PDA

View Full Version : Has anybody seen this popup on the AOS website?



mikecole
15-06-2013, 15:06
http://s1220.photobucket.com/user/mikegreta/library/Java%20Popup%20on%20AOS

I keep getting asked if I want to run a Java plugin. This time I replied yes and later got this popup? Is this legit or some kind of malware? Sorry about the link. I could not get it to display in the post.

DSJR
15-06-2013, 15:15
I've had a good few java-style pop-ups in the past when accessing AOS with a fresh log-in - Microsoft Security Essentials used to have a field day, but I think things have settled down now with the last site-crash being put to rights. I even un-installed Java using Revo Uninstaller to clear as much out as possible, downloaded a fresh install and tried that, to no avail.

Anyway, hope all is sorted with the server and site admin now.

Mark Grant
15-06-2013, 21:02
Nothing like that here ever.

I have embedded the image for you so people dont have to click the photobucket link as that site sometimes has popups and adverts.

http://i1220.photobucket.com/albums/dd441/mikegreta/Java%20Popup%20on%20AOS/PopUpSeen.jpg

Might be best trying a different browser such as firefox and installing adblock plus etc to prevent lots of rubbish.

Also consider changing you DNS settings to route everything through OpenDNS ( free) as this helps filter out lots phising sites etc.

http://en.wikipedia.org/wiki/OpenDNS

http://www.opendns.com/
-

Themis
15-06-2013, 21:22
This is a trojan : TrojanJS/IFrameRefK

Here are the details : http://www.microsoft.com/security/portal/threat/encyclopedia/entry.aspx?name=Trojan%3aJS%2fIframeRef.K&threatid=2147679863

Probably your anti-virus is out of date. Please update it.

And please, do NOT install the Java application. ;)

walpurgis
16-06-2013, 09:50
In order to avoid unwelcome flack, I'm not going to comment.

Rare Bird
16-06-2013, 10:18
:lolsign:

DSJR
16-06-2013, 10:40
Lo and behold, got this pop-up just now :( MSE 'cleaned' it and I declined to run it. I do regular scans, so what's going on?

Themis
16-06-2013, 12:01
Lo and behold, got this pop-up just now :( MSE 'cleaned' it and I declined to run it. I do regular scans, so what's going on?
I'm amazed your antivirus didn't quarantined this on the fly. :(

What antivirus software do you use Dave ?

mikecole
16-06-2013, 17:43
Thanks for the help, guys. I signed up with and installed OPenDNS. Dumped all cache. Guess we'll see if that takes care of things.

walpurgis
16-06-2013, 19:02
I'm not going to say "I don't rate MSE highly", as I'm trying to avoid flack!

struth
16-06-2013, 23:36
i USUALLY USE opera BROWSER and have never had a problem like that on this type of site, but a really good malware scanner should be able to find and remove any problems.

StanleyB
17-06-2013, 07:10
I am not aware of any java scripts running on the AoS page. So if a request to install something shows up I would start looking for a possible website attack script. I use Firefox with the add-ons Control The Script and Script Blocker.

DSJR
17-06-2013, 12:16
I'm amazed your antivirus didn't quarantined this on the fly. :(

What antivirus software do you use Dave ?

MSE - and it did clean it on the fly.

It happens so rarely now but ONLY on AOS for some reason :scratch:

Macca
17-06-2013, 12:34
I've not had a problem at home (Windows 7, absolutely nothing else installed) but at work AoS is still barred - they use McAfee. I've tried cleaning the browser cache, no joy. In fact I am just about to get one of those bloody smart fone things so I can check in here on my lunchtimes. I don't have the time weekday evenings (listening to music you see :) ) so I end up missing a lot of interesting stuff.

MartinT
15-07-2013, 09:59
We're still investigating the possible malware issue, although accumulated reports strongly suggest it to be false positives and all the major AV suites quarantine it anyway. However, the issue is not being taken lightly and work behind the scenes continues.

For the sake of safety and security, any members still running Windows Operating Systems should note that Vista is the oldest OS supporting up to date levels of security and Internet Explorer 9 should be the oldest IE used for the same reasons. Windows XP and IE8 are essentially obsolete and should be upgraded at the earliest opportunity.

