Panic Mode on (80) is reporting malware in Chrome !

Message boards : Number crunching : Panic Mode on (80) is reporting malware in Chrome !

Author	Message
Big Reg - AFK, I may be some time..☺.↓▼Wheeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee Send message Joined: 31 May 99 Posts: 83 Credit: 79,599,544 RAC: 202,481	Message 1332584 - Posted: 29 Jan 2013, 22:59:59 UTC
	I am getting this when I try to access the thread. Anybody else seeing malware there ? Google Chrome has blocked access to this page on setiathome.berkeley.edu. Content from valid.canardpc.com, a known malware distributor, has been inserted into this web page. Visiting this page now is very likely to infect your computer with malware. ____________
	ID: 1332584 ·

Richard Haselgrove Volunteer tester Send message Joined: 4 Jul 99 Posts: 7459 Credit: 39,678,352 RAC: 33,770	Message 1332589 - Posted: 29 Jan 2013, 23:17:32 UTC - in response to Message 1332584. Last modified: 29 Jan 2013, 23:23:18 UTC
	I am getting this when I try to access the thread. Anybody else seeing malware there ? Google Chrome has blocked access to this page on setiathome.berkeley.edu. Content from valid.canardpc.com, a known malware distributor, has been inserted into this web page. Visiting this page now is very likely to infect your computer with malware. I'm using Google Chrome, and I'm getting no warnings when either reading or posting in that thread. I have user signatures disabled via community preferences - they are the most likely vector for any malware on this board. Edit - yes, I get warnings too when I turn user signatures back on.
	ID: 1332589 ·

Big Reg - AFK, I may be some time..☺.↓▼Wheeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee Send message Joined: 31 May 99 Posts: 83 Credit: 79,599,544 RAC: 202,481	Message 1332590 - Posted: 29 Jan 2013, 23:25:14 UTC - in response to Message 1332589.
	Yes, it stops when I disable signatures too. I wonder who has the fancy malware enabled signature block ?
	ID: 1332590 ·

Zapped Sparky Volunteer moderator Volunteer tester Send message Joined: 30 Aug 08 Posts: 2208 Credit: 630,045 RAC: 972	Message 1332591 - Posted: 29 Jan 2013, 23:29:54 UTC
	I have show images as links and get no warning, if I switch that off I get the warning. ____________ In an alternate universe, it was a ZX81 that asked for clothes, boots and motorcycle. Beer/wine o'clock, the best of the o'clocks. Humpty dumpty sat on a wall, along came a giant, and cooked him for breakfast.
	ID: 1332591 ·

Richard Haselgrove Volunteer tester Send message Joined: 4 Jul 99 Posts: 7459 Credit: 39,678,352 RAC: 33,770	Message 1332592 - Posted: 29 Jan 2013, 23:45:13 UTC - in response to Message 1332590.
	Yes, it stops when I disable signatures too. I wonder who has the fancy malware enabled signature block ? By setting one message per page, and stepping through: I got the first warning on a message by Siran d'Vel'nahr.
	ID: 1332592 ·

Big Reg - AFK, I may be some time..☺.↓▼Wheeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee Send message Joined: 31 May 99 Posts: 83 Credit: 79,599,544 RAC: 202,481	Message 1332593 - Posted: 29 Jan 2013, 23:47:31 UTC - in response to Message 1332591.
	My Spock-like logic has deduced that it is an externally linked image in a signature block. That narrows it down a bit. lol
	ID: 1332593 ·

Big Reg - AFK, I may be some time..☺.↓▼Wheeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee Send message Joined: 31 May 99 Posts: 83 Credit: 79,599,544 RAC: 202,481	Message 1332594 - Posted: 29 Jan 2013, 23:49:45 UTC - in response to Message 1332592.
	CMDR Siran d'Vel'nahr XO USS Vre'kasht NCC-33187 ? A Vulcan in the Federation, posting malware ? ____________
	ID: 1332594 ·

