BuddyEmmons.com web site problem

Ryan Barwin · Post by **Ryan Barwin** » 19 Oct 2009 5:01 am

Hey Ernie, not to take over the thread or anything, but what's wrong with the Buddy Emmons site? When I try and go to the site, I get a page that says "Warning: Visiting this site may harm your computer."

Ernie Renn · Post by **Ernie Renn** » 19 Oct 2009 5:17 am

I'm guessing you're using the Google Chrome browser. For some reason it has a problem with some of the code. It considers it malware.

I've scanned and rescanned the files and haven't found anything. A techie friend suggested I send the code to Google for exemption. Try using IE7 and see if you can get there. Chrome is the only one I'm aware of that has the problem.

I found out about this because I was using Chrome and it wouldn't let me open a forum page that I had previously posted on with IE from the house. I said that the page contained a link from BE.com and it was known for housing malware that would steal information. I called the server and they ran scans, as well and found nothing harmful.

(Of course this stuff only happens when I'm on the road and can't devote the necessary time to it.)

Cal Sharp · Post by **Cal Sharp** » 19 Oct 2009 7:50 am

Ernie,
Happens in Safari and FF on a Mac, too. IE and FF on Windoze are OK. This happened to one of the pages on one of my sites once, and when I looked at the code there was a bunch of weird stuff at the bottom that I had to delete. Don't know where it came from.

Ryan Barwin · Post by **Ryan Barwin** » 19 Oct 2009 8:06 am

Okay...thanks. I was using Safari and FF on a Mac...I just turned off the thing in Preferences to "warn me when visiting a fraudulent website" and now it works fine.

Jim Smith · Post by **Jim Smith** » 19 Oct 2009 9:32 am

My Avast anti-virus flags buddyemmons.com as a "Reported Attack Site". Clicking on the "Why was this site blocked" button takes me to this Google Safe Browsing diagnostic page: http://safebrowsing.clients.google.com/ ... mmons.com/ Maybe something there will help you figure what may be causing it.

Jim Lindsey (Louisiana) · Post by **Jim Lindsey (Louisiana)** » 20 Oct 2009 7:48 am

While the subject of various browsers is up, I use Netscape Navigator 9 and it works perfectly first time and every time on any site I visit.

About the only time I ever have difficulties with a site is when I try using one of the newer browsers. So, for that reason, I remain "old fashioned" and stay with Netscape 9.

Cal Sharp · Post by **Cal Sharp** » 20 Oct 2009 8:57 am

Jim, there haven't been any security patches or updates for Netscape since Feb 1, 2008. I'd consider moving on to Firefox. BTW, are you still picking with Freddy Fleet and the Band With the Beat?

Jim Lindsey (Louisiana) · Post by **Jim Lindsey (Louisiana)** » 20 Oct 2009 9:33 am

I know this is going to sound really dumb, Cal, (and I'm probably walking full steam into a joke here) but who is "Freddy Fleet and the Band With the Beat"?

Cal Sharp · Post by **Cal Sharp** » 20 Oct 2009 9:48 am

Wow, you didn't know you had a famous namesake?
http://hubpages.com/hub/Andy-Griffith-S ... tar-Player
There was a Freddy Fleet in a later episode.

Jim Lindsey (Louisiana) · Post by **Jim Lindsey (Louisiana)** » 20 Oct 2009 10:18 am

Oh, my gosh! It all makes sense now ... when I was with Ty Herndon, we'd occasionally play the Grand Ole Opry and more than once I've had a couple of people ask me if I was the Jim Lindsey who played with Andy Griffith. I just thought it was some kind of inside "Nashville joke" ...

LOL

Now, I get it! Thanks, Cal ... nope, I really didn't know there was a famous namesake.

basilh · Post by **basilh** » 20 Oct 2009 11:12 am

Still comes up as an "Attack" site and suspect..

basilh · Post by **basilh** » 20 Oct 2009 11:16 am

The reasons Google gives are listed here :-

Safe Browsing
Diagnostic page for buddyemmons.com

What is the current listing status for buddyemmons.com?

Site is listed as suspicious - visiting this website may harm your computer.

Part of this site was listed for suspicious activity 2 time(s) over the past 90 days.

What happened when Google visited this site?

Of the 2 pages that we tested on the site over the past 90 days, 2 page(s) resulted in malicious software being downloaded and installed without user consent. The last time that Google visited this site was on 2009-10-14, and the last time that suspicious content was found on this site was on 2009-10-09.

Malicious software includes 3 exploit(s), 1 trojan(s).

Malicious software is hosted on 3 domain(s), including keymydomains.com/, npanelsrv.info/, myndomain.info/.

1 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site, including npanelsrv.info/.

This site was hosted on 1 network(s) including AS14166 (SOFTCOMCA).

Has this site acted as an intermediary resulting in further distribution of malware?

Over the past 90 days, buddyemmons.com did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?

No, this site has not hosted malicious software over the past 90 days.

How did this happen?

In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.

Next steps:

* Return to the previous page.
* If you are the owner of this website, you can request a review of your site using Google Webmaster Tools. More information about the review process is available in Google's Webmaster Help Centre.

Ernie Renn · Post by **Ernie Renn** » 20 Oct 2009 3:35 pm

The only thing I can figure out is that the problem I had with a trojan from like 6 months ago is just now showing up on these reports.

The site was completely deleted and the server wiped clean. Then the site files were scanned for malicious code, visuses and trojans. When it was decided they were clean, it was reuploaded.

I might not be able to do anything about it until next week. I'm at present in Great Falls, Montana and the internet connection is weak and drops out frequently.

