CineForm website unsafe??
 

I've tried to get onto the Cineform website several times tonight - on my laptop it just froze up and I had to turn the laptop off. On the desktop my virus protection immediately blocked the site as unsafe.

Any idea what's going on?

Harry

I'm seeing it too. Investigating.

Hi.............
 

It appears that something on the site is initiating an immediate Java upgrade install which, dependant on the security level set on you're system, may trigger an alarm.

Whether the Java update is cosher is another question entirely, Nortons didn't flag it, but I kyboshed it anyway.

Think you may have added some new graphics which require the latest update is all.


CS

Thanks Chris,

That is useful info. I have downloads the whole website and scanned it locally and found nothing.

The cineform website has a virus,
On loading if allowed it downloads a PDF which contains the following content:

"Abvolt spit abortively abongo puneet. Playboy abhorrently phone dawn elizabeth abashedness abyssinian. Topography lisa playboy abhorrently phone dawn elizabeth abashedness abyssinian abhorrently. "

Oh, this happened while using google chrome and the PDF downloaded was called
3bbb9d.pdf

I did not get any issues on iexplorer or google chrome the second time I went to the site today or even when clearing cookies (but I had already approved the unsafe site) perhaps it's something akin to the described article below:

Virus spreading via PDF | OIT Website

Network Solutions is our host. Apparently they have other sites they host that have also been targeted. They have escalated it and are working on a solution. I'll post again when they've resolved it.

Harry, thank you for first reporting it, and to others who have chimed in....

This website has been reported as unsafe
techblog.cineform.com

We recommend that you do not continue to this website.
Go to my home page instead

This website has been reported to Microsoft for containing threats to your computer that might reveal personal or financial information.

More information

This website has been reported to contain the following threats:

Malicious software threat: This site contains links to viruses or other software programs that can reveal personal information stored or typed on your computer to malicious persons.

Learn more about phishing
Learn more about malicious software
Report that this site does not contain threats
Disregard and continue (not recommended)



Yeah I was trying to download the latest update and I got the above - Nice of Windows 7! Atleast I know it works

It happened to my company's website as well maybe 3 months ago.

Basically it attacked every HTML files and XML files on our website. Our IT guy wrote a script to remove those javascript code snippet from all infected files. There was a lot of infections.

We cleaned it with the script and changed all our passwords and everything was ok...then it came back 2 weeks after so we had to do a re-provisioning of our server. (backing up and formatting the whole thing, re-installing os)

It really sucks.

After reaching the Cineform site I noticed the suspicious Java install message pop up too. Did not click on it and Norton also flagged it had resolved an attack. However, despite this I then appeared to get a redirect virus in my browser. Ran a scan with Malwarebytes' Anti-Malware found at Malwarebytes and it seems to have fixed the problem.

Still virus-ridden May 6 10 pm EST

I think I might be finally fixed. Please report.

No error message, no java update pop-up, no antivirus messages when visiting cineform website May 7, 06:50UTC

Website appears to be as it is supposed to be.

I also approved the site after it was reported unsafe by my AV, now I'm worried :/ It didn't seem to try and download any PDFs, so it should be fine right?!

Confirmed!
Both the Tech Blog page and the CF site seem squeeky clean now.
I never did approve the site when it was misbehaving, and now I don't get the unsafe site screen.
What a nusiance for you guys...