ALL computers should use anti-virus software; good free versions exist for Windows (Microsoft Security Essentials - built in to Windows 8), MacOS (Sophos AV for Mac Home Edition) and Android (AVG Free).

hifi_dave
15-07-2013, 18:03
I'm still getting McAfee red warnings on both my laptops when I click on any thread. I have disabled it on this old laptop and hope it isn't dangerous but won't do that on my new Sony.

walpurgis
15-07-2013, 18:33
I'm not going to say "* **** *** **", 'cos it may draw flack!

DSJR
15-07-2013, 19:14
For the sake of safety and security, any members still running Windows Operating Systems should note that Vista is the oldest OS supporting up to date levels of security and Internet Explorer 9 should be the oldest IE used for the same reasons. Windows XP and IE8 are essentially obsolete and should be upgraded at the earliest opportunity.



Not all of us have such huge incomes that we can buy all the latest gizmo's and bling-fi add-ons you know Martin, even if you can and do! I mean no offence, but for many of us, the laptops and PC's we use that are still giving splendid results at home may well still be running stable versions of XP and I still use IE8 here because I don't like Chrome for example and the least said about IE9 I use at work the better!!!!!!!!! :mad: :steam:

Now I have that off my chest, I'll crawl back under my stone!

John
15-07-2013, 19:44
Dave it about the support you get from Windows Old operating systems are more prone to issues as Microsoft are no longer putting in the effort around support. This means the computer has a higher chance of picking up something nasty. For Microsoft as you rightly hint at its not where the money is coming in from

MartinT
15-07-2013, 19:45
Sorry Dave, but computers, the internet and malware are ever more sophisticated and what was once considered solid enough is now hopelessly inadequate. XP was launched in 2001 and is now THREE OS levels behind current. It's obsolete. The upgrade costs about £100 and, spread across 12 years, is very good value for money. You could have jumped at the chance to upgrade at £49 not so long ago.

I agree that Internet Explorer is good, although I always have Chrome installed as well. IE9 is a minimum and IE10 is even better - I'm now running IE11. Of course, the reason you're stuck with IE8 is that XP can't take any higher version. It's just not worth falling that far behind, and if you become an early adopter the Microsoft launch offers are always good.

I'm not trying to piss off people, honestly chaps. It's just that you can't expect an obsolete OS and browser to cope with an internet that is rapidly adopting new standards like HTML5, let alone the kind of nasty drive-by, trojan and phishing malware developed to exploit exactly the holes prevalent in these old pieces of software. They've done their time, now it's time to retire them.

Barry
15-07-2013, 22:25
I'm still getting McAfee red warnings on both my laptops when I click on any thread. I have disabled it on this old laptop and hope it isn't dangerous but won't do that on my new Sony.

So do I - I just ignore it!

hifi_dave
16-07-2013, 12:22
I don't understand any of this computer talk - all I know is that my Sony equipped with Windows 7 and my Dell with Vista, both get Mc Afee warnings when I click on AOS threads. This doesn't happen with any oher forum.

Is it dangerous for me to ignore the warnings and when will it be corrected ?

Audioman
16-07-2013, 13:58
Uninstall McAfee and install a free antivirus such as AVG or Avast. These are a lighter load and should speed up your system. Avast at least has no problems with AOS.

MartinT
16-07-2013, 15:03
Why not install Microsoft Security Essentials? It's free and designed for Windows so it's very lightweight and fast.

hal55
16-07-2013, 22:26
Hate to say this, but I have Avast and it has problems with AOS all the time, a couple of virus alerts each week.

Hal55

walpurgis
16-07-2013, 22:42
Hate to say this, but I have Avast and it has problems with AOS all the time, a couple of virus alerts each week.

Hal55

I'm not supposed to comment on IT because I get a roasting, but I'm experiencing no issues now of any kind on any site.

I'm using Kingsoft Antivirus as main AV protection and Threatfire (behaviour based) AV alongside as support. They can be used together. Also, I have AVG 'Linkscanner' which is a small package that catches the occasional nasty from dubious sites. I do a scan with Spyware Expert periodically, as it digs deeper than most similar applications. The only item that has a significant impact on system speed is the Kingsoft, but that is less than most (god forbid I should use Norton ever again). The whole lot run harmoniously and provide security reports. Very effective.

