Printable View
http://img687.imageshack.us/img687/2501/cropper7.png
http://img714.imageshack.us/img714/3397/cropper6.png
seems some ad server has got maleware in it delivering it to the site, asking for a plug-in install containing trojans.
it's not the first time AT has had issues since they moved into VB,
yet they're aware of it and working to solve it,
good luck over there guys.
Ow...
I'm sure it will be sorted ASAP, though.
Just glad I've read their Fermi review earlier today, just in time before the crisis! :D
I love coincidental timing. This was the first place I went to the moment I also received a warning that Anand might upload a trojan to me to get my Fermi review fix :p:
Went to anand via chrome and got message that its not safe, had the little WTF?! moment, then entered.
Figures :D
So its your computer that sent me 250 viagra spam emails today?! :D :lol:Quote:
Originally Posted by anubis
Just kidding. :p:
Lol, had an unsafe warning as well, but I just entered regardless. I'm not that stupid to randomly install addons/plugins :p:
Only 250? have to give the little critters access to bit more BW i guess:shakes:Quote:
Originally Posted by zalbard
:D:D
Except that you don't even need to accept anything to get infected through certain types of vulnerabilities. Do you run noscript? If not, or if you have it whitelisted for that site, chances are you can get hit by an attack without even realizing it. It doesn't matter what IQ you have or how many AV softwares you run, it can and will still happen.Quote:
Originally Posted by Musho
Welcome to the internet.
Yeah I got the same message while trying to see the Fermi review again this morning. Good thing I had already read it last night.
3rd party ads got hacked actually, not Anandtech per say.
Anand speaketh.
http://forums.anandtech.com/showpost...4&postcount=51
Already ran a scan. Didn't get infected :up:Quote:
Originally Posted by antiacid
Adblock plus blocked the infected ads. I love that addon :yepp:
Im clean, seems like adblock saved me aswell.
This thread title is slightly misleading. I wouldn't really say that AnandTech got hacked, they were unknowingly serving evil ads. They're working to fix it though, if they haven't already fixed it.
wow same here. last night reading fermi review clicked on 2nd page and got "not safe message". I didn't think anything about it at the time.Quote:
Originally Posted by anubis
yeah seen it,Quote:
3rd party ads got hacked actually, not Anandtech per say.
Anand speaketh.
http://forums.anandtech.com/showpost...4&postcount=51
title would be changed.Quote:
This thread title is slightly misleading. I wouldn't really say that AnandTech got hacked, they were unknowingly serving evil ads. They're working to fix it though, if they haven't already fixed it.
it sounds a bit like yellow gossip, it isn't the meaning.
So what exactly is the malware we have? I trusted the site & ads, although nothing popped up to install.
avg won't scan... hmmm... lol
It attempts to install a spoof antivirus program called "antivirus soft" which is a trojan rehash of "antivirus live" auto installer. It blocks most run32dll executions with an error message and trys to get you to buy the software via pop-ups. It also will attempt a fake virus scan. If you really got something a "antivirus soft" virus scanner would pop up, and you would be unable to use most programs. IE would take you to their purchase pageQuote:
Originally Posted by [XC] Synthetickiller
I didn't see a thing when I visited them about two hours ago :shrug: I'm using Opera 9.64 and ESET Smart Security 4, not so much as a warning and judging by the above post I'm not infected either.
So how does Google fit in this picture? You get the message even if you don't go through their search engine. How can Google control other sites?
Saw the warning earlier today, too. Hacked ad server really screwing with AT over there.
If you're going to use per se, spell it correctly at least.Quote:
Originally Posted by -n7-
It can't. Chrome actually always searches google, even if you enter the http address of the site.Quote:
Originally Posted by Eson
I have seen the exact same fake virus scan attempt while using IE on a couple of other sites, including trustedreviews.com and photographyblog.com. It is not there all the time, but pops up sometimes. I guess one of the tech ad-servers is infected.Quote:
Originally Posted by jaredpace
It stops by ALF F4 if you are really fast, but one time I didn't see it and it could deliver a virus that MS security essential could catch and clean.
I'm not sure if anandtechis is compromised by the same virus, (and I don't want to go there to find out ;) ) , but it sounds similar.
it's going through G servers when there is a request for the site.Quote:
So how does Google fit in this picture? You get the message even if you don't go through their search engine. How can Google control other sites?
now have a look at what has happened during the last few hours.Quote:
Of the 1101 pages we tested on the site over the past 90 days, 86 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2010-03-27, and the last time suspicious content was found on this site was on 2010-03-27.
after receiving suspicious information from the site, G analysis apparently emulate a series of test on different pages to get a view of the site's malicious behavior.
it probably goes over pages with background daemon searching for destructive code
E: sorry, missed earlier posts.
I use Firefox, but Ive seen screens like this when i follow links from a site.Quote:
Originally Posted by BrowncoatGR
Right click on Sanboxie -> Chrome -> Delete Contents.
I still don't know why everyone isn't using Sandboxie :shrug:
IE and FireFox also check the links of the site you're about to visit to see if the URL is registered as possibly containing malware. My guess would be that Opera does the same. They each have their own database to determine these kind of things, as far as I know.Quote:
Originally Posted by Eson
Adblock plus ftw
Yep, got a message using Safari on a Mac when I went to the site. Has anyone tried warning Anand? Probably some hack job by some nVidia nut who did not like Anand's review of Fermi :)
Anand knows about it. He's just trying to track down the culprit ad server.
Anandtech forums & the main site are ad free this weekend.
God damn, no wonder I had that damn Antivirus soft trojan after a visit to anandtech for the fermi review :mad:
Ad free or not I won't be visiting that site ever again :mad:
That seems like a rather irrational decision. You could get the same attacks from any site that uses the offending ad server.Quote:
Originally Posted by 5ILVgearX
qft! :DQuote:
Originally Posted by randomizer
Wow, I never knew that ... I always thought it was per-say, thanks. :p:Quote:
Originally Posted by Humminn55
This. I'm using Google Chrome right now, with flash block and adblock and AnandTech's website is working just fine for me. . . Reading the Fermi article. :up:Quote:
Originally Posted by randomizer
There currently are no ads on AnandTech's site, so you don't even need an adblock extension on AnandTech.Quote:
Originally Posted by Chruschef
worth saying,Quote:
Ad free or not I won't be visiting that site ever again
i'd go reading anand's review's even if i'd have to hack it.
he's doing outstanding work, learn to appreciate it :yepp:.
Sorry teach, i've got it now. :up:Quote:
Originally Posted by Humminn55