addresses in the screenshot.

spam ahoy.

///M
21-09-2010, 07:30 AM
just untick block reported attack sites in the options :\ not that hard!

TonyStarks
21-09-2010, 04:26 PM
Can only check this forum at work. At home firefox goes bonkers

shifted
21-09-2010, 04:55 PM
Any idea on how long to be sorted? Have had to resort to IE to access here, FireFox becomes a special olympics competitor it goes that spastic.

lathiat
21-09-2010, 08:47 PM
Having this problem too.. but interestingly it's also happening with evolutionoz.. weird co-incidence.

ossie_21
21-09-2010, 10:41 PM
Keen to commit...

Brockas
23-09-2010, 01:26 PM
Are people still getting this error?

I have now made 2 requests with Google after being assured by our banner supplier that all malicious code has been removed from their servers.


Pretty pissed off it hasn't been cleared yet.

Brockas
23-09-2010, 01:28 PM
Just recieved this from Google:


We've received a request from a site owner to reconsider how we index the following site: http://www.antilag.com/
We'll review the site. If we find that it's no longer in violation of our Webmaster Guidelines, we'll reconsider our indexing of the site. Please allow several weeks for the reconsideration request. We do review all requests, but unfortunately we can't reply individually to each request.


What a joke.

Skitzo
23-09-2010, 02:15 PM
pingpingpingpings are too busy fucking around with all the cool shit that Google has at their head office.

KyeBidz
23-09-2010, 02:20 PM
They have a slide between their floors, in the colours of google.

its awesome :D

mitchy
23-09-2010, 02:21 PM
They have a slide between their floors, in the colours of google.

its awesome :D

how childish of you...

Mad_Aussie
23-09-2010, 02:21 PM
They have a slide between their floors, in the colours of google.

its awesome :D

They also have a dinosaur!

Joe
23-09-2010, 02:22 PM
Fk Google~ they think they are big ,is it!! fucker!

KyeBidz
23-09-2010, 02:25 PM
how childish of you...

fuck off, i love slides.



They also have a dinosaur!

and a 6" high android phone, full working touch screen which was pretty cool to dick around with. :D

mitchy
23-09-2010, 02:27 PM
fuck off, i love slides.

go buy some more op shop clothes, faggot.

Phyber
23-09-2010, 09:55 PM
and a 6" high android phone

*6'


Yeah I'd be pissed too if it was my site. As it stands I can disable the warning but it's pretty slack of Google, losing your business revenue like this! Sue them and then you can build your own motorplex :D

R3N
23-09-2010, 10:03 PM
go buy some more op shop clothes, faggot.

Falling out over supply of voon?

AGIT8D
28-09-2010, 05:13 PM
I keep getting this warning now too - how to fix!?!?

Mistikal
28-09-2010, 05:20 PM
Read the full thread ya dunce :p

mattmy99
13-10-2010, 07:46 AM
Appears to be all good now.
Problem solvered?

mitchy
13-10-2010, 08:12 AM
Falling out over supply of voon?

nah, kye's just a faggot.

Brockas
13-10-2010, 01:26 PM
Appears to be all good now.
Problem solvered?

Means google got off their asses finally and removed the warning.

Mad_Aussie
13-10-2010, 01:41 PM
Means google got off their asses finally and removed the warning.

Nope, just turned off the 'block attack sites' thing, and it went straight back to faggoting out on me.

DAN682
13-10-2010, 03:50 PM
I have changed no settings and I am back in (Firefox) Will try safari later.

Lmx
13-10-2010, 09:53 PM
Just go on using Google Chrome, didnt work this morning, fine now.

lysdexia
13-10-2010, 10:30 PM
firefox is still blocking me when i re-enable the filter shit

Alt_F4
13-10-2010, 10:45 PM
firefox is still blocking me when i re-enable the filter shit
But it isn't for me? Strange.

Tocchi
13-10-2010, 10:59 PM
i was with firefox, turned filter back on today, AL works fine

RELEASE
16-10-2010, 12:31 PM
seems like its fixed....no errors with chrome on Antilag :)