anyone else getting virus alerts on 2peas?
Post ReplyPost New TopicPosted 1/25/2013 by Free~Bird in NSBR Board
1 2 >
 

Free~Bird
'Cause I'm as free as a bird now

PeaNut 104,551
September 2003
Posts: 11,552
Layouts: 3
Loc: Missouri

Posted: 1/25/2013 5:58:37 PM
I've now had threat alerts on both of my computers for here. Just FYI.


*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*

My paintings on etsy:
Cease Watercolor Arts - Coupon code: imapea - 20% off for Peas!!



My Photography website and blog:
Cease Fire Studios

mirabelleswalker
My president has 6-pack abs.

PeaNut 175,521
November 2004
Posts: 11,596
Layouts: 14
Loc: Here today, gone to Morocco.

Posted: 1/25/2013 5:59:05 PM
Yes, on Chrome.



Rhondito
MississiPEA

PeaNut 40,147
June 2002
Posts: 24,313
Layouts: 2
Loc: Flowood, Mississippi

Posted: 1/25/2013 5:59:56 PM
Me too - I've two so far this afternoon.


Rhonda



FrozenPea

PeaNut 16,260
June 2001
Posts: 6,788
Layouts: 47
Loc: The Frozen Land of Alaska

Posted: 1/25/2013 6:00:53 PM
Yes! Just posted about this.


*~*~Kristin~*~*

marianne
~Supreme~ Game Goddess - cuz 'I' said so

PeaNut 1,638
October 1999
Posts: 66,432
Layouts: 151
Loc: MD

Posted: 1/25/2013 6:01:14 PM
I haven't had anything (Firefox). And my anti-virus program just updated today...


~ ~ ~ ~ ~ ~ ~ ~ ~ ~
"Some people find fault like there is a reward for it."
~Zig Ziglar~



BB Extraordinaire/CiCASF

Free~Bird
'Cause I'm as free as a bird now

PeaNut 104,551
September 2003
Posts: 11,552
Layouts: 3
Loc: Missouri

Posted: 1/25/2013 6:01:37 PM
I'm on IE9. AVG picked it up on both computers.


*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*

My paintings on etsy:
Cease Watercolor Arts - Coupon code: imapea - 20% off for Peas!!



My Photography website and blog:
Cease Fire Studios

gritzi
PeaFixture

PeaNut 275,594
September 2006
Posts: 3,388
Layouts: 0

Posted: 1/25/2013 6:02:29 PM
Yes, several times. I'm on Firefox.

voltagain
OklaPhoma

PeaNut 18,334
July 2001
Posts: 37,588
Layouts: 15
Loc: State of cultural confusion. Yeehaw and Aloha have collided!

Posted: 1/25/2013 6:03:31 PM
Yes. I'm on Chrome. I'm getting malware alerts. I just screen shot one that I'll send in for geek to look over.


What Your Kit Lens Can Do For You

Canon 60d, Canon 24-70mm 2.8L, Canon 70-200mm 2.8L, 50mm 1.8, 28-80, 75-300mm and Tamron 90mm 2.8 macro

marybeth72
PeaNut

PeaNut 518,644
August 2011
Posts: 173
Layouts: 0
Loc: City By The Bay

Posted: 1/25/2013 6:06:44 PM
me too, wonder what's going on


** Mom to two sweet boys **

CADoodlebug
Happy Happy Joy Joy Happy Happy Joy

PeaNut 178,445
November 2004
Posts: 17,983
Layouts: 0
Loc: Northern California

Posted: 1/25/2013 6:06:54 PM
Two on Chrome caught by AVG.


Joy

"I've reached an age where my train of thought often leaves the station without me!"



SnowWhite.
in Fairy Tale Land

PeaNut 341,421
October 2007
Posts: 6,475
Layouts: 0
Loc: Philly 'burbs

Posted: 1/25/2013 6:09:22 PM
Yup. Norton keeps picking up a Web Attack: Red Exploit Web Kit. I've seen it four times since 17:00 EST for three different source addresses and only when I loaded the main NSBR board page.

