google chrome telling me that ae86dc is hosting mailware??? wtf?

[macca1590]

so i type in the adress or follow a link to anything within ae86dc and i get a big red screen saying that this site hosts mailware blah blah click there to continue anyway. so i click anyway cause i would hope that everything is ok, it has only done this to me just now and i was on this morning, like 9~10ish and it was normal. anyone else having drams like this or is it just me?

ps. im using win xp, google chrome and have trend mirco 09 internet security

[slide86]

wow so its not just me then

i am running mac with safari and i am getting the same thing

[KE70]

I'm getting the same error with Firefox, have to browse using IE.

Make sure your virus scanner is upto date as it could be for real, lol

[KurtHS]

I've got it with Firefox/XP as well.

[Pidgey]

So am i, using firefox.
Just go into tools, then options, then security, then turn attack sites off.
Shit is stupid.

[genkin]

But WHY is it trying to block AE86DC? That's what worries me.
Could admin please confirm if they have changed any setting today?

[ae86]

ok to sort out some of you guys, firefox is shit and runs like a dog, get chrome.
as for the origional issue is it mailware or malware?

[MarmO.]

i was getting the same thing, said it found a link to a malware or sumthing nothing really to worry about to much imo
(firefox/vista pro)

[77crown]

could be a link someone posted, which could be the prob just type address in not google it. worked fine for me

[Victim]

something similar popped up for me.
The site tried to run some suspicious .EXE file, embedded in an encrypted PDF.
I disallowed it, and nothing undue happened.
But with so many people reporting suspicious activity, it's fairly obvious there is something running amok in the code.

Windows 7 Premium / Internet Explorer

[R&D Mechanical]

So am i, using firefox.
Just go into tools, then options, then security, then turn attack sites off.
Shit is stupid.


This worked for me (firefox, windows 7) now its back to normal, i was shitting my self that i looked up too much porn and fucked my computer ahahha

[MarmO.]

ahahha who ever does that ;) not me lol.

it was saying somthing about google searched the site and found two things meh lol

[Todd]

for the record it happened on rollaclub, and toymods also. i presume it has something to do with an advertisement or something (which i read on rollaclub).
but supposedly has been taken care of. i did the same as others above me have, and there are no issues.
also for reference i am on a mac with firefox

[sundee]

for mac's just got into pref, security and un tick the fraudulant website box.

This is what the problem is:



Safe Browsing
Diagnostic page for ae86drivingclub.com.au

What is the current listing status for ae86drivingclub.com.au?
Site is listed as suspicious - visiting this web site may harm your computer.

Part of this site was listed for suspicious activity 3 time(s) over the past 90 days.

What happened when Google visited this site?
Of the 85 pages we tested on the site over the past 90 days, 9 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2010-09-16, and the last time suspicious content was found on this site was on 2010-09-15.
Malicious software is hosted on 1 domain(s), including blamesllek.com/.

1 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site, including bannerspace.com.au/.

This site was hosted on 1 network(s) including AS45671 (SAU).

Has this site acted as an intermediary resulting in further distribution of malware?
Over the past 90 days, ae86drivingclub.com.au did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?
No, this site has not hosted malicious software over the past 90 days.

How did this happen?
In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.

Next steps:
Return to the previous page.
If you are the owner of this web site, you can request a review of your site using Google Webmaster Tools. More information about the review process is available in Google's Webmaster Help Center.

[wartex11]

from ozhonda:

Dear wartex11,

If you've been trying to access Ozhonda today and have been receiving an error along the lines of:

"Reported Attack Page! - This web page at www.ozhonda.com (http://www.ozhonda.com/) has been reported as an attack page and has been blocked based on your security preferences."

This was due to a vulnerability in the software used to deliver the banner ads on the site (we simply insert a third party's code). We have since removed all code until that issue is cleared up.

We've also contacted Google in order to get the blacklisting of the site removed. I have done some quick checks on the webserver and don't see any other major problems at this stage. If I do come across anything I will let you know.

If you are concerned about the security of your system, you can update your anti-virus software and run a full system scan (as a precautionary measure). A good free antivirus program is Avast (just do a web search for it).

To get TEMPORARY access to the site, you can do the following:

For Google Chrome:
1. Click the little spanner icon on the right hand side of the menu bar 2. Click Options on the menu 3. Click the "Under the Hood" tab 4. Untick "Enable phishing and malware protection" as a TEMPORARY fix

For Firefox:
Go to Tools -> Options -> Security -> untick "Block reported attack sites" (Firefox version 3.6.10)


Please note that the above is a TEMPORARY fix only, and strongly urge you to reverse the above changes to your browser in a couple of days.

Apologies for the inconvenience but we thought it best that you be informed. We will not be putting any new third party code up until it is safe.

There is a thread in the Site Discussion forum if you wish to post any comments. Please do not reply to this email as it is not checked by anyone.

Regards

-Win (wynode)

[maxhag]

I am getting the same malware warning as stated in first post. It has been doing it for 2 days now and continues to do it.. The same warning comes up when I go to TOYMODS aswell. The only other time I have ever got this warning was when I have visited other dodgy websites, ie; torrent sites or porn.... So something is ringing the alarm bells.

To those using Internet Explorer, IE is the most UNSECURE of all the browsers. Google Chrome is recomended......

[Nicko]

What Wartex Said above is correct.

The banner advertising people got exploited, which made google index multiple sites as being "attack pages"

IT DOES NOT MATTER WHAT BROWSER YOU USE, GOOGLE HAD INDEXED THESE SITES AS BEING MALICIOUS.

Should all be fixed now though...

Case closed.

Should be back to normal soon.

[floody]

All the same run Hijackthis and pick out any suss BHOs etc.