# If you get hit by malware on the SDMB **URL:** \ **Category:** About This Message Board\ **Created:** [December 15, 2011, 6:24pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319 "2011-12-15T18:24:16Z")\ **Posts on this page:** 20\ **Page:** 4
**Author:** ![Indyellen](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/indyellen/32/4176_2.png) [@Indyellen](https://boards.straightdope.com/u/Indyellen)\ **Post date:** [May 13, 2014, 5:02pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/75 "2014-05-13T17:02:34Z")
I turned off Chrome’s built in malware protection, and was able to access. I do run AdBlock. ---
**Author:** ![Jeff\_Lichtman](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/jeff_lichtman/32/1531_2.png) [@Jeff\_Lichtman](https://boards.straightdope.com/u/Jeff_Lichtman)\ **Post date:** [May 13, 2014, 5:36pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/76 "2014-05-13T17:36:03Z")
It happened to me with Firefox. I disabled the “Block Reported Attack Sites” feature and was able to get in. I re-enabled the feature and was still able to get in. It seems like Google’s list of malware sites is unstable. ---
**Author:** ![TubaDiva](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/tubadiva/32/507_2.png) [@TubaDiva](https://boards.straightdope.com/u/TubaDiva)\ **Post date:** [May 13, 2014, 5:46pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/77 "2014-05-13T17:46:38Z")
The techs are looking at things and hope to have this resolved soon. Sorry for your incoonvenience. ---
**Author:** ![Morgyn](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/morgyn/32/3041_2.png) [@Morgyn](https://boards.straightdope.com/u/Morgyn)\ **Post date:** [May 13, 2014, 5:48pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/78 "2014-05-13T17:48:58Z")
> [@WreckingCrew](#): > > And this is now a “Reported Attack Page!” on Firefox as well. I just got this also. I can send a screen capture of the details (and will). ---
**Author:** ![Leaffan](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/leaffan/32/299_2.png) [@Leaffan](https://boards.straightdope.com/u/Leaffan)\ **Post date:** [May 13, 2014, 6:14pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/79 "2014-05-13T18:14:34Z")
Blocked by Firefox too: Attack Site. ---
**Author:** ![gaffa](https://avatars.discourse-cdn.com/v4/letter/g/e68b1a/32.png) [@gaffa](https://boards.straightdope.com/u/gaffa)\ **Post date:** [May 13, 2014, 6:34pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/80 "2014-05-13T18:34:59Z")
Pinged FireFox. ---
**Author:** ![gaffa](https://avatars.discourse-cdn.com/v4/letter/g/e68b1a/32.png) [@gaffa](https://boards.straightdope.com/u/gaffa)\ **Post date:** [May 13, 2014, 6:36pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/81 "2014-05-13T18:36:59Z")
Here’s what I got from Chrome’s report: What is the current listing status for [Straight Dope Message Board - Your direct line to thousands of the smartest, hippest people on the planet, plus a few total dipsticks.](http://boards.straightdope.com/sdmb)? Site is listed as suspicious - visiting this web site may harm your computer. What happened when Google visited this site? Of the 15895 pages we tested on the site over the past 90 days, 76 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2014-05-13, and the last time suspicious content was found on this site was on 2014-05-13. Malicious software includes 77 exploit(s). Successful infection resulted in an average of 2 new process(es) on the target machine. Malicious software is hosted on 3 domain(s), including [bingoco.net/](http://bingoco.net/), [amplifyactionset.net/](http://amplifyactionset.net/), stanstraight.pw/. This site was hosted on 1 network(s) including AS22772 (LOGIN). ---
**Author:** ![commasense](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/commasense/32/3017_2.png) [@commasense](https://boards.straightdope.com/u/commasense)\ **Post date:** [May 14, 2014, 1:16am UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/82 "2014-05-14T01:16:10Z")
This is what Firefox/Google said: > [@](#): > > What is the current listing status for [Straight Dope Message Board - Your direct line to thousands of the smartest, hippest people on the planet, plus a few total dipsticks.](http://boards.straightdope.com/sdmb)? > > ``` > Site is listed as suspicious - visiting this web site may harm your computer. > > Part of this site was listed for suspicious activity 2 time(s) over the past 90 days. > > ``` > > What happened when Google visited this site? > > ``` > Of the 18533 pages we tested on the site over the past 90 days, 80 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2014-05-13, and the last time suspicious content was found on this site was on 2014-05-13. > > Malicious software includes 81 exploit(s). Successful infection resulted in an average of 2 new process(es) on the target machine. > > Malicious software is hosted on 3 domain(s), including bingoco.net/, amplifyactionset.net/, stanstraight.pw/. > > This site was hosted on 1 network(s) including AS22772 (LOGIN). > > ``` ---
