Advertise Mobile SDKs Books Events Forum News Social Networking Support Us
Follow @iphonedevsdk on Twitter

Interface 2, Advanced iOS
Mockup & Code Gen
($9.99)

Make your own iPhone apps
and run them live!
(free)

Pic Frame Dynamo: Photo Editing
($0.99)

Abiliator
($1.99)

Want your application or service advertised on iPhone Dev SDK?

Go Back   iPhone Dev SDK Forum > Community Center > Off Topic

Reply
 
LinkBack Thread Tools Display Modes
Old 10-19-2010, 08:54 PM   #1 (permalink)
Registered Member
 
Join Date: May 2010
Posts: 577
Speed is on a distinguished road
Default iPhone Dev SDK Malware? - False Positive

I am not saying that it has malware! It is a false positive.

I seem to be getting false positive warnings about malware on this forum when browsing on Safari. Is anyone else getting these? Obviously it is a false positive, but it is quite annoying.
Speed is offline   Reply With Quote
Old 10-19-2010, 09:24 PM   #2 (permalink)
Registered Member
 
Join Date: Sep 2010
Age: 16
Posts: 19
enbr is on a distinguished road
Default

Quote:
Originally Posted by Speed View Post
I am not saying that it has malware! It is a false positive.

I seem to be getting false positive warnings about malware on this forum when browsing on Safari. Is anyone else getting these? Obviously it is a false positive, but it is quite annoying.
I'm getting them too...
__________________
Founder and Lead Developer for Brian Ensor Apps
Check us out at http://www.brianensorapps.com/.
enbr is offline   Reply With Quote
Old 10-19-2010, 10:37 PM   #3 (permalink)
Registered Member
 
Join Date: Jul 2010
Posts: 99
cpcdev is on a distinguished road
Default

Quote:
Originally Posted by enbr View Post
I'm getting them too...
yes im getting them on firefox.. whats going on?
cpcdev is offline   Reply With Quote
Old 10-19-2010, 11:24 PM   #4 (permalink)
Registered Member
 
Join Date: Oct 2010
Posts: 20
tacobell is on a distinguished road
Default Here is my warning from google

Quote:
Originally Posted by cpcdev View Post
yes im getting them on firefox.. whats going on?
Safe Browsing
Diagnostic page for iPhone Dev SDK

What is the current listing status for iPhone Dev SDK
This site is not currently listed as suspicious.

Part of this site was listed for suspicious activity 1 time(s) over the past 90 days.

What happened when Google visited this site?
Of the 1022 pages we tested on the site over the past 90 days, 155 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2010-10-19, and the last time suspicious content was found on this site was on 2010-10-19.
Malicious software includes 3 exploit(s). Successful infection resulted in an average of 1 new process(es) on the target machine.

Malicious software is hosted on 5 domain(s), including crossliuk.co.cc/, yrekalsi.co.cc/, ocean-tube.com/.

3 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site, including crossliuk.co.cc/, 4safe.in/, tinypic.info/.

This site was hosted on 1 network(s) including AS33070 (RMH).

Has this site acted as an intermediary resulting in further distribution of malware?
Over the past 90 days, iPhone Dev SDK did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?
No, this site has not hosted malicious software over the past 90 days.

Next steps:
Return to the previous page.
If you are the owner of this web site, you can request a review of your site using Google Webmaster Tools. More information about the review process is available in Google's Webmaster Help Center.
tacobell is offline   Reply With Quote
Old 10-20-2010, 04:21 AM   #5 (permalink)
Registered Member
 
Join Date: Nov 2009
Posts: 5
ramon is on a distinguished road
Default

I got the same in firefox, any comment from site ops on this allegations?
ramon is offline   Reply With Quote
Old 10-20-2010, 06:20 AM   #6 (permalink)
Registered Member
 
Join Date: Nov 2008
Posts: 864
nobre84 is on a distinguished road
Default

Its probably the Ads on the site that are hosting and/or distributing malware.
nobre84 is offline   Reply With Quote
Old 10-20-2010, 09:11 AM   #7 (permalink)
Registered Member
 
Join Date: Aug 2010
Posts: 236
moezzz is on a distinguished road
Default

Quote:
Originally Posted by nobre84 View Post
Its probably the Ads on the site that are hosting and/or distributing malware.
prolly...

i'm getting too...


Please fix ASAP

thanks
moezzz is offline   Reply With Quote
Old 10-20-2010, 09:15 AM   #8 (permalink)
Senior Member
iPhone Dev SDK Supporter
 
Join Date: Aug 2008
Location: Memphis, TN, USA
Age: 24
Posts: 3,984
smithdale87 is on a distinguished road
Send a message via AIM to smithdale87
Default

ditto, I'm using Crome
smithdale87 is offline   Reply With Quote
Old 10-20-2010, 09:37 AM   #9 (permalink)
Emphasizing Fundamentals
 
BrianSlick's Avatar
 
Join Date: Jul 2009
Location: NoVA / DC Area
Age: 36
Posts: 7,990
BrianSlick has a spectacular aura about
Default

I wasn't getting it yesterday, but I am now.

