Malicious URL warnings

polski · Jan 24, 2013

Every time I go to an AZ page today, Avast anti-virus (working in Chrome) is dinging with a Malicious URL Blocked warning. Here are the details.

[h=2]Infection Details[/h]

URL:	http://sportforme.c0m.li/yoO4TAbn2tpl5Dl...
Process:	C:\Program Files (x86)\Google\Chrome\App...
Infection:	URL:Mal

Nick · Jan 24, 2013

Thanks for the detail heard this earlier. Will do more research.... appreciate you sharing the specifics

gmcunni · Jan 24, 2013

:-o

we'z been hacked

Drusive · Jan 24, 2013

I'm running Kapersky anti virus, getting the same warnings

gmcunni · Jan 24, 2013

.li is the Internet country code top-level domain (ccTLD) for Liechtenstein.

Nick · Jan 24, 2013

Drusive said:
I'm running Kapersky anti virus, getting the same warnings

I'm trying to get more specifics. I can't find anything based on this search alone.

Nick · Jan 24, 2013

OK. I found the issue. It's with the ad serving system; not the forums. I've disabled for now until I get it fixed.

andyzee · Jan 24, 2013

Get the same with McAfee

Nick · Jan 24, 2013

You shouldn't be getting them any more.

I am going to research WTF is going on with the ad serving system. Somehow it was hacked and <iframe> were put into the ad code. :uzi:

Puck it · Jan 24, 2013

Greg!!!!

gmcunni · Jan 24, 2013

i'm pissed because my symantec with advanced protection turned on didn't seem to notice anything ....

Nick · Jan 24, 2013

I disabled the ads on the site for now until I figure this out. May need to move systems.

marcski · Jan 24, 2013

Nick said:
I disabled the ads on the site for now until I figure this out. May need to move systems.

Or just get rid of ads altogether.

andyzee · Jan 24, 2013

Puck it said:
Greg!!!!

Sounds like the most likely culprit to me, His man wife is probably assisting him on the inside to get the price of the forum down so he could buy it back at a discount. Very ingenious!

Nick · Jan 25, 2013

marcski said:
Or just get rid of ads altogether.

Wanna pay to use AZ ? :lol:

o3jeff · Jan 25, 2013

Glad I wasn't around yesterday for this!

BeanoNYC · Jan 25, 2013

gmcunni said:
:-o

we'z been hacked

I blame anonymous.

Nick · Jan 25, 2013

Hey guys,

Just wanted to give you an update on this. We use a software called OpenX to rotate ads on the site. That comes from Google but also from our direct advertisers that you see here.

Anyway, shame on me, the ad system was outdated by two patch versions, and was vulnerable to hacking. The system was hacked and the advertisements on the page had <iframe> codes prepended on each one. It shouldn't have affected anyone on the site, in any event, but was cause for concern.

Yesterday I shut down the ad system entirely, so you don't see any ads on the site right now. I am working with a OpenX contractor to perform an upgrade on the ad server to the most current version. That should be done later today.

Again, my apologies for the concern you guys have had based on the warnings and thanks for all your reports and PM's. If anything else changes or if you still see any warnings, please do let me know ASAP.

andyzee · Jan 25, 2013

Thanks for the update Nick.

thetrailboss · Jan 25, 2013

BeanoNYC said:
I blame anonymous.

Yeah I'm sure that they target ski forums. :lol:

Malicious URL warnings

New member

Administrator

Active member

New member

Active member

Administrator

Administrator

New member

Administrator

Well-known member

Active member

Administrator

Active member

New member

Administrator

New member

Active member

Administrator

New member

Moderator

Similar threads