PDA

View Full Version : are you aware of this?



b52bob
January 2nd, 2010, 15:27
Checking on links and this came up!





Safe Browsing

Diagnostic page for www.sim-outhouse.com/links

What is the current listing status for www.sim-outhouse.com/links?

Site is listed as suspicious - visiting this web site may harm your computer.
Part of this site was listed for suspicious activity 1 time(s) over the past 90 days.
What happened when Google visited this site?

Of the 2 pages we tested on the site over the past 90 days, 1 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2010-01-01, and the last time suspicious content was found on this site was on 2010-01-01.Malicious software includes 4 scripting exploit(s).
Malicious software is hosted on 4 domain(s), including dnparking.com/ (http://safebrowsing.clients.google.com/safebrowsing/diagnostic?client=Firefox&hl=en-US&site=dnparking.com/), prevedvsem123.cn/ (http://safebrowsing.clients.google.com/safebrowsing/diagnostic?client=Firefox&hl=en-US&site=prevedvsem123.cn/), my.xingkong.com/source/ (http://safebrowsing.clients.google.com/safebrowsing/diagnostic?client=Firefox&hl=en-US&site=my.xingkong.com/source/).
4 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site, including prevedvsem123.cn/ (http://safebrowsing.clients.google.com/safebrowsing/diagnostic?client=Firefox&hl=en-US&site=prevedvsem123.cn/), xingkong.com/ (http://safebrowsing.clients.google.com/safebrowsing/diagnostic?client=Firefox&hl=en-US&site=xingkong.com/), dnparking.com/ (http://safebrowsing.clients.google.com/safebrowsing/diagnostic?client=Firefox&hl=en-US&site=dnparking.com/).
This site was hosted on 1 network(s) including AS22576 (LAYER3) (http://safebrowsing.clients.google.com/safebrowsing/diagnostic?client=Firefox&hl=en-US&site=AS:22576).
Has this site acted as an intermediary resulting in further distribution of malware?

Over the past 90 days, www.sim-outhouse.com/links did not appear to function as an intermediary for the infection of any sites.
Has this site hosted malware?

No, this site has not hosted malicious software over the past 90 days.
How did this happen?

In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.
Next steps:


Return to the previous page. (http://safebrowsing.clients.google.com/safebrowsing/diagnostic?client=Firefox&hl=en-US&site=http://www.sim-outhouse.com/links/count.php?AffiliateID=1039#)
If you are the owner of this web site, you can request a review of your site using Google Webmaster Tools (http://www.google.com/webmasters/tools/). More information about the review process is available in Google's Webmaster Help Center (http://www.google.com/support/webmasters/bin/answer.py?answer=45432).

Updated 16 hours ago
©2008 Google - Google Home (http://www.google.com/)

Milton Shupe
January 2nd, 2010, 15:39
I'll ask Ickie to check this

Thanks

Lionheart
January 2nd, 2010, 17:59
This happened with me on my own website.

I was infected by a hacker dropping off a webpage script on my site. Google instantly knew about it and now my Viking page is called 'dangerous' by Google.com. I might email them and tell them what happened.

Not a good feeling to be hacked and then called malicious.


Send those nooots that do this to a really grim North Korean prison for a long while...


(or iran.. eeks!)


Bill

AGAS 5
January 2nd, 2010, 18:08
What happened when Google visited this site?
Of the 2 pages we tested on the site over the past 90 days, 1 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2010-01-01, and the last time suspicious content was found on this site was on 2010-01-01.Malicious software includes 4 scripting exploit(s).

Has this site hosted malware?
No, this site has not hosted malicious software over the past 90 days.
I'm certain Ickie will clear things up.....

Anybody else think the red bits are a tad contradictory ?

Pete

tigisfat
January 2nd, 2010, 18:20
Anybody else think the red bits are a tad contradictory ?

Pete

The refence to "hosting" means a little more than having random malware and bots latch onto you from the site, I presume


I've known this for a while, and sent out a few PMs over it. At least once a week Kaspersky AV stops something from Sim-Outhouse when I first open the site.

Moparmike
January 3rd, 2010, 06:01
There were a few random "garbage" links posted in the links list again. I did some housecleaning to get rid of em.

This is another reason Ickie has been cracking down on the no-post members and tightening up the registration process. You need to be registered here to post a link, but a few of these "garbage" spambot registrations sneak through every now and then and submit the trash links.

