Malicious URL on diyaudio website? [RESOLVED]

[bcmbob]

This is the segment that is red flagged in the Java history. Maybe you programmers can sniff something out.

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

</script>
<script type="text/javascript" src="/openx/www/delivery/spcjs.php,qid=1,avbm=1,asection=128.pagespeed.ce.U trDUgdFRR.js"></script>
GET http://www.cloud-jscript.com/gate.php
<script type="text/javascript" src="//cdn2.dastatic.com/min/g=vb7"></script>


<link rel="alternate" type="application/rss+xml" title="diyAudio RSS Feed" href="external.php?type=RSS2"/>

<link rel="alternate" type="application/rss+xml" title="diyAudio - Analog Line Level - RSS Feed" href="external.php?type=RSS2&amp;forumids=128"/>


<script type="text/javascript" src="//cdn2.dastatic.com/forums/clientscript/tcattd_imageresizer.js,qv=1.2.7.pagespeed.ce.zxE64 V_ceQ.js"></script>
<script type="text/javascript">
<!--
var tcimgrResizeMsg = 'Click the image to open in full size.';
var tcimgrWidthMax = 400;
var tcimgrWidthSizeTo = 400;
var tcimgrHeightMax = 600;
var tcimgrHeightSizeTo = 600;
var tcimgrWidthSizeToSigs = 400;
var tcimgrHeightSizeToSigs = 100;

YAHOO.util.Event.onDOMReady(tcattdImageResize);
//-->

[pinkmouse]

Originally Posted by GM

How is this done?

TIA,

GM

Menu bar, Preferences, Content, then you'll see a tickbox, should be unticked to disable.

[bcmbob]

Just created a support ticket with the folks at Avast. Let's see what we get.

[bcmbob]

For Chrome the path is Tools - Settings - Show advanced settings - Privacy - Content settings - Java Script - Do Not Allow....... tic box. - OK.

[avincenty]

The entry on the host file stopped it for me.

127.0.0.1 www.cloud-jscript.com

[Jason]

Looks like the same problem lots of other forums have encountered in the last few days (Eg: 1) where malicious code was inserted into a template. I traced it to happening approximately 6 hours ago. There are a number of possible ways that it could have happened, and we've taken steps to ensure it won't happen again, including upgrading to the latest patch level of vBulletin (we weren't on the latest patch).

The code has been identified, removed and things should be fine for now. We are continuing our diagnostics and forensics.

[bcmbob]

Thanks Jason, very quick response.

[qusp]

indeed, well done mate!

[Renron]

Thank you Jason,
Thank you Avast.

Ron

[noSmoking]

Hi,
I am glad that was found I have had all kinds of pointer errors,Driving me krazier that I was ,lol. Now on to better things,lol
Thanks for fixing it !!!!!!!!!!!!!!!

I got frustrated and added google chrome and dumped firefox,Io orbit malware ,free version too, found all the bad files I think it was 5 of them ,