I've just been editing the layout of my hubs and have received 2 warnings on 2 seperate hubs from my anti-virus. It stated there was a Trogan Virus attempting to download onto my computer, tho it was blocked..
12/03/2011 06:34:33 Firefox Detected: Trojan.JS.Iframe.rr http: /worler.com/adserver/display.cfm/731/1534/45613/j/cd/?pbnt=515a4dg%EF%BF%BDt=481643&imprx=20225339
Says it is from "wooler.com/adserver"
EDIT: This would be 9:34pm(9 hours difference) California time, should HP have sheduled times for ads to point this adserver out.
This may be unrelated but I figured best place to chime in. I've been getting a missing plugin message on firefox while viewing hubs but only when that annoying cartbusters krogers crap is up,which I hate. When you click to install a plugin it says no plugin available for this.
It's funny stuff happening of that nature that will drive traffic away as everyone is always on the watch for things that mess with their computer and will not go near it. Cause of recent traffic drops? Could be!
Exact same thing happened to me. Missing plugin and a redirect, I figured it was the worler thingy.
This coupled with Googles changes is killing every last bit of progress I have made here. Got to say even in last couple days Ive had Hubs that went back to page 1 drop back to page 3 again and I can't help but think it's because of this. I'm really considering moving my work elsewhere.
My guess is that else-where generally is in much the same state- best to hold in there and wait - it is in Hubpages interest to sort this out quickly. Someone further up this thread pointed out that Squidoo was hit in the same way a while back so it is not a specific hubpages incident.
You're the second person who has said this in the last week? Hmmm...
I hope it gets sorted.. Unfortunately I do not know what type of ad it was. I thought it was adense, but I have not been looking at the difference between Hubpages new ads and adsense.
Maybe Hubpages will know by the timing of the ad unit? I am in the UK so, I believe maybe it was around 8 hours earlier HP time.
Well, it is 6 hours difference between you and me, then it is also 3 hours difference between Hubpages and me. So you would be close on the time.
I just got a warning on my anti-virus about a Trojan, while I was trying to view my hubs to check them for the site updates. Not sure if it was to do with an ad. as I had not clicked any, but I do not understand how these things work anyway. Not sure of the time but it was in the last 45 mins.
Think I might run a scan just to be sure everything is OK, I am not too good on the technical side of things.
Thank you for reporting it.
Just an update. Even tho my anti-virus said that this virus was blocked. It did get into my computer. I had 2 Trojan virus'and 3 Phishing URL virus' enter. I did not click in any ad. This virus just appeared.
Just so everyone is aware!
HTML:IFrame-JS [Trj] is a detection for a trojan that injects itself as an IFrame on webpages. This infection will lead to malicious actions such as browser redirection and downloading of other web-based malware and backdoor trojan on to the computer. Since the infected files are located on the remote server, a webpage itself, HTML:IFrame-JS [Trj] can only be cleaned by the web authors. Though, visitors of that website can be infected, they can also avoid being compromised by not executing prompts and closing a redirected website. Presence of updated antivirus and security programs can also prevent infections from HTML:IFrame-JS [Trj].
Damage Level: LOW
http://www.precisesecurity.com/trojan/h … me-js-trj/
I haven't seen that warning from my own virus protection, but I heard about it from one of my friends. This could be a real threat to HP, as people will rightfully block the site if it carries viruses.
I hope this is attended to immediately.
It would appear this is a result of the new ad program to be rolled out in June that Hubpages is promoting at the moment. You obviously have these new ads being shown on your hubs
If I was visiting a Hubpage and got that warning pop up, then I would leave promptly. Also, Google will mark the site as unsafe in the serps.
Is it just me or is someone else hearing the alarm bells going off, too!
Not just you, Terry!
From what I have read about this virus it is a new threat only detected today, but a member of staff is already working on it. What I find disturbing is that 2uesday reported a similar incident 2 hours AFTER the team were informed.
Yep, it is rather alarming and the last thing HP needs at this time (or any time really).
Visitors can very well be getting a warning upon entering articles, and yes, google can flag HP as "this site may be comprimised". NOT GOOD!
The fact that people have the power to block any site from appearing in there search results (permanently) now puts much more pressure on sites.
I had the same thing happen to me yesterday. I was rather upset and quickly shut the program down. Luckily my Avast maleware protection caught it. I feel violated by the new program ads that appeared during the abduction encounter.
Just as a quick note, if anyone ever suffers such a virus I suggest you go to Malwarebytes dot com. They have a free download of software to scan your computer and remove such infections.
I have used it quite successfully in getting rid of one or two nasties in the past. Easy to follow instructions and great to have to manually scan your computer once a week.
Thank you TerrytGI ... ever get that feeling something its time to move on when infections start to occur?