~dawn

kma
StuckOnPeas

PeaNut 1,443
September 1999
Posts: 2,324
Layouts: 9

Posted: 1/25/2013 6:12:52 PM
First time on today and yes I had one on Firefox my Norton caught.


Kim

jennifercw
5,000 FINALLY!

PeaNut 52,019
October 2002
Posts: 6,592
Layouts: 50

Posted: 1/25/2013 6:16:36 PM
I'm getting the same one as Dawn.


~ Jennifer

Neisey
PeaAddict

PeaNut 150,604
June 2004
Posts: 1,452
Layouts: 11

Posted: 1/25/2013 6:21:17 PM
Yup...AVG has picked up 2 threats - "red exploit" or something like that.

littlelambchop
PeaNut

PeaNut 350,195
December 2007
Posts: 460
Layouts: 10

Posted: 1/25/2013 6:21:32 PM
me too


Lois

*Fresca*
StuckOnPeas

PeaNut 204,709
May 2005
Posts: 2,780
Layouts: 0
Loc: Northern Illinois

Posted: 1/25/2013 6:24:19 PM
I am too.


*Debbie*


*****Today I will be happy as a bird with a frenchfry*****

x2mom
PeaFixture

PeaNut 131,952
February 2004
Posts: 3,602
Layouts: 3
Loc: central Texas

Posted: 1/25/2013 6:26:21 PM
Yes, just had two within the last 10 minutes.

{Betsy}
Creative Dreamer

PeaNut 82,675
April 2003
Posts: 10,667
Layouts: 12

Posted: 1/25/2013 6:29:45 PM
I've had at least three in just a short time. What's going on with 2Peas??? I think it is time for me to get off here before getting one my antivirus doesn't catch!


~ Betsy ~ {Formerly known as scrapn4keeps.}

Calorie Croppers Motto for 2013: "When you improve a little bit each day, eventually big things occur. Don't look for big, quick improvement. Instead, seek small improvement one day at a time. That's the only way it happens -- and when it happens, it lasts." ~ John Wooden




AngelKriC
It's football time in TENNESSEE!

PeaNut 215,522
July 2005
Posts: 19,888
Layouts: 34
Loc: Big Orange Country!

Posted: 1/25/2013 6:29:57 PM
Nope, I'm on a mac though, using firefox....


Krissy

"My husband said it was the scrapbooking or him, so I took some pictures of him packing and made the cutest pages ever!"

**Angie**
Pea Who Should Be Cleaning!

PeaNut 145,006
May 2004
Posts: 11,439
Layouts: 92
Loc: at home in front of the computer

Posted: 1/25/2013 6:31:26 PM
Yep, same as dawn....





Ouiser
Ancient Ancestor of Pea

PeaNut 196,226
March 2005
Posts: 9,342
Layouts: 0
Loc: in the South

Posted: 1/25/2013 6:35:20 PM
Chrome stopped me from coming earlier siting malware.


http://www.swagbucks.com/refer/Ouiser

cindyann49
StuckOnPeas

PeaNut 88,663
May 2003
Posts: 2,765
Layouts: 110
Loc: Indiana

Posted: 1/25/2013 6:41:15 PM
yep me too






grakka
BucketHead

PeaNut 397,370
October 2008
Posts: 667
Layouts: 0

Posted: 1/25/2013 6:41:59 PM
Me too, several times!

Nantini
Ancient Ancestor of Pea

PeaNut 274,935
August 2006
Posts: 5,696
Layouts: 8

Posted: 1/25/2013 6:45:09 PM
Yep, I have it but Sophos isolated it. Then our back up virus protection grabbed it.

Ms. Liz
Practically Perfect in Every Way

PeaNut 199,404
April 2005
Posts: 7,268
Layouts: 2
Loc: deep in the hundred acre woods

Posted: 1/25/2013 6:45:33 PM

Yup. Norton keeps picking up a Web Attack: Red Exploit Web Kit. I've seen it four times since 17:00 EST for three different source addresses and only when I loaded the main NSBR board page.



