Sign on Options
Theme: [Light Selected] To Dark»

Read the following guidelines to ensure that you are posting in the correct forum:

BUG/GLITCH : A bug is an error, flaw, mistake, failure, or fault found on GameSpot that prevents it from working correctly or produces an incorrect result.

ENHANCEMENT: An improvement of an existing GameSpot component or feature. Visit the Site Enhancements & Feedback forum.

HOW-TO: If you have a question on how to use the site, this is not the forum to post your question. Please visit the How To GameSpot board.

Malware warning

Forum Actions
  • Level 45
    Mishima Zaibatsu
    Posts: 3437
    Nov 18, 2012 6:07 am GMT
    I just got this message about an ad...
    malwarea.png
    Edited on Nov 19, 2012 10:06 am GMT





    One of the best shows on tv is.. a cartoon?

    TRON: Uprising - Beck's Beginning



    I just got this message about an ad... malwarea.png
  • Level 53
    Zenny
    Posts: 11063
    User is Online
    Nov 18, 2012 11:18 am GMT

    yea i got the same message as well. i got it right when i went into the forums

    yea i got the same message as well. i got it right when i went into the forums

  • Level 72
    King of All Cosmos
    Posts: 6935
    Site Greeter
    Nov 18, 2012 2:42 pm GMT
    We'll need a link to a page where this error occurred. This may or may not have been the result of an ad on the site; most of the malware alerts thrown by Google are not in response to ads, and a fairly high number of them are completely false positives. If we can see this on a page we can investigate and determine the most appropriate course of action. Generally, if it's actually a bad ad it will be taken care of.

    We'll need a link to a page where this error occurred. This may or may not have been the result of an ad on the site; most of the malware alerts thrown by Google are not in response to ads, and a fairly high number of them are completely false positives. If we can see this on a page we can investigate and determine the most appropriate course of action. Generally, if it's actually a bad ad it will be taken care of.

  • Level 72
    King of All Cosmos
    Posts: 14644
    Site moderatorBoard Moderator
    User is Online
    Nov 18, 2012 6:15 pm GMT

    Do both of you have signatures enabled? Try turning them off and revisit the pages where the warning occurred, see what happens.

    Do both of you have signatures enabled? Try turning them off and revisit the pages where the warning occurred, see what happens.

  • Level 53
    Zenny
    Posts: 11063
    User is Online
    Nov 18, 2012 8:45 pm GMT

    gmax wrote:
    We'll need a link to a page where this error occurred. This may or may not have been the result of an ad on the site; most of the malware alerts thrown by Google are not in response to ads, and a fairly high number of them are completely false positives. If we can see this on a page we can investigate and determine the most appropriate course of action. Generally, if it's actually a bad ad it will be taken care of.

    this was the page i was trying to go on

    [QUOTE="gmax"]We'll need a link to a page where this error occurred. This may or may not have been the result of an ad on the site; most of the malware alerts thrown by Google are not in response to ads, and a fairly high number of them are completely false positives. If we can see this on a page we can investigate and determine the most appropriate course of action. Generally, if it's actually a bad ad it will be taken care of.

    [/QUOTE]

    this was the page i was trying to go on

  • Level 72
    King of All Cosmos
    Posts: 6935
    Site Greeter
    Nov 18, 2012 10:05 pm GMT
    I was not able to find content from the domain mentioned in that thread. That might mean it actually was an ad, and that I'm not seeing the same ads you guys are. That could be because we are not in the same region of the world. Or I may have just flat out missed it somehow.

    Are you outside the US?

    I was not able to find content from the domain mentioned in that thread. That might mean it actually was an ad, and that I'm not seeing the same ads you guys are. That could be because we are not in the same region of the world. Or I may have just flat out missed it somehow. Are you outside the US?

  • Level 45
    Mishima Zaibatsu
    Posts: 3437
    Nov 19, 2012 7:22 am GMT
    I'm inside the US..

    But I just assumed that it was an ad really. I haven't gotten the same message since, so it may have been as you suggested, a false positive...





    One of the best shows on tv is.. a cartoon?