Thank you Terry! Will check it out if my cleaner does not clear it completely!.
Signed into HP this morning and I got the same Virus warning. My anti-virus program says it was trying to download on my computer, but was "denied."
Michael, you may want to run a scan of your computer. This warning TWICE said that it was denied download by my anti-virus software. BUT, I ran a scan and had TWO Trogan Virus' and 3 Phishing URL virus'.
AND it fragmented my computer. I had run a computer maintenece check and noticed this virus fragged and nocked out 32 drivers on my computer...
Please scan you computer.
One thing about the anti-virus program I have is it is always running a scan in the background. It immediately detects anything suspicious, even if it is not a true virus.
TerryGI, why are you copying and pasting all of your hubs? I began doing that before as back up but it was taking ages..I really should keep a back up though
I received that same warning last night while I was working on my hubs. It was blocked, but then my system froze up. I had to exit out of hubpages a couple of times. I ran a system check and it didn't find anything. Is there a way we can tell if there are bugs on our pages? Or is this something hubpages is doing to secure the system?
I just got the same thing:
Network traffic from worler.com matches the signature of a known attack. The attack was resulted from \DEVICE\HARDDISKVOLUME2\PROGRAM FILES (X86)\MOZILLA FIREFOX\FIREFOX.EXE.
Network traffic from worler.com/stats_js_e.php?id=20225339 matches the signature of a known attack. The attack was resulted from \DEVICE\HARDDISKVOLUME2\PROGRAM FILES (X86)\MOZILLA FIREFOX\FIREFOX.EXE.
The severity was rated as HIGH.
Attacking computer is: worler.com (188.8.131.52, 80)
If anyone does a search for worler dot com do not under any circumstances click on the links as your computer will get infected.
This virus changes files on your computer and if you work on your own sites, such as html or Wordpress, you will infect them.
Like I said before, download Malwarebytes and run it. Just because your virus program says it has blocked the threat, you will still need to do it.
I wrote a hub on the eval virus and to this day is receiving a lot of traffic. If you get a virus it is a very extreme hard "fix".
Irohner, I don't really want to ruin your day completely but you need to look at this:
http://www.google.com.au/search?q=The+a … 0&sa=N
There is quite a lot of talk about this virus and the fix for it is huge but seems to work. Techguy is the master on all things virus and I recommend you visit that link first.
While viewing a Hub just a couple hours ago I got an AVG(my anti-virus, I alternate scanning the computer with it and Malware bytes) alert that a virus was trying to access my computer from the domain.
I didn't think to screen-shot it or really take notice of the details at the time, just closed the alert and had to attend to matters away from the keyboard.
I just ran a scan and had three threats on my computer. I NEVER have anything on my scans and I run them often.
I have just decided not to open any hubs for any reason, including my own until this is fixed.
The complex procedure to remove this virus is beyond! I guess that the virus programmes etc will get to grips with it soon and include the defence for it in an update.
I also guess that Hubpages will get it stopped at their end - see you after that guys - BBFN
Hell of a thread. I've stopped all hub editing. Am getting Malwarebytes immediately.
Just a quick search for Yieldbuild (which Hubpages is) for virus brings the following up:
Seems the problem is well known back to 14 December 2010.
Here's a quick quote:
"The preferred vehicles for these annoyances are actually banner ads (though they can also load via e-mail or pop-ups) that do not require a click to initiate downloads. Instead, the user’s browser tries to (and thinks it is!) load an advertisement but is in fact already downloading malware onto the computer."
Ouch..... I'm going in. These things can be deadly to ones hard drive.
The inexperienced are in for a licking to go with the slap. These malware can be a b;;;; to get off a PC even for the tech savvy hope we can help those who get infected someone start a thread for redirect for the free malware downloads. Theres plenty of crap that will get them in more trouble , What a nightmare.
And how exactly are we suppose to know when it's safe to "fix" our hubs again?
I just got hit again when I logged on 10 minutes ago. I'm getting nervous.
I've been hit 4 times today! Just ran a system scan, my computer is protected with no active threats. But, d@mn! This is crazy!!
just got hit with woler, and when i tgried to the back button on IE I got another one, norton says they stopped both, the second one was NOT worler but anotehr one, and norton rated the threat level as HIGH, so until I get an email from Hubpages, as soon as I email them with the info on this and the website on hubs that I was attacked on, I am out of here.
Not sure if this indicates anything but......I just went to a hub page and the ads quickly loaded except the big one at the top right under profile. It was slower to load.
When it finally loaded and it was an animated ad.....My anti-virus immediately showed a Warning and then denied it.
Not sure who was the source of the Ad, but the specific ad was the Mormon.org. I am wondering if this is an Adsense Ad or one of the new ones in the new program? I didn't check properties over it since I was not going to risk an infection.
