8 replies to this topic

[ouiji]

Just wanted to give you a heads up that Bergsoft.net has been blacklisted by Yandex. This can have multiple undesired effects, like false positives on antivirus scanners, email rejections, etc. Steps can be taken to resolve this here:

 

http://yandex.com/in...rl=bergsoft.net

 

Best Regards

[Boki (Berg)]

Hi, 

 

Do you maybe know more info about which page is infected? So far I can see all is fine with main pages. Maybe there is problem with forum software bug.

 

Thank you.

[DelphiToday]

Same here:

 

16-3-2015 10:31:46    HTTP filter    file    http://www.bergsoft..../uploads?_r=0   JS/Kryptik.ABP trojan    connection terminated - quarantined   

Threat was detected upon access to web by the application: C:\Program Files (x86)\Mozilla Firefox\firefox.exe.

 

And that's for A long time.

 

Hopefully you can do something with this report.  (I use ESET) 

[Boki (Berg)]

Hm, not sure why is this. I will re-install forum.

 

Think about removing all attachments

[Boki (Berg)]

Hi,

 

Can somebody check again for malware. I have deleted code that seems to have made a problems.

 

Thanks.

[DelphiToday]

Seems to be fine now!

[Boki (Berg)]

Thanks! I hope that they (Yandex and others) will set site as clean soon.

[ouiji]

Sorry for the delay in replying, had to go out of town after I posted originally. Here is the extended information provided by Yandex, but the more I look into it, the more I think it is a false positive.

 

More information

Yandex periodically checks websites to warn users about harmful webpages. The last check (less than a week ago) showed that this site contains malware. This can happen either in accordance with the owner's intent or due to the tampering of fraudsters.

Malware:

• contains Mal/Iframe-W (data provided by Sophos).

How Yandex verifies sites

 

Here is a good page with details regarding Mal/Iframe-W from Sophos, hopefully it helps pinpoint the possible source if you haven't already.

 

 https://nakedsecurit...hack-nice-pack/

 

Best Regards,

 - ouiji

[Boki (Berg)]

Hi,

I have been registered as webmaster and this helped me to remove file from site from forum. It need some time for status to be refreshed. I will soon install new version of Invision Forum. I hope that it is more secure.