Got an email claiming there is malware in the ad feeds. I have taken down all the project wonderful ads. Are we still having the malware problem?
*** Update ***
All ads are now down except for google. Are we still having malware issues?
by John Cole| 41 Comments
This post is in: Previous Site Maintenance
Got an email claiming there is malware in the ad feeds. I have taken down all the project wonderful ads. Are we still having the malware problem?
*** Update ***
All ads are now down except for google. Are we still having malware issues?
Comments are closed.
Tim F.
I’ll just hold this lonely lighter in the air until we get Newt back.
Tim F.
Wait, PW was the interesting ads. So we lost those, but we still have Newt and Sarah. Phew!
Jim Crozier
John,
Pretty much everything I do on the site today triggers a malware warning from my protection software. Clicking on comments to try and leave you this message triggered an alert.
Shade Tail
My browser (Safari) is giving me malware warnings for BJ and keeps trying to direct me to this Google Advisory site.
yaco
Avast is still detecting malware. I suspect that project wonderful isn`t at fault.
Loneoak
I don’t know about malware, but I was seeing a rather racist ad for alluring and mysterious Thai women. I didn’t click so I don’t if it was for sex workers or mail order ‘brides’. It’s gone now.
Crashman06
Does this mean no more Christian Philipina mail order bride ads? That would make me a sad panda.
John Cole
Could you all, for once, work with me, and restrict commentary on this thread to issues regarding malware, and not your dyspeptic personal preferences about the nature of the f-ing ads?
Michael
Yesterday, I was having an odd lag when trying to scroll down the front page, particularly past some pics and vids on one of the stories. Maybe there was some jumpy code there.
MikeJ
I wonder if the google alert will stay up until they rescan, even if you kill the offender.
If you’re on a safe platform, you might pull up the site with all the bells and whistles enabled, and actually see who has the link to the offending site. It was mentioned what the site was in the previous thread, somewhere in china (a .cn domain), iirc.
Slocum
Still get malware attacks.
Llelldorin
I’m still seeing the warning from Safari, but I suspect that Safari simply checks Google to see if the site is listed as having malware. There may just be some lag time involved.
whiskey
I wonder if the malware is a reason for the site freezing up my phone for the last two days – loads and loads and then freezes and I have to restart the phone.
Comrade Tudor
Yeah, I just signed on and got the message for malware
Dennis-SGMM
Chrome is still reporting:
mike in denmark
https://balloon-juice.com/wp-content/plugins/comment-quicktags/js_quicktags.js is what is causing avast to go crazy.
yaco
Still detecting. Here`s what avast is identifying as the problem:
https://balloon-juice.com/wp-content/plugins/comment-quicktags/js_quicktags.js
mike beat me to it. at least this is confirmation.
mg_65
Yes – still getting malware warnings, John. /delurk
Palooza
Finally! this site has been crashing my browser for the past day and a half…. all my browsers. Seems like it tried to take over my webcam….
yellowdog
Firefox on a PC. No problems.
jake 4 that 1
I’m not showing anything, but the computer I’m on couldn’t detect an ICBM if you shoved it up its exhaust port.
p.s. Thank goodness the Pam Anderson ad is gone! [snerk]
Ash
I’m fine, but I’m also on a Mac.
Bwahahahahah.
different church lady
Mac Safari is giving me malware warnings every time I hit the frontpage. I’ll try it from Firefox on a different computer and see what I get.
amok92
IE 8 on WIndows XP (VMware client) -no problems or warnings
John Cole
Alright, I deactivated js_quicktags, which was a plugin. Are we still getting malware stuff?
yaco
Avast is no longer detecting. Whatever you did seems to have worked…
jnfr
I’m not getting any malware notices or anything on this site setting off my security software, and I run lots of security software that warns me about everything. I’m using Firefox, and set my NoScript to allow all on this page.
different church lady
@John Cole: It just stopped giving me the malware warnings.
Houston, we appear to have a cause-and-effect relationship.
low-tech cyclist
I want my cute Filipina and Thai babes back!
Leelee for Obama
Firefox here, no issues….did a virus and spyware scan on Norton, nothing. Clean out IE temp files. What is up here?
gnomedad
I just turned off Adblock and reloaded. No warnings from McAfee SiteAdvisor or Web of Trust on Firefox. But I never got any warnings previously.
bvac
Malware in an ad? I guess if it were a flash ad. Can’t you disable those in project wonderful?
mike in denmark
Probably just a false positive in avast.
kansi
Avast sirens went off earlier, but no longer. Thanks for fixing it, John
Persia
Now I realize why the site was running so slow the past two days.
And apparently I need to update my antivirus when I get home. Eww.
Warren Terra
Yeah, about five minutes ago I tried to refresh a Balloon Juice page and Norton Antivirus wouldn’t let me – it blocked some malware and the site wouldn’t load further. It’s loaded now (obviously) so I assume it was one of the PW ads you took down, which is a shame as the concept there is a good one.
I blame Laura W!
John Cole
You all are killing me. I ask you what time it is and you tell me how to build a clock.
ARE YOU STILL GETTING MALWARE THREATS OR NOT? Answer in the next thread.
Comrade Kevin
I have not, and am not, receiving any malware warnings.
James Joyner
No malware threats here.
When I’ve had this problem in the past, it was almost always AdSense.
Perry Como
No malware warnings, but I use Lynx.
Thomas J. Raef
Google diagnostics now shows this:
What is the current listing status for http://www.balloon-juice.com?
This site is not currently listed as suspicious.
What happened when Google visited this site?
Of the 136 pages we tested on the site over the past 90 days, 3 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2009-07-16, and the last time suspicious content was found on this site was on 2009-07-16.
Malicious software includes 1 scripting exploit(s). Successful infection resulted in an average of 4 new process(es) on the target machine.
Malicious software is hosted on 1 domain(s), including klikvs.cn/.
So it appearst that the .js file you mentioned earlier may have been the problem – and is now resolved.