Warning : Possible Virus/Malware?

[maximumass]

This came up in an earlier thread: http://forums.dobbersports.com/showt...028-Slow-forum

It happened again to me just now and I took a screen shot before I closed out of everything.
All I did was click the "New Posts" link at the top left and this came up.



As you can see it is cleverly masked as if it is a Window Update dialog, sneaky. Dobber you need to take care of this before someone's computer is ruined by your site!
I'm not coming back until it's fixed, can you please send out an email to everyone when it is resolved?

good luck

[SeaDawg]

I got that same prompt the other day.

I didn't click the button to Upgrade, but my virus software did detect a virus/malware on my computer later that day. Not sure if it is a coincidence or not.

[Dakkster]

Malwarebytes caught a trojan installer for me the other day and I didn't reflect on where I got it from because I routinely have like 30 tabs open in my browser. Wouldn't be surprised if it came from here now that I've seen it reported from so many others.

[Slug]

Have seen this a few times now over the past couple days just visiting here. Today it popped up on my work computer and the site was immediately blocked by our security scanner.

[Savvy1982]

If you buy this crap you DESERVE a virus for clicking "Accept".

We are not 74 year old pensioners, we are the cream of the crop of fantasy hockey aficionados!

[Dakkster]

If you buy this crap you DESERVE a virus for clicking "Accept".

We are not 74 year old pensioners, we are the cream of the crop of fantasy hockey aficionados!

Lots of trojans bypass that kind of simple thing by installing themselves in the background in various ways. I never click accept or anything like that. I've been a hardcore computer users since 96 and I've never had a virus. Common sense works, but these days it only takes you so far. Antivirus is obsolete too these days. What you need is anti-malware like Malwarebytes. That catches the stuff that happens in the background of some sites.

[Call of Doughty]

My arse has been glued to Dobber for a few days now and I have not seen this once. Running Symantec protection on laptop if that is relevant here.

thanks Daks, updating Maleware as I type....

[JagrBomb]

oh god norton antivirus, does more harm than good.

^ malwarebytes is the way to go

[Dakkster]

Malwarebytes gets you a lifetime license as well, so no need to buy a new one on a yearly basis.

[MXHockey]

I feel so nervous...........

[doulos]

If there's anything you need done to try and sniff this out let me know. I hate these guys with a passion. So much time wasted on it.

[The Bottlenecker]

Given an earlier reference to The Blair Witch Project in another thread, and people's general fear of viruses and malware, I thought this clip would be appropriate:


www.youtube.com/watch?v=gC637PdFwg8

[Dobber]

I appreciate the screen shot, that helps. Now I know it's either from an ad or from your computer. I"m guessing since others seen it, that it's from an ad.

So don't worry about it. That ad we will either root out and find and remove (ideally), or it will stop showing on its own. Either way, it's harmless. These ads slip through from time to time. Garbage. When you're in an ad network you filter out the ads you don't want, every day, but occasionally an idiot slips their shitty ad through the cracks. It can be hard to find, so screen shots help.

But it's harmless. My site is clean, as I've said before. To verify this, my server is being scanned again as I write this, but I know it's from an ad. Since some see it, and most people don't (I don't), the ad could be regional. Now to find which one...
Where are you from? Your location would narrow it down as well

[doulos]

I live in Northern BC.

[Vanek! at the Disco]

"m guessing since others seen it, that it's from an ad.

So don't worry about it. That ad we will either root out and find and remove (ideally), or it will stop showing on its own. Either way, it's harmless.

That's not how it works, not unless he is mistaken about this part:

All I did was click the "New Posts" link at the top left and this came up.

If he's clicking on one of your main site links such as New Posts and getting directed to malware, that's no ad, that means your site has been compromised. That's not how ads get served unless you did something really messed up and tied that click-event explicitly to some ad network (which you should never do for a link that is a common site function).

Do you have people you trust working on your site Dobber? Doesn't it seem a little bit of a coincidence that you have several major outages and errors in the last week and now all of a sudden people are getting infected and redirected to questionable content?