Malware error on failblog?

Question

So I just finished a movie and was going to Failblog for a couple good laughs, when Google Chrome gives me the strangest error, telling me that the website has been infected with malware and not only that, but it's not even giving me the option to bypass the website block. Has something happened to Failblog.org? I have tried getting to the website through both Google and redirection from Memebase, which works fine I might add, I don't need to go to Failblog that much right now but I am very worried that this is happening to my computer, because it's far too strange that it is blocking me from such a safe website, has it really been infected, or have I been infected with something? Can someone please let me know if you're having this issue with Chrome? Thanks in advance.

Answer 1

A little research shows two threads.



1) There have been similar alerts recently related to infected java applets and .js files infected with trojan.script.generic altogether.

2) Also loads of similar trojan.script.generic lead to ransomware (UKASH type), the latter being quite a pain in the rear to remove.



So I'd advise you to be cautious with these sites, do not override the security check unless you're certain your antivirus and browser settings offer thorough .js protection.



Hopefully we'll have more info in a couple of hours, as these blacklist additions generate webmaster notifications.



Links provided to recent (atm) Java security alerts and ukash remover, if ever.



--



EDIT : After reviewing the incriminated sites I have found (one of) the way(s) infection proceeds.



Some of the provided videos are fake, consisting in an image mimicking an embedded video player (youtube for instance). The image is linked to a (supposedly malicious) .js hosted by chzb.gr, which is apparently (no thorough research there, but DNS records and website informer show coherent data) the legit fileserver for cheezburger items.

( chzb.gr is also referenced by google as malicious, btw. And beware, infected items also show on other sub-sites, spotted two on I Can Has recent additions.)



So when you click on that lolcat video it instead could download malicious software.



A hint to avoid this : Check the player lower controls (fullscreen and such) and if they're functional then go for it. If they're inert or status shows a link (Hovering over youtube's genuine player won't show a link) then step back.

Answer 2

2

Answer 3

I'm having the same issue right now too.. I have no idea if failblog is actually infected with malware. I visit that site a few times a week, I hope the issue will be resolved!

Answer 4

I just got the same error. I looked at the details of the report and Google said their last scan of the site showed no malware, but that third parties can sometimes add malicious code to the site which may trigger the error.



If you have an anti-virus, you may be okay if you go ahead to the site, but proceed at your own risk. I'm going to go ahead and hold off until later, in case it's just something they have to fix.



EDIT: Oh, and if you don't know how to bypass the error, just click Advanced, and Proceed at your own risk.



I wonder if there's a malicious banner ad or something that's been added to the site.

Answer 5

I'm having the same issue, was about to ask the same question.



I figure I'll just try again later in the day or something. It could just be a weird picture that somebody uploaded, right? ...Hopefully. Every other section works just fine for me, though. Only Failblog's doing this for you too, right?

Answer 6

The virus is actually in the ads that are running on sides. I've noticed that some of those ads open windows without me clicking them. I think the best solution is to use some ad block plug-in for your browser, because as long those are there you can never be sure you're safe.

Answer 7

Failblog.org

Answer 8

"I Can Has, ROFLrazzi, Memebase, Daily What, KYM, and Moar" work, it seems that everything within the domain failblog.cheezburger.com is affected, everything else shows up fine...