Opera scam Warning at RVG

[Gorf]

Well, it now seems Norton Internet Security is branding the site as a dangerous site as well.  I just got a message from Onthinice on another forum that Norton will not let him log on to RVG.  Here is what he sent me:

Hey! I tried to get on RetroVideoGamer today and a little box from my Norton Internet Security, said the site is unsafe, two threats detected.

I asked him to get me a screen shot.  Could someone be doing this to the site deliberately?

Yes, certain 'people' not happy with ruining a more popular set of Atari/retro gaming sites, but are so
bitter that to this day, years well after the fact, they still like to slip the ol' knife in the back. Why is this
you ask and why after all this time these certain 'people' if you will are still vengent? Simple! Sometimes
when the likes of said 'people' are caught red handed playing the fool by someone clearly on to their
deceptions, the truth of them being revealed destroys them from within so hard that they can't recover.

So their only hope of saving face, is to commit all sorts of nefarious acts, including back stabbing people
with lies and other misinformation on sites that said adversaries of their slander have no ability to defend
or answer to their charges...and anyone else that may try will also share the fate of unreasonable banned
for life status. One must understand, to allow the truth to be told is never a good thing when an entire
site of fools is trying to perpetrate a lie because they were found out for the creeps they really, truly are.

I'm not saying any one is doing such a thing :26:

Again, not accusing anyone,  :4:

[Gorf]

Interesting....after posting my previous post in this thread, I wanted to look at my profile and got
the following warning from AVG



This link on retrovideogamer.co.uk is safe for browsing

http://www.retrovideogamer.co.uk/themes/default/scripts/profile.js


However, we recommend caution while surfing on retrovideogamer.co.uk
 In the last 30 days AVG has detected:
1 active threats
 5 compromised pages


Unfortunately, it does not tell me which pages but you might want to take a look into it Zapiy...

[zapiy]

https://safeweb.norton.com/report/show?url=www.retrovideogamer.co.uk

This shows clear from Norton.


As for AVG, that does not like any iframes and we have a couple on the frontpage. All are good code so i cant help that.

[onthinice]

Just got this message. Go to full report and it says all clear. 

[TrekMD]

That doesn't make sense. 

[onthinice]

Partial solution. When I logged in to RVG, my wife's email was still logged on the computer. Attacks came at every page click. I logged out and they quit.

If I search the site as a guest, then no attacks either.

[TL]

Sounds like it might be browser hijacks from another source then

[Rogue Trooper]

Tried logging in here last night as mate brought his laptop into work, they've wi-fi in canteen now.He was using Firefox and it gave me a message alone lines of...

'The Web Page you have requested is caterogized as malware and has been blocked by Firefox' (and then:Please contact XXX XXXX-Our company owners support site for more information, cannot give out company name for the legal crap we had to sign).

[zapiy]

I am at a loss now...

We are clean here http://sitecheck.sucuri.net/results/www.retrovideogamer.co.uk

It appears to be false positives.

A false positive, also known as a false detection or false alarm, occurs when an antivirus program detects a known virus string in an uninfected file. The file, while not infected with an actual virus, does contain a string of characters that matches a string from an actual virus.

A false positive can also occur when a program performs an action, which appears to the antivirus program to be a virus-like activity.

Norton AntiVirus and Symantec AntiVirus Corporate Edition use Bloodhound heuristics to detect virus-like activity.

Examples of such activity can include, but are not limited to, writing to the master boot record of the hard disk, making changes to a system file, or running a custom macro in a program such as Microsoft Word.

False detections, once confirmed, are usually corrected as soon as possible

[TrekMD]

Well, this is different now.  This is Firefox itself blocking the page and marking it as malware.  I wonder how they ID pages that have malware.  It may necessary to contact Mozilla directly on this one.

[zapiy]

I only use Firefox on every PC in the house and i have no issues..

[TrekMD]

I use Firefox as well and this happened to me once a while back and I just figured it was a fluke.  This was before this became an issue with Norton, WOT, etc.  Firefox does have the ability to block pages it deems unsafe, even if whatever information they use is wrong. 

[zapiy]

I think they are all false positives of the scanner sees a string in some code thats similar to a virus string it will flag it..

[TrekMD]

I think they are all false positives of the scanner sees a string in some code thats similar to a virus string it will flag it..

Well, given everything that you've had checked, they may very well be false positive findings that are causing the problem.  It's just annoying because it may be driving folks away from the page.

[zapiy]

We had some signatures that were pointing to dodgy sites but they have all gone.

These are something i will look at but if we are showing clean on all the web scan sites then we are clean..