Malicious URL on diyaudio website? [RESOLVED]

Status
Not open for further replies.
When I open the diyaudio home page I get a warning from my anti-virus software (avast) that it has blocked a malicious URL.

The message I get is
Infection Details.
URL: "http://www.cloud-jscript.com/gate.php"
Process: "C:\Program Files (x86)\Internet Explore...
Infection: "URL:Mal"

One of the best ways to deal with this is to use Firefox browser, not IE.
After installing Firefox, open "add ons."
download and install "adblockplus." (which is a firefox approved add on.)
After that, expect that malware, installed by flash ads, will be stopped.
It's quite effective.
 
Switches things on and off again
Joined 2000
Paid Member
Actually, that problem wasn't related to advertisements at all and your fix wouldn't help in this case, as it was a code insertion directly into the web page.

I do know the problem you are referring to though, and I encountered it when we briefly explored using the OpenX Market for advertising, about 2 years ago. The ad quality was bad and some ads were dodgy and apparently carried malware. We quickly switched that off and went back to trusty old Google, and have not have a problem since, as they are stringent in qualifying their advertising partners.
 
Here is the short reply I just received from Avast:

Hello,

it's right detection.


Miroslav Jenšík
AVAST Software a.s.
.
Ticket Details
===================
Ticket ID: VUA-700136
Department: Virus
Priority: High
Status: On Hold

*******

This is the message I sent:

Please review the following link. Problem just started this morning.

http://www.diyaudio.com/forums/forum-problems/215048-malicious-url-diyaudio-website.html#post3070711

Thanks, Bob

********

So both Jason and Avast ($17/yr on promo) get a gold star. ;)
 
Last edited:
Administrator
Joined 2004
Paid Member
Whenever I hit the back button on any diyaudio.com page my virus software stops the attempted redirection to a porn site, any one have a similar problem?

Unfortunately this happened to me on a machine equipped with XP and the only solution finally was to reformat the HD, each time IT attempted to remove it it came back.. In this case the source was definitely not diyAudio and it happened with any site I initially navigated to.
 
Just another Moderator
Joined 2003
Paid Member
I got a hijack as well (from a kids site I was browsing with my daughter of all places), was on firefox and ie (XP). But it was different it hijacked google searches and went to some advertising site. I downloaded malwarebytes antimalware and it got rid of it (with a little encouragement, I think I had to use some of the advanced feautures in the program in safe mode (from memory the setting for deleting locked files), but it got rid of the infection. Worth a try before resorting to a format :)

I have however had a lot of pc's past me (from friends) that the only solution was a disk wipe (I use dban to be sure) and complete re-install.

Tony.
 
Where to start? Done malwarebytes, Norton power eraser, uninstalled norton internet security, reinstalled norton internet security, nothing found, if I use a stored ie8 bookmark for diyaudio.com it loads up but it also try's to load a porn site (it doesnt open it, it just flashes up on the status bar, it just makes the back button on the diyaudio site highlighted, so if I click on the back button it just repeats the attempted load of the porn site but still displays the diyaudio site, is it really a virus? should I worry about it? If I type in the diyaudio address manually some times it does the same thing sometimes not, but when I use a bookmark link for diyaudio it happens straight away, is it worth worrying about? BUT!! when it has happened and I do something like looking at another site and then going back to the diyaudio site It doesnt go to the attempted porn site redirection, should I not worry about it? or should I wait till something happens then panic or should I reinstall windows 7 (I tried firefox and the problem is still there)
 
Whenever I hit the back button on any diyaudio.com page my virus software stops the attempted redirection to a porn site, any one have a similar problem?

I get this. It's only on using the back button on some threads, only on my Htc android phone and only ever on diyaudio (and i browse a lot of sites).
The redirect goes to a site called "Livejasmin" which i'm told is a regularly occuring popup on certain site's of gentlemens interest.
 
Yep, live jasmin is one of the sites I see on the status bar, only on the diyaudio.com site I think that most users dont actually see it because it is hidden from there view or either it is too quick for them to see or they dont have the status bar enabled to see what is happening, but what is it doing?
 
Yep, live jasmin is one of the sites I see on the status bar, only on the diyaudio.com site I think that most users dont actually see it because it is hidden from there view or either it is too quick for them to see or they dont have the status bar enabled to see what is happening, but what is it doing?

have this problem as well.
I am using internet explorer 8 on windows XP.
I have just logged in to DIY audio on an independent work PC using IE8
Immediately I has the live jasmin link in my history. It seems to do this at least once a day regardless of what PC I am using. I aways visit DIYaudio of course!
It does not seem to be related to a virus or trojan on the PC.
I know that the live jasmin site has popped up in the past when I have been browsing on the web.
Checking the history seems to be the best way of verifying if this has happened or not.
Frankly its embarrasing to have this repeatedly come up in the history, but am posting here to try to help get this sorted out:eek:
 
Status
Not open for further replies.