I was using Microsoft Security Essentials last year when my PC was slaughtered by a bug. So I won't use that again.

Anticipating resulting flack now.

synsei
16-07-2013, 23:23
Computer security is a very personal thing and I reckon I have been through the lot at some stage. Most people tend to use what works for them and then they stick with it, when in fact every software company refines and updates their products constantly so the goal posts are always moving. The only constant is McAfee, it is about as useful as a chocolate teapot and always has been. Norton is not to my liking, it used to be a system hog although I hear recent versions are much less so. Don't be afraid to try something new, if it doesn't work well or perhaps you find it unintuitive to use then you can always uninstall it ;)

MartinT
17-07-2013, 08:07
Norton and McAfee are notorious as bloatware which slow your systems down and generate all kinds of annoying pop-ups and blocks while you work, as well as costing money. I used to like AVG but of late it has started to become bloaty too, although not as bad as the above.

Sophos is the corporate favourite and their R&D labs are second to none. Microsoft Forefront Endpoint Protection is ramping up a lot in the corporate area and has proven to be effective and mostly silent. Security Essentials has the same core AV engine and is the end user version. Kaspersky is another good one for corporates.

As Dave says, the choice is a little personal and I know users who like Bullguard :spew:, Panda and NOD32, so there's plenty of choice out there. My only advice is to please use an up to date one and don't lull yourself into a false sense of security if you have MacOS or Android devices, as they need it too.

StanleyB
17-07-2013, 08:34
Relying on a virus checker alone is however a dangerous thing.
I also use:
EZbackitup (free) to run as scheduled daily back up my Documents folder onto a CD card.
Acronis to run a scheduled daily back up my hard disk onto a back up partition on my hard drive.
WinPatrol to check what is running on my PC.

I still use version 9 of Zonealarm. The reason for that is that it is the only security software that I could find that also checks for email traffic from installed programs that you wouldn't expect to be sending emails. This traps trojans that rely on that sort of data theft.

walpurgis
17-07-2013, 09:55
I still use version 9 of Zonealarm. it is the only security software that I could find that also checks for email traffic from installed programs that you wouldn't expect to be sending emails. This traps trojans that rely on that sort of data theft.

That's interesting Stan, I might look into that or see if there's anything else around specifically for this purpose.

hifi_dave
17-07-2013, 10:02
We have five laptops here and all are protected by Mc Afee provided by BT as part of our account. The Mc Afee hasn't put a foot wrong since we started using it 4 years ago and is updated, usually, at least once /day. We have no issues or problems with Mc Afee and never have done.

My ONLY problem is when clicking on Art Of Sound threads, when I get warnings. I get nothing on PFM, Naim, HUG, or WAM forums. I, therefore, deduce that it is not Mc Afee but AOS which is at fault. It prevents me using AOS in the evening when I settle down with me Sony laptop.

Beechwoods
17-07-2013, 10:14
We have a specialist company looking into this issue right now so expect any issues to be resolved in the next couple of days.

hifi_dave
17-07-2013, 10:47
Good news. I'll be patient.

Beechwoods
18-07-2013, 18:23
Please let me know if you see any further warnings. Two files, buried deep within the server config (not the area we maintain that holds the site and database) were cleaned up after the review. I am just checking whether this is expected to have resolved the issue in full, as far as site users are concerned.

Beechwoods
19-07-2013, 13:50
Can anyone affected by this issue please clear your cache before reporting any ongoing issues? Cached files can continue triggering issues even when these are cleared from the site itself.

http://www.wikihow.com/Clear-Your-Browser's-Cache

Barry
19-07-2013, 14:10
Have done that Nick, but still get a ‘red warning’ from McAfee. Their siteadvisor.com states, in relation to theartofsound.net, the following:

This link might be dangerous. We tested it and found security risks. Beware

Website Category:
Malicious Sites, Forum/Bulletin Boards


Not sure if this is of any help – I’m just ignoring the red warning, though I suppose it is possible that a member may, as part of a post, unknowingly provide a link to a corrupted/infected site.