**Author:** ![BigT](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/bigt/32/12044_2.png) [@BigT](https://boards.straightdope.com/u/BigT)\ **Post date:** [May 14, 2014, 1:59am UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/83 "2014-05-14T01:59:09Z")
> [@flight](#): > > Firefox put up a bunch of barricades to getting here, saying it had been listed as a known badware site. They bumped me over to [stopbadware.org](http://stopbadware.org) . There was a link for more information provided by google, but that did not list any problems with the site. > > Even after saying I still want to come here, they give me this: > > [https://www.stopbadware.org/firefox?hl=en-US&url=http%3A%2F%2Fboards.straightdope.com%2Fsdmb%2F](https://www.stopbadware.org/firefox?hl=en-US&url=http%3A%2F%2Fboards.straightdope.com%2Fsdmb%2F) And this right here turns a good feature into a ridiculous one. It’s one thing to inform me. It even makes sense to ask if I’m sure. But to give a complete useless warning after the page has loaded in another tab? To tell me to turn away after I would have been infected if there was a problem? You want to tell me that good sites can be infected? Fine. Tell me before I make a decision, not afterwards. And let me opt out of seeing patronizing messages I don’t need. BTW, I’m pretty sure this is an ad-based attack, which is why I went ahead and came here. Plus the site will run without JavaScript enabled, if you want extra protection. With Flashblock and all other plugins set to click-to-run, I feel that the latest Firefox is pretty safe. ---
**Author:** ![Leaffan](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/leaffan/32/299_2.png) [@Leaffan](https://boards.straightdope.com/u/Leaffan)\ **Post date:** [May 14, 2014, 2:23am UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/84 "2014-05-14T02:23:43Z")
I’m getting attack warnings in Firefox again. ---
**Author:** ![Melbourne](https://avatars.discourse-cdn.com/v4/letter/m/b5e925/32.png) [@Melbourne](https://boards.straightdope.com/u/Melbourne)\ **Post date:** [May 14, 2014, 2:39am UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/85 "2014-05-14T02:39:50Z")
Firefox and Chrome both use the same source (Google) for site blacklisting. At the moment, neither MS (SmartScreen) nor ESET (SmartSecurity) are reporting a threat from TSD message boards. I’m using an old version of FF, and it’s blocking all pages correctly. That thing about bringing the page up unprotected in another tab may be a problem with a more recent FF version. The threat page from Google that I’m seeing in FF is kinda unintelligable: It says that there is malware, and that there isn’t: it’s left as an excercise for the reader to deduce that it’s probably a problem with the addvertisements. ---
**Author:** ![BigAppleBucky](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/bigapplebucky/32/178_2.png) [@BigAppleBucky](https://boards.straightdope.com/u/BigAppleBucky)\ **Post date:** [May 14, 2014, 4:54pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/86 "2014-05-14T16:54:26Z")
> [@gaffa](#): > > Here’s what I got from Chrome’s report: . . . That’s what I got. IE let me right through. My firewall did not give me any warnings either yesterday or previously. ---
**Author:** ![Honey](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/honey/32/5074_2.png) [@Honey](https://boards.straightdope.com/u/Honey)\ **Post date:** [May 21, 2014, 6:06am UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/87 "2014-05-21T06:06:53Z")
For the first time ever I received a warning today. Using IE. The warning pops up with every link I click on. This website has been reported as unsafe [http://boards.straightdope.com/sdmb/newreply.php?do=newreply&noquote=1&p=17388134](http://boards.straightdope.com/sdmb/newreply.php?do=newreply&noquote=1&p=17388134) More Details Anti-phishing Adware We recommend that you do not continue to this website. Cancel Continue anyway Report false alarm Advisory provided by Google & IObit ---
