Reported attacked site!!

[Alexplicit]

google has just stopped me in my tracks and reported this to me about the site?

Safe Browsing
Diagnostic page for www.ozhonda.com/forum

What is the current listing status for www.ozhonda.com/forum?

This site is not currently listed as suspicious.

What happened when Google visited this site?

Of the 8 pages that we tested on the site over the past 90 days, 1 page(s) resulted in malicious software being downloaded and installed without user consent. The last time that Google visited this site was on 2010-09-15, and the last time that suspicious content was found on this site was on 2010-09-15.

Malicious software is hosted on 1 domain(s), including blamesllek.com/.

1 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site, including bannerspace.com.au/.

This site was hosted on 1 network(s) including AS45152 (ZONE).

Has this site acted as an intermediary resulting in further distribution of malware?

Over the past 90 days, www.ozhonda.com/forum did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?

No, this site has not hosted malicious software over the past 90 days.

Next steps:

* Return to the previous page.
* If you are the owner of this website, you can request a review of your site using Google Webmaster Tools. More information about the review process is available in Google's Webmaster Help Centre.

[Bludger]

happen to me too.

get on to it Wyn......

[96VTi-R]

I'm getting the same damn message

[DC28OY]

im not :S

[flipfire]

Its only for Firefox users. Go to preferences > security and untick Block Attack Sites.

I think the banner ad is causing the site to get blacklisted. 3rd site ive seen it happen this week.

[tiksie]

Yeah I just removed my security for the time being.

I was getting the same thing.

[mocchi]

me too. stupid banners spreading malwares and shit.

[l__i__l]

AARGG!! someones doing a forum takeover

hide yo kids hide yo wife

[ludecrs]

I raised this issue in the mod forum as I have suffered the same fate.
Im sure Wyn will get to it ASAP guys.

[wynode]

Thanks guys. Checking it out as we speak.

[kccord]

Yep, 3/4 forums im in so far; antilag.com preludeaustralia.com and ozhonda.com all attacked.

Common thing? they have just car, go2space, mothers as banner.

[wynode]

Hi all,

I've done some preliminary checks and all seems OK. I suspect it is a result of the advertising code calling on an external script. I've since removed all external script code (ie the banner code) and I'm in talks with them. In the meantime, I recommend you download and install (if you haven't already) an anti-virus and malware program and scan your PC (just as a precautionary measure).

Will keep you posted.

[wynode]

Yep, 3/4 forums im in so far; antilag.com preludeaustralia.com and ozhonda.com all attacked.

Common thing? they have just car, go2space, mothers as banner.

Noted. Was looking for the common link :)

Here's the link:
http://www.google.com/safebrowsing/diagnostic?site=ozhonda.com

[zachge]

Yeah its blocked for me also. How annoying.

[MZ3]

Same thing happened on Ozmazdaclub. We have no idea what happened. deleted the whole forum, upgraded to V4 and then sent a message to google.

[EK9]

yeah i'm getting the same message, so using IE in the meantime to see what's going on, hahaha...

Wyn, let us know when all is good and safe :p

[wynode]

Is stated, I've removed all banner code and made a request to Google to get cleared. Apologies for the inconvenience.

[zco]

still happening ? yonas just called me asking me if somethings wrong with his computer lol
i just got home from wrok and it happened too

[wynode]

Just wondering if people are still getting the "This site is blocked" message ?

[mocchi]

yes, still blocked wyn.

[zco]

yes i am

[wynode]

If you're using Firefox, you can disable the blocking by:

Tools -> Options -> Security -> untick "Block reported attack sites" (Firefox version 3.6.10)

Just make sure you re-enable this setting in a few days. Hopefully by then Google would have cleared our domain

[zco]

yes, already have done.. or else i wouldnt be on this page haha
apparnetly marc/badhbt has this issue on IE aswell lol

[cracker]

using firefox, just reenabled the setting to see if it's been cleared, it has not.

[hero]

btw... my virus\malware protection picked up somehting while i was going through a thread. It was some dodgey fill downloaded into temp cache.

not sure if its related.

[flipfire]

Google seems to have cleared the site now

[Bludger]

still doesn't work for me.

[flipfire]

This site wasnt giving me attack warnings this morning, but yeah now it is.

[wynode]

Yeah Google hasn't cleared us yet (although the last scan says they didn't find anything). I've taken out all that code so just a matter of waiting for Google to clear us. A real PITA I know. Not happy at all.

[Menzy]

This is still happening guys, running linux/chrome.

[flipfire]

Yeah Google hasn't cleared us yet (although the last scan says they didn't find anything). I've taken out all that code so just a matter of waiting for Google to clear us. A real PITA I know. Not happy at all.

Any idea what the malicious script did? or if it targeted mobile devices?

[slimx]

This was added because OzHonda uses BANNERSPACE the ad unit that i preivously said is realy shit.

Bannerspace allowed a malicious ad that screws up your computer. therefore now any site using Bannerspace is getting the block from Google and MOST ANTIVIRUS SOFTWARE (NOD32, TREND MICRO.. i dno if others are doing it)

REMOVE THAT AD to fix it.
Just change the host.

-edit sorry.. didnt read page 2 lol

u already did so..
it takes about 2 days for all the browser malware stuff to update and google is usually quick takes them like less than a day

[WATAJK]

Mines fine, did the security thingo and works great :)
No dramas here!

[Giraffe]

its attacking for me D:

[1996_EK_Civic]

fine for as well :)

[wynode]

Should be all fine now:
http://www.google.com/safebrowsing/diagnostic?site=ozhonda.com

Remember to reverse any anti-security changes you might have made.

[DLO01]

Yep, all good here now. :wave:

[MikeyG]

nope not good here

[zco]

same issue.

[Lukey]

i r back

[androo]

All good thanks wynode!

[Bludger]

still happening????

is for me.

[wynode]

still happening????

is for me.

Anyone else?

http://www.google.com/safebrowsing/diagnostic?site=ozhonda.com

Shows it OH as cleared.

[m3ntAL_l2]

all good wyn~

[Bludger]

umm, I'm still getting it.

if i turn that tick on (block reported attack sites) then i am unable to browse.

firefox 3.6.10

is it my end? if so what must i do to remedy this??

[flipfire]

All good here too

Tried clearing your cache's?

[Bludger]

yep, did that.

[wynode]

Are you using FF portable by any chance ?

[slimx]

um i dno the exact problem guys but trying clearing your cookies's and Cache (SHIFT + CTRL + DEL) then just follow instruction clear those 2.

[Bludger]

yeah, i did that a few days ago.
but nevermind, its cleared now. don't know how, did nothing.

[wynode]

Awesome. But yeah, it has been a real PITA.