Menu
What's New
By:
Filters

Currently getting Hack Attacked

711 said:
Can you please upload a screenshot of what you are seeing?

Also, any information about what OS/browser/browser version/anti-virus software you are running would be helpful.
Click to expand...

It took me several attempts to make my last post. It won't let me upload images. When I click submit the warning comes up and then returns me to a blank submit page. I am using Win 7 64bit and latest Firefox with Sophos and I don't appear to be infected. I have cleared this virus form other peoples computers so I will know if I get it ;) I have uploaded the warning here: http://www.vpr8.com/warning.jpg
 
Safe Browsing
Diagnostic page for entropiaforum.com

What is the current listing status for entropiaforum.com?

Site is listed as suspicious - visiting this website may harm your computer.

What happened when Google visited this site?

Of the 19 pages that we tested on the site over the past 90 days, 5 page(s) resulted in malicious software being downloaded and installed without user consent. The last time that Google visited this site was on 2010-03-20, and the last time that suspicious content was found on this site was on 2010-03-20.

Malicious software includes 6 trojan(s). Successful infection resulted in an average of 2 new process(es) on the target machine.

Malicious software is hosted on 1 domain(s), including waycity.net/.

2 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site, including hyperconnect.com/, ads.is/.

This site was hosted on 1 network(s) including AS36351 (SOFTLAYER).

Has this site acted as an intermediary resulting in further distribution of malware?

Over the past 90 days, entropiaforum.com did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?

No, this site has not hosted malicious software over the past 90 days.

How did this happen?

In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.

Next steps:

* Return to the previous page.
* If you are the owner of this website, you can request a review of your site using Google Webmaster Tools. More information about the review process is available in Google's Webmaster Help Centre.
 
aridash said:
using firefox 3.5, started getting errors after clear all day.
Click to expand...

lilac said:
I have been using firefox all day and just started getting the warnings...
Click to expand...

It could be that because of the earlier problems, entropiaforum.com is now starting to appear in several centralized lists of potentially dangerous sites. The sites that maintain such lists are not updated in real time, which is why I ran a real-time check on Google Safe Browse and McAfee Site Advisor. Both of those tools report that entropiaforum.com is currently free of any security issues.

Thus, it appears that the actual security threats have been resolved. Unless I receive reports of actual anti-virus/malware triggers (not warnings from outdated "dangerous website" lists), there is not much cause for concern any longer.


lilac said:
since you're reading, I did send you a few PM's as well...
Click to expand...

I have no PMs from you today, and to be honest am I focusing all my efforts on making sure these very important security issues are fully resolved.
 
Dr.D.C. said:
Safe Browsing
Diagnostic page for entropiaforum.com

What is the current listing status for entropiaforum.com?

Site is listed as suspicious - visiting this website may harm your computer.
Click to expand...

I am seeing the same now as well. A few minutes ago Google listed entropiaforum.com as safe.

I do notice at the bottom of the Google page:

Updated 14 hours ago​

so perhaps Google's report is not real-time as I suspected.

However, McAfee's SiteAdvisor seems to analyze the website in real-time.

Also, no users are reporting any anti-virus alerts as was happening earlier today.

I am pretty confident that the banner delivery software update has resolved the security issues. I think what we are seeing now are the ripple effects of the earlier security issues.
 
711 said:
I have no PMs from you today, and to be honest am I focusing all my efforts on making sure these very important security issues are fully resolved.
Click to expand...

referring to stuff from about a month ago...

atami's post made me think of it... no worries, and best of luck dealing with this headache...

do you think it's safe that we all are accessing EF at the current time? or should those of us who have recieved warnings go away for the time being?
 
At home now and site seems secure again, besides the annoying Google warnings.
:mad:I hope the one responsible for this mess has a further sexless life and dies by choking his crackpipe.
Way too pinpointed attack to be "concidence".
 
Yeah this was annoying.... :rolleyes:

Every time I clicked anything, Firefox would give me the stupid attack site warning... again... and I'd have to say "thanks Firefox, but I already know since you told me 100 times by now. So STFU!" then I disabled the warnings because I just don't care and got sick of seeing it over and over. :laugh:
 
I get the same constant warnings with Firefox. Just busted out the Opera and no issues.
 
i also got a warning from firefox . hope it don't make a mess bother if i add a picture
 
Getting the same error as well "badware reported attack site" thing, on every access to this forum and everything I click. Really annoying :(

It was fine this morning and this afternoon, the warnings started tonight.

Using Firefox 3.6 and Windows 7.

I am posting this on IE and it's fine.
 
Attack Page

Hi 711, Firefox 3.6 browser Reported Attack Page! This web page at www.entropiaforum.com has been reported as an attack page and has been blocked based on your security preferences. Attack pages try to install programs that steal private information, use your computer to attack others, or damage your system. Some attack pages intentionally distribute harmful software, but many are compromised without the knowledge or permission of their owners. ---------------------------------------------------------------------- This is the message i am getting in singapore. Regards, Mylcat
 
Yep, Firefox blocked mine too until I changed the settings
 
Annoyance...

This little problem has caused me major grief all freaking day!!!! Got spyware progams to fix the problem.. then internet explorer stopped work, and so did the EU client... so now am having to reinstall EU. URGH!
 
711 said:
Softlayer is a very large webhost, hosting tens of thousands of servers, and millions of websites. I'm sure that if you check pretty much any other large web host provider, you will find similar reports.

