Jump to content


Photo

Bergsoft.net Blacklisted by Yandex


  • Please log in to reply
8 replies to this topic

#1 ouiji

ouiji
  • Members
  • 7 posts

Posted 08 March 2015 - 09:59 AM

Just wanted to give you a heads up that Bergsoft.net has been blacklisted by Yandex. This can have multiple undesired effects, like false positives on antivirus scanners, email rejections, etc. Steps can be taken to resolve this here:

 

http://yandex.com/in...rl=bergsoft.net

 

Best Regards



#2 Boki (Berg)

Boki (Berg)

    Boki (Berg)

  • Forum Admin
  • PipPipPipPipPip
  • 8,191 posts
  • Gender:Male

Posted 13 March 2015 - 06:07 AM

Hi, 

 

Do you maybe know more info about which page is infected? So far I can see all is fine with main pages. Maybe there is problem with forum software bug.

 

Thank you.


boki@bergsoft.net | LinkedIn Profile
--
BergSoft Home Page: www.bergsoft.net
Users Section: users.bergsoft.net
Articles and Tutorials: help.bergsoft.net (Developers Network)
--
BergSoft Facebook page
--
Send us applications made with our components and we will submit them on: www.bergsoft.net/apps.htm. Link to this page will be also set on home page too.

#3 DelphiToday

DelphiToday
  • Members
  • 146 posts
  • Gender:Male

Posted 16 March 2015 - 12:36 PM

Same here:

 

16-3-2015 10:31:46    HTTP filter    file    http://www.bergsoft..../uploads?_r=0   JS/Kryptik.ABP trojan    connection terminated - quarantined   

Threat was detected upon access to web by the application: C:\Program Files (x86)\Mozilla Firefox\firefox.exe.

 

And that's for A long time.

 

Hopefully you can do something with this report.  (I use ESET) 



#4 Boki (Berg)

Boki (Berg)

    Boki (Berg)

  • Forum Admin
  • PipPipPipPipPip
  • 8,191 posts
  • Gender:Male

Posted 16 March 2015 - 01:42 PM

Hm, not sure why is this. I will re-install forum.

 

Think about removing all attachments :(


boki@bergsoft.net | LinkedIn Profile
--
BergSoft Home Page: www.bergsoft.net
Users Section: users.bergsoft.net
Articles and Tutorials: help.bergsoft.net (Developers Network)
--
BergSoft Facebook page
--
Send us applications made with our components and we will submit them on: www.bergsoft.net/apps.htm. Link to this page will be also set on home page too.

#5 Boki (Berg)

Boki (Berg)

    Boki (Berg)

  • Forum Admin
  • PipPipPipPipPip
  • 8,191 posts
  • Gender:Male

Posted 20 March 2015 - 10:16 PM

Hi,

 

Can somebody check again for malware. I have deleted code that seems to have made a problems.

 

Thanks.


boki@bergsoft.net | LinkedIn Profile
--
BergSoft Home Page: www.bergsoft.net
Users Section: users.bergsoft.net
Articles and Tutorials: help.bergsoft.net (Developers Network)
--
BergSoft Facebook page
--
Send us applications made with our components and we will submit them on: www.bergsoft.net/apps.htm. Link to this page will be also set on home page too.

#6 DelphiToday

DelphiToday
  • Members
  • 146 posts
  • Gender:Male

Posted 21 March 2015 - 08:58 AM

Seems to be fine now!



#7 Boki (Berg)

Boki (Berg)

    Boki (Berg)

  • Forum Admin
  • PipPipPipPipPip
  • 8,191 posts
  • Gender:Male

Posted 21 March 2015 - 10:04 AM

Thanks! I hope that they (Yandex and others) will set site as clean soon.


boki@bergsoft.net | LinkedIn Profile
--
BergSoft Home Page: www.bergsoft.net
Users Section: users.bergsoft.net
Articles and Tutorials: help.bergsoft.net (Developers Network)
--
BergSoft Facebook page
--
Send us applications made with our components and we will submit them on: www.bergsoft.net/apps.htm. Link to this page will be also set on home page too.

#8 ouiji

ouiji
  • Members
  • 7 posts

Posted 23 March 2015 - 06:02 AM

Sorry for the delay in replying, had to go out of town after I posted originally. Here is the extended information provided by Yandex, but the more I look into it, the more I think it is a false positive.

 

More information

Yandex periodically checks websites to warn users about harmful webpages. The last check (less than a week ago) showed that this site contains malware. This can happen either in accordance with the owner's intent or due to the tampering of fraudsters.

Malware:

How Yandex verifies sites

 

Here is a good page with details regarding Mal/Iframe-W from Sophos, hopefully it helps pinpoint the possible source if you haven't already.

 

 https://nakedsecurit...hack-nice-pack/

 

Best Regards,

 - ouiji



#9 Boki (Berg)

Boki (Berg)

    Boki (Berg)

  • Forum Admin
  • PipPipPipPipPip
  • 8,191 posts
  • Gender:Male

Posted 24 March 2015 - 02:49 AM

Hi,

I have been registered as webmaster and this helped me to remove file from site from forum. It need some time for status to be refreshed. I will soon install new version of Invision Forum. I hope that it is more secure.
boki@bergsoft.net | LinkedIn Profile
--
BergSoft Home Page: www.bergsoft.net
Users Section: users.bergsoft.net
Articles and Tutorials: help.bergsoft.net (Developers Network)
--
BergSoft Facebook page
--
Send us applications made with our components and we will submit them on: www.bergsoft.net/apps.htm. Link to this page will be also set on home page too.




1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users