Browser Malware Detections

[AG1212]

Randomly when browsing the forums I get Malware alerts? Any idea why Im getting these alerts? Im using google chrome.

[j33v3s]

I've had one of these once about a week ago.

Went back a page, then clicked on the link again and it didn't pop up again.

Running Chrome as well.

[Marlowe]

I use chrome and don't get any.

[AG1212]

Alright well its good to know others are getting it too, probably nothing.

 

Cheers.

[Marlowe]

If you can pinpoint where or what is causing the warnings, please post up here and we can look into it. It's probably an overzealous script you have but better safe than sorry.

[Misfit]

You can get malware alerts when users link to images hosted on flagged sites, etc - next time you receive one can you post a link to the page that caused it, your browser and version number (should be able to get this by going to Help and About, may vary with different browsers), and any AV you use?

[Hedganian]

Link

 

 

Malware warning text:

 

Warning: Something's Not Right Here!

www.arniesairsoft.co.uk contains content from returners.org, a site known to distribute malware. Your computer might catch a virus if you visit this site.

Google has found that malicious software may be installed onto your computer if you proceed. If you've visited this site in the past or you trust this site, it's possible that it has just recently been compromised by a hacker. You should not proceed. Why not try again tomorrow or go somewhere else?

We have already notified returners.org that we found malware on the site. For more about the problems found on returners.org, visit the Google Safe Browsing diagnostic page.

 

If you understand that visiting this site may harm your computer, proceed anyway.

 

Browser: Google Chrome 10.0.648.204

Edited April 18, 2011 by Hedganian

[ED-SKaR]

Link

 

 

Malware warning text:

 

 

 

Browser: Google Chrome 10.0.648.204

 

 

I just got exactly the same as this in all respects (same page of that thread, and i'm using GC too.)

[danielsilva]

It's Apex sig, his Mk23 image. It's because that domain is flagged on StopBadware and his image is hosted there.

 

Firefox also uses StopBadware for it's list, too bad it gives WAAAAY too many false positives and it's very easy to bad list a website just because you don't like them.

 

I stopped using that feature when it started blocking the website of an airsoft shop where i've been shopping for YEARS and i know for sure that it's legit. Most likely a competitor who doesn't like the shop and spammed the list with red flags.

 

The concept behind stopbadware is flawed from the get go.

Edited April 18, 2011 by danielsilva

[Hedganian]

That image in his sig is broken anyway.

 

Could we maybe have a Mod remove the image?

 

Let him know what's happened, of course.

[Misfit]

Thank you both.

 

That website may no longer be host to malware, unfortunately the databases of flagged sites are rather large and therefore a website can remove the issue and still be flagged for a fairly long time. Malware authors also use advertising services to infect a large number of websites, causing them to be flagged simply due to the single advert, not due to any malicious intent on the websites part.

[ruvon]

Hi, ruvon here, just was paging through the locked G-3 picture thread somewhere round page 13 to 14, using google chrome version 11.0.696.68, got above error, with the error being about reactor.net.

 

Backed out, came over here to report it! Thanks guys, I'll go back to lurking now....