Site access problems

I got a warning here on the office pc earlier... It seems to point to an exploited Java (.jar) file.

I also just noticed that underneath my profile to the right of the message wall there was a reference to Facebook, which is notorious for viruses and hack attacks! Should this "Facebook ad" even be on this site??... At the bottom, right of the ad, there is a reference to CLICKSOR - I wonder if this is the exploit?

I also just got the java warning.

Could you give us the full error you receive? Clicksor is an ad network that helps support to costs for running this site.

I too had an error this morning on my office PC.
I think I ran my mouse over one of the ads on the right of the PU forum page and it prompted me to open a pdf file...I cancelled it, but my PC was then seized by a 'malware' page. It was the dreaded 'PCeU' malware virus (Police Central e-crime unit), which claimed my PC was being used for illegal downloads and was being locked by the police!
You then have to pay £100 to get it unlocked!

Managed to restart the computer & wipe the virus. But then had to restore the PC as it had strangely corrupted my version of Adobe Reader.

Link explaining the PCeU virus...link
Something definitely not right about the forum page!

The web page seems much more stable today, or is it just wishful thinking.

I haven't had any problems with the site. I wonder if it's because I use FireFox and AdBlock Plus - it's rare to have to see any ads at all, since I just block any new ones that get past my filter settings.

Though when Canon ads started appearing a few weeks back it did amuse me.

As mentioned, Clicksor is an ad network which we are currently trialing to help support the costs of running Pentax User. We do a number of checks and research to ensure that the ad networks we choose are quality and don't contain any virus/malware/etc.

If you do find an ad that you feel is suspicious, we highly recommend that you take a screenshot of the ad and send us a report about it so we can investigate further.

@ David Burleson - does CLICKSOR work in a similar manner to Google AdSense?? If so, I don't understand the connections with the likes of Facebook.

David

This happened about 20mins. ago...
[IMG]http://i226.photobucket.com/albums/dd296/stopher555/virusalert.jpg[/IMG]

Then almost immediately this..
[IMG]http://i226.photobucket.com/albums/dd296/stopher555/virusalert2.jpg[/IMG]

Only on this site and they both popped up shortly after opening the thread (didn't click anywhere on the screen).

Last night I accessed this forum from my smartphone, navigated to a thread on using filters and it took me to a porn site!

I'm not getting an advert pop up.

Within a few minutes of logging on this morning I've had alerts that my AV program has :-
-Quarantined a suspicious file
-Detected a security risk
-Detected a virus

Here follows an excerpt from the incident log :-

Suspicious file Protection against unknown... 27/06/2012 09:03:23 Moved to quarantine File: COCUMENTS AND SETTINGSBERNARDLOCAL SETTINGSTEMPER_00_0_L.EXE
Virus detected: Trj/Xpacked.A Antivirus protection 27/06/2012 08:57:02 Deleted Path: ]http://capucchinopayments.com/jobce2/cp.php?i=6&f=c0af9&e=0[cp.php]
Security risk detected: Exploit/CVE-... Antivirus protection 27/06/2012 08:57:02 Deleted Path: http://masterofpapets.us/jobce2/bocmezhpxzxpa.jar[Dot.class][lz.class]
Security risk detected: Exploit/CVE-... Antivirus protection 27/06/2012 08:57:01 Deleted Path: http://masterofpapets.us/jobce2/bocmezhpxzxpa.jar[Dot.class]
Security risk detected: Exploit/CVE-... Antivirus protection 27/06/2012 08:56:58 Deleted Path: http://masterofpapets.us/jobce2/bocmezhpxzxpa.jar[Dot.class]
Security risk detected: Exploit/CVE-... Antivirus protection 27/06/2012 08:56:58 Deleted Path: http://masterofpapets.us/jobce2/bocmezhpxzxpa.jar[Dot.class][lz.class]
Connection attempt Firewall protection 27/06/2012 08:45:42 Blocked Application: C:WINDOWSsystem32MacromedFlashFlashPlayerUpdateService.exe


What other information would you need?

regards
Bernard

Hi thanks for the reports guys we have stopped all the Clicksor ads (this might take 10-20mins to take effect) until we can be certain that these problems don't occur again.

Your reports/screenshots are very helpful and I'll make sure my contact gets them.

Sorry for the inconvenience.
Richard

Hi thanks again for all the help - we have passed all the information on to Clicksor who have assured us that they have removed the offending ads.
If this does however happen again please let us know and we can take appropriate action.

Hi thanks to everyone further infringements from Clicksor has meant that we have removed their ads.
Apologies to all and thanks for your help.
Regards
Richard

Who are cpafish.com ????? My computers trying to
connect to them from this site

The Clicksor ads have been removed but might take some time to filter down.
They should be down by now.
Let me know if you have any more problems.
Richard