Richard Haselgrove Volunteer tester Send message Joined: 4 Jul 99 Posts: 7459 Credit: 39,678,352 RAC: 33,770	Message 1332595 - Posted: 29 Jan 2013, 23:51:12 UTC - in response to Message 1332593.
	My Spock-like logic has deduced that it is an externally linked image in a signature block. That narrows it down a bit. lol Siran has "http://valid.canardpc.com/cache/banner/1662584.png" in his signature block - that's the hosting site in the Chrome warning. His other image (his personal website) doesn't cause any warnings in Chrome.
	ID: 1332595 ·

Big Reg - AFK, I may be some time..☺.↓▼Wheeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee Send message Joined: 31 May 99 Posts: 83 Credit: 79,599,544 RAC: 202,481	Message 1332596 - Posted: 29 Jan 2013, 23:58:51 UTC - in response to Message 1332595.
	Well tracked Richard. I don't think a .png can have any active content in it, it must be that canardpc.com are a very naughty bunch.. French Duck computers....
	ID: 1332596 ·

j mercer Send message Joined: 3 Jun 99 Posts: 452 Credit: 11,197,952 RAC: 1,000	Message 1332599 - Posted: 30 Jan 2013, 0:16:48 UTC
	The png is a 'CPU-Z' validation of his computer. ____________ ...
	ID: 1332599 ·

N9JFE Send message Joined: 4 Oct 99 Posts: 2521 Credit: 8,424,556 RAC: 14,743	Message 1332653 - Posted: 30 Jan 2013, 4:16:40 UTC
	Earlier today at work the Panic Mode thread just stalled while loading. This happened on both Explorer and Firefox. I suspect our firewall was choking on something, possibly that same image, but it wasn't sticking at that point or simply refusing to load the image like you might expect. A few weeks ago the whole page was getting blocked by the firewall, but it cleared when the thread grew to a new page. This time it was different. And right now, I'm using Chrome at home and not getting a problem, with signatures fully enabled. ____________ David Sitting on my butt while others boldly go, Waiting for a message from a small furry creature from Alpha Centauri.
	ID: 1332653 ·

Siran d'Vel'nahr Volunteer tester Send message Joined: 23 May 99 Posts: 5623 Credit: 3,515,051 RAC: 3,080	Message 1332762 - Posted: 30 Jan 2013, 12:55:56 UTC Last modified: 30 Jan 2013, 13:05:11 UTC
	Greetings guys, This is a total surprise to me. I have had that link in my sig for years with no problem until now. I have removed the link from my sig. My guess is that the server has been hit. I experienced this same thing in the club I am in; a website was no longer accessible because Google had it blocked as an attack site. My apologies for this. I am not one for advocating the spread of malware. Keep on BOINCing...! :) [edit] I do not use Chrome myself, do not really care for it personally. I use, and have used, Firefox since the early days. I have received no warning from going into a thread here that I have posted in. Strange, strange indeed. :/ [/edit] ____________ CMDR Siran d'Vel'nahr XO USS Vre'kasht NCC-33187 Siran's website: [ ONLINE! ]
	ID: 1332762 ·

Ex Volunteer moderator Volunteer tester Send message Joined: 12 Mar 12 Posts: 2883 Credit: 1,158,983 RAC: 803	Message 1332808 - Posted: 30 Jan 2013, 15:27:02 UTC
	What a nice guy! Everyone appreciates it. It's not the first time someone's sig, or a posted link/pic here has triggered anti-malware software. Sometimes it just happens. ____________ -Dave #2 3.2.0-33
	ID: 1332808 ·

James Sotherden Volunteer moderator Send message Joined: 16 May 99 Posts: 6051 Credit: 14,696,510 RAC: 21,844	Message 1332831 - Posted: 30 Jan 2013, 16:43:05 UTC
	Now that the problem is resolved I will lock this thread so as not to confuse posters in to thinking that this is a new panic thread. ____________
	ID: 1332831 ·

Message boards : Number crunching : Panic Mode on (80) is reporting malware in Chrome !