samsung-eternity.com is infected with walware?

[kmccanta]

I get this warning from Google when I try to browse to some subjects... I think this one was from the Hacks-n-Tricks-HTML,javascript,speed-dial... thread.

is this a real problem?

The website at www.samsung-eternity.com contains elements from the site upload.lhurgoyf.net, which appears to host malware – software that can hurt your computer or otherwise operate without your consent. Just visiting a site that contains malware can infect your computer.
For detailed information about the problems with these elements, visit the Google Safe Browsing diagnostic page for upload.lhurgoyf.net.

[nunya]

its totally possible that someone installed code on a post.
however, when dealing with hacks and cracks and tweaks, you often find false positives.
think about it, if you were about to install a piece of code that would totally alter your machine, wouldn't you want warned?

[kmccanta]

I guess my real question is:

Has anybody else seen this warning?
Anyone know if its a false positive or not?

Should I feel safe reading these posts from my work machine (on my lunch hour)? or will it infect my machine?

-k

[hiitsme]

Never seen nor heard of any problems from here. I wouldn't worry!

[Toast]

Never seen nor heard of any problems from here. I wouldn't worry!

I got this message too. Should someone contact Peter and ask about what type of banners he runs on the ads?

[Agoattamer]

Where is everyone getting this? Is this a search on google? The banners would be my guess. Could be in someone's sig also. But i need a link or know what you searched for to bring it up.

Thanks

[Toast]

Where is everyone getting this? Is this a search on google? The banners would be my guess. Could be in someone's sig also. But i need a link or know what you searched for to bring it up.

Thanks

It's google chrome. it's a notification.

[Agoattamer]

Well I think it is a bug with google chrome as no other browser tells me about this malware.

[60srocker]

I can guarantee you that the site that was mentioned in the first post is full of malware.  I just Googled the site name, and AVG (full security, paid) went berserk with popups.  The Google search page never appeared.  What was returned and 'fixed' by AVG was the site that I searched for.  I just hope that there was nothing there that got by AVG.

I've never had a search term cause an actual page, other than the search results, to appear before.

The site name is upload . lhurgoyf . net, minus the spaces.  There is no bug in Chrome.

[Agoattamer]

Well how is that site figured in on that particular forum page? We are talking about the eternity forum. Yes that website is bad but i see no links to it on the forum.

[Mahoney]

OK so I went into Linux and checked out the lhurgoyf site which is an image hosting site. So my conclusion would be that somewhere, somebody has an image from this website in their sig, or as their avatar.

The site also has a complete file hosting service which could be the reason for the malware popup.  I don't know if it's the page itself that is giving the warnings or if it might be something that is hosted there.

Either way it's a good conclusion that we are all safe, because if not, EVERYONE would be getting warnings, not just users of AVG and Chrome. AVG is a good free alternative but, known for a lot of false positives and being very sensitive. Chrome is probably just being overly cautious as it sees a reference to potential malware.

I use AntiVir and Firefox 3.5 and get no warnings, and AntiVir has always been spot on with only a few false positives.

Edit: Hmmm, well I went all around in Linux, the only spot that gives me trouble is when I click on the gallery (java script required) link, it comes up as an attack site, the rest of the site seems fine. Perhaps this is the culprit. In which case, don't go there and click the link. And here is the report.

What is the current listing status for upload.lhurgoyf.net?

    Site is listed as suspicious - visiting this web site may harm your computer.

    Part of this site was listed for suspicious activity 1 time(s) over the past 90 days.

What happened when Google visited this site?

    Of the 1 pages we tested on the site over the past 90 days, 1 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2009-10-16, and the last time suspicious content was found on this site was on 2009-10-16.

    Malicious software is hosted on 1 domain(s), including query-google.com/.

    This site was hosted on 1 network(s) including AS26347 (DREAMHOST).

Has this site acted as an intermediary resulting in further distribution of malware?

    Over the past 90 days, upload.lhurgoyf.net did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?

    No, this site has not hosted malicious software over the past 90 days.

How did this happen?

    In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.


Now that I have commented on this topic, this thread will die, and be ignored... tis the way...

[Mahoney]

Here have some more info about the problem.

It's not the site that we have been looking at that's the problem it's query-google(dot)com there must be a link somewhere on the above page to query-google that is causing the warning. Which means everybody unpanic.

The report above states that it was the link to query-google that caused the warning for that page and here is the info for query-google which actually hosts the exploits. So in conclusion don't go to the above site and click on query-google and you will be fine.

What is the current listing status for query-google.com?

    Site is listed as suspicious - visiting this web site may harm your computer.

    Part of this site was listed for suspicious activity 1 time(s) over the past 90 days.

What happened when Google visited this site?

    Of the 2 pages we tested on the site over the past 90 days, 0 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2009-10-21, and the last time suspicious content was found on this site was on 2009-10-21.

    Malicious software includes 4 scripting exploit(s), 2 exploit(s).

    This site was hosted on 1 network(s) including AS8001 (NET).

Has this site acted as an intermediary resulting in further distribution of malware?

    Over the past 90 days, query-google.com appeared to function as an intermediary for the infection of 28 site(s) including scenespain.net/, ze-games.net/, orderofmagnitude.ca/.

Has this site hosted malware?

    Yes, this site has hosted malicious software over the past 90 days. It infected 200 domain(s), including angolaxyami.com/, ze-games.net/, ociotakus.com/.

How did this happen?

    In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.



At least that's my opinion, wgaf.

[mejori]

i had to re-install windows on my home pc..and my work pc also had a pretty bad virus and had to be removed

[Mahoney]

Well that's very vague. Was it because of this site, the first site mentioned, or the second site mentioned. Was it something else completely and you are just posting random thoughts?

[60srocker]

Just for future reference, I do not run the 'free' version of AVG.  I run the full AVG Internet Security Suite with a 5 computer license for 3 years. 

There Ain't No Such Thing As A Free Lunch!  TANSTAAFL!  You always pay a price and get what you paid for.