Regards

Beechwoods
19-07-2013, 15:31
It may take McAffee a day or so to retest and confirm the site clean.

hal55
20-07-2013, 07:46
Yeeehahhhhhhh!!!!!!!!!!!!!

For the first time in months the Friday virus scans by Avast and Malwarebytes have both come up blank!

You beauty!!

Hal55

AlanS
20-07-2013, 09:19
MacAfee with latest version checked, cache cleared, grey for thread lists in a forum, Red and warning when opening a thread.

Report if that helps

http://www.siteadvisor.com/sites/http%3A//theartofsound.net/forum/showthread.php%3F26297-Has-anybody-seen-this-popup-on-the-AOS-website%26p%3D463328%23post463328?aff_id=691

hifi_dave
20-07-2013, 09:22
Same here.

Barry
20-07-2013, 12:27
And here.

Beechwoods
20-07-2013, 16:47
Thanks for the update. I have dropped McAfee a request for a site review.

hifi_dave
28-07-2013, 09:22
Has this been done, because I still can't use my other laptop for AOS, due to the Mc Afee warnings ?

Beechwoods
28-07-2013, 09:29
McAfee have not as yet responded to the two requests I have made for a site review.

I have had confirmation (twice now) from the company that carried out our malware audit that site is now clean. Two compromised scripts were removed on the 18/07 and so any warning since then will be the result of systems, like McAfee Site Advisor, being extremely slow to update. Unfortunately these systems monitor the entire internet, so it will take time for changes on individual sites to be reflected in their reports.

You can safely add AOS to the McAfee 'allowed' or 'ignored' list so you can browse without being bombarded with their messages all the time.

hifi_dave
05-08-2013, 09:48
I still can't access AOS from my other laptop as the McAfee warnings prevent me clicking on posts.

walpurgis
05-08-2013, 09:54
I still can't access AOS from my other laptop as the McAfee warnings prevent me clicking on posts.

Try another AV application. I've not used McAfee, but you can probably turn it off while you do this and uninstall it or reactivate it later if you choose.

AlanS
05-08-2013, 11:52
Work still doesnt like AoS. Suspicious.

hifi_dave
05-08-2013, 15:52
I can override Mc Afee but it must be detecting something wrong, surely ?

walpurgis
05-08-2013, 19:51
I can override Mc Afee but it must be detecting something wrong, surely ?

There may be something or it may be false alerts. A good alternative AV should pick up any problems, but allow you to continue without blocking you. I have no alerts at all and no problems using AOS.

Beechwoods
06-08-2013, 09:03
I have made two requests of McAfee in the last 4 weeks, and followed up twice. Our site has been audited by an independent company specialising in Malware identification and removal. They found 2 compromised scripts about 3 or 4 weeks ago which have been removed and the site has been subject to monitoring since. They confirm the site is now 100% clear of issues. AVG Threatlabs have not detected any issues since the cleanup and have now cleared their 'Malware Detected' warning. We should shortly be in a Green Status with them once their time since last detection period ticks over (about 30 days since last detection).

McAfee Site Advisor is the slowest organisation / system ever when it comes to updating their systems. I suppose they're big enough not to give a shit.

I can categorically assure you that AOS is safe and that we've invested in the best Malware protection services you can get.

I will persevere with McAfee but in the meantime please feel free to add AOS to your McAfee Site Advisor safe list. This will not compromise your security. McAfee Antivirus will continue to check for any active Malware whether you have us on your safe list or not.

Beechwoods
15-08-2013, 07:08
AOS is now clear of warnings on McAfee Site Advisor.

Surf with confidence everyone.

hifi_dave
15-08-2013, 18:37
Hooray, it's all clear now.

Well done..:thumbsup:

Marco
15-08-2013, 19:13
Lol... It was clear before (in terms of viruses), daftee. It was just that McAfee hadn't updated their records! ;)

Anyway, all is well now :)

Marco.

Beechwoods
16-08-2013, 10:51
McAfee alerts are the Internet equivalent of shouting 'Fire' in a crowded theatre :)