Malicious Link alert from Kaspersky

ChaosTheory

Virtual Reality Hero
Joined
April 5, 2011
Messages
1,748
Location
San Juan Islands, WA
Kaspersky is alerting at 9:12 and again a few mins later on this site.

15.09.2016 09.12.39;Dangerous URL blocked;hxxp://cvuxiaxh.bid/ts-chrome-34/?br=chrome&lang=en&n=1-888-683-6824 listed in database of malicious URLs;Google Chrome;09/15/2016 09:12:39

Edit Myrthos: Travel there on your own risk. If you want to travel there you need to replace hxxp:// by http://
 
Last edited by a moderator:
Joined
Apr 5, 2011
Messages
1,748
Location
San Juan Islands, WA
That's a malicious link, alright. You should edit the URL in your post to make it invalid, so it can't be clicked on - make it hxxp:// or something.

Is there any kind of kaspersky log you could upload?
 
Joined
Nov 8, 2014
Messages
12,085
That's a malicious link, alright. You should edit the URL in your post to make it invalid, so it can't be clicked on - make it hxxp:// or something.

Is there any kind of kaspersky log you could upload?

I suppose I should have, I just copied/pasted the message Kaspersky gave me. What kind of log do you want/need and where to post?

But yeah, I was on this page for several minutes when I started getting those alerts. Not sure why, but it used to happen on the Subaru forum I visited but it's been awhile.

I didn't click on it-- what is it, porn or something?
 
Joined
Apr 5, 2011
Messages
1,748
Location
San Juan Islands, WA
Weird - it's not like there are advertisements around here for nasty links to sneak it. Were you looking at the front page or a forum?
 
Joined
Aug 3, 2008
Messages
8,238
Location
Kansas City
I suppose I should have, I just copied/pasted the message Kaspersky gave me. What kind of log do you want/need and where to post?

But yeah, I was on this page for several minutes when I started getting those alerts. Not sure why, but it used to happen on the Subaru forum I visited but it's been awhile.

I didn't click on it-- what is it, porn or something?

It's a page that will tell you that you are infected with a virus, while trying to compromise your browser to actually infect you. Quite nasty, and I've seen these things get past antivirus protection.

I don't know how Kaspersky does things, but i would assume that it keeps some type of log file. This might contain other information about your browsing, so you may not want to share it. But it would be useful to see what is going on. I suspect it is not actually originating from this site. Sometimes those messages are a result of an infection on your own PC, with viruses that interfere with your browser.
 
Joined
Nov 8, 2014
Messages
12,085
Weird - it's not like there are advertisements around here for nasty links to sneak it. Were you looking at the front page or a forum?

I think I was on the front page, but I can't entirely remember. I was doing a bunch of other things at my desk, Chrome was the only active browser/page and was tuned to RPGWatch for several minutes so it wasn't like it hit me as soon as I directed to the page. So... a really delayed malicious redirect/popup. Is that a thing?

"Sometimes those messages are a result of an infection on your own PC, with viruses that interfere with your browser."

I've scanned with 3 different scanners now and nothing has been found.
 
Joined
Apr 5, 2011
Messages
1,748
Location
San Juan Islands, WA
It wasn't from RPGWatch. There is nothing that could redirect you to that site.
 
Joined
Aug 30, 2006
Messages
11,223
Back
Top Bottom