I've had that one pop up on me several times today too, but from other places, not from 2 peas.




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
I eat my peas with honey. I've done it all my life.
It makes the peas taste funny, But it keeps them on the knife.



mommythreee
PeaNut

PeaNut 519,746
September 2011
Posts: 305
Layouts: 0

Posted: 1/25/2013 6:50:08 PM
ditto what snow white said....on norton antivirus.....wonder whats up?

lovetodigi
Ancient Ancestor of Pea

PeaNut 257,022
April 2006
Posts: 8,468
Layouts: 5
Loc: USA

Posted: 1/25/2013 6:51:31 PM
I haven't seen anything, but I am on my iPad. Did not see anything earlier om my Mac.




Sony a77
Sony 18-70mm F3.5/5.6, Sony 75-300mm f/4.5-5.6,
Sony 50mm 1.8, Sony DT 35mm f/1.8 SAM
Tamron SP 90mm f/2.8 Di 1:1 AF Macro AF
Tamron 18-270mm F/3.5-6.3 AF Zoom with Macro
MacBook Pro 15" (Mid 2012)
Photoshop CS6 & PSE 11
Lightroom 4

Steph725
Sweet Tea Lovin' Pea

PeaNut 236,282
December 2005
Posts: 6,157
Layouts: 109
Loc: North Texas

Posted: 1/25/2013 6:53:27 PM
I got it a few times on Chrome.



BOO!
Sunny Side Up!

PeaNut 52,709
October 2002
Posts: 20,613
Layouts: 95
Loc: watching Top Chef Canada

Posted: 1/25/2013 7:00:12 PM
Yep! My anti-virus software stopped an attack ... I'm outta here!


Lisa D.J.

Canon 7D:70-200mm f/2.8L:85mm f/1.8:60mm macro and PSCS5


TXMary
That's my island!

PeaNut 174,226
October 2004
Posts: 7,777
Layouts: 0
Loc: Central Texas/Port Aransas

Posted: 1/25/2013 7:37:21 PM

Norton keeps picking up a Web Attack: Red Exploit Web Kit.


This is what I'm getting.



*melrose*
PeaFixture

PeaNut 263,952
June 2006
Posts: 3,739
Layouts: 60
Loc: in the land of fruit, nuts, flakes & quakes!

Posted: 1/25/2013 7:39:42 PM

Red Exploit Web Kit


My free AVG caught it...I'm using Chrome.


melrose
i'm living my *dash*, are YOU?
the dash movie
the gratitude campaign ~ join today!

doesitmatter?
Ancient Ancestor of Pea

PeaNut 509,811
May 2011
Posts: 6,534
Layouts: 27

Posted: 1/25/2013 7:40:20 PM
Have only been on my phone here today.... But now I won't log in from my computer!


Child of God, follower of Jesus, and so thankful for His presence in my life <><
Uploaded with iPhone client

-Tara-

PeaNut 158,177
July 2004
Posts: 7,559
Layouts: 90
Loc: Pacific Northwest

Posted: 1/25/2013 7:46:59 PM
Yes, on our home computer.


Uploaded with iPhone client

mnm_y2
Organize This... Organize That..

PeaNut 134,104
March 2004
Posts: 5,854
Layouts: 126
Loc: sittin' right here!

Posted: 1/25/2013 7:51:42 PM
yes... im on chrome


**********
~Claudia~
Happily married to my Salvadoreno y Orgullosa de ser Mexicana. Lovin' my 3 boys. Thirty-One Gifts is my newest adventure & having so much fun!

