Kaspersky Falsely Identifies Awebers Login URL As Having Virus

38 replies
Okay, this is serious. I just tried to get to my Aweber login and Kaspersky
is identifying the URL as having some kind of trojan or something that
steals credit card info.

Is anybody else having this problem?

Whether it's on Kaspersky's end or Awebers, until it's fixed, I can't login to
my Aweber account.
#awebers #identifies #kaspersky #login #urgent #url #virus
  • Profile picture of the author Seiber
    That sounds quite serious. Are you suggesting that we don't use aweber?
    {{ DiscussionBoard.errors[955352].message }}
  • Profile picture of the author waloosh
    If you're using Internet Explorer, the Phishing site detector may have been tripped accidentally as a false-positive. You don't have to worry about it, there should be an option to get around, if not, disable the Phishing detector and try again.

    If you're using Firefox and you get that black and red page that asks you to either ignore the warning or "Get me out of here", then a few people may have sent in reports that they were a phishing, hacking, or infected site, and all you need to do is click "ignore this message".

    I don't know what message you're getting, what it looks like or what browser you're using, but there's website certificates have been an issue since Vista came out. You may be experiencing an expired certificate warning and all you have to do is manually add the certificate in the trusted zone.

    If I had more information, I could be more helpful, but I doubt there's anything wrong with it. Just a simple misunderstanding as a false-positive.
    {{ DiscussionBoard.errors[955358].message }}
  • Profile picture of the author Dan Grossman
    You're talking about https://www.aweber.com/login.htm?

    There's nothing malicious there. Looked at the HTML source and all of the JavaScript files. No software installing code, iframes pointing to outside sites or anything unusual.
    Signature
    Improvely: Built to track, test and optimize your marketing.

    {{ DiscussionBoard.errors[955363].message }}
    • Profile picture of the author waloosh
      Originally Posted by Dan Grossman View Post

      You're talking about
      (link)
      There's nothing malicious there. Looked at the HTML source and all of the JavaScript files. No software installing code, iframes pointing to outside sites or anything unusual.

      It doesn't have to have any code to infect your computer. I can send you to a site that automatically downloads a RAT (Remote Activated Trojan) to your computer, you'd never know it,(never would either) and the code doesn't say anything about it either.

      However, I really seriously doubt that aweber has anything wrong with it. I'm not getting any error either, but everything does seem to be just fine.
      {{ DiscussionBoard.errors[955384].message }}
    • Profile picture of the author Steven Wagenheim
      Originally Posted by Dan Grossman View Post

      You're talking about https://www.aweber.com/login.htm?

      There's nothing malicious there. Looked at the HTML source and all of the JavaScript files. No software installing code, iframes pointing to outside sites or anything unusual.
      Well the problem is, I can't get passed the login page. I can't get to my
      lists or any of my messages at all.

      I made a post to the Kaspersky forum. Hopefully, they'll investigate and
      get back to me.
      {{ DiscussionBoard.errors[955386].message }}
    • Profile picture of the author Steven Wagenheim
      Originally Posted by Dan Grossman View Post

      You're talking about https://www.aweber.com/login.htm?

      There's nothing malicious there. Looked at the HTML source and all of the JavaScript files. No software installing code, iframes pointing to outside sites or anything unusual.
      Dan, yes, that's the URL.

      Does anybody use Kaspersky besides me who can check this?
      {{ DiscussionBoard.errors[955389].message }}
  • Profile picture of the author Steven Fullman
    Yet another reason why I don't use antivirus software.

    Steve

    Originally Posted by Steven Wagenheim View Post

    Okay, this is serious. I just tried to get to my Aweber login and Kaspersky
    is identifying the URL as having some kind of trojan or something that
    steals credit card info.

    Is anybody else having this problem?

    Whether it's on Kaspersky's end or Awebers, until it's fixed, I can't login to
    my Aweber account.
    Signature

    Not promoting right now

    {{ DiscussionBoard.errors[955381].message }}
  • Profile picture of the author Talltom1
    Just logged in using both IE and Firefox. No warnings received via either browser. And I don't use Kapersky.
    Signature

    {{ DiscussionBoard.errors[955382].message }}
  • Profile picture of the author waloosh
    I'd recommend just turning Kaspersky off for the duration of your work, turn it back on after. Or, you could even add an exception on Kaspersky.
    {{ DiscussionBoard.errors[955393].message }}
  • Profile picture of the author mywebwork
    OMG you're right - I just tried going to aweber.com and Kaspersky denied access, claimed that it was a phishing site! I was using Google Chrome (and Windows 7).