    TRON: Uprising - Beck's Beginning



    I'm inside the US.. But I just assumed that it was an ad really. I haven't gotten the same message since, so it may have been as you suggested, a false positive...
  • Level 53
    Zenny
    Posts: 11063
    User is Online
    Nov 19, 2012 7:54 am GMT
    gmax wrote:
    I was not able to find content from the domain mentioned in that thread. That might mean it actually was an ad, and that I'm not seeing the same ads you guys are. That could be because we are not in the same region of the world. Or I may have just flat out missed it somehow.

    Are you outside the US?



    im from the u.s. using google chrome if that makes any sense. haven't had that trouble since, but im not trying to go on that page to find out if there is anything bad
    [QUOTE="gmax"]I was not able to find content from the domain mentioned in that thread. That might mean it actually was an ad, and that I'm not seeing the same ads you guys are. That could be because we are not in the same region of the world. Or I may have just flat out missed it somehow. Are you outside the US?

    [/QUOTE] im from the u.s. using google chrome if that makes any sense. haven't had that trouble since, but im not trying to go on that page to find out if there is anything bad
  • Level 70
    The Boss
    Posts: 17743
    GameSpot staff memberBoard Admin
    Nov 19, 2012 10:35 am GMT
    If you end up knowing who has the malware content let us know and we'll remove it.
    If you end up knowing who has the malware content let us know and we'll remove it.
  • Level 46
    Mutoid Man
    Posts: 3422
    GameSpot staff memberBoard Admin
    User is Online
    Nov 19, 2012 11:03 am GMT

    [QUOTE="jsmoke03"]

    gmax wrote:
    im from the u.s. using google chrome if that makes any sense. haven't had that trouble since, but im not trying to go on that page to find out if there is anything bad

    Ah this old thing.
    This is an issue that we are aware of and are actively working on figuring out a solution for.
    Essentially what happens from time to time is a user has an image either in their signature or in their avatar that might have come from a naughty site, or a site that has been considered to contain said malitious content - usually google is the one that determines that.

    Here are some past insights on the subject:

    robbristow wrote:
    A brief check concludes that it is due to a user-hosted image on the page, and a little more let me pinpoint it to usuarios.lycos.es/cardgallery/ahruon/bowsera.gif (So don't go to that URL!) as the problem image, which is the 3rd of 6 images insvaubel's forum signature. Until that image is removed from his signature (either by svaubel or a moderator/admin) or the hosting site fixes it the problem will remain.

    In the meantime, if you go to theimages tab in your settings, and toggle user-images to display from "all images" to either of the other options (GS hosted only or no images) you should be able to access the page as the user-added image won't be loaded/displayed.

    gmax wrote:
    I also took a look at this. The image is technically clean, and the transfer used to include it on a page is also unremarkable. The situation here on GS is thus harmless. The site hosting the image may be another story. I've already PMed the user suggesting another URL to use that will retrieve the same image, hopefully without triggering any alerts. That's here. I also left a note for staff/mods here.

    This alert can be ignored for now, although disabling off-site images as mentioned may be worth considering. It's also possible to disable signatures.

    [QUOTE="jsmoke03"][QUOTE="gmax"] im from the u.s. using google chrome if that makes any sense. haven't had that trouble since, but im not trying to go on that page to find out if there is anything bad[/QUOTE]

    Ah this old thing.
    This is an issue that we are aware of and are actively working on figuring out a solution for.
    Essentially what happens from time to time is a user has an image either in their signature or in their avatar that might have come from a naughty site, or a site that has been considered to contain said malitious content - usually google is the one that determines that.

    Here are some past insights on the subject:

    [QUOTE="robbristow"]A brief check concludes that it is due to a user-hosted image on the page, and a little more let me pinpoint it to usuarios.lycos.es/cardgallery/ahruon/bowsera.gif (So don't go to that URL!) as the problem image, which is the 3rd of 6 images insvaubel's forum signature. Until that image is removed from his signature (either by svaubel or a moderator/admin) or the hosting site fixes it the problem will remain.

    In the meantime, if you go to theimages tab in your settings, and toggle user-images to display from "all images" to either of the other options (GS hosted only or no images) you should be able to access the page as the user-added image won't be loaded/displayed.[/QUOTE]

    [QUOTE="gmax"]I also took a look at this. The image is technically clean, and the transfer used to include it on a page is also unremarkable. The situation here on GS is thus harmless. The site hosting the image may be another story. I've already PMed the user suggesting another URL to use that will retrieve the same image, hopefully without triggering any alerts. That's here. I also left a note for staff/mods here.

