Argonath Forums containing malware?

[Leonardo]

I've tried to access the forums a while ago but it gave me a message that the site may be trying to share malicious content, so i wonder... what's going on? Anybody else has seen that also?

A message of the error:

(taken from Reece)

If this has a plausible explanation or the forums come back, just trash this topic.

[Cyril]

Same. I'm trying to contact Murt or Pancher, but they are afk. I would suggest you to not proceed to the forum until something has been cleared up

According to this : https://www.virustotal.com/url/5ab31fd9da781c223aed570d2b7144d61f494873bbffa1cfbda65c8d4c74a579/analysis/

Google Safebrowsing is the only one detecting a malware..

[Dolfa]

Same, are you all using Firefox, because it works properly in Chrome

[Jcstodds]

Getting same on Chrome

[Lionel Valdes]

Having no prob, I can.

[XSniper]

Getting same on Chrome

[Leroy Kolta]

Getting same on Chrome

[Woka]

Getting same on Chrome

[Dolfa]

Okay, I got it too after refreshing a couple of times, I suppose it's forum related and not browser related then 

[Padres_Rosso]

Same here^^
My Safebrowsing shows the following malware elements
http://www.argonathrpg.eu/forum/Themes/core/css/webkit.css
http://www.argonathrpg.eu/forum/Themes/default/scripts/script.js?rc5
http://www.argonathrpg.eu/forum/Themes/core/scripts/theme.js?rc5
http://www.argonathrpg.eu/forum/Themes/default/scripts/sha1.js
Dafuq is that?

[Jcstodds]

  Since there was attacks on the server today, I would recommend not logging in until we know more about it.

[Teddy]

  Since there was attacks on the server today, I would recommend not logging in until we know more about it.

This is the best advice possible.

[[WS]Mike]

If you change the ".EU" to ".COM" you no longer get the Malware alert.

[Padres_Rosso]

If you change the ".EU" to ".COM" you no longer get the Malware alert.

I do, Better don't try to get access..When its really a Attack, Your pc is infected

[[WS]Mike]

If you change the ".EU" to ".COM" you no longer get the Malware alert.

I take this back, it worked on my first tries then I continually got the alert.

[JDC]

The FBI Forums have been disabled as well for security reasons. For those who are directed here from the security announcement, it is advised to read the rest of the topic as well for more information.

ADDITIONAL INFORMATION

Advice for ALL users: DO NOT log in to the main forums until any official announcement from the command staff or the Argonath Administration that it is safe to do so.

JDC
FBI Director (VC-LU)
ARPD Webmaster Team

[JayL]

I remember that sometime yesterday I got a prompt asking me to install an Adobe update. Past year or so there was a similar issue in which the main forums got infected and there was an application asking you to update Java or something. Maybe that is the source of the malware?

[[Rstar]Paul]

I'll check the FTPs since i have access to the main machine.

[Stormeus]

I think this may be a bit of an overreaction since, so far, there have been no confirmed reports of an actual attempt to install malware on visitors' computers. The only remotely malicious code that could be found is on the main page (found by SugarD), at the bottom, where, if you're (un)lucky enough, an ad will appear with an invisible, 1px by 1px frame that points to a page with absolutely no content whatsoever -- not a single Java applet, Javascript payload, or even anything like a redirect to another page.

Additionally, Google is the only service reporting infection, and a scan on the page on VirusTotal confirms this (another scan on the .com domain reports it as completely clean), made worse by the fact that Google's SafeBrowsing technology is and has been notoriously hyperactive.

Is this entirely confirmed? No, we need a webmaster or owner to confirm once and for all that it is safe. Make of the situation what you will. However, I've continued browsing the main site and forum as usual and will continue to do so, and in the past few hours that this has been reported, not once has my antivirus raised any warnings whatsoever, nor do I see any signs of a virus.

EDIT: The "backlinks" ad is there all the time. The iframe is only raised at random. However, even after 17 hard (Ctrl+F5) refreshes and counting, I cannot reproduce it.

[[Rstar]Paul]

I've had a deep sweep in the main FTP.

There appears to be nothing suspicious, so will have to wait for Ronnel probably a domain related issue.