So I just opened one of the interview threads linking to fomos.kr, and Google Chrome gave me a warning that this site hosted malware. I ignored it as usual, but to check I clicked on a fomos link - after barging through the warning again, my AVG free antivirus gave me a message saying threat detected. Can anyone confirm/deny? Sorta scary. :[

FragKrag

United States11538 Posts

January 10 2010 21:33 GMT

I get the same warning whenever I open a TL thread that links to fomos or something

OpticalShot

Canada6330 Posts

January 10 2010 21:34 GMT

I used to visit Fomos on a regular basis to check for interviews and such, but I just noticed today that the malware message pops up (I'm also using Google Chrome). Tried the same with Firefox and same result (malware message). With IE8, the site doesn't open.

Uh oh.

Julmust

Sweden4867 Posts

January 10 2010 21:38 GMT

didnt artosis say its that google doesnt like korean sites in general? some software they might be using on the page?

meeple

Canada10211 Posts

January 10 2010 21:40 GMT

I get the same message... dunno if its a false alarm though.

Xxio

Canada5565 Posts

January 10 2010 21:44 GMT

On January 11 2010 06:38 Julmust wrote:
didnt artosis say its that google doesnt like korean sites in general? some software they might be using on the page?

Yeah he did say that, it always happens. When I go to fomos or afreeca it gives me that warning, I don't think it's anything new.

p4NDemik

United States13896 Posts

January 10 2010 21:45 GMT

I'm getting the same messages here, this is gonna make it a real pain in the ass when I want to go look for an update

Kenpachi

United States9908 Posts

January 10 2010 21:49 GMT

On January 11 2010 06:45 p4NDemik wrote:
I'm getting the same messages here, this is gonna make it a real pain in the ass when I want to go look for an update

Pokebunny

United States10654 Posts

January 10 2010 21:50 GMT

Well any idea if I actually should be worried? @Julmust that's what I thought when there was just a malware warning, but then AVG gave me a threat detected.

mtmf

Brazil420 Posts

January 10 2010 21:52 GMT

#10

So that's why I got a warning when I tried to read Smix translation of MSL ro8 day3 interviews...
Hope they fix it soon!

SonuvBob

Aiur21548 Posts

January 10 2010 21:55 GMT

#11

Happens pretty often when images are hosted by afreeca, dunno if that's the case this time though.

R1CH

Netherlands10340 Posts

January 10 2010 22:34 GMT

#12

On January 11 2010 06:50 Pokebunny wrote:
Well any idea if I actually should be worried? @Julmust that's what I thought when there was just a malware warning, but then AVG gave me a threat detected.

Google doesn't make up those warnings just because it hates Korea, it detected malicious code either on the site or embedded on the site from a 3rd party host. Whether this code can affect you depends on what it is designed to target, eg old browsers, PDF exploits, etc. To minimize the risk, check my securing your PC thread.

TeH_Mentalist

Korea (South)244 Posts

January 11 2010 00:06 GMT

#13

I think it's a false alarm

Artosis

United States2138 Posts

January 11 2010 00:53 GMT

#14

google doesnt like korean based video servers. does that to scforall all the time as well.

Pokebunny

United States10654 Posts

January 11 2010 03:23 GMT

#15

On January 11 2010 09:53 Artosis wrote:
google doesnt like korean based video servers. does that to scforall all the time as well.

"doesn't like." If there's something that google doesn't like about it, then couldn't something be up? I've never had this error with fomos before, and as I said, AVG gave me a threat warning as well..

R1CH

Netherlands10340 Posts

January 11 2010 05:04 GMT

#16

If your anti-virus is throwing up warnings then there is definitely something nasty trying to exploit your PC. I notice in general Korean sites like to incorporate content from many, many 3rd party sources and if just one of those is exploited, it can serve malware to any site that incorporates the content. Ad providers for example might have some new customer that serves up exploit-loaded flash ads and such, and any site that uses their ads could then be blacklisted by Google.

Also since Google can crawl many links users may not even see, Google could be picking up malware on a page buried very deeply in the site that regular users might not access very often at all. Either way, there is a reason for the listing.

mrmin123

Korea (South)2971 Posts

January 11 2010 19:09 GMT

#17

Definitely some virus. I tried to load the site in IE and I got multiple warnings for each:

HTML/Crypted.Gen HTML script virus
JS/Dldr.Agent.IIk Java script virus
HTML/Shellcode.Gen HTML script virus