    On 2 XP machines with Avast the site opens up OK, I also used one of my Windows Vista computers and it opened fine without triggering a warning from McAfee.

    I wonder if Kaspersky has a fault, or if they are simply the first to become aware of a new threat?

    This is serious stuff, many thanks for bringing it to our attention Steven.

    Bill
    {{ DiscussionBoard.errors[955394].message }}
  • Profile picture of the author GarrieWilson
    I'd bet its a false positive but you can by-pass it in the settings to get in.
    Signature
    Screw You, NameCheap!
    $1 Off NameSilo Domain Coupons:

    SAVEABUCKDOMAINS & DOLLARDOMAINSAVINGS
    {{ DiscussionBoard.errors[955399].message }}
    • Profile picture of the author Steven Wagenheim
      Originally Posted by GarrieWilson View Post

      I'd bet its a false positive but you can by-pass it in the settings to get in.
      Garrie, I hope you're right, but let's face it, bigger sites than Aweber have
      been compromised. I wouldn't bet my kid's life that this is a false positive
      because I've just seen too many bad things.

      Remember the DOS attacks on Clickbank about 6 years ago?

      If I'm not mistaken, they were down for about a week, maybe longer.
      {{ DiscussionBoard.errors[955413].message }}
  • Profile picture of the author waloosh
    I'm more than sure that it's a false-positive. There aren't any listings anywhere on the web that say anything about this issue. Kaspersky searches through the code of a website while you're visiting it, and if it finds anything that's either unfamiliar and different than normal, it will block it. Symantec Internet Security does it too and it gives false-positives 90% of the time... or, it used to.
    {{ DiscussionBoard.errors[955423].message }}
    • Profile picture of the author kf
      Yes, you can bypass it ....

      But ...

      I got this message earlier today trying to opt-in to a site ...

      Which basically means that people trying to opt-in to my sites - or yours - may also be getting this message.

      Now it gets scary.
      Signature
      Those who stand for nothing, fall for anything. ~ Alexander Hamilton
      {{ DiscussionBoard.errors[955536].message }}
      • Profile picture of the author Steven Wagenheim
        Originally Posted by kf View Post

        Yes, you can bypass it ....

        But ...

        I got this message earlier today trying to opt-in to a site ...

        Which basically means that people trying to opt-in to my sites - or yours - may also be getting this message.

        Now it gets scary.

        Yes, very scary and potentially harmful to many businesses.

        Does anybody know how to get in touch with Aweber outside of going
        to the web site and logging in a ticket?
        {{ DiscussionBoard.errors[955541].message }}
        • Profile picture of the author kf
          Tom's a member here. What about sending him a PM?

          Or putting up his full name --- I can't spell his last name --- he may have it set for google alerts.
          Signature
          Those who stand for nothing, fall for anything. ~ Alexander Hamilton
          {{ DiscussionBoard.errors[955557].message }}
          • Profile picture of the author Steven Wagenheim
            Originally Posted by kf View Post

            Tom's a member here. What about sending him a PM?

            Or putting up his full name --- I can't spell his last name --- he may have it set for google alerts.
            I contacted Tom via Facebook and Twitter. Hopefully, he'll get one of those
            messages.
            {{ DiscussionBoard.errors[955573].message }}
  • Profile picture of the author iw433
    I just logged on to my Aweber account, and I have Kaspersky, no problem, but I get a warning message at my other autoresponder account, RazorBot - Intelligent Email Marketing Robot I would rather get a false positive with anti-virus then get ................without.
    Signature

    Bill Skywalker Edwards
    Address-O-Lite

    {{ DiscussionBoard.errors[955554].message }}
  • Profile picture of the author iw433
    HEY!! how did that happen I wrote "http:www.razorbot.com" I did not make a anchor link out of it! "RazorBot - Intelligent Email Marketing Robot" I don't know how that happened??
    Signature

    Bill Skywalker Edwards
    Address-O-Lite

    {{ DiscussionBoard.errors[955559].message }}
  • Profile picture of the author mywebwork
    For what it's worth I submitted a ticket to AWeber on this.