Cal Sharp · Post by **Cal Sharp** » 20 Oct 2009 5:01 pm

Geez, I can't see the problem. I've examined the code on every page and didn't find anything suspicious, like I found on my site when I had a similar problem. But I'm not an expert, just trying to help. Maybe when the reports are updated the warnings'll go away. Good luck.
"What came first, Ernie or the egg?". - Roadhog

Ernie Renn · Post by **Ernie Renn** » 20 Oct 2009 5:15 pm

I also removed a few things that I thought might have been confusing to some browsers.

I also removed the links to donate to Katrina victims, I suppose I could've done that before, but the Salvation Army and Red Cross seemed safe. But, you never know if they'd been hacked...

Thanks for looking, Cal! I appreciate any help.

Any of you other techie kids, look at the HTML and let me know what might be causing the problem.

I'm in Great Falls, MT and the internet connection I have here is slow and intermittent, too... BE patient or use IE on a Windows machine. $:\$

basilh · Post by **basilh** » 21 Oct 2009 2:24 am

Cal and Ernie it ISN'T the code that's the problem it's the links to other sites that are using you as a distributor..
This report was by GOOGLE and their own EXPERTS if they don't know, who does ?

Of the 2 pages that we tested on the site over the past 90 days, 2 page(s) resulted in malicious software being downloaded and installed without user consent. The last time that Google visited this site was on 2009-10-14, and the last time that suspicious content was found on this site was on 2009-10-09.

Malicious software includes 3 exploit(s), 1 trojan(s).

Last found suspicious content on SEPTEMBER 10th.

So what you need to do is log on to your Google account, access the webmaster tools and submit a request for "Site Review" Simple as that..

The picture I posted above tells you that !!

It's the last paragraph, this picture:-

If you click HERE it's a link to the page to get you started..then click on the bottom paragraph phrase "Webmaster tools"
and follow the destructions

Jeff Agnew · Post by **Jeff Agnew** » 21 Oct 2009 3:49 am

Last found suspicious content on SEPTEMBER 10th.

Actually, it was found on October 10th. The format used by Google's SQL database is: yyyy-mm-dd.

Chuck Hall · Post by **Chuck Hall** » 21 Oct 2009 8:39 am

did it with my FF. Found this to fix it.?????
WWW.stopbadware.org

Request a Review
Who We Are
What We Do
What is Badware?
FAQ
Get Involved
Badware Clearinghouse
Badware sites reported by our partners:
336513

* Clearinghouse Search
* Why Is My Site Flagged?
* Review Process
* Website Guidelines
* Data Partners

Organizers

* Berkman Center for Internet & Society

Partners

* Google
* PayPal
* Mozilla
* AOL
* Trend Micro
* Sunbelt Software
* Consumer Reports WebWatch

If your site is currently being reported to StopBadware by one of our data partners (symptoms may include a Google “This Site May Harm Your Computer” warning, a Firefox “Attack Site” warning, or your site being listed with “Current Activity” in our Clearinghouse), follow these steps to get your site removed from our partners’ badware lists:

1) Locate and remove all badware and badware-distributing code on your website, and fix the security vulnerabilities that allowed the code to be placed on your site. Fixing security vulnerabilities will help prevent future attacks, reducing the probability that your site will receive a warning again. For help, see these resources:

* Tips for Cleaning & Securing Your Website: Learn about common hacking attacks and security issues that can cause legitimate websites to become badware distributors, and ways to clean and secure websites that have been attacked.
* BadwareBusters.org: The volunteer members of our online community can help you discover problems on your site and can teach you how to protect your site in the future.

2) If your site is being reported to StopBadware by Google, request a review from Google’s Webmaster Tools:

* Log into Google Webmaster Tools. If you do not yet have a Webmaster Tools account, you can create one for free.
* Ensure that you are verified as the owner of your website.
* Follow Google’s instructions for requesting a review.

3) If your site is being reported to StopBadware by Sunbelt Software, or if the steps above have not led to a satisfactory resolution, you may request an independent review by StopBadware.

While some reviews are resolved within a business day, others may take several days (typically no longer than two weeks, but often shorter). The best way to ensure a speedy resolution is to follow the steps above and to be certain that your site is badware-free before requesting a review.

Please note: Certain information submitted as part of a review request may be shared with our partners and/or displayed on our website. (The “name” and “e-mail address” fields will never be publicly displayed.) See our Privacy Policy for more information.

To request an independent review by StopBadware:

* Search for your site in our Badware Website Clearinghouse.
* Find your site in the search results and click the link for your site. You will be taken to the StopBadware.org report page for your site.
* Click the “Request an independent review of partners’ findings” button underneath the “Current Activity” section of the report.
* Fill out and submit the review form.

Please note: As part of the review process, information submitted in the StopBadware.org review form will be shared with Google. We may display information that you submit (except for the “Your name” and “Your Email Address” fields) on our website. See our Privacy Policy for more information.

Ernie Renn · Post by **Ernie Renn** » 21 Oct 2009 11:39 am

Thanks, Chuck!

I just signed up with badwarebusters.org and posted to have them look at the site and let me know what they find.

I will get this figured out! It may take a while, but I will resolve the issues.

(Or go down in flames trying!) $:\$

Johnny Thomasson · Post by **Johnny Thomasson** » 23 Oct 2009 9:26 pm

No probs here with Firefox running on Vista.

Jim Smith · Post by **Jim Smith** » 24 Oct 2009 7:24 am

Ah, it's working for me now as well!

basilh · Post by **basilh** » 24 Oct 2009 9:03 am

And me

Ernie Renn · Post by **Ernie Renn** » 26 Oct 2009 9:13 pm

Glad to hear it! Maybe it's working itself out.

(FINALLY!)