Malware warning????

[Rikki Kitto]

Importance of C4 water drain valve??? trying to read this thread my virus protection keeps kicking in

[Sonic]

As mentioned on the thread:

There seems to be malware running on the site where an image posted is hosted (12v.org).

You can clearly see the javascript injected into the web pages in the source, which in turn loads a script from another URL and then attempts to execute the malware on to your computer.

Anybody viewing that website on Google Chrome or the page on the s2forum where the image is linked will get the malware warning.

[UrS4boy]

Importance of C4 water drain valve??? trying to read this thread my virus protection keeps kicking in

The owner of the server with the source of the sunroof drain diagram is aware of the issue and has been trying to fix the problem. I have alerted him to today's issue and sent him the text of Sonic's reply as a guide to hunt down the problem. Hopefully he will get it fixed soon.

[Sonic]

Cheers Dave - i've sent you an email with some details.

The key thing is that the exploit is still active on the site, which needs to be removed, and then the vulnerability that has allowed the exploit needs to be fixed.

[Trist28]

Here too https://h t t p://www.s2forum.com/fo...ad.php?t=67455

[Jamo]

Well if it is on that page we don't want people clicking on the link so i've edited the url

[Sonic]

The malware is not on the s2forum, or even on the image hosted on the 12v site and linked... but Google have marked the entire domain as having malware, hence the warning whenever you try to view anything from it.

There are many many images hosted on the domain and linked to from the forum, so there will be tonnes of pages on here that cause the malware warning until it's fixed.

[Jimmy-the-Dog]

I draggged out the old thread, but I don't have anything to do with the malware!?!

James

[Error404]

From what I can see its only Chrome that throws the warning, I had it last night, switched to IE and it was fine.

[UrS4boy]

From what I can see its only Chrome that throws the warning, I had it last night, switched to IE and it was fine.

Exactly. My Norton 360 had an issue with it 2 wks ago but the site owner fixed that issue and now Norton is fine with it, no warnings. Only Google Chrome users are getting the warning. Sonic (Andy) emailed me a screen shot of the script in 12v.org that links out to the malware and I forwarded the email to the site owner. He replied thanks but he knows what the issue is and is working on it.

I hope he gets it sorted soon since *many* of my info posts have images that are hosted on that website. I don't think just viewing the images is any risk, however, if you were to go to the website directly and activate the home/index page, the javascript with the issue would be activated.

[Trist28]

I though that after I posted it - but hoped most folk wouldn't click it! Wanted to show the mods where else it was and know you get loads of PMs so might have missed it!

Well if it is on that page we don't want people clicking on the link so i've edited the url