Malware

[bmadd]

When attempting to view some threads on this site, my browser keeps warning me that the page has data from cswu.cz that may contain malware. Anybody else experiencing anything like this?

[edit]Deactivated link, as it is a maleware site[/edit]

[I.rar]

nope. DL , update and run malwarebytes.

[roadwarrior]

We will look into it, I had the warning pop up, too.

-Kent

[SirSnookalot]

Just this very moment I got a malware threat viewing the thread " when bass are out season" under General Bass Fishing Forum.  This happened while using Google Chrome, then tried it on Firefox and it was clean.

[bmadd]

I run Google Chrome as well and it prevented me from going. I use Malware Bytes and it is up to date and says my comp is clean.

[burleytog]

Malwarebytes regularly blocks IP 208.43.86.171 when browsing this site.

[Glenn]

Burley,

You may have a remanent virus on your computer:

http://forums.malwarebytes.org/index.php?s=175c3a789180a38407aa58e3be8bcf5c&showtopic=61081&pid=304601&st=0entry304601

[burleytog]

Burley,

You may have a remanent virus on your computer:

http://forums.malwarebytes.org/index.php?s=175c3a789180a38407aa58e3be8bcf5c&showtopic=61081&pid=304601&st=0entry304601

Doubtful, freshly wiped.

[NateFollmer]

I'm using Chrome and I haven't seen this error at all today. I have MS Security Essentials and Spybot running at the moment. I have MalwareBytes but only run it when I think I'm in trouble. I just went into that thread without an issue too...

[Glenn]

Burely - there's no reason that IP should be causing any alerts.  It's a clean IP:

http://rbls.org/208.43.86.171

Furthermore, every search I did to find virus info on that IP points to false positives in Malwarbytes.

[bmadd]

I keep getting redirected to the warning page on threads from various subforums on the page. I'm rerunning malwarebytes as well as my antivirus software.

[SoFlaBassAddict]

I'm getting it once in a while as well.

[burleytog]

Just got the same thing...

[bmadd]

My scans all came back clean but the page Burley posted is what I keep getting.

[SoFlaBassAddict]

Got it going to this thread.

http://www.bassresource.com/bass_fishing_forums/YaBB.pl?num=1280939567

[Glenn]

Guys,

It could be an infected ad running through the Google network.  Given the randomness, it appears likely. Google has over 150 different networks, and I can shut individual networks off.  But I need a ton of details to figure out which one it is - if this is indeed happening.

If you get it again, please take a screen shot and post it - capture the entire page if possible.  Also tell me EXACTLY what ads are appearing on the page (and their position). Describe the ads as thoroughly as possible, noting their URL if possible.

If you don't have this information, then don't post on this thread.  Saying, "It just happened" tells me nothing at all.

That said, I'm sure Google is on it as well, and they might shut it down before we can figure it out - if they haven't done it already.  But we gotta try.

[FishingBuds]

Question: Is there a way to shut down the google ads when I visit?

Just not trusting these google adds anymore, maybe money wise thier worth it but if they have a history of infecting why continue the risk?

what am I missing?

[Glenn]

3 things:

1.  There's no "history".  A previous issue about 6 months ago was with an entirely different network, which I promptly dropped forever.

2.  I don't know yet for sure that it's a Google ad.  It appears to be leaning in that direction, but I'm not certain.

3.  The "infection" is a well known "old" malware attempt that anti-virus software easily detects and blocks (obviously, or you wouldn't recieve the warnings). 

So it's a minor annoyance at best, until it can be resolved.  I haven't heard of any more issues, so it may already be fixed.

[bmadd]

Just got the notification again in the banning lead thread. Same exact one that Burley posted and I've been getting.

[bmadd]

..

[Glenn]

Ok, that screenshot doesn't help me at all.  I need to see the original page.  I need to see what's on it - specifically the ads.  Make sense?

Again though, this is easily detectable, so there's no threat to your computer.  It's just annoying as all get out. 

[Tin]

Ok I know nothing about computers and don't know how to do the screen freeze pic thingy. How do you do it?

Just got it while trying to post in the Spinnerbait blade combo in the Tackle Section but I have ****er running.

[Glenn]

It only blocks the images, not the code.

So again, one more time, If you get it again, please take a screen shot and post it - capture the entire page if possible.  Also tell me EXACTLY what ads are appearing on the page (and their position). Describe the ads as thoroughly as possible, noting their URL if possible.

If you don't have this information, then don't post on this thread.  Saying, "It just happened" tells me nothing at all.

[NateFollmer]

Ok I know nothing about computers and don't know how to do the screen freeze pic thingy. How do you do it?

Just got it while trying to post in the Spinnerbait blade combo in the Tackle Section but I have ****er running.

Hit the "Prt Scr" or "Print Screen" button and then just go into Microsoft paint (Start>>Programs>>Accessories>>Paint) and click Edit>>Paste. Then save that file and voila! The Print screen button is usually on the top right after all the 'F' keys...

[J Francho]

Alt-PrtScr will capture the top most window in the clipboard.  Then paste in Paint or some other image editor.