    This alert can be ignored for now, although disabling off-site images as mentioned may be worth considering. It's also possible to disable signatures.

    [/QUOTE]

  • Level 60
    Master Chief
    Posts: 66712
    Nov 19, 2012 1:49 pm GMT
    For future reference, an easy way to get a better idea of what is causing it, without putting yourself at risk, is when the sudden google warning page appears, add 'view-source:' onto the start of the affected web address (without the 's) - this will show the source code that makes up the page without actually loading any of the individual assets, including whatever part is causing the issue - from there you can press ctrl+f to bring up a search on page bar in the top right, and using the domain address google warns for the search term the specific URL and part of the page's source code causing the problem can be found.

    At that point, you can either figure out for yourself whether it's an ad or user-added things and whose signature/avatar it is from the nearby code (there's a lot of tell-tale divs that surround user-content if you understand how html works) and give us all the relevant information to deal with it...or, if you don't understand the code (or even just aren't 100% certain), you should take a screenshot of the source showing the warned URL appearing in the source and the surrounding code from that we can quite easily determine the cause, even if it is an ad on a rotation in a specific global area.

    e.g. In this case, searching (via ctrl+f) 'milegend' in the source (accessed via view-source:URL) when the warning appears, and take screenshots showing each appearance of it - typically it'll only appear in one general area so one screenshot should normally be enough. Posting the screenshot(s) in an appropriate place on the forums can then allow us to easily determine the cause - of course, post the URL of the affected page in addition to the screenshot(s). If it seems to be an ad then your general global area would be useful as well.

    If users can do that much when this issue comes up then we'll be able to get problematic user-content removed swiftly (though over 90% of the time said images are actually clean - just chrome being paranoid because of the domain it's hosted on being a little suspicious); and more importantly be able to deal with any issues that come up due to ads or other things that may not be false positives in a timely manner by getting infringing ads removed from the rotations.

    Deep into that darkness peering, long I stood there, wondering, fearing, doubting..
    Time takes it all whether you want it to or not, time takes it all.
    Time bares it away, and in the end there is only darkness.
    Sometimes we find others in that darkness, and sometimes we lose them there again.
    None can hope to convey the life-sensation of any given epoch of one's existence -
    that which makes its truth, its meaning - its subtle and penetrating essence.
    It is impossible. We live, as we dream - alone.
    The real meaning of enlightenment is to gaze with undimmed eyes on all darkness..
    For future reference, an easy way to get a better idea of what is causing it, without putting yourself at risk, is when the sudden google warning page appears, add 'view-source:' onto the start of the affected web address (without the 's) - this will show the source code that makes up the page without actually loading any of the individual assets, including whatever part is causing the issue - from there you can press ctrl+f to bring up a search on page bar in the top right, and using the domain address google warns for the search term the specific URL and part of the page's source code causing the problem can be found. At that point, you can either figure out for yourself whether it's an ad or user-added things and whose signature/avatar it is from the nearby code (there's a lot of tell-tale divs that surround user-content if you understand how html works) and give us all the relevant information to deal with it...or, if you don't understand the code (or even just aren't 100% certain), you should take a screenshot of the source showing the warned URL appearing in the source and the surrounding code from that we can quite easily determine the cause, even if it is an ad on a rotation in a specific global area. e.g. In this case, searching (via ctrl+f) 'milegend' in the source (accessed via view-source:URL) when the warning appears, and take screenshots showing each appearance of it - typically it'll only appear in one general area so one screenshot should normally be enough. Posting the screenshot(s) in an appropriate place on the forums can then allow us to easily determine the cause - of course, post the URL of the affected page in addition to the screenshot(s). If it seems to be an ad then your general global area would be useful as well. If users can do that much when this issue comes up then we'll be able to get problematic user-content removed swiftly (though over 90% of the time said images are actually clean - just chrome being paranoid because of the domain it's hosted on being a little suspicious); and more importantly be able to deal with any issues that come up due to ads or other things that may not be false positives in a timely manner by getting infringing ads removed from the rotations.
Forum Actions