This happened before, I think earlier this year. Related to ads, iirc.
__________________
BriTer Ideas LLC - Professional iOS App Development. Available for hire.

SlickShopper 2 | Free NSLog utility | Leave a PayPal donation.

Are you a newbie? Things you should read:
Definitive Guide To Properties | UITableView Series | Guide To Troubleshooting | Model Object Overview

Do you sit at a desk all day? Walk instead! Follow along with my treadmill desk adventures.
BrianSlick is offline   Reply With Quote
Old 10-20-2010, 09:45 AM   #10 (permalink)
I will be a billionaire.
 
IphoneSdk's Avatar
 
Join Date: Sep 2009
Location: Scarborough, United Kingdom
Age: 17
Posts: 1,344
IphoneSdk is on a distinguished road
Default

Quote:
Originally Posted by BrianSlick View Post
I wasn't getting it yesterday, but I am now.

This happened before, I think earlier this year. Related to ads, iirc.
When I use Safari I don't get it but when I use Firefox I do.
__________________
iOS Apps | Website | Twitter | Facebook
IphoneSdk is offline   Reply With Quote
Old 10-20-2010, 09:48 AM   #11 (permalink)
Registered Member
 
Join Date: Aug 2010
Posts: 34
Sachelis is on a distinguished road
Default

I'm getting it in Safari. Requires four clicks to ignore. A pain...
Sachelis is offline   Reply With Quote
Old 10-20-2010, 09:49 AM   #12 (permalink)
Cocoa Junkie
 
Duncan C's Avatar
 
Join Date: Dec 2008
Location: Northern Virginia
Posts: 6,005
Duncan C has a spectacular aura about
Default

Quote:
Originally Posted by smithdale87 View Post
ditto, I'm using Crome
I'm using Safari.
I get a warning on every link I click, and it takes 2 clicks to get past each warning. First, the "contains malware" warning with an ignore warning button. Then an "are you sure" button.

This renders this site all but unusable.

The site admins need to fix this, and post a definitive statement as to the cause, and a work-around for various browser configurations.

I sure won't be sending much time here until this is resolved.
__________________
Regards,

Duncan C
WareTo

Check out our apps in the Apple App store


Check out this password generator app that shows various techniques including using a data container singleton object to share data between objects in your project.

See this tutorial on using UIView animations and layer animations:

See this thread on generating random, non-repeating text

Check out a very cool Macintosh Kaleidoscopes app called ScopeWorks that we released to the Mac App store.
Duncan C is offline   Reply With Quote
Old 10-20-2010, 10:09 AM   #13 (permalink)
www.Alexj17.com
 
Alexj17's Avatar
 
Join Date: May 2009
Location: Liverpool, England
Posts: 181
Alexj17 is on a distinguished road
Send a message via Skype™ to Alexj17
Default

I am assuming the site is ok to use tho?
Alexj17 is offline   Reply With Quote
Old 10-20-2010, 10:13 AM   #14 (permalink)
co-founder, AppStoreHQ
 
Join Date: Oct 2009
Location: Los Feliz, Los Angeles, CA
Posts: 12
iseff is on a distinguished road
Default

Hi everyone,
We're also seeing this, and clearly it's not what we want.. we're investigating and will hopefully have it resolved shortly.

Thanks,
Ian
__________________
Ian Sefferman
Co-founder, AppStoreHQ
iseff@iphonedevsdk.com
iseff is offline   Reply With Quote
Old 10-20-2010, 12:00 PM   #15 (permalink)
Registered Member
 
Join Date: Aug 2010
Posts: 34
Sachelis is on a distinguished road
Default

Quote:
Originally Posted by Speed View Post
I am not saying that it has malware! It is a false positive.

I seem to be getting false positive warnings about malware on this forum when browsing on Safari. Is anyone else getting these? Obviously it is a false positive, but it is quite annoying.
FWIW, I don't think anyone knows enough to say that it's a false positive. I suspect it is the result of a true positive (although it may require you to click a specific ad to get the malware).
Sachelis is offline   Reply With Quote
Old 10-20-2010, 04:06 PM   #16 (permalink)
Registered Member
 
Join Date: Sep 2010
Location: Southern Oregon
Posts: 23
DangerD is on a distinguished road
Default

can always just turn off the alert in your browser prefs. obviously, this site is pretty safe and I would believe that most of the members are smart enough to not get themselves into hot water with actual malicious sites if they turned the alert off. Easy fix on the user side.
DangerD is offline   Reply With Quote
Old 10-21-2010, 03:58 AM   #17 (permalink)
Registered Member
 
Join Date: Sep 2008
Location: London, UK
Posts: 1,050
wuf810 is on a distinguished road
Default

Quote:
Originally Posted by DangerD View Post
can always just turn off the alert in your browser prefs. obviously, this site is pretty safe and I would believe that most of the members are smart enough to not get themselves into hot water with actual malicious sites if they turned the alert off. Easy fix on the user side.
Yeh and I won't bother wearing my seatbelt whilst driving because I'm a good driver.
wuf810 is offline   Reply With Quote
Old 11-19-2011, 06:48 PM   #18 (permalink)
Registered Member
 
Join Date: Nov 2011
Posts: 2
zzzlater is on a distinguished road
Default Got an exe download attempt on Nov 18, 2011

About a half a week ago the iphonedevsdk site was redireded by google.
On the morning of Nov 18 I went to the site and right when I left, the broswer (ie9) had a popup asking if I want to run an exe file that was in the explorer temp directory, when I hit cancle it popped up again.
I did ctl-all del and stopped the process from task mgr.
I know there was a tweet dated Nov 15 that all was clear, but this issue indicates that it is not.
If you go to google.com and type in the search bar:
iphonedevsdk
the autocompletion will show
iphonedevsdk
iphonedevsdk forum
iphonedevsdk malware

this would indicate that this site is highly associated with malware.

