Page 1 of 1

malware on this forum? *150KB IMAGE*

Posted: Mon Nov 28, 2011 8:39 am
by inv3stment
while I was reading through some of the threads, this came up

http://i1098.photobucket.com/albums/g37 ... dforum.png

is it safe to continue browsing through this forum?

Re: malware on this forum?

Posted: Mon Nov 28, 2011 10:27 am
by JaneL
What thread were you browsing when you got the error?

Re: malware on this forum?

Posted: Mon Nov 28, 2011 2:48 pm
by RealBlackStuff
That's this one:
Board index » ThinkPad News, Comments & Etcetera » Pictures of your ThinkPad & desk setup
Post your desktop.
http://forum.thinkpads.com/viewtopic.php?f=21&t=7318

Re: malware on this forum?

Posted: Mon Nov 28, 2011 2:56 pm
by rkawakami
Any idea exactly which post triggered this warning? I quickly scanned the last three pages worth of the thread but didn't see anything amiss. My guess is that one of the photos or links in the thread points to a resource at "network-teaser.ru", as mentioned in the pop-up.

Re: malware on this forum?

Posted: Mon Nov 28, 2011 3:02 pm
by emtee3511
Googles has this to say about network-teaser.ru--

"What is the current listing status for network-teaser.ru?

Site is listed as suspicious - visiting this web site may harm your computer.

Part of this site was listed for suspicious activity 1 time(s) over the past 90 days.

What happened when Google visited this site?

Of the 723 pages we tested on the site over the past 90 days, 2 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2011-11-28, and the last time suspicious content was found on this site was on 2011-11-28.
Malicious software includes 4 trojan(s), 3 scripting exploit(s). Successful infection resulted in an average of 9 new process(es) on the target machine.

Malicious software is hosted on 3 domain(s), including protectwindows.ru/, advertisingnetwork.ru/, safenesscontent.ru/.

1 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site, including safenesscontent.ru/.

This site was hosted on 1 network(s) including AS12695 (DINET).

Has this site acted as an intermediary resulting in further distribution of malware?

Over the past 90 days, network-teaser.ru appeared to function as an intermediary for the infection of 14 site(s) including nightmare.org/, bilgehandemir.com/, tkc-japan.info/.

Has this site hosted malware?

Yes, this site has hosted malicious software over the past 90 days. It infected 590 domain(s), including rejectreality.net/, aristocraticshop.com/, revistajex-blog.com.ar/.

How did this happen?

In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.

Next steps:

Return to the previous page.
If you are the owner of this web site, you can request a review of your site using Google Webmaster Tools. More information about the review process is available in Google's Webmaster Help Center."

Re: malware on this forum?

Posted: Mon Nov 28, 2011 3:09 pm
by rkawakami
Loaded all 16 pages of the thread one at a time and searched the underlying HTML code. No references to network-teaser.ru was found. Don't know what else to do....

Re: malware on this forum? *150KB IMAGE*

Posted: Mon Nov 28, 2011 4:59 pm
by bill bolton
Since the post is from a 1st time poster on their 1st visit here, and no one else is reporting ths problem..... I suggest that applying an appropriate degree of scepticism may be in order!

Cheers,

Bill B.

Re: malware on this forum? *150KB IMAGE*

Posted: Mon Nov 28, 2011 5:52 pm
by rumbero
bill bolton wrote:Since the post is from a 1st time poster on their 1st visit here, and no one else is reporting ths problem..... I suggest that applying an appropriate degree of scepticism may be in order!
Well, i am seeing the same here in Google Chrome version 15.0.874.121 running under Linux, but it does not show in Firefox 8.

The screenshot posted by the 1st time poster lets me assume that it was taken from a running Google Chrome browser window, so possibly this is rather related to the Chrome web browser?

Re: malware on this forum? *150KB IMAGE*

Posted: Mon Nov 28, 2011 6:53 pm
by GomJabbar
The message is most probably coming from Google itself because of using the Google Chrome browser. Google has been known to flag web urls as malicious by mistake in the past. Probably what happened in this case.

Re: malware on this forum? *150KB IMAGE*

Posted: Mon Nov 28, 2011 9:09 pm
by inv3stment
yep i'm running chrome. Other sub forums are fine though, must be one of the photos I guess, scared me though.