I have been getting this feedback from very few of my members that when they run my website in IE, very few times it redirects them to some virus or spyware site or sometime it asks them that "this website wants to install an addon" which is apperantely a virus. this happens ONLY in IE. works fine with opera and firefox Any idea?
May be some Ad network ? Do you have any other ad network other than Adsense then it could be a problem
bidvertiser. But i remember some members reported this even when i had adsense. And remember this happens only with IE.
Do you have any other Ad network ? This could be coming because some flash Ads does not have the needed plugins in some IE may be.
nope, after some research few friends told me that it could be an issue with .htaaccess u see any possibility for that?
i think everyone is facing the issue now. So what exactly is the matter with .htaacess? is there anyway to directly replace it or something?
I see the following error when visiting your site Your board has not yet been installed and configured. Please do so before attempting to browse it.
i dont know, m using avast AV and so do most of my members, i have attached a screenshot here that contains the warning that pops up everytime someone surfs through my website. I have noticed that very few of the web pages dont give the warning but most of them do.
interesting indeed,i never sen that before. Double check all your /root .php files codes. Also,i wonder if there's any new exploit using signatures ect. I did went to your site using IE couple of times and only happened once. I got a pop up running a fake antivirus scanner trying to make me download a .exe file. Now..also it might be a "BHO" somewhere. I wish i could of been more helpful.
so far what i have done is i have downloaded the ENTIRE web files from my ftp to the computer and scanned them with different AVs, but no such luck.
Sounds like a drive by infection pest. I looked around and found these: http://securityresponse.symantec.com/security_response/writeup.jsp?docid=2007-101013-3606-99&tabid=2
So exactly do u suggest? Will it be fixed if i move my forum from myBB to vBulletin? and remove everything else thats sitting in FTP and doing nothing?
update: ISSUE FIXED it was an XSS vulnerability because of that particuler theme. I enever thought about that because i thought myBB is quite secured, IT IS. But just the problem in theme designed which allowed html entities. Just as an FYI, Thanks for the support anyway.
