Malware warning on Forum Wales

[Cefin gwlad]

From time to time when I'm browsing Forum Wales (especially, it seems, when I attempt to move on to a second page in a discussion) I get the on-screen warning

www.forumwales.com contains content from 64.86.5.202, a site known to distribute malware. Your computer might catch a virus if you visit this site.

Naturally, I leave the site at this point, which is very frustrating as there is so much of interest, especially in the language discussions.

Can anyone throw some light on this question? Is the content warned of still present on http://www.forumwales,com?

[Sionned]

Those pop up from time to time. I have been unable to find a specific reason for them, but do my best to get rid of spam (and ban spammers by name and IP) as quickly as it is posted. This is the first time I've seen one of these in a while; let me know if it keeps happening (and give me specifics, as you have here).

There is a possibility that is it being caused by some glitch due to the fact that the software underlying the forum has not been updated in a while. But I have no way of either confirming or denying that.

I think, as long as you don't click on any links in any post, that it would be difficult for you to be infected by malware, but I will continue to try to find the source of these occasional notices.

Thanks!

[Cefin gwlad]

Two occurrences this week (w/e 25.02.12), when going
from
posting.php?mode=reply&f=34&t=11671
to
Postreply
and from
index.php to
Welsh language

[ForumLead]

My apologies to all for this issue and for my absence.

I'm investigating the issues.

Regards,

David

[ForumLead]

I'm still investigating by things currently point to a Google advert.

This is still under review.

Apologies for this issue.

Site software has been updated to (hopefully) combat some of the Spam. I'm now purging spam users - this will continue.

David

[Cefin gwlad]

Still getting these warnings. Kaspersky Internet Security now warns of an attempted trojan download on every page of this forum. Makes me reluctant to visit here again.

[ForumLead]

Every page?
Thanks for the update. I'm investigating.

Sorry about this.

David

[Cefin gwlad]

This is STILL going on. And yes, it IS on every page.

"Downloading object, containing Trojan program"
Event:
Denied: HEUR:Trojan.Script.Iframer

is what I get.

Sorry to be so abrupt, but -- seriously -- isn't it really now time that someone at ForumWales got their finger out concerning this very worrying security issue?

[Sionned]

The biggest problem is that almost no one else is having the issue. I have, in the past, gotten a warning, with an opportunity to see a 'full report' of exactly what was suspect. When I looked at that, it wasn't really anything, and I was able to go on to the page I wanted without a problem. I have not had even that any time recently, especially since David ForumLead started requiring all new registrations be approved, so spammers couldn't register so easily.

That said, David is still paying attention (I believe) and will see this message and keep trying to find the source.