Forum log on trouble ?

[40427]

I'm not very computer savy, but my gut tells me that the MOA site is infected and no matter what we poor infidels try we are under attack.
Me thinks that the mother ship needs to get into the problem and fix it.

[greenwald]

Paul, using same and I was getting the same message...even after cleaning, deleting history, cookies and just about everything... still the same message...
Tonight I deleted my Bookmark as well... thus far I am typing the address in browser and do not get the message... I have done a restart and so far it working just fine... without a bookmark. Hope this works and hope this helps.

Sadly, that did not work for me. Deleted the bookmarked link to BMW MOA - then shut the computer off. Turned it back on and when I bookmarked it fresh, got virus warnings. Still able to maneuver throughout the site, but will these glitches ever end?????????????????

[greenwald]

I'm not very computer savy, but my gut tells me that the MOA site is infected and no matter what we poor infidels try we are under attack.
Me thinks that the mother ship needs to get into the problem and fix it.

Agreed!!!!!!!!!

[Lee]

I'm not very computer savy, but my gut tells me that the MOA site is infected and no matter what we poor infidels try we are under attack.
.

What makes me a little nervous is reading posts where a member gets a warning that the site is a threat, but they ignore the warning and and find another way into the site.
If I get a threat warning, I trust my virus protection software and stay off of the infected site.

[40427]

I have two different virus protections, Norton and MacAfee , if they cannot get around this I think it's bigger than first imagined.

[Omega Man]

Sadly, that did not work for me. Deleted the bookmarked link to BMW MOA - then shut the computer off. Turned it back on and when I bookmarked it fresh, got virus warnings. Still able to maneuver throughout the site, but will these glitches ever end?????????????????

We would like to get to the bottom of this.

I have two different virus protections, Norton and MacAfee , if they cannot get around this I think it's bigger than first imagined.

I personally am not familiar with running two protections at once. My experience was that the two "fought" with each other.

I am wondering if either of you can check your security logs and let me know (via private message) what the warned URL is? If you find it, you may have to copy it down on paper and type it in to the PM. You can add XXX to "break" the address code so it isn't harmful.. For example-
ttp://this XXX is the bad XXX url.com/php
From all that I see on my end, the site is clean. TIA, Gary

[marchyman]

While you are waiting for logs and deep digging to find out what is up can you please take a few minutes to update the favicon for the forum. Pretty please. For some reason I find it annoying to see the vBulletin generic favicon instead of the MOA globe. Especially since the correct icon is on the non-forum pages.

FWIW for those still getting warnings... it may be your anti virus code that has cached the "this site is dangerous" value. Wouldn't be the first time that has happened.

[Lee]

can you please take a few minutes to update the favicon for the forum. Pretty please. For some reason I find it annoying to see the vBulletin generic favicon instead of the MOA globe. Especially since the correct icon is on the non-forum pages.

.

I hadn't noticed it changed. First I had to look up what a favicon is "Favorite Icon"

[Omega Man]

While you are waiting for logs and deep digging to find out what is up can you please take a few minutes to update the favicon for the forum. Pretty please. For some reason I find it annoying to see the vBulletin generic favicon instead of the MOA globe. Especially since the correct icon is on the non-forum pages.

Hi Marc, are you talking about the upper left hand corner of the page? Here is what I see.

I'm working on the rebuild of another club (chartered) site and the new VB package had the generic VB in the "fresh" package- You should see the globe.

FWIW for those still getting warnings... it may be your anti virus code that has cached the "this site is dangerous" value. Wouldn't be the first time that has happened.

That's sorta what I have been getting at. There are a number of us watching this closely and the MOA site has been clean for some time.
Thanks, Gary

[20774]

Gary -

Marc is referring to the icon in front of the URL in the address bar at the top of the screen. Right now it just shows a generic "V checkmark". Here's the favicon for Snowbum's website:

[20774]

I went to a website and created a favicon that could be used...probably someone like Scott will have to get it included.

[greenwald]

We would like to get to the bottom of this.


I personally am not familiar with running two protections at once. My experience was that the two "fought" with each other.

I am wondering if either of you can check your security logs and let me know (via private message) what the warned URL is? If you find it, you may have to copy it down on paper and type it in to the PM. You can add XXX to "break" the address code so it isn't harmful.. For example-
ttp://this XXX is the bad XXX url.com/php
From all that I see on my end, the site is clean. TIA, Gary

Here is what appears when I first access the MOA site, and again when I have clicked on "LOG IN"

XXXC:\...\INTERNET EXPLORER\IEXPLORE.EXEXXX then in the next line, it states XXXhttp://www.fmld.at/_daten/api.js,XXX containing Trojan program!

Ignore the XXX's and you have the actual messages that Kaspersky Virus Protection alerts me to.

Hope this helps!

[20774]

Kevin -

So you just click on Login and you see the messages? Which Login are you talking about? I have Google Chrome which I rarely use so when I go to the MOA forum with it, I appear as a guest with a Login button on the top right. If I click on that Login button, I don't see any unusual messages. That takes me to a screen that requires me to entry my username and password. There is another Login button on that screen. Which of the two buttons are you referring to?

[40427]

This is the message i keep getting ;

REPORTED ATTACK PAGE !
This web page at www.bmwmoa.org has been reported as an attack page and has been blocked based on your security preferences.

Attack pages try to install programs that steal private information, use your computer to attack others, or damage your system.

Some attack pages intentionally distribute harmful software, but many are compromised without the knowledge or permission of their owners.

Two bold blocks appear ; GET ME OUT OF HERE !

and WHY WAS THIS PAGE BLOCKED ?

The first bold block message , get me out of here, takes me directly back to Firefox.

The second , why was this page blocked, goes on to tell me all sorts of stuff I do not understand.

At this point i think it is way beyond my pay grade to investigate .
Doug

[Omega Man]

This is the message i keep getting ;

REPORTED ATTACK PAGE !
This web page at www.bmwmoa.org has been reported as an attack page and has been blocked based on your security preferences.

Attack pages try to install programs that steal private information, use your computer to attack others, or damage your system.

Some attack pages intentionally distribute harmful software, but many are compromised without the knowledge or permission of their owners.

Two bold blocks appear ; GET ME OUT OF HERE !

and WHY WAS THIS PAGE BLOCKED ?

The first bold block message , get me out of here, takes me directly back to Firefox.

The second , why was this page blocked, goes on to tell me all sorts of stuff I do not understand.

At this point i think it is way beyond my pay grade to investigate .
Doug

Hi Doug, I just used your link with my AV program open and all is/was fine. Based of information I have received this morning, it's the Kaspersky program that is the common denominator.
I wonder what you are running for anti-virus Doug? Gary