I just logged on a few minutes ago and AVG came up and said the threat was blocked. Something to do with Firefox, but I got out of there quickly. It came up when I accessed Hubpages thru the weekly newsletter link and tried to logon.
I have been editing hubs for most of the day and had read this thread earlier today. I ran Spybot and all appeared ok.
I continued editing and when I got into one hub it immediately popped up trying open Java, and I started getting all kinds of warnings popping up about a virus. I quickly tried to run Spybot and Malware programs. It had blocked them. I tried to get to my control panel and it blocked it too. It took over my wallpaper and replaced it with a badly spelled message about needing to clean up my computer. I found another way to get to the control panel and as soon as I got in it immediately rebooted my computer.
Luckily, my husband was persistent and was finally able to restore my computer to yesterday and I've since run all virus programs and done some additional cleaning. I'm not planning on doing any more editing for a few days.
The below message is what AVG Surf-Shield came up with when I went to Patty English's Hub.
The page you are trying to access has been identified as a known exploit, phishing, or social engineering web site and therefore has been blocked for your safety. Without protection, such as that in the AVG Security Toolbar and AVG, your computer is at risk of being compromised, corrupted or having your identity stolen. Please follow one of the suggestions below to continue.
The threat was blocked.
That was in one box. Threat Detected came up in a separate box.
What was in that box was the file name - mld1.co.cc/index.php?tp=7903472c292fded4
Threat name- Exploit Blackhole Exploit Kit(type1889)
It didn't make through my virus shield.
The real huge irony in all of this is this forum topic shows up first for a search of "virus in ads" withing the last 24 hours and is second for the past week.
I use firefox as well and updated it within the last day or 2. I have been seeing many unloaded ads recently but no alerts. Update your browser to the newest version if you haven't already that might help.
Please note while downloading updates to yur browsers that most of you clients are using IE web browser and will probably not like the things that they are getting in their virus checker screens.
@DaNoblest, I observed that over the weekend and my firefox 4 updated version and Chrome blocked certain ads layout from appearing on hubs but on other browsers like IE the threats were evident and scary. Good enough HubPages Team are tackling the issue and it seem to have been taken care of already since over 48hrs ago witnessed.
Like I said, this is Kontera all over again but worse.
Its Sunday here in Australia, so Saturday in the US. That means another day before someone gets back to their 9 to 5 and have a quick look at this.
Only in America does a business run like that. A multi million dollar site and not one of the heads can pop in here and appease our (the members who make this work) concerns!
Where's Maddie, where's Paul or where's Ren?
A huge thread based on an important issue and nothing. There you go, is it just me, or am I not seeing the big picture here?
my avg is warning me too--there is a problem administration--there is a problem
18 hours ago.
I had a virus on a Wordpress blog. It was gone in a few minutes of me being notified.
I didn't take the weekend off to go sailing on San Fransisco Bay.
17 minutes ago.
It's possible they are too busy working on it to post in every single thread about viruses...
Norton alert from the keeping the toilet lid down Hub at 8:11 A.M. ET.
Me too, but my computer blocked it. I read up on the new advertisers being promoted by HP ( have not yet signed up for the new program, taking a wait and see attitude) and saw where on ad program, Tribal Fusion or Tribal something has a lot of complaints about being troublesome what with viruses etc. ?
I would love to edit my hubs today since I have time....if someone would fix this out there in Hubland...would be great. Won't have time to get to them again until next weekend...... slightly aggravated.
Are you using Firefox..have you got the latest edition? I would like to know if anybody has issues with this using another browser. I think Mark Ewbie said he had a warning while using IE, so try using Chrome? As you say, time is limited to get essential updating done.
Izzy, I'm pretty ignorant about viruses and such, but:
I use FF (3.6.15) and Security Essentials. I looked at probably 200 hubs yesterday and 20 or 30 profiles. The only problem I found was some popup wanting me to install more java to work right.
After all the fuss I did a full scan with MSE and found only 3 adware files that were all several days old at least. No real attacks.
Now then that is interesting. rmr said on this other thread ( http://hubpages.com/forum/topic/70119#post1528392 ) that he is getting missing plugins messages which ties in with your java warnings. Chances are your version is safe.
Everyone should go update their Firefox, or switch browsers until this is fixed.
I had exactly the same thing happen.
Same browser as well.
I'm good today. I ran full system scan and everything checked out fine. I also checked a couple of my more recent hubs and they look good too. I use Internet Explorer & everything seems to be working well today. Keeping my fingers crossed.
I hate to draw more attention to this by bumping it but the subject really needs to be addressed before this becomes some kind of cyber panic.
