CMS Made Simple Forums

Never seen this before, but my Norton 360 just gave a warning. The forum is considered an attack site.

Frank

Firefox also game me a warning today:

What is the current listing status for forum.cmsmadesimple.org?

Site is listed as suspicious - visiting this web site may harm your computer.

Part of this site was listed for suspicious activity 1 time(s) over the past 90 days.

What happened when Google visited this site?

Of the 273 pages we tested on the site over the past 90 days, 3 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2012-03-30, and the last time suspicious content was found on this site was on 2012-03-30.

Malicious software includes 11 trojan(s), 2 scripting exploit(s), 1 exploit(s). Successful infection resulted in an average of 2 new process(es) on the target machine.

Malicious software is hosted on 6 domain(s), including xxxxxxxxxxxx.

2 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site, including xxxxxxxxxx.

This site was hosted on 1 network(s) including xxxxxxx.

Has this site acted as an intermediary resulting in further distribution of malware?

Over the past 90 days, forum.cmsmadesimple.org did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?

No, this site has not hosted malicious software over the past 90 days.

How did this happen?

In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.

Problem was fixed this afternoon.
Google malware warning in Firefox is already gone now.
Thanks for the warning.

Rolf

I still have the warning in Firefox.

Same here.
Firefox as well as Chrome complain about security issues.

I still have a Firefox/Google warning too.

I did yesterday, and don't since the 1st time I accessed the site after the warning (yesterday too). Maybe a cookie set or unset on my browsers but...

We fixed a hacked forumfile on Saturday (was changed the day before) and we expected this would end the Google malware warning. As you all noticed the warning was gone for a short periode, but came back...
We didn't find any lead at our server, so we tried to find it in the forumpages self.

There we found several threads of valid members posting infected code they found in their own files/websites. A few of these threads triggered our virusscanners. Some of the websitesnames mentioned by Google above were in that infected code.
Therefore we removed all this code, hoping it will end the malware warning from Google.
We were warning people before about posting this, but we need to do it more! Please don't post hacked/infected code in our forum, better make a screendump and attach the image.

Hopefully Google will check our forum soon and will remove the warning.
We apologize for the inconvenience

Rolf

Rolf wrote:There we found several threads of valid members posting infected code they found in their own files/websites. A few of these threads triggered our virusscanners. Some of the websitesnames mentioned by Google above were in that infected code.

Hah! Makes perfect sense... never thought of it that way....

And people complain about our moderation policy.... if we didn't have 'that' we'd probably need a full time person just to patrol the forums and the filesystem looking for hacks and malware, and spam and ...

For latest Norton Safe Web status - see:
http://safeweb.norton.com/report/show?u ... simple.org

Another overview here:
http://sitecheck.sucuri.net/results/for ... simple.org

Great job in fixing guys!

Gregor

Thank goodness that was fixed.

I was reluctant to log in while the warning was there...

Good work guys!