Google blocking site due to Malware

Just had this issue, Google Chrome wouldnt open the site page as it reported Malware.

I can click to continue anyway, but all a bit odd. I am dialling in from a different location than usual and using a guest wifi... but just wanted to let you know

 

I bet its related to the chairs link on one of the BWL threads :sign15::naughty:

View attachment 2244

 

I think its all this talk about non existent streams

 

Same here, I can't get on using my laptop using chrome :rant:

 

firefox is doing the same thing

 

I have had problems today with malware - possibly just coincidence as I don't see how I could have been infected from this site. Somewhat weird though as I have never had a virus in my life till today.

 

That's a feat in itself, particularly living in the Phiippines!

 

Explorer doesn't open the site either!

 

A lot of people getting this, not sure what's happened to cause it but trying to locate it.

There isn't anything malicious on the site by the way, just to put your minds at rest.

 

Questionable.

 

Getting it as well, probably Skynet or something

 

Maybe this is how Tommy Smith is announcing his arrival!

 

Get rid of the link to 2inches or whatever is the chairs link on one of the BWL threads... I bet thats what google is flagging up.


HERE

http://www.wfcforums.com/showthread.php?49260-Bwl&p=890270&viewfull=1#post890270

Or why not give it a click first!!

 

Same here through firefox:

I reckon we've been reported to google by some disgruntled opposition fans to **** us off.

SM, you just need to upload a fipatch file following the google link to cancel it.

 

I GIVE UP!!!!!!

Dont know why I bother to help... have you looked at the link I refer to???

 

Don't have the backend access or the knowledge I'm afraid it's an SM#16 job. I can only tinker with the forum software, not the site and hosts & file uploads and stuff. Just trying to offer more links from a friefox perspective.


edit: I think I understand what you're getting at now. I'll have a look.

 

My avast security software is blocking it. The trojan that it is blocking is
JS:Redirector-PM

 

Still getting it, cheers for your help IAYS/Barry

 

After the problems I had this morning I changed my malware programme to Malwarebytes Anti-Malware and every time since that I open this site it blocks a dozen or more different Trojans and who knows what.

 

Are you getting anything mentioned specifically PO?

Google Diag giving me nothing to work with: http://google.com/safebrowsing/diagnostic?site=http://wfcforums.com

The only third party website common with all the forum is Google's Ad program itself...

 

This morning (when unbeknownst to me I had Windows Defender turned off) the only site opened was this one when this happened:

http://www.bleepingcomputer.com/virus-removal/remove-security-protection

It stopped me opening any other programme. I rebooted in safe mode and downloaded the anti malware programme and each time I am on this site that programme is blocking every minute or so a different threat. It stops when I leave the site and starts over when I come back'

 

I don't understand any of this, should I stay off the site for now, or is it safe to be on here? Mods please advise ASAP!!!

 

Site seems to be really slow. Have attached the message that comes up when I try to access on crome.



Says everything is fine!

 

Been getting alerts all day. This afternoon I accessed the site from a spare laptop and went through the alert warnings on Chrome. I got something trying to install itself. Just tried from home and nothing unusual happens.

 

It's probably from an embedded advert. Those are the usual sources of these issues.

Rogue companies buy adverts from the sites that serve them, then insert crap into the ads.

It's also possible IAYS is right. Follow his advice too. Considering PO's comments though, adverts are the most likely source.

Bear in mind that once you clear this up, it won't stop the blacklist immediately. You may need to contact the blacklisters to notify them that it is solved.

 

Must be AIDS.

 

Doubt it's the ads as I have ABP

 

Farking ForumAIDS. Great. I assume super horns has been seeing other forums behind our backs and caught it.

 

Post of the year.

 

Looks like the site has a Trojan. Based on what I'm seeing right now, I think the culprit is on the content page. I would suggest backing that file up and archiving it, then creating a completely new content page from scratch. I'd probably suggest avoiding the external add-ins for now, since those could well be the source.

Malware in question is TrojWare.JS.Agent.HJ

The bad link I am seeing is (DO NOT CLICK THIS!!!!)

Code:

http://www.wfcforums.com/content.php? 

 

I have it on good info that this forrum is going to Forrest and that's why it's not working proper

 

36 hours on and it's still there.

I'm somewhat perplexed though why it is just Diamond and myself appear to be the only ones being attacked as it were*.

If anyone is noticing mysterious *.tmp folders appearing on their desktop that would be down to whatever is going on here.

* An after-thought, how do the last 36 hours traffic numbers compare to usual? May be more people have/are being affected and haven't sorted it out yet. I couldn't open any browser when I had that initial attack yesterday morning. It happened at about 7:44am for me if that is of any help so about 12:44am Wednesday morning in the UK.

Just scanned the site with Sucuri SiteCheck

http://sitecheck.sucuri.net/results/www.wfcforums.com/search.php

 

I'm getting a warning, but I am hitting the ignore button, I don't think I have any bad things happening other than the warning, but I am a computer numpty, so I wouldn't really know if I was?

Should I keep off the site or does it seem OK to you guys that understand these things?

I'd appreciate your advice.