Forum compromised?

Edwin · 23-02-2010, 12:27:45 PM

I'm getting a Kaspersky Internet Security warning on every page. Been like that for about 5 minutes now...

Either there's something wrong with the forum, or there's something wrong with my PC!

Anyone else having any problems?

newguy · 23-02-2010, 12:32:08 PM

What's the specific warning? I'm using Norton 360, and nothing out of the ordinary has happened so far.

springer · 23-02-2010, 12:32:47 PM

http://www.acorndomains.co.uk/genera...-too-keen.html

When I first visited around 20 minutes it wanted to install something (bar at top of firefox - but I didn't click it).

foz · 23-02-2010, 12:33:50 PM

No problems here. Using Chrome & McAfee.

Edwin · 23-02-2010, 12:36:32 PM

I'm seeing entries like the one below in my Kaspersky log, one for every page I browse on this forum...

Denied: HEUR:Trojan.Script.Iframer http://mmfav.servehttp.com//ml.php//ml Internet Explorer

foz · 23-02-2010, 12:38:49 PM

Change browsers and see what happens, maybe your IE has been compromised?

DB · 23-02-2010, 12:40:02 PM

I am also seeing this, but would never of noticed to tell you the truth!

Is it a virus?

DB · 23-02-2010, 12:41:18 PM

I am with firefox not ie foz

retired_member12 · 23-02-2010, 12:44:00 PM

Quote:

Originally Posted by Edwin

I'm seeing entries like the one below in my Kaspersky log, one for every page I browse on this forum...

Denied: HEUR:Trojan.Script.Iframer http://mmfav.servehttp.com//ml.php//ml Internet Explorer

Same as in my thread Edwin, although I'm using Firefox. I thought perhaps it might be the Kaspersky database, the update is dated as 6.54am (UK) time today, but I dont know when my PC downloaded the update, or indeed at what point it found the problem. Any hint your end?

Edwin · 23-02-2010, 12:45:29 PM

If ANYONE else has seen it (seems some people have) then clearly it's a forum problem not a local PC problem. At least, Kaspersky isn't giving me trouble on any of the other sites I've visited in the last few minutes (about 30)

Most likely the site's been hacked with some kind of code injection exploit. The version of vbulletin that's running is pretty old after all, if the version number at the foot of the page is correct.

23-02-2010, 12:27:45 PM	#1 (permalink)
Edwin Join Date: Apr 2005 Location: Cambridge, UK Posts: 3,876 No Classified Ratings Domain Trader Rating: (100% / 46)	Forum compromised? I'm getting a Kaspersky Internet Security warning on every page. Been like that for about 5 minutes now... Either there's something wrong with the forum, or there's something wrong with my PC! Anyone else having any problems? __________________ Memorable Domains Ltd - Over 7,000 descriptive, generic .co.uk domains for sale Please note: All sale prices over a week old are automatically invalid. No exceptions. Thanks!

23-02-2010, 12:32:08 PM	#2 (permalink)
newguy Join Date: Dec 2009 Location: UK Posts: 1,452 No Classified Ratings Domain Trader Rating: (100% / 20)	What's the specific warning? I'm using Norton 360, and nothing out of the ordinary has happened so far. __________________ horse racing tips \| Funny Quotes \| Funny Pictures.

23-02-2010, 12:40:02 PM	#7 (permalink)
DB Join Date: Jun 2005 Location: Lancs Posts: 5,738 Classified Rating: 100% (1) Domain Trader Rating: (100% / 109)	I am also seeing this, but would never of noticed to tell you the truth! Is it a virus? __________________ Domain Brand Limited

23-02-2010, 12:45:29 PM	#10 (permalink)
Edwin Join Date: Apr 2005 Location: Cambridge, UK Posts: 3,876 No Classified Ratings Domain Trader Rating: (100% / 46)	If ANYONE else has seen it (seems some people have) then clearly it's a forum problem not a local PC problem. At least, Kaspersky isn't giving me trouble on any of the other sites I've visited in the last few minutes (about 30) Most likely the site's been hacked with some kind of code injection exploit. The version of vbulletin that's running is pretty old after all, if the version number at the foot of the page is correct. __________________ Memorable Domains Ltd - Over 7,000 descriptive, generic .co.uk domains for sale Please note: All sale prices over a week old are automatically invalid. No exceptions. Thanks!

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

23-02-2010, 12:32:47 PM	#3 (permalink)
springer Join Date: Oct 2008 Posts: 445 No Classified Ratings Domain Trader Rating: (100% / 13)	http://www.acorndomains.co.uk/genera...-too-keen.html When I first visited around 20 minutes it wanted to install something (bar at top of firefox - but I didn't click it).

23-02-2010, 12:33:50 PM	#4 (permalink)
foz Join Date: Oct 2006 Location: NZ Posts: 1,450 No Classified Ratings Domain Trader Rating: (100% / 20)	No problems here. Using Chrome & McAfee.

23-02-2010, 12:36:32 PM	#5 (permalink)
Edwin Join Date: Apr 2005 Location: Cambridge, UK Posts: 3,876 No Classified Ratings Domain Trader Rating: (100% / 46)	I'm seeing entries like the one below in my Kaspersky log, one for every page I browse on this forum... Denied: HEUR:Trojan.Script.Iframer http://mmfav.servehttp.com//ml.php//ml Internet Explorer

23-02-2010, 12:38:49 PM	#6 (permalink)
foz Join Date: Oct 2006 Location: NZ Posts: 1,450 No Classified Ratings Domain Trader Rating: (100% / 20)	Change browsers and see what happens, maybe your IE has been compromised?

23-02-2010, 12:41:18 PM	#8 (permalink)
DB Join Date: Jun 2005 Location: Lancs Posts: 5,738 Classified Rating: 100% (1) Domain Trader Rating: (100% / 109)	I am with firefox not ie foz

Similar Threads
Thread	Thread Starter	Domain Name Community	Replies	Last Post
Its a numbers thing - Time for a new forum maybe?	mxm	Forum News & Feedback	6	07-11-2007 02:11:11 AM
Traffic Domain Names - Forum	Kieron	Forum News & Feedback	1	20-12-2005 11:08:41 PM
Acorn Domains Forum Terms and Conditions of use	AcornDomains.co.uk	Forum News & Feedback	0	23-02-2005 10:53:27 PM