Google giving me a malware warning - Ad on Racket Front page

[synbiosfan]

Started happening about an hour ago when trying to go back to the front page of the site.

It says there is some sort of malware from snova-monday-work.net

This happens to me often (once a month). I haven't went to the front page in 6 months because of it.

[racketboy]

We should be all set now.

[gtmtnbiker]

So what was the problem and how did you fix it?

[racketboy]

So what was the problem and how did you fix it?

Seems a hacker was able to modify a few files on the server that loaded some rogue code on every page. My developer/wordpress expert found the changed files and also did some secutity hardening to prevent more exploits.

[ExedExes]

All clear now, ty RB & his staff!

[pakopako]

Thanks RB. I was denied forum access because of that.

(Security hardening. Seems like a weird term; wouldn't 'tightening' have been more accurate in terms of coding to reduce the number of vulnerability points?)

[fastbilly1]

(Security hardening. Seems like a weird term; wouldn't 'tightening' have been more accurate in terms of coding to reduce the number of vulnerability points?)

We harden security round these parts

[racketboy]

http://en.wikipedia.org/wiki/Hardening_(computing)

[ExedExes]

OK staff -- just now I'm getting 2 things that might be malicious --

#1 -- on the top of every FORUM page, these lines:

[phpBB Debug] PHP Notice: in file /includes/functions.php on line 3546: Cannot modify header information - headers already sent by (output started at /config.php:2)
[phpBB Debug] PHP Notice: in file /includes/functions.php on line 3548: Cannot modify header information - headers already sent by (output started at /config.php:2)
[phpBB Debug] PHP Notice: in file /includes/functions.php on line 3549: Cannot modify header information - headers already sent by (output started at /config.php:2)
[phpBB Debug] PHP Notice: in file /includes/functions.php on line 3550: Cannot modify header information - headers already sent by (output started at /config.php:2)

and my NoScript has a new "allow" site here, it is "oneceasja2.com"

Once I allowed it, I got a Norton warning saying it was blocking a "Malicious Blackhole Exploit Kit 11" every time a page came up, so I blocked it back off.

UPDATE: The attack was blocked from eto-moi-traffblya.com IP is 95.57.120.139 port 80 -- more specifically, attack site URL reported by Norton is eto-moi-traffblya.com/main.php?page=c565091935124808

This JUST started happening about 10-15 minutes ago. I am not getting the "Attack Site" warning on FF (I had turned it back on earlier)

Could be another attack?

[CRTGAMER]

I just posted a review on the Gamecube Mad Catz Pro Pad.

The JPG attachments are not working.