These links are very obvious...just a collection of random characters or the occasional "Viagra for sale cheap" type stuff...so most any real-person member will know that it's not a FS related link and not click it. The Google scanner doesn't have the common sense that a real person has though so it just sees these garbage links and since they originate on the SOH links list pages SOH gets flagged as a possible attack site.


Thanks for the heads-up b52bob!

Moparmike
January 3rd, 2010, 06:11
The refence to "hosting" means a little more than having random malware and bots latch onto you from the site, I presume


I've known this for a while, and sent out a few PMs over it. At least once a week Kaspersky AV stops something from Sim-Outhouse when I first open the site.


BTW tig,
Presumptions can be as dangerous as assumptions. ;)
No malware or bots on the site. Just a very zealous Google SafeWeb scanner seeing these garbage links...which isn't a bad thing either since it's better to raise a flag and make you stop & think before your computer gets in harms way.
Kaspersky's heuristics is pretty trigger-happy about flagging stuff like this too (so is AVG Pro and probably a few other AV/AS programs out there). Again, not a bad thing if it pops up a warning to make ya check out what's there.

All is well. Now we just gotta keep the spammers from dumping this stuff here in the first place! :pop4:

Ickie
January 3rd, 2010, 06:23
We cleaned out the links page and I killed the submit a link page so this is another service we lose by these hackers and spammers.
I sure hate it when I get blammed for these buttholes, and when I add security measures I get shots over my bow, when the blammers should blame the buttholes not me.

Ickie
January 3rd, 2010, 06:31
Mark my words, the day is coming when you have to pay to post!
Than a real name and address gets placed upon the person making the posts. This will make them accountable for their actions.
I do not like it any more than you do, but the "who gives a crap" attitude by ISP's needs to stop.

Ickie
January 3rd, 2010, 06:47
We work tirelessly trying to keep you safe.
Douglas runs the download/upload section and scans every file before you see it.
I work many hours a day running security and monitoring the server.
We have a staff of 40 who keep an eye out for your safety.
But it is hard to keep a man / women, hell bent on destruction from trying to do their dirty little deeds.
Note! we never take a day off and do this for free.

Henry
January 3rd, 2010, 07:31
Note! we never take a day off and do this for free.
now you tell me!:icon_lol:
there is a lot of background work that goes on here everyday
to make sure that we are as safe as posible
thanks Guys:applause:
H

scottmm73
January 3rd, 2010, 07:47
You guys are due for a shout out.

I want to personally thank each of the staff for all the hard work they do to keep this site safe and available for us users.

IMhumbleO, I believe this site is the best FS site out there.

:applause::applause::applause:

GT182
January 3rd, 2010, 07:49
Too bad you can't use "software" that returns the favor and zaps them when they hack into SOH's server and do their nasty little deeds. One good deed deserves another. If you play nice the software leaves you alone.

I have a friend that worked for Delta and has their security program on his personal computer and server. It worked like a charm and they finally left his computers alone..... it chewed up the hackers HDDs enough to make them useless.... as it was meant to do.

jdhaenens
January 3rd, 2010, 08:10
Good on ya Ickie!

Quixoticish
January 3rd, 2010, 08:50
This happened with me on my own website.

I was infected by a hacker dropping off a webpage script on my site. Google instantly knew about it and now my Viking page is called 'dangerous' by Google.com. I might email them and tell them what happened.

Not a good feeling to be hacked and then called malicious.


Send those nooots that do this to a really grim North Korean prison for a long while...


(or iran.. eeks!)


Bill

I had the same thing happen to me, and the worst thing was it was on the server that hosted things like my forum avatars so every forum I had posted on was popping up this warning.

It's easy to rectify, as long as you've removed the script and put things back the way they should be you can log into google webmaster tools and submit a re-consideration request. As long as your site is now in order they should remove the warning within 24 hours.

b52bob
January 3rd, 2010, 08:56
Thanks so much to icke and everyone here at the Out House. I can imagine the hard work and the long hours that go into this thing to keep it up and running and clean.

Death to all hackers Hard drives!

JayKae
January 3rd, 2010, 10:42
Norton deemed www.aussiex.org (http://www.aussiex.org) to be unsafe and malicious because someone reported a false positive to them as my site 'trying to hack him', needless to say I told Norton (Symantec) where to go and it resulted in this:

http://safeweb.norton.com/report/show?url=http%3A%2F%2Faussiex.org