Seeking Alpha

H. T. Love's  Instablog

Spent over 30 years in computer systems work, many different functions. Owned my own business for awhile. Got tired of it (managing employees is not my baliwick) and stopped doing it professionally. Did other things, off and on, for some more years and finally bumped into this investing/trading... More
  • Malware seen *only* when I've clicked through a link to an SA article 7 comments
    Aug 23, 2009 01:24 PM
    This has appeared several times over the last couple of weeks.
    Do NOT click through. Do anything you can to get out of it.Malware Screen

    Infection

    In each case, I acquired the IP addresses, which have been sent to SA. If you have a firewall, or can configure your prowser to block all pop-ups, certain IP, etc. set that up.

    check-for-malwarev3.com. 2327   IN      A       88.198.120.177
    check-for-malwarev3.com. 2327   IN      A       88.198.107.25
    check-for-malwarev3.com. 2327   IN      A       94.102.51.26
    check-for-malwarev3.com. 2327   IN      A       91.212.127.200
    check-for-malwarev3.com. 2327   IN      A       91.212.107.5

    safeonlinescanv4.com.   1951    IN      A       91.212.107.5
    safeonlinescanv4.com.   1951    IN      A       88.198.120.177
    safeonlinescanv4.com.   1951    IN      A       88.198.107.25
    safeonlinescanv4.com.   1951    IN      A       94.102.51.26
    safeonlinescanv4.com.   1951    IN      A       91.212.127.200

    This information was passed to SA beginning 8/10 and updated several times to them since.

    Depending on SA's in-house expertise, it may take awhile. It may not be something on their site, but on one of the nodes leading to them, a DNS cache poisoning, man-in-the-middle attack, etc. I'm not expert at this - too many years since I had the job function and interest in security issues.

    So far, I have only seen it when clicking on e-mail alerts. But that could be the luck of the draw.

Back To H. T. Love's Instablog HomePage »

Instablogs are blogs which are instantly set up and networked within the Seeking Alpha community. Instablog posts are not selected, edited or screened by Seeking Alpha editors, in contrast to contributors' articles.

This post has 7 comments:

  •  
    Thanks, we are aware of the malware issue and are documenting our effort to remove it on the instablog of our CTO, Koby Menachemi:
    seekingalpha.com/insta...
    Aug 23 01:48 PM | Link | Reply
  •  
    For others to follow, I'm adding links to my comments at your instablog entry.

    seekingalpha.com/insta...

    seekingalpha.com/insta...

    HardToLove


    On Aug 23 01:48 PM Mick Weinstein wrote:

    > Thanks, we are aware of the malware issue and are documenting our
    > effort to remove it on the instablog of our CTO, Koby Menachemi:
    >
    > seekingalpha.com/insta...
    Aug 23 05:07 PM | Link | Reply
  •  
    HTL, thanks for your help.
    Aug 24 08:57 AM | Link | Reply
  •  
    In the grand scheme of things, it's really the only reason we all have breath - to help each other out. Hard to live that way in today's environment though.

    HTL


    On Aug 24 08:57 AM basehitz wrote:

    > HTL, thanks for your help.
    Aug 24 04:21 PM | Link | Reply
  •  
    I saw this site pop up when I clicked on a link on www.nytimes.com/ . Looks to me like sometime during 9/12/09 the New York Times website was infected fake links (either that or ATT had it's DNS poisoned).
    Sep 13 03:57 AM | Link | Reply
  •  
    One Eye posted my email address so I took a look see just in case anyone dropped by. Lo and behold, I was receiving SA ETF updates again.

    Please Note. My Instas are back even though I only checked to see how many there were not whether your comments were back as well.

    I'm missing most of mine. I did not receive an apology. My husband has Not received a reply from anyone at SA. One Eye has not received squat from SA..

    But that's neither here nor there, what I want to know is this from all of you:

    Do you want me to pursue the idea of a Website devoted to Investment Ideas. I value your opinions. Being Back means absolutely nothing to me.

    SA could wipe me out again for No reason other than publishing the Truth.


    Sep 18 03:57 AM | Link | Reply
  •  
    Just checked, all of your/my comments are Gone. Tabula Rasa.

    Meanwhile, for the Author who had me wiped:

    "Hell hath no Fury like a Woman Scorned" is a mild emotional feeling compared to what I feel. The Data in my insta's is all I need. His comment stream may no longer be in the System but my Insta's contain the comments and dates made by him as if they were.
    Sep 18 04:12 AM | Link | Reply
Full index of posts »

StockTalks

  • NVAX: +$0.25, $2.78, +9.88% Yee Haw!
    2 days ago
  • NVAX: +6.72% $2.70, corner turned?
    2 days ago
  • FREYA - NATUF trading up over $0.18, good volume last few minutes.
    Nov 20, 2009
More »
Posts by Ticker
NVAX, UNG

Latest Comments


Posts by Themes
Instablogs are Seeking Alpha's free blogging platform customized for finance, with instant set up and exposure to millions of readers interested in the financial markets. Publish your own instablog in minutes.