    Bill
    {{ DiscussionBoard.errors[955710].message }}
  • Profile picture of the author SuzanneH
    I'm logging in no problem with Kaspersky Internet Security 2009, database last updated 20 minutes ago, and using Firefox. But it does throw out a warning in IE, saying that the site contains a link to livesupport.com, which has been known to (paraphrasing here) to steal credit card information, etc.

    Suzanne
    {{ DiscussionBoard.errors[955794].message }}
  • Profile picture of the author rmholla
    Kapersky is famous for their false positives, if I remember correctly they were even sued over it.

    I was trying to sell a website once and someone killed the thread saying Kapersky had detected something. I run McAfee, SpyBot, MalwareBytes, and AVG so I knew it was a false positive. Many others popped on the thread saying they got no warning from their programs but it killed the thread/sale just the same.

    I hate Kapersky and wish it would die a horrible death -- or be fixed -- but they cannot seem to do that.
    Signature
    Digital Delivery HQ - great products, instant delivery.

    Domains For Sale (make offer): EasyAuctionDeals.com & InstantNicheRiches.com

    {{ DiscussionBoard.errors[955878].message }}
  • Profile picture of the author Bev Clement
    I was going to come and ask the same question, because I received an email from someone whose list I'm on. There was a link for today's download, and immediately Kaspersky blocked it as having a js which is used to steal passwords and credit card details.

    It isn't only not being able to get into your login details, but all customers who use kaspersky are being told that aweber has this problem.
    {{ DiscussionBoard.errors[956501].message }}
    • Profile picture of the author Michael Oksa
      Originally Posted by Bev Clement View Post

      I was going to come and ask the same question, because I received an email from someone whose list I'm on. There was a link for today's download, and immediately Kaspersky blocked it as having a js which is used to steal passwords and credit card details.

      It isn't only not being able to get into your login details, but all customers who use kaspersky are being told that aweber has this problem.
      Thank you Bev for alerting me to this problem earlier today.

      Hopefully it's a minority of my list who has Kaspersky, but even that would be small consolation. I have worked hard to build a solid reputation, and while I'm not that worried about it, I do wonder some people on my list will think if they see an email from me is being flagged as a phishing scam.

      With any luck the problem will be fixed sooner rather than later.

      All the best,
      Michael

      p.s. Stuff like this seems to come up once in a while, and makes for a good reminder to have back up plans for the things we tend to take for granted.
      Signature

      "Ich bin en fuego!"
      {{ DiscussionBoard.errors[958317].message }}
  • Profile picture of the author n7 Studios
    If you've not done this already, Kaspersky offer a contact form where you can submit details about a false alarm / false positive:

    Request to Kaspersky Virus Lab

    If enough people do this too, hopefully it'll be brought to their attention quickly.
    {{ DiscussionBoard.errors[956517].message }}
    • Profile picture of the author Martin Luxton
      Steven,

      I get emails from a marketer and all his aweber links have been blocked by Kaspersky for the last few months.

      This is one of the messages I get

      8/07/2009 12:18:32 PM
      http: // clicks DOT aweber DOT com/y/ct/?l=FNkFu&m=1cv8OP5IDWh5Rn& (ETC)
      Firefox Denied: *.aweber.com/* Databases

      There seems to be a problem with the .ico at aweber too.

      Martin
      {{ DiscussionBoard.errors[956557].message }}
  • Profile picture of the author socratous139
    I have the same problem but not only that...the MOST scary thing is that when your subscribers open the email they get the EXACT scary message.

    Shit!
    {{ DiscussionBoard.errors[956827].message }}
    • Profile picture of the author Steven Wagenheim
      Go here:

      Aweber Login Reporting Virus - Kaspersky Lab Forum

      It's been confirmed that it's a phishing false positive except Kaspersky still
      hasn't fixed the problem yet.
      {{ DiscussionBoard.errors[956858].message }}
      • Profile picture of the author oimdiane
        Well right after making my post, I wanted to let everyone know that I successfully visited the aweber website (which I could not get near last night). So it looks like Kaspersky "fixed" the problem or Aweber did.
        {{ DiscussionBoard.errors[958257].message }}
        • Profile picture of the author Steven Wagenheim
          Originally Posted by oimdiane View Post

          Well right after making my post, I wanted to let everyone know that I successfully visited the aweber website (which I could not get near last night). So it looks like Kaspersky "fixed" the problem or Aweber did.
          Still getting the virus message on this end.
          {{ DiscussionBoard.errors[958273].message }}
  • Profile picture of the author oimdiane
    The very same thing started happening to me last night. Mine began with a visit to a website with an Aweber signup box on it (which I wasn't even filling out). Wham! Kaspersky went crazy. I then scanned my entire computer (hours later) to find out that any and all mention of Aweber was locked up tighter than tight. I haven't even tried getting to Aweber yet today. I did submit a ticket at Kaspersky, too.

