Virus Alert

[kokopelli]

My anti-virus program keeps sending me messages that a Threat Was Blocked each time I click on a topic on this forum. Some sort of virus or spyware was detected. Anyone else receiving this message?

I use AVG Anti-Virus.

[Rogie]

Yes, me too. I'm using AVG (free version).

 

Her is part of the AVG Threat Labs web page

 

What is Blackhole Exploit Kit?

 

This threat is caused by code that can be hacked into a webpage. When you browse to a webpage with this threat it will exploit vulnerabilities in your internet browser/plugins and force adware, phishing programs or any other type of fraudulent software to be installed on your device.

 

http://www.avgthreatlabs.com/webthreats/info/blackhole-exploit-kit/

[kokopelli]

Am using AVG Paid Version; same message as you Rogie.

[Guest thaiworthy]

What's up administrators? I get this message on my Mac:

 

 

Somebody zigged when they should have zagged? Gaybutton's been saying all along, if it ain't broken, don't fix it!

[Guest fountainhall]

I'm on Macs and I now get the same message, but only when I open the icon box. Can someone please check that the icons are not worms or worse!

[Guest Astrrro]

FWIW, I am getting this message when visiting another forum powered by the same software so I don't think this problem is specific to Gay Thailand.

[Moses]

Yes, Kaspersky issue alert too.

 

Please check next files:

www.gaythailand.com/forums/public/js/ipb.js?ipbv=fa676048979b804e24662b5a12a94e4a&load=quickpm,hovercard,board Trojan.Script.Iframer

 

www.gaythailand.com/forums/cache/lang_cache/1/ipb.lang.js Trojan.Script.Iframer

[Guest]

No problems flagged up with Avast FREE anti virus. My PC is working just fine too.

 

I stopped using Norton subscription anti virus software 8 years ago, after the software failed to prevent a virus. Have not had any viruses since, whilst using AVG or Avast (free).

[Guest]

There was a security patch that the owners of the forum board, Invision, just updated. We have updated this and are working to clear all the files. It is no threat to your computers. They were trying to gain access to servers. We are working very hard to fix this. Thank you for your patience.

[TMax]

Yep getting a warning of malware here too on trend micro.

[KhorTose]

<p>Yes, Norton is warning me also. Anybody besides me think it is a coincidence that Beachlover has appeared on SGT, and here under his other name, at the same time this board has received a virus attack. This is not the first time one has appeared with the other.

[Guest fountainhall]

Anybody besides me think it is a coincidence that Beachlover has appeared on SGT, and here under his other name, at the same time this board has received a virus attack

 

Three attacks in one! Can't be coincidence. Now wait for the mayhem!

[Bob]

It's the Mayan end of the world!

 

My Norton doesn't like something either....keeps saying that it's stopping attacks emanating from this website.

[Guest]

I spoke too soon. This evening Firefox warned me about the site. I had to select the ignore warning option.

[Guest thaiworthy]

This site is getting worse and worse. Every button I press brings up the warning shown above.

 

THIS SITE IS COMPLETELY UNUSABLE!!!

[Guest fountainhall]

THAIWORTHY IS 100% CORRECT. EVERY SINGLE SCREEN HAS THE VIRUS WARNING. EVEN LOGGING IS GIVES THIS MESSAGE -

 

"We encountered a problem processing your login request. Please try again"

 

PLEASE SEND AN EMAIL TO ALL MEMBERS WHEN THIS VIRUS PROBLEM HAS BEEN FIXED. NO-ONE IS LIKELY TO POST AGAIN UNTIL THEN.

[Guest fountainhall]

please delete

[Guest snapshot]

Geez folks... stop yelling, quit being a nelly and just click on the "proceed at your own risk" or "ignore warning" button until the site owners can get the problem fixed.

 

Yes, it's a pain but it's not like that extra second of browse time is going to stop all you super-productive folks curing cancer or building the next Instagram.

[Guest]

Once I am past the Firefox warning (based on google data), the forum works just fine.

 

However, I suspect any new or tentative members will not take the risk, so this is not good for the site.

[TotallyOz]

I am able to log in just fine. But, there is a problem with this. I know this has happened to hundreds (maybe thousands) of sites. I suggest that if this worries you, to try back again in 24 hours. What happens is that once a site has this attack, the antivirus companies then list it as possible issues. It is a process to get this removed. I know this and have done this in the past. I know everyone is working hard to fix this issue.

[TotallyOz]

FYI: once a site is listed, even though the files are removed, Google takes a while to remove the listing. Sometimes it takes 24-48 hours. There is just not more that a site admin can do. Also, it is a holiday weekend and while I know many of us "work" the web tech world is closed and this makes it very hard to do things as every company in the world just about closes for Jan 31 (Monday) and this is the weekend before.

 

http://support.google.com/webmasters/bin/answer.py?hl=en&answer=168328

[Rogie]

Thank you for the reassurances Michael, but I don't understand the role of Google in all this. Yes, I can see they wouldn't want to have people clicking on a site that comes up after doing a search as that would reflect very badly on their expertise.

 

As they seem to be top dog as far as giving the site the 'all clear', does that mean everything else . . . the anti-virus programs most of us have installed . . . are like nodding dogs and cannot remove their own warnings until such time?

 

In each of the 3 or so posts I've made since the problem I haven't had the use of the bar that allows me to use different size of type, colours, smileys etc. Maybe this has been de-activated as a precaution, however I see other users have used coloured type and larger sizes of type so that may just be peculiar to my operating system.

 

Any ideas what caused the infection NOW? This exploit kit virus has been around quite a while now as there are comments about it on the anti-virus forum going back nearly a year. What about all the extra emoticons installed recently?

[kokopelli]

At the coffee shop this morning I still got the virus alert but now, at home, all seems to be normal.

I should also mention that at the coffee shop WiFi this site is listed as a porno site.

[Guest fountainhall]

I am still getting the alerts on both Safari and Firefox. Re khun koko's point, I find gaythailand.com is often blocked on public computers - like in some airline lounges in Asia and Europe.

[kokopelli]

Now the Virus Alert is back on again and at my home, not the coffee shop.