Good morning - Happy Thanksgiving, everyone.
I've been having a new problem the last two days with the site. Every time I open a new page, an alert pops up from my Norton antivirus: "Norton blocked an attack by Web Attack: Exploit Toolkit Website 4"
The more detailed screen from Norton says:
Category: Intrusion Prevention
Date & Time 11/22/2012 9:24:46 AM
Activity An intrusion attempt by www.catholic.org
Recommended Action No Action Required
IPS Alert Name Web Attack: Exploit Toolkit Website 4
Default Action No Action Required
Action Taken No Action Required
Attacking Computer www.catholic.org
Attacker URL www.catholic.org/openx/www/delivery/ajs ... holic.org/
Destination Address I'm leaving this part out. Doesn't seem smart to post address info about my computer
Source Address 22.214.171.124 (126.96.36.199)
Traffic Description TCP, www-http
Network traffic from <b>www.catholic.org/openx/www/delivery/ajs.php?zoneid=157&target=_blank&withtext=1&cb=86857373834&charset=UTF-8&loc=http://forum.catholic.org/viewforum.php?f=146&sid=70a0c4fc0b6c168f97b452d1588ae24d&referer=http://forum.catholic.org/</b> matches the signature of a known attack. The attack was resulted from \DEVICE\HARDDISKVOLUME2\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE.
This started on the 21st - and only happened here on the Forum and at Father Z's blog. It's happening today on the Forum, but not at the blog.
Sorry if this