Website attack

yup, every visit i get this and mcphee blocks it which makes me relog into the site. thank goodness for a goos anti-virsus software. but maybe the powers that be could look into it ????

We've discussed this with Peter (Admin.) This is his response along with the response from HW's ad network:

I've scanned the server, no results. Our hosting company has scanned the server, nothing found.

I suspected a rogue advertisement. Our ad network responded with the following:


We’ve looked into this and are not seeing anything on our side. I believe what is likely happening is some users have been hit with a malware/adware type program that lives locally on their computer. Several of these programs allow the purchase of pop-ups to be triggered based on either specific sites or specific keywords. So for example, and advertiser could buy ads based from the makers of a locally hosted piece of adware with instructions such as, “launch my pop-up when a users goes to Healingwell.com, or launch my pop-up when the user visits a page where “crohns” is mentioned”.

As an added piece of mind, we have since integrated a service called TagScan, from Ad-Juster, that regularly scans our ad tags (and any subsequent calls we make to third party ad agency systems or rich media vendors) for malware/adware type of deliveries. So if we get them (very rarely), we can catch them immediately – usually before they every go live, unless they wait for us to go live before swapping out a good ad for a malicious one.

I would suggest you post a note in the forum encouraging your users who see this to download a free version of AdAware, which I think is a fairly comprehensive Adware/Malware clean up tool
http://download.cnet.com/Ad-Aware-Free-Antivirus/3000-8022_4-10045910.html

As well as SpyBot’s Search and Destroy, which is also very good.
http://download.cnet.com/Spybot-Search-Destroy/3000-8022_4-10122137.html?tag=mncol;1

Running both will clean up most of what is out there. The best solution of course is a paid solution such as McAfee or Norton, but as freeware goes, the above two are very good.

We will of course continue to check on our end, as no system is 100% at blocking newly released malware, but TagScan is a commercial tool designed to ID malware and adware that gets syndicated through ad tags.


Peter's Note: May I also suggest using Malwarebytes. You can find it at:

http://www.malwarebytes.org/
Peter Waite
HealingWell.com
blog.healingwell.com


I hope this helps. I'm using Chrome and haven't seen this issue.

Jon

I had the same intrusion attack notice today. It happens the minute I send my browser to healing well. Paul, I have alerted the administrator to your post. Perhaps having the signature will help.

I had the same intrusion attack notice today. It happens the minute I send my browser to healing well. Paul, I have alerted the administrator to your post. Perhaps having the signature will help.