Malware Still Showing Up?

Submitted by bluebyyou on

I continue to get malware messages in Chrome and my Norton AV software still is sending me blocking messages.  Is this just me or is this problem continuing.

I get the malware message everytime I open a topic on Mgoboard.

I apologize if this is a dupe, but this problem should be continually updated - Brian's post on the topic was yesterday.

F5

January 26th, 2011 at 9:54 AM ^

I did use it when there was an issue, repeatedly, and not one pop up or anything. Now, I am by no means a computer know it all but I wonder if the variable for those who get it and those that dont is a recently updated antivirus. I updated mse last week and I have not had an issue. Is everyones antivirus up to date?

Philbert

January 26th, 2011 at 12:10 PM ^

for those with firefox. if you click firefox on the tool bar, go down to preferences and open. Then go over to security and there will be a little check box that says pop ip screen for attack sites. Just disable it. Im not running into the norton problems because well my mac doesn't have norton. Hope this helps some of you

ottomatic

January 26th, 2011 at 1:52 PM ^

The malware was likely targeting certian OS and browser versions. So some saw an issue and some did not. As for disabling your security counter-measures; Bad idea. The malware was attempting to download a very real payload.

The payload was likely variable based, if you're on Windows 7 and IE 9 surfing under a normal user account you may not have seen anything. If you are on Windowns XP SP2 with IE 6, surfing as admin - you have probably been thouroughly pwned. Modern threat is not about trashing your machine - they want to get in, stay in, and steal your shit low and slow. Disabling the security nags only makes their life easier.

myrtlebeachmai…

January 26th, 2011 at 9:30 AM ^

IE and Norton360... Sends me "attempted attack was blocked" message everytime I click a link (diary, board entry, tabs at top, etc).

Though it's not the "osu" address anymore,  now it's:

URL: fsgsdgshsdh.co.cc/QQkFBg0AAQ0MBA0DEkcJBQYNAAICAQwCAQ==

URL destination: fsgsdgshsdh.co.cc (76.76.105.205, 80)

m1817

January 26th, 2011 at 9:26 AM ^

I have IE 8 and Symantec Endpoint Protection and I get the following, "[SID 23981] HTTP Malcious File Download Request 3 detected.

I checked my registry and System Tools has not installed itself.

Not a Member

January 26th, 2011 at 9:56 AM ^

I got it through my IE and downloaded the free Adaware program from here:  http://download.cnet.com/Ad-Aware-Free-Internet-Security/3000-8022_4-10045910.html

I also ran malwarebytes after that but it did not detect anything.  The Adaware did the trick and got me back up and running though it was still trying to get through this morning when I logged on here and my work's Sophos Security quarantined it.

hockeyguy9125

January 26th, 2011 at 9:42 AM ^

I still am seeing the malware messgae. However, once I log on IE (the original browser on my computer I never removed), the message does not show up.

For firefox, does anyone else out there think that deleting cookies/history would work? I am on a shared school computer and cannot try this on my laptop yet. If anyone else can/already tried this, could you let me know if it works?

MHNet

January 26th, 2011 at 10:09 AM ^

On my laptop I get a warning with Chrome going to the main MGoBlog page.  When using Internet Explorer I can access the main page, however when trying the board AVG gives me a "Warning: Suspected Phishing Page."

On my desktop at work, using IE it's the same thing--can access main page, but warning on the board from AVG.  Using FireFox I get a "Reported Attack Page!" warning when trying to go to the main page.

Quail2theVict0r

January 26th, 2011 at 10:10 AM ^

For firefox to get it to run all you need to do is go to Tools - options - Security and then uncheck the box that says "block reported attack site".

Now obviously don't do this and then go browsing around the internet. But if you just want to look at Mgoblog unblock it and then when you're done check the box again.

Steve in PA

January 26th, 2011 at 11:30 AM ^

I don't have these problems with Linux.

For those looking from work, you'd be wise to use a proxy site and then you won't get content like youtube blocked.  megaproxy.com used to be free, but I haven't used it in a while.

Skunkeye

January 26th, 2011 at 11:35 AM ^

I've also been seeing a lot of formatting problems when everything comes up as a big outline in my Chrome.  Seems kind of intermittent but happening now and a little yesterday.

7NK7

January 26th, 2011 at 11:47 AM ^

working on my safari on my mac. i had to dl google chrome like some of u suggested and it appears to work now. if this comment goes thru, then thats working finally again for me.

mGrowOld

January 26th, 2011 at 11:52 AM ^

it's most definitely not resolved yet.  My IT department has had to clean my computer twice and is now asking why I keep going back to this site.

Hoping my boss doesnt starting asking THAT question too......

teldar

January 26th, 2011 at 12:16 PM ^

Just got a bunch of xxxxxxxxxxxxxx file not uploaded because destination is not configured correctly. I hope that is a message for the server instead of my phone. I don't believe there are many viruses for android.

IPFW_Wolverines

January 26th, 2011 at 1:56 PM ^

 actually got the virus yesterday. I did a system restore and it fixed my system but the message still comes up when trying to reach this site from chrome.