These are the reports I have been getting from my members...

"JS:Agent-BQ[Expl]" has been found in "http://xewoqerq.com/xw/pdf.php"
I'm running Avast! as well, and it caught that JS Agent as I was being redirected to some other website from your advertisements. We also get mass pop-ups from it.

I did some searching and I found it was a key logger and found a fix but....

1. Scan all PCs that had FTP access to your site and try to remove the trojan/viri. Do this VERY THOROUGHLY.

2. Change ALL your FTP passwords of every site you accessed using that PC.

3. Change all your passwords in Serendipity and other tools on your webpage.

4. Do a search on all files on your homepage and search for this "F6FA9E" part. Remove this nasty javascript in all files you find it in. Usually those are only index.html or index.php pages.

it has not popped up on my pc yet but I now have 2 members have it on their pc and more reports coming in...

Can you please tell me who does all the adverts for forumotion so I can report it to them.

All the ads are from Google. Are you sure that its coming from the ad's?

I'm just not savvy enough to know that but 3 different members report it is from the adverts

more reports coming in now

17.03.2009 14:08:12 Network Shield: blocked access to malicious site 85.12.43.127/css/pdf.php?new=1&cc=US&st=3uob&tm=000012&r=ww8mm2drr&u=f_2_16 [ C:\Program Files\Mozilla Firefox\firefox.exe ( 1544 ) ]
17.03.2009 14:08:13 Network Shield: blocked access to malicious site 85.12.43.127/css/pdf.php?new=1&cc=US&st=3uob&tm=000012&r=ww8mm2drr&u=f_2_16 [ C:\Program Files\Mozilla Firefox\firefox.exe ( 1544 ) ]

these reports are from a firewall log...

This is most upsetting as my site isn't that new and was slowly gaining members but I will have no choice but to stick up the under construction notice up to stop people coming to the site soon but I will keep it open a little while longer to see what other reports I'm getting so I can give them to you.

Link to your forum please?

ok the reports have stopped and the members who reported it say the ads are no longer appearing so it must have been removed.

So all is good and well.

If it happens again i will let you know but personally I think it was a freak occurence.

fell free to lock or delete this thread. Sorry for the bother

No worries
Topic Solved
Locked

Sanket