pancakes

MicrostockGroup Sponsors


Author Topic: Yuri's Site gone to darkside?  (Read 4104 times)

0 Members and 1 Guest are viewing this topic.

LSD72

  • My Bologna has a first name...
« on: November 12, 2009, 17:10 »
0
Just went onto the keywording tool at acurs.com and Firefox is blocking it as an "Attack Site".

Wonder why?


« Reply #1 on: November 12, 2009, 17:17 »
0
very strange.  here is what you get when you click for more information

What is the current listing status for arcurs.com?

    Site is listed as suspicious - visiting this web site may harm your computer.

    Part of this site was listed for suspicious activity 1 time(s) over the past 90 days.

What happened when Google visited this site?

    Of the 12 pages we tested on the site over the past 90 days, 3 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2009-11-12, and the last time suspicious content was found on this site was on 2009-11-12.

    Malicious software includes 14 scripting exploit(s).

    Malicious software is hosted on 1 domain(s), including jn06.nl/.

    This site was hosted on 1 network(s) including AS9120 (COHAESIONET).

Has this site acted as an intermediary resulting in further distribution of malware?

    Over the past 90 days, arcurs.com did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?

    No, this site has not hosted malicious software over the past 90 days.

How did this happen?

    In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.

Next steps:

    * Return to the previous page.
    * If you are the owner of this web site, you can request a review of your site using Google Webmaster Tools. More information about the review process is available in Google's Webmaster Help Center.

« Reply #2 on: November 12, 2009, 17:17 »
0
perhaps it got hacked?

« Reply #3 on: November 12, 2009, 17:26 »
0
This morning I open a series of website, and acurs.com was one of the. One of the sites installed in the temp directory theBloodhound.pdf.17 with the file plugin-wp-config.php It was live detected by Symantec Endpoint Protection. I did not play around with it to find out witch site it was.

« Reply #4 on: November 12, 2009, 17:29 »
0
It wouldn't surprise me if it comes through Google Adsense. The website http://www.findphotokeywords.com/ is now also red flagged by McAfee

« Reply #5 on: November 12, 2009, 17:36 »
0
It wouldn't surprise me if it comes through Google Adsense. The website http://www.findphotokeywords.com/ is now also red flagged by McAfee


I don't think Yuri had adsense on his site.

LSD72

  • My Bologna has a first name...
« Reply #6 on: November 12, 2009, 17:47 »
0
It sucks that I cant get the keywording page to work because of the block. I use it alot too.

Yuri...hey Yuri.... somethings going on with your site.  ???

« Reply #7 on: November 12, 2009, 18:01 »
0
It sucks that I cant get the keywording page to work because of the block. I use it alot too.

Yuri...hey Yuri.... somethings going on with your site.  ???

I sent him an email... although I think he uses the site himself (or his keyworders do) so I am sure he should see it.

Yuri_Arcurs

  • One Crazy PhotoManic MadPerson
« Reply #8 on: November 12, 2009, 18:43 »
0
We are working on this. We are adding SSL and security certificates too. We are also moving to a dedicated server. Should be up and running tomorrow or the day after that.

Yuri_Arcurs

  • One Crazy PhotoManic MadPerson
« Reply #9 on: November 12, 2009, 18:48 »
0
A dodgy SEO guy that we have worked with "left" something behind on our server. We got full backup and is building the site from scratch on a new server today and tomorrow.

LSD72

  • My Bologna has a first name...
« Reply #10 on: November 12, 2009, 19:47 »
0
Cool. At least you were able to find the problem quickly instead of days of searching for the bug.

dk

« Reply #11 on: November 12, 2009, 19:58 »
0
I used the site a couple of days ago and didn't worry too much about the message - i thought it was my antivirus getting confused as it does sometimes with java, iframes etc. I closed the pop-up warning windows on each page and had no problems getting my work done.

Always wanted to say thanks to Yuri for offering this application, i use it all the time, so i guess it's my chance to do so.

Thank you Yuri!

« Reply #12 on: November 13, 2009, 04:31 »
0
It is a great little application. I use it a lot. Thank Yuri!

Yuri_Arcurs

  • One Crazy PhotoManic MadPerson
« Reply #13 on: November 13, 2009, 04:44 »
0
By the way. The site is not infected or dangerous. We are waiting for Google to update their diagnostics and it keeps showing a warning.

vonkara

« Reply #14 on: November 13, 2009, 14:38 »
0
I have noticed that Northon antivirus always notified me about a possible attack when I was on NikonRumors.com . I unbookmarked until the owner fix the issue. Today the problem seem fixed.

I wonder what those antivirus found, cause there have been no thread or post on their forum about this...

Yuri_Arcurs

  • One Crazy PhotoManic MadPerson
« Reply #15 on: November 14, 2009, 03:11 »
0
OK. Site fixed. The keywording tool does not show results right now, but we will fix that too

« Reply #16 on: November 15, 2009, 20:41 »
0
Good luck with the server move. Sounds like you have it under control now.
« Last Edit: November 15, 2009, 20:43 by hlth »


LSD72

  • My Bologna has a first name...
« Reply #17 on: November 15, 2009, 20:54 »
0
Working for me. Thanks Yuri.  ;D


 

Related Topics

  Subject / Started by Replies Last post
3 Replies
2675 Views
Last post September 07, 2007, 03:41
by diego_cervo
5 Replies
2187 Views
Last post December 04, 2009, 12:00
by kingjon
8 Replies
3392 Views
Last post January 29, 2011, 18:20
by seawhisper
18 Replies
4632 Views
Last post April 21, 2013, 17:02
by FastRacer
33 Replies
12137 Views
Last post March 02, 2016, 23:48
by pixel8

Sponsors

Microstock Poll Results