05-06-2010 10:28 AM - edited 05-06-2010 10:39 AM
Hi All,
Yesterday while surfing the net on the website drudgereport I got a screen for a fake webscan. I shut down IE and restarted. Anyhow, today I went to drudgereport, which is a common heavy traffic site. and I received a popup from Norton, that it blocked an intrusion attempt. HTTP Fake Scan Webpage 5.
I have gone to drudgereport for years without any trouble.
My question is,
Is the intrusion related to the website or something on MY computer that initiates when i go to the website?
I am in the process of doing all the scans just to be safe, windows defender, NIS full scan, MBAM and superantispyware.
Thanks Kevin
05-06-2010 10:50 AM - edited 05-06-2010 10:51 AM
Also, I hope it is ok to put the name of the website on this Forum? I didn't think it would matter since It is a very common legitimate site.
Thanks Kevin
05-06-2010 10:59 AM
I found this about this threat: http://www.symantec.com/business/security_response
Does anything seems familiar to you? Did the page behaved like it is described?
And which Windows OS do you run.
Windows 7 Home Premium SP1 x64 Hungarian, Norton 360 v20.4.0.40, Norton Utilities 16, Symantec System Recovery 2013
05-06-2010 11:09 AM - edited 05-06-2010 11:17 AM
Here is what happened. Yesterday, i went to drudge report and received the redirect to a fake webpage scan. I immediately shut off the wireless internet and closed internet explorer and restarted and did not go back to that site. Today I went back to drudgereport and this time Norton blocked an instruion attempt from that site. My computer seems fine, i am hesitant to go back to drudgereport if the problem is on the website.
So i am confused
Is the problem with the website or something on my computer that triggers when i go to that website.
Thanks Kevin
Windows Vista Home Premium Service Pack 2
NIS 2010 17.6.0.32
05-06-2010 11:27 AM
I received the same warning today after going to the same website and it was the first site I visited since starting the computer this morning. The site hadn't even finished loading before I got the warning. I am concerned also about whether it is the website or something in my computer. I have done nothing (no scans, no computer shutdown) except shut down internet explorer and open it up again. I am on Windows 7 home premium.
05-06-2010 11:39 AM
Please check the site with Norton SafeWeb: http://safeweb.norton.com/
And let us know what result it gave. Does it reports any threat? If yes, what kind of it?
Windows 7 Home Premium SP1 x64 Hungarian, Norton 360 v20.4.0.40, Norton Utilities 16, Symantec System Recovery 2013
05-06-2010 12:20 PM
Norton SafeWeb says the site is safe and there are 0 threats.
05-06-2010 05:03 PM
The HTTP Fakescan webpage 5 blocks a redirection that can occur with a malvertisement (malicious advertisement) that then pop-ups a fake antivirus product trying to trick you into thinking you are infected. If you see this alert, your system should be safe as you have been protected from the redirection.
I can't speak to this website specifically but if you search "drudgereport fake av" you will see previous reports. Malvertisements can be difficult for website owners to detect and find when 1 out of 1000 advertisements might be bad. To read more about fake av and length these folks will goto, see the Rogue Security Software report and click on the "White Papers" tab.
Thanks,
John
05-07-2010 06:49 AM - edited 05-07-2010 07:00 AM
I can confirm that this is a random event.
This morning was the first time I experienced the attack after having visited the site numerous times yesterday. NIS blocked the attack and my computer has not suffered any ill effects.
I sent an email to the Drudge Report advising them of the issue, but as as mentioned by John Harrison, it may be difficult for the site owner to pinpoint the offending ad among the many that are displayed during the day.
And, I should add that this type of attack has occurred on other mainstream, legitimate websites.
Thank you, Norton Internet Security!
Norton 360 • Norton Internet Security • Norton Zone | XP SP3 • Windows 7 Professional SP1 x64
• PLEASE, BACKUP or EXPORT your Identity Safe Data on a regular basis •
05-07-2010 07:21 AM
And thank you to all. The information you have provided has put my mind at ease in the sense that I am comforted by knowing that you Norton people know about the issue and that, through the Norton product, I was armed against this problem. I am grateful for the Norton product for protecting me, even though much of it is too complicated for my pea brain.