I've continued on, business as usual, for the last few days despite being fully aware of this thread and the problem. During this time I've read several hubs, made comments, published and edited hubs. Once, and only once, did I have a problem (it was the same one described verbatim about the AVG warning and a known exploit) while running Firefox(most recent update). Since then I've ran both Malware Bytes and the AVG scan once a day (never do this at the same time, that's actually counter-productive) with no infections resulting. If you have up to date virus protection - which anyone even remotely computer literate should - and an up to date internet browser - see previous hyphened note - then you should be fine. If you don't have either of the above, AVG has a free version that is better than most paid services (Norton and McAfee, looking at you two space-hogs here) and most browsers prompt you to update them upon opening them so you'd have to actively try to be outdated with them. Yes, it may have an impact on our traffic by scaring off a few people, but if you jump ship then you'll be getting no traffic from here anyway so it's a moot point.
As for the constantly referenced Google changes, by now anyone who has been on the web for a minute should be used to such things. Google has to rework their rankings ever so often due to spammers and others who have "figured out the system" exploiting it to farm content. A lot of such exploiters were here on HubPages and HP has responded to the changes in Google by making it harder to spam or otherwise exploit the system. Once the changes distinguish it from the "content farms", affiliate scams and other spam, it will rise in the ranks again. Then new exploits will rise and the system will repeat, it's the economics of the internet.
To summarize a very long post: the virus situation will be dealt with. Traffic will stabilize soon and the Hubbers' life will continue. Then in a couple of years I'll probably be copying and pasting this again when Google conducts another re-rank. And still the Hublife will go on. Now I'm off to edit some hubs and see if I have the energy to post another one before bed.
Thanks Keith. Your thoughts are not only encouraging but true. We run scared when this type of thing happens and I look forward to HP's address to this.
I admit I was intimidated when I saw the pop ups appear. Luckily I was not infected. With anything new, bugs have to be worked out.
Over the last 24 hours I have not had any more issues, so I'm hoping this has been removed.
I have been on and off hubs all day today and haven't had any problems whatsoever. I'm running Firefox, like many others. I ran into the problem as I stated earlier in this thread, but since then, nothing.
Yep, this is something we no longer need to post about...
If the site gets flagged for leading to Malware then we are all pretty much in the deep in terms of rankings, I had it happen to a site once and it never recovered
It has NOT been fixed. I just recieved an e-mail from someone who picked up a trojan after visiting one of my hubs. Needless to say I feel terrible and am really upset. I have since unpublished this hub and I have contacted Hubpages.
I'm not happy....At All!
I am afraid to promote any of my hubs.
Wendy, did you receive that email today? Because, the ad network was pulled and I've not encountered any problems whatsoever on hubs.
Did it happen this weekend maybe?
Edit: I've promoted by Hubs today and no problems.
Yes, I added my hub to Redgage today. I emailed him back asking him what add or link he clicked on. I haven't heard back from him yet.
I was curious, because I ran into the problem over the weekend, but nothing today, because the ads network was pulled because of an infection which staff is trying to figure out.
That is why I was wondering if you received(dated today) and not from someone over the weekend.
Edit: Here is the link to Staff's thread- http://hubpages.com/forum/topic/70296
by DJ Funktual8 years ago
I was in edit mode and all of a sudden my computer is telling me that a Trojan virus is attacking. What the hell man? Someone please tell me what's going on. Trojan Horse Dropper Agent. JOC...
by CarlySullens2 years ago
Recently, there was a thread of someone complaining about Hub of the Days lacking amazing writing skills. Their complaint stated the Hubs being selected were because they were niche driven and 'how too's' instead...
by katiem25 years ago
Don't let this happen to you.As most of you know my Mother is is failing health and I've been traveling a lot trying to take care of my Mom, spend as much time with her as possible and get back home for my kids, busy to...
by Sheila Craan12 months ago
Lately, I have had 11 hubs unfeatured due to Quality Issues. I have assured my hubs do not contain grammatical or spelling errors. I have included relevant video and changed the titles and added new supporting texts and...
by John D Wilson8 weeks ago
I've only had a few hubs moved over the the niche sites. The 2 that were moved needed little editing. Others have been "might be moved" , if I change or correct a few things. I've done the editing, but they've...
by AnnaMKB9 months ago
First off, my hubs are transferred from Squidoo, and I am aware of various issues there. I'd already checked and edited hubs after the transition, so this is all post transfer.What I don't understand is why some...
Copyright © 2017 HubPages Inc. and respective owners.
Other product and company names shown may be trademarks of their respective owners.
HubPages® is a registered Service Mark of HubPages, Inc.
HubPages and Hubbers (authors) may earn revenue on this page based on affiliate relationships and advertisements with partners including Amazon, Google, and others.