**Author:** ![Canadjun](https://avatars.discourse-cdn.com/v4/letter/c/76d3ee/32.png) [@Canadjun](https://boards.straightdope.com/u/Canadjun)\ **Post date:** [May 21, 2014, 12:48pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/88 "2014-05-21T12:48:32Z")
> [@Honey](#): > > For the first time ever I received a warning today. Using IE. The warning pops up with every link I click on. > > This website has been reported as unsafe > [http://boards.straightdope.com/sdmb/newreply.php?do=newreply&noquote=1&p=17388134](http://boards.straightdope.com/sdmb/newreply.php?do=newreply&noquote=1&p=17388134) More Details Anti-phishing Adware > > We recommend that you do not continue to this website. > Cancel Continue anyway Report false alarm > Advisory provided by Google & IObit The link you posted just prompts me to reply to a thread. ---
**Author:** ![Honey](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/honey/32/5074_2.png) [@Honey](https://boards.straightdope.com/u/Honey)\ **Post date:** [May 27, 2014, 6:47am UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/89 "2014-05-27T06:47:44Z")
> [@Canadjun](#): > > The link you posted just prompts me to reply to a thread. Sorry, it wasn’t meant to be a link. I just cut and pasted the message I received. The link was unintentional. ---
**Author:** ![Eutychus](https://avatars.discourse-cdn.com/v4/letter/e/a3d4f5/32.png) [@Eutychus](https://boards.straightdope.com/u/Eutychus)\ **Post date:** [June 2, 2014, 10:14am UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/91 "2014-06-02T10:14:36Z")
Reported. ---
**Author:** ![Gateway](https://avatars.discourse-cdn.com/v4/letter/g/dbc845/32.png) [@Gateway](https://boards.straightdope.com/u/Gateway)\ **Post date:** [June 20, 2014, 7:08pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/92 "2014-06-20T19:08:14Z")
Are there any updates on this issue? I didn’t know this was going on until I downloaded Chrome, and got the warning for this site (which is why I haven’t been showing up here lately) Especially helpful would be how many reports have there been so far, and in general what were they doing when they noticed they were hit, how bad was the problem for them, and what has been done so far to get the location of the malware. I don’t know if you (mods) have thought of this already, but have you thought about sequentially taking a certain ad down for a week, then taking another down next week, until you isolate what ad it is? (If your ad contract permits that) ---
**Author:** ![El\_Kabong](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/el_kabong/32/496_2.png) [@El\_Kabong](https://boards.straightdope.com/u/El_Kabong)\ **Post date:** [July 22, 2014, 8:23pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/93 "2014-07-22T20:23:24Z")
Twice today, while browsing the boards but prior to being logged in, the display suddenly jumps to a popup with what appears to be a fake Java out-of-date notice. Assumption of fakery due to some atrocious spelling: “Your JAVA Plugin version is too low, causing the current sites and related softwares can not be opened properly, please update your JAVA Plugin now!” Address of the popup: [http://smliehappy.com/?aff\_sub=wmd-wddcnc2-us&aff\_sub2=am1&aff\_sub3=](http://smliehappy.com/?aff_sub=wmd-wddcnc2-us&aff_sub2=am1&aff_sub3=) Time (of second occurrence) approx. 3:15 Pm Central time, US Browser: IE 9 Mods, please PM me if you need any further info. ---
**Author:** ![TubaDiva](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/tubadiva/32/507_2.png) [@TubaDiva](https://boards.straightdope.com/u/TubaDiva)\ **Post date:** [July 24, 2014, 2:12am UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/94 "2014-07-24T02:12:03Z")
Sorry this happened to you. Interesting that this only happened when you were logged out of the board. I would expect under the circumstances that if we’re generating/carrying this, with all the guests we have on the board, we’d be seeing a lot of this. I tried to look at the page in Chrome and got the “this is a phishing website” message. Have you seen it since at any time? ---
**Author:** ![No\_umlaut\_for\_U](https://avatars.discourse-cdn.com/v4/letter/n/ea5d25/32.png) [@No\_umlaut\_for\_U](https://boards.straightdope.com/u/No_umlaut_for_U)\ **Post date:** [October 6, 2014, 11:03pm UTC](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319/95 "2014-10-06T23:03:58Z")
Just got an antivirus warning from ESET: Address has been blocked: http: [//flashquantserve.com/pixel.swf?media=ad&event=played&title=spotxchange&videold=spotxchange&pageURL=&URL=&publisherId=p-04HdaWoZepDYG&labels=75134](https://flashquantserve.com/pixel.swf?media=ad&event=played&title=spotxchange&videold=spotxchange&pageURL=&URL=&publisherId=p-04HdaWoZepDYG&labels=75134) IP Address=64.94.107.56 Out of San Francisco? Would have emailed if I had known where: I have a screen shot. [Previous page](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319.md?page=3) [Next page](https://boards.straightdope.com/t/if-you-get-hit-by-malware-on-the-sdmb/606319.md?page=5)