    The thing is I do not use Aweber (used to have another one), but if it's locking people out of websites that just have a signup box on them.... Holy Chit!

    So either K is ahead of the game or has a serious problem it needs correcting asap. I, too, found the favicon the thing it first tagged as "denied access." Which is truly strange.

    However, if K has found something the rest of them haven't this is a good thing.

    I'd just like to know, if it is a false positive, how in the world do I get K to UNLOCK this? I'm using K's Internet Security 2009 and frankly liked the older version better. At least (so far) I have not found a way to add "let me just visit the d.amn site" area in their new setup.

    Does anyone know how to allow a web site once K has blocked it???

    I feel for anyone using Aweber and having visitors using K if it turns out to be a false alarm
    {{ DiscussionBoard.errors[958184].message }}
  • Profile picture of the author Fernando Veloso
    Good to know things are fixed for some of you guys. What about you Steven?
    Signature
    People make good money selling to the rich. But the rich got rich selling to the masses.
    {{ DiscussionBoard.errors[958326].message }}
    • Profile picture of the author onehour
      IT'S LIKELY AFFECTING YOUR SUBSCRIBERS

      the real problem is that it is affecting subscribers. I have had two (KNOWN) unsubscribes today saying that the links in my email newsletter (which are aweber tracking links) were flagged by Kaspersky as a "dangerous site"

      My list haVs hundreds of US military people that read my newsletter (thorugh aweber) and access my site from secure faiclities, so if word gets out that they think my site is unsafe (even though it's an aweber/Kaspersky thing) -- I am going to be in trouble. They are quick to ban access to sites that have security issues.

      I did put a ticket into Aweber today and they said they are working on it.

      I would encourage you if you are having problems or getting complaints to put a ticket into Aweber also -- so that they can measure the severity of this and prioritize it.
      {{ DiscussionBoard.errors[958350].message }}
  • Profile picture of the author Kris.Sm
    Originally Posted by Steven Wagenheim View Post

    Okay, this is serious. I just tried to get to my Aweber login and Kaspersky
    is identifying the URL as having some kind of trojan or something that
    steals credit card info.

    Is anybody else having this problem?

    Whether it's on Kaspersky's end or Awebers, until it's fixed, I can't login to
    my Aweber account.
    I had the same problem as well... well there wasnt any torjon with aweber. But my kaspersky just wont allow me to. I had to access tht website which was given to me by a warrior member. Paused the protection of Kaspersky and then did my work..Later i did an virus update on kas and it didnt show tht problem again..
    {{ DiscussionBoard.errors[958401].message }}
  • Profile picture of the author infoweb
    Hi guys,

    I'm getting the same problem, I'm using Kaspersky 2009 and when I visit my own sites with aweber forms it gives the message and blocks me from completing the signup forms.

    Have contacted Kaspersky about this but no response yet.

    Mark
    {{ DiscussionBoard.errors[959534].message }}
    • Profile picture of the author Steven Wagenheim
      Originally Posted by infoweb View Post

      Hi guys,

      I'm getting the same problem, I'm using Kaspersky 2009 and when I visit my own sites with aweber forms it gives the message and blocks me from completing the signup forms.

      Have contacted Kaspersky about this but no response yet.

      Mark
      I've disabled the message for the site. Have you heard back from them or
      does anybody know if this has been fixed yet?
      {{ DiscussionBoard.errors[960756].message }}
  • Profile picture of the author iw433
    I don't know what's going on but I have not had any problems with aweber and I have the big "K" anti-virus program. Just pulled up aweber a few minutes ago. Logged in last night no problem. Even added a new autoresponder to my account.
    Signature

    Bill Skywalker Edwards
    Address-O-Lite

    {{ DiscussionBoard.errors[961515].message }}

Trending Topics