MicrostockGroup

Microstock Photography Forum - General => General Stock Discussion => Topic started by: LSD72 on November 12, 2009, 17:10

Title: Yuri's Site gone to darkside?
Post by: LSD72 on November 12, 2009, 17:10: Just went onto the keywording tool at acurs.com and Firefox is blocking it as an "Attack Site".

Wonder why?
Title: Re: Yuri's Site gone to darkside?
Post by: leaf on November 12, 2009, 17:17: very strange. here is what you get when you click for more information

What is the current listing status for arcurs.com?

Site is listed as suspicious - visiting this web site may harm your computer.

Part of this site was listed for suspicious activity 1 time(s) over the past 90 days.

What happened when Google visited this site?

Of the 12 pages we tested on the site over the past 90 days, 3 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2009-11-12, and the last time suspicious content was found on this site was on 2009-11-12.

Malicious software includes 14 scripting exploit(s).

Malicious software is hosted on 1 domain(s), including jn06.nl/.

This site was hosted on 1 network(s) including AS9120 (COHAESIONET).

Has this site acted as an intermediary resulting in further distribution of malware?

Over the past 90 days, arcurs.com did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?

No, this site has not hosted malicious software over the past 90 days.

How did this happen?

In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.

Next steps:

* Return to the previous page.
* If you are the owner of this web site, you can request a review of your site using Google Webmaster Tools. More information about the review process is available in Google's Webmaster Help Center.
Title: Re: Yuri's Site gone to darkside?
Post by: leaf on November 12, 2009, 17:17: perhaps it got hacked?
Title: Re: Yuri's Site gone to darkside?
Post by: oboy on November 12, 2009, 17:26: This morning I open a series of website, and acurs.com was one of the. One of the sites installed in the temp directory theBloodhound.pdf.17 with the file plugin-wp-config.php It was live detected by Symantec Endpoint Protection. I did not play around with it to find out witch site it was.
Title: Re: Yuri's Site gone to darkside?
Post by: oboy on November 12, 2009, 17:29: It wouldn't surprise me if it comes through Google Adsense. The website http://www.findphotokeywords.com/ (http://www.findphotokeywords.com/) is now also red flagged by McAfee
Title: Re: Yuri's Site gone to darkside?
Post by: leaf on November 12, 2009, 17:36: Quote from: oboy on November 12, 2009, 17:29
It wouldn't surprise me if it comes through Google Adsense. The website [url]http://www.findphotokeywords.com/[/url] ([url]http://www.findphotokeywords.com/[/url]) is now also red flagged by McAfee

I don't think Yuri had adsense on his site.
Title: Re: Yuri's Site gone to darkside?
Post by: LSD72 on November 12, 2009, 17:47: It sucks that I cant get the keywording page to work because of the block. I use it alot too.

Yuri...hey Yuri.... somethings going on with your site. ???
Title: Re: Yuri's Site gone to darkside?
Post by: leaf on November 12, 2009, 18:01: Quote from: LSD72 on November 12, 2009, 17:47
It sucks that I cant get the keywording page to work because of the block. I use it alot too.

Yuri...hey Yuri.... somethings going on with your site. ???

I sent him an email... although I think he uses the site himself (or his keyworders do) so I am sure he should see it.
Title: Re: Yuri's Site gone to darkside?
Post by: Yuri_Arcurs on November 12, 2009, 18:43: We are working on this. We are adding SSL and security certificates too. We are also moving to a dedicated server. Should be up and running tomorrow or the day after that.
Title: Re: Yuri's Site gone to darkside?
Post by: Yuri_Arcurs on November 12, 2009, 18:48: A dodgy SEO guy that we have worked with "left" something behind on our server. We got full backup and is building the site from scratch on a new server today and tomorrow.
Title: Re: Yuri's Site gone to darkside?
Post by: LSD72 on November 12, 2009, 19:47: Cool. At least you were able to find the problem quickly instead of days of searching for the bug.
Title: Re: Yuri's Site gone to darkside?
Post by: dk on November 12, 2009, 19:58: I used the site a couple of days ago and didn't worry too much about the message - i thought it was my antivirus getting confused as it does sometimes with java, iframes etc. I closed the pop-up warning windows on each page and had no problems getting my work done.

Always wanted to say thanks to Yuri for offering this application, i use it all the time, so i guess it's my chance to do so.

Thank you Yuri!
Title: Re: Yuri's Site gone to darkside?
Post by: Clivia on November 13, 2009, 04:31: It is a great little application. I use it a lot. Thank Yuri!
Title: Re: Yuri's Site gone to darkside?
Post by: Yuri_Arcurs on November 13, 2009, 04:44: By the way. The site is not infected or dangerous. We are waiting for Google to update their diagnostics and it keeps showing a warning.
Title: Re: Yuri's Site gone to darkside?
Post by: vonkara on November 13, 2009, 14:38: I have noticed that Northon antivirus always notified me about a possible attack when I was on NikonRumors.com . I unbookmarked until the owner fix the issue. Today the problem seem fixed.

I wonder what those antivirus found, cause there have been no thread or post on their forum about this...
Title: Re: Yuri's Site gone to darkside?
Post by: Yuri_Arcurs on November 14, 2009, 03:11: OK. Site fixed. The keywording tool does not show results right now, but we will fix that too
Title: Re: Yuri's Site gone to darkside?
Post by: hlth on November 15, 2009, 20:41: Good luck with the server move. Sounds like you have it under control now.
Title: Re: Yuri's Site gone to darkside?
Post by: LSD72 on November 15, 2009, 20:54: Working for me. Thanks Yuri. ;D