[FIXED] Norton gives attack warning

frankmanl · **Posted:** Sat Mar 31, 2012 3:19 am

Never seen this before, but my Norton 360 just gave a warning. The forum is considered an attack site.

Frank

thile · **Joined:** Mon Aug 25, 2008 3:57 pm **Posts:** 25

Firefox also game me a warning today:

What is the current listing status for forum.cmsmadesimple.org?

Site is listed as suspicious - visiting this web site may harm your computer.

Part of this site was listed for suspicious activity 1 time(s) over the past 90 days.

What happened when Google visited this site?

Of the 273 pages we tested on the site over the past 90 days, 3 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2012-03-30, and the last time suspicious content was found on this site was on 2012-03-30.

Malicious software includes 11 trojan(s), 2 scripting exploit(s), 1 exploit(s). Successful infection resulted in an average of 2 new process(es) on the target machine.

Malicious software is hosted on 6 domain(s), including xxxxxxxxxxxx.

2 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site, including xxxxxxxxxx.

This site was hosted on 1 network(s) including xxxxxxx.

Has this site acted as an intermediary resulting in further distribution of malware?

Over the past 90 days, forum.cmsmadesimple.org did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?

No, this site has not hosted malicious software over the past 90 days.

How did this happen?

In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.

Rolf · **Posted:** Sat Mar 31, 2012 4:59 pm

Problem was fixed this afternoon.
Google malware warning in Firefox is already gone now.
Thanks for the warning.

Rolf

nervino · **Posted:** Mon Apr 02, 2012 10:43 am

I still have the warning in Firefox.

Mieszko · **Joined:** Fri Mar 04, 2011 2:40 pm **Posts:** 59

Same here.
Firefox as well as Chrome complain about security issues.

paulbaker · **Posted:** Mon Apr 02, 2012 3:47 pm

I still have a Firefox/Google warning too.

Jo Morg · **Joined:** Mon Jan 29, 2007 4:47 pm **Posts:** 405

I did yesterday, and don't since the 1st time I accessed the site after the warning (yesterday too). Maybe a cookie set or unset on my browsers but...

Rolf · **Posted:** Mon Apr 02, 2012 4:40 pm

We fixed a hacked forumfile on Saturday (was changed the day before) and we expected this would end the Google malware warning. As you all noticed the warning was gone for a short periode, but came back...
We didn't find any lead at our server, so we tried to find it in the forumpages self.

There we found several threads of valid members posting infected code they found in their own files/websites. A few of these threads triggered our virusscanners. Some of the websitesnames mentioned by Google above were in that infected code.
Therefore we removed all this code, hoping it will end the malware warning from Google.
We were warning people before about posting this, but we need to do it more! Please don't post hacked/infected code in our forum, better make a screendump and attach the image.

Hopefully Google will check our forum soon and will remove the warning.
We apologize for the inconvenience

Rolf

Jo Morg · **Joined:** Mon Jan 29, 2007 4:47 pm **Posts:** 405

Rolf wrote:

There we found several threads of valid members posting infected code they found in their own files/websites. A few of these threads triggered our virusscanners. Some of the websitesnames mentioned by Google above were in that infected code.

Hah! Makes perfect sense... never thought of it that way....

calguy1000 · **Posted:** Mon Apr 02, 2012 4:50 pm

And people complain about our moderation policy.... if we didn't have 'that' we'd probably need a full time person just to patrol the forums and the filesystem looking for hacks and malware, and spam and ...

reneh · **Posted:** Mon Apr 02, 2012 5:01 pm

For latest Norton Safe Web status - see:
http://safeweb.norton.com/report/show?u ... simple.org

reneh · **Posted:** Mon Apr 02, 2012 5:03 pm

Another overview here:
http://sitecheck.sucuri.net/results/for ... simple.org

Gregor · **Posted:** Mon Apr 02, 2012 7:29 pm

Great job in fixing guys!

Gregor

Felix · **Posted:** Mon Apr 02, 2012 10:54 pm

Thank goodness that was fixed.

I was reluctant to log in while the warning was there...

Good work guys!

[FIXED] Norton gives attack warning

Who is online