Author Topic: Yuri's Site gone to darkside? (Read 5313 times)

LSD72 · « **on:** November 12, 2009, 17:10 »

Just went onto the keywording tool at acurs.com and Firefox is blocking it as an "Attack Site".

Wonder why?

leaf · « **Reply #1 on:** November 12, 2009, 17:17 »

very strange. here is what you get when you click for more information

What is the current listing status for arcurs.com?

Site is listed as suspicious - visiting this web site may harm your computer.

Part of this site was listed for suspicious activity 1 time(s) over the past 90 days.

What happened when Google visited this site?

Of the 12 pages we tested on the site over the past 90 days, 3 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2009-11-12, and the last time suspicious content was found on this site was on 2009-11-12.

Malicious software includes 14 scripting exploit(s).

Malicious software is hosted on 1 domain(s), including jn06.nl/.

This site was hosted on 1 network(s) including AS9120 (COHAESIONET).

Has this site acted as an intermediary resulting in further distribution of malware?

Over the past 90 days, arcurs.com did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?

No, this site has not hosted malicious software over the past 90 days.

How did this happen?

In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.

Next steps:

* Return to the previous page.
* If you are the owner of this web site, you can request a review of your site using Google Webmaster Tools. More information about the review process is available in Google's Webmaster Help Center.

leaf · « **Reply #2 on:** November 12, 2009, 17:17 »

perhaps it got hacked?

oboy · « **Reply #3 on:** November 12, 2009, 17:26 »

This morning I open a series of website, and acurs.com was one of the. One of the sites installed in the temp directory theBloodhound.pdf.17 with the file plugin-wp-config.php It was live detected by Symantec Endpoint Protection. I did not play around with it to find out witch site it was.

oboy · « **Reply #4 on:** November 12, 2009, 17:29 »

It wouldn't surprise me if it comes through Google Adsense. The website http://www.findphotokeywords.com/ is now also red flagged by McAfee

leaf · « **Reply #5 on:** November 12, 2009, 17:36 »

Quote from: oboy on November 12, 2009, 17:29

It wouldn't surprise me if it comes through Google Adsense. The website http://www.findphotokeywords.com/ is now also red flagged by McAfee

I don't think Yuri had adsense on his site.

LSD72 · « **Reply #6 on:** November 12, 2009, 17:47 »

It sucks that I cant get the keywording page to work because of the block. I use it alot too.

Yuri...hey Yuri.... somethings going on with your site.

leaf · « **Reply #7 on:** November 12, 2009, 18:01 »

Quote from: LSD72 on November 12, 2009, 17:47

It sucks that I cant get the keywording page to work because of the block. I use it alot too.

Yuri...hey Yuri.... somethings going on with your site.

I sent him an email... although I think he uses the site himself (or his keyworders do) so I am sure he should see it.

Yuri_Arcurs · « **Reply #8 on:** November 12, 2009, 18:43 »

We are working on this. We are adding SSL and security certificates too. We are also moving to a dedicated server. Should be up and running tomorrow or the day after that.

Yuri_Arcurs · « **Reply #9 on:** November 12, 2009, 18:48 »

A dodgy SEO guy that we have worked with "left" something behind on our server. We got full backup and is building the site from scratch on a new server today and tomorrow.

LSD72 · « **Reply #10 on:** November 12, 2009, 19:47 »

Cool. At least you were able to find the problem quickly instead of days of searching for the bug.

dk · « **Reply #11 on:** November 12, 2009, 19:58 »

I used the site a couple of days ago and didn't worry too much about the message - i thought it was my antivirus getting confused as it does sometimes with java, iframes etc. I closed the pop-up warning windows on each page and had no problems getting my work done.

Always wanted to say thanks to Yuri for offering this application, i use it all the time, so i guess it's my chance to do so.

Thank you Yuri!

Clivia · « **Reply #12 on:** November 13, 2009, 04:31 »

It is a great little application. I use it a lot. Thank Yuri!

Yuri_Arcurs · « **Reply #13 on:** November 13, 2009, 04:44 »

By the way. The site is not infected or dangerous. We are waiting for Google to update their diagnostics and it keeps showing a warning.

vonkara · « **Reply #14 on:** November 13, 2009, 14:38 »

I have noticed that Northon antivirus always notified me about a possible attack when I was on NikonRumors.com . I unbookmarked until the owner fix the issue. Today the problem seem fixed.

I wonder what those antivirus found, cause there have been no thread or post on their forum about this...

Yuri_Arcurs · « **Reply #15 on:** November 14, 2009, 03:11 »

OK. Site fixed. The keywording tool does not show results right now, but we will fix that too

hlth · « **Reply #16 on:** November 15, 2009, 20:41 »

Good luck with the server move. Sounds like you have it under control now.

LSD72 · « **Reply #17 on:** November 15, 2009, 20:54 »

Working for me. Thanks Yuri.

MicrostockGroup Sponsors

Author Topic: Yuri's Site gone to darkside? (Read 5313 times)

LSD72

leaf

leaf

oboy

oboy

leaf

LSD72

leaf

Yuri_Arcurs

Yuri_Arcurs

LSD72

dk

Clivia

Yuri_Arcurs

vonkara

Yuri_Arcurs

hlth

LSD72

Related Topics

Sponsors

Microstock Poll Results

Sponsors