I just started to learn ios dev and this seems to be a top site as far as google hits, but it also has been fighting a virus distribution problem for years.
I think the site owners should escalate this higher than they have in the past years.

Until things get fixed I am only going on this site with my unimportant computer.

I hope that they have done something since the Nov 15 tweet.
zzzlater is offline   Reply With Quote
Old 11-19-2011, 07:43 PM   #19 (permalink)
Reading the Documentation
 
baja_yu's Avatar
 
Join Date: Sep 2010
Location: 45.255019,19.844908
Posts: 5,414
baja_yu has a spectacular aura about
Default

Quote:
Originally Posted by zzzlater View Post
About a half a week ago the iphonedevsdk site was redireded by google.
On the morning of Nov 18 I went to the site and right when I left, the broswer (ie9) had a popup asking if I want to run an exe file that was in the explorer temp directory, when I hit cancle it popped up again.
I did ctl-all del and stopped the process from task mgr.
I know there was a tweet dated Nov 15 that all was clear, but this issue indicates that it is not.
If you go to google.com and type in the search bar:
iphonedevsdk
the autocompletion will show
iphonedevsdk
iphonedevsdk forum
iphonedevsdk malware

this would indicate that this site is highly associated with malware.

I just started to learn ios dev and this seems to be a top site as far as google hits, but it also has been fighting a virus distribution problem for years.
I think the site owners should escalate this higher than they have in the past years.

Until things get fixed I am only going on this site with my unimportant computer.

I hope that they have done something since the Nov 15 tweet.
I can't tell for certain but I seriously doubt the exe came directly from iphonedevsdk.com. Being an open forum any malicious person and more often spam bot can post a link to a malicious page or file. As far as Google software is concerned the iphonedevsdk contains links to malicious pages and thus gets red flagged.

As a side note, most users visiting are most likely on Mac OS and not Windows so they wont be affected by traditional viruses. Not that that excuses the problem.
baja_yu is offline   Reply With Quote
Old 11-20-2011, 01:57 PM   #20 (permalink)
Registered Member
 
Join Date: Nov 2011
Posts: 2
zzzlater is on a distinguished road
Default

Quote:
Originally Posted by baja_yu View Post
I can't tell for certain but I seriously doubt the exe came directly from iphonedevsdk.com. Being an open forum any malicious person and more often spam bot can post a link to a malicious page or file. As far as Google software is concerned the iphonedevsdk contains links to malicious pages and thus gets red flagged.

As a side note, most users visiting are most likely on Mac OS and not Windows so they wont be affected by traditional viruses. Not that that excuses the problem.
Thanks for the quick response,
my 2 concerns are:
1. I got the exe popup right after my 1st (unprotected (no google redirect)) visit to the site, a popup which I had never seen before. So I am pretty sure that I experience a real malware attempt. If the owners have done cleanup after Nov 18 then Great!, No Problem!
2. The malware issue seems to have been around since 2009 or before. I hope the owners do something beyond what they have tried in the past. I have seen the google redirect on fishy sites but not a top rated forum.

I'm using my mac for ios dev and my pc to lookup answers to problems, and this site seams to have a lot of good answers.
zzzlater is offline   Reply With Quote
Old 11-20-2011, 03:52 PM   #21 (permalink)
Registered Member
 
Join Date: Aug 2011
Posts: 245
samurle is on a distinguished road
Default

Quote:
Part of this site was listed for suspicious activity 1 time(s) over the past 90 days.
Well, I hope this doesn't continue for 90 days (3 months). Seems like a long time.
samurle is offline   Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



» Advertisements
» Online Users: 488
13 members and 475 guests
andyzaharia, AppsBlogger, David-T, flamingliquid, HemiMG, iAppDeveloper, imac74, Jaxen66, lovoyl, Paul Slocum, tiendung2992, unicornleo, usernametaken
Most users ever online was 1,387, 04-10-2012 at 04:21 AM.
» Stats
Members: 175,684
Threads: 94,131
Posts: 402,932
Top Poster: BrianSlick (7,990)
Welcome to our newest member, tiendung2992
Powered by vBadvanced CMPS v3.1.0

All times are GMT -5. The time now is 10:19 AM.
Powered by vBulletin® Version 3.8.0
Copyright ©2000 - 2012, Jelsoft Enterprises Ltd.
Search Engine Friendly URLs by vBSEO 3.3.0