My Blog

scrapintimenow
PeaNut

PeaNut 578,239
January 2013
Posts: 72
Layouts: 0
Loc: NC

Posted: 1/25/2013 8:00:47 PM
Yes 4 times.
Uploaded with iPhone client

yivit
I thought this was an autonomous collective

PeaNut 159,210
July 2004
Posts: 10,469
Layouts: 3
Loc: Houston

Posted: 1/25/2013 8:19:44 PM
tried replying a moment ago and got bad gateway...

does anyone have any other details they can share? I'm interested because I look at stuff like that as part of my job.



If this is coffee, please bring me some tea; but if this is tea, please bring me some coffee. - Abraham Lincoln

yivit
I thought this was an autonomous collective

PeaNut 159,210
July 2004
Posts: 10,469
Layouts: 3
Loc: Houston

Posted: 1/25/2013 8:27:36 PM
Ah, I think I found my own answer, from another thread. It looks like 2peas got what was probably an iframe injected that was pointing at another site that appears to have been compromised.

Maybe the bad gateway was from TPTB removing it. Simple removal won't do the trick though - the CMS is vulnerable in some way because otherwise it wouldn't have happened.



If this is coffee, please bring me some tea; but if this is tea, please bring me some coffee. - Abraham Lincoln

LuvLanette30
PeaAddict

PeaNut 124,944
January 2004
Posts: 1,972
Layouts: 0
Loc: Northern California,*somewhat happy*

Posted: 1/25/2013 8:48:17 PM
I just got home seen the thread running a scan now.. I'm on Chrome also...Any one have more problems?


Laura
Divorced *hates it but no choice given*
DS is 8yrs old and in 2nd grade doing well...

People travel to wonder at the height of the mountains,
at the huge waves of the seas, at the long course of the rivers,
at the vast compass of the ocean,
at the circular motion of the stars,
and yet they pass by themselves without wondering.

"only trust some one who can see three things in you:"
" The Sorrow behind your smile,
The Love behind your anger,
and the reason behind your silence"

Annabella
Leads a Charmed Life

PeaNut 43,843
July 2002
Posts: 43,799
Layouts: 46
Loc: East Coast

Posted: 1/25/2013 8:50:55 PM
Yes on mozilla caught by AVG.




3kidmama
Ancient Ancestor of Pea

PeaNut 268,201
July 2006
Posts: 5,553
Layouts: 8
Loc: Northwoods

Posted: 1/25/2013 8:59:01 PM
Yep, same thing here caught by AVG - I'm on Firefox too.

SnowWhite.
in Fairy Tale Land

PeaNut 341,421
October 2007
Posts: 6,475
Layouts: 0
Loc: Philly 'burbs

Posted: 1/25/2013 9:05:57 PM
Oh yivit, thanks for the geek speak

~dawn

gale w
shiny farmwife

PeaNut 40,275
June 2002
Posts: 23,530
Layouts: 52
Loc: Indiana

Posted: 1/25/2013 9:20:26 PM
I had it several times today. I'm using firefox and avg. One popped up right after I clicked on 2 peas and then opened an email. At first I thought it was from the email but then it happened again.


Wash: "A man walks down the street in that hat, people know he's not afraid of anything."
Jayne: "Damn straight."

my blog
my swagbucks referral link

SuPeaNatural
PeaAddict

PeaNut 412,905
February 2009
Posts: 1,689
Layouts: 5

Posted: 1/25/2013 9:40:17 PM
Me too, 3 or 4 so far (Web Attack: Red Exploit Web Kit), my AVG picked it up. I didn't realise it was coming from here.



yivit
I thought this was an autonomous collective

PeaNut 159,210
July 2004
Posts: 10,469
Layouts: 3
Loc: Houston

Posted: 1/25/2013 9:47:38 PM
It wasn't from here, not directly at least. Some code got inserted into 2Peas that loaded another site (a Canadian site that looks like it was also compromised, but worse) that was hosting malicious code.

I just wish I had the line of code that was injected at 2Peas so I could run some of my tools against it to know exactly what it was hosting - probably ZeuS or BlackHole Exploit Kit since they're the two 'popular' ones. It's good to know that at least some people had adequate protection.