It is unlikely (and unwise) that your browser would completely block such a large network (A class). Usually when problems are found with particular websites or IP ranges, C Class network sections may be temporarily blocked.
Click to expand...


i was just trying (3 times) to relay the information from my browser to help you try and resolve. i have to disable security settings to post, next time i wont bother.
 
aridash said:
i was just trying (3 times) to relay the information from my browser to help you try and resolve. i have to disable security settings to post, next time i wont bother.
Click to expand...

I'm sorry but I have to also prevent misinformation from spreading. It is not true that the entire A Class was being blocked. That would affect literally hundreds of thousands of websites, if not more.

You said:

aridash said:
site is blocked by association to network AS36351 SOFTLAYER which is distributing malware.
Click to expand...

which is not true. The site wasn't being blocked because "association to network AS36351 SOFTLAYER". If it were, you would lose connection to a fairly large portion of the internet network, and all of the many thousands of websites hosted on Softlayer servers.

The entropiaforum.com site was being blocked for you due to your personal browser security settings, which apparently you have set very high.
 
Funny, I was JUST going to post a new thread about this and then I saw this thread.

I'm using Google Chrome and this is what I get...
 
Update

I have submitted entropiaforum.com for a new security review from Google (via the Google Webmasters page), to confirm that all potential malware and security issues have been resolved.

Hopefully when that review is completed, the security warnings many of you are experiencing will disappear. I am not sure what the ETA is on these review requests, but hopefully they don't take more than 24 hours.

Thanks for your patience.
 
hmmm im reformatting my desktop now...after visiting entorpiaforum earlier IE stopped working and some ridiculous program kept wanting me to activate it..i
 
Ive not had a warning from using EF at all.

Although, and probably totally unrelated, I did send porn links out to my contacts from my email account yesterday without knowing it.

Is that a bad thing? :scratch2:

Discuss.
 
Alex Mart said:
read this:

http://safebrowsing.clients.google....calypsoforum.com/ajax.php&client=googlechrome
Click to expand...

Thanks for the link. I am actively montioring the Google Safe Browse report page, waiting for the next update.

Please take note of this section on the page you linked:

How did this happen?

In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.​

This is indeed what happened here on EF: a security vulnerability in the open source OpenX banner ad management software (which powers the EF Adspace system) allowed a malicious third-party to append URLs to a portion of the banners served to visitors.

As mentioned earlier in the thread, OpenX has now been updated to the latest version, which eliminated that security hole and seems to have prevented any further tampering by third parties.

Based on the reports of all the tests and diagnostics I have been able to run, I am quite confident that EntropiaForum is once again free of any malware or potentially dangerous content.

Some users are still experiencing security warnings, however. Most likely, these are appearing as a result of the problems encountered earlier today and which resulted in the domain entropiaforum.com getting listing on several "potentially dangerous sites" lists.

I am working to address that situation now: a request has been submitted to Google to rescan the EntropiaForum website and confirm that all security issues and threats have been resolved. Once that rescan process is completed by Google and EntropiaForum's status returns to:

What is the current listing status for entropiaforum.com?

This site is not currently listed as suspicious.​

most of the web browser security warnings should disappear.

Sorry again for any inconvenience, and thanks for your patience.
 
Just a thanks to 711 for taking care of this as quickly as possible.
 
  • Like
Reactions: 711
im having to use...................ie................ to get here and browse without being warned over and over

i could use a foot massage if anyone is interested
 
I get the same "site is reported as etc" on every page load using firefox ...
 
Same here atm. No attacks yesterday, but atm i got the message :(

=======
Malicious software includes 6 trojan(s). Successful infection resulted in an average of 2 new process(es) on the target machine.

Die Malware wird in 1 Domain(s) gehostet, darunter waycity-dot-net/.

Bei der Verteilung von Malware an Besucher dieser Website fungieren anscheinend 2 Domain(s) als Überträger, darunter hyperconnect-dot-com/, ads-dot-is/.

This site was hosted on 1 network(s) including AS36351 (SOFTLAYER).
=========
 
heineken said:
im having to use...................ie................ to get here and browse without being warned over and over
Click to expand...

ALEXANDER said:
I get the same "site is reported as etc" on every page load using firefox ...
Click to expand...

Danton said:
Same here atm. No attacks yesterday, but atm i got the message :(
Click to expand...

Those browser warnings are still happening because Firefox references Stopbadware.com's list of suspicious sites, which is not maintained in real-time.

The entropiaforum.com domain was listed in Stopbadware's database of problematic websites due to the issues that happened yesterday, and which were resolved quite a few hours ago.

EntropiaForum is scheduled for an updated review by Stopbadware, as can be seen here:
http://www.stopbadware.org/reports/7d25fbe2410ccaf8cc9f432274dfd69a

Stopbadware review of entropiaforum.com/ in progress as of Mar 21st 2010​


Also, I have submitted a similar review request to Google's Safe Browsing diagnostic tool (which is also one of Stopbadware's data suppliers).

Once those two reviews come back clean, I expect that the warnings appearing in Firefox will cease.

If you want a bit of reassurance that the EntropiaForum website is now once again completely safe, please feel free to test any EF page using McAfee's real-time SiteAdvisor tool, which scans the requested URL for malware or other harmful content each time the form is submitted:

http://siteadvisor.com/sites/entropiaforum.com
 
You must log in or register to reply here.
Back
Top