If this is coffee, please bring me some tea; but if this is tea, please bring me some coffee. - Abraham Lincoln

doesitmatter?
Ancient Ancestor of Pea

PeaNut 509,811
May 2011
Posts: 6,534
Layouts: 27

Posted: 1/25/2013 9:52:34 PM
Anyone getting other peoples avatars on their own posts in this thread?


Child of God, follower of Jesus, and so thankful for His presence in my life <><
Uploaded with iPhone client

peainmominca
Stuck In The Bucket

PeaNut 286,523
December 2006
Posts: 701
Layouts: 0

Posted: 1/25/2013 9:54:05 PM
I got an alert on my iPad when I tried to access the NSBR thru safari. Going thru the app didn't give me an alert though.


Uploaded with iPhone client

Darkangel090260
PeaFixture

PeaNut 308,882
April 2007
Posts: 3,457
Layouts: 15

Posted: 1/26/2013 1:29:21 AM
some one posted a link that is making the problem. Use with Chrome you can see what it is.

this is what information i git from chrome
Safe Browsing
Diagnostic page for twopeasinabucket.com

What is the current listing status for twopeasinabucket.com?
Site is listed as suspicious - visiting this web site may harm your computer.

What happened when Google visited this site?
Of the 194 pages we tested on the site over the past 90 days, 0 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2013-01-25, and suspicious content was never found on this site within the past 90 days.
Malicious software is hosted on 1 domain(s), including anormalbloodsugarlevels.com/.

This site was hosted on 2 network(s) including AS36351 (SOFTLAYER), AS15169 (Google Internet Backbone).

Has this site acted as an intermediary resulting in further distribution of malware?
Over the past 90 days, twopeasinabucket.com did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?
No, this site has not hosted malicious software over the past 90 days.

How did this happen?
In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.

Next steps:
Return to the previous page.
If you are the owner of this web site, you can request a review of your site using Google Webmaster Tools. More information about the review process is available in Google's Webmaster Help Center.


I have quite a few learing disabilitys that effect my spelling a grammer. I do know my grammer and spelling suck. I have been working on this problem all my adult life.

LuvLanette30
PeaAddict

PeaNut 124,944
January 2004
Posts: 1,972
Layouts: 0
Loc: Northern California,*somewhat happy*

Posted: 1/26/2013 1:39:44 AM
Yes I finally got it tonight on chrome. So far nothing big but I am reading threads on it and how to block in case. I ran a scan and nothing came of it. Running full scan now on my lappy. I hope to not have to reformat all this n redownload stuff..That'll take ALL day. Oi!

I am wondering if it's google that is having issues? Hm? I am able to acess 2peas from Internet Explorer so far with no issues.


Laura
Divorced *hates it but no choice given*
DS is 8yrs old and in 2nd grade doing well...

People travel to wonder at the height of the mountains,
at the huge waves of the seas, at the long course of the rivers,
at the vast compass of the ocean,
at the circular motion of the stars,
and yet they pass by themselves without wondering.

"only trust some one who can see three things in you:"
" The Sorrow behind your smile,
The Love behind your anger,
and the reason behind your silence"

Kellapea
PeaAddict

PeaNut 387,334
August 2008
Posts: 1,172
Layouts: 0

Posted: 1/26/2013 5:49:10 AM
I use Ie9 with a Bing search bar and I got it.

See also this 2 Peas thread. about the same alerts.

tlsmi
PeaAddict

PeaNut 329,106
July 2007
Posts: 1,434
Layouts: 0

Posted: 1/26/2013 7:11:19 AM
Chrome here. Alert yesterday afternoon. Trojan caught by Kaspersky.




"The difference between ignorance and apathy?
I don't know, and I couldn't care less..."
1 2 >
Post Reply . Post New TopicShow/Hide Icons . Show/Hide Signatures
Hide
{{ title }}
{{ icon }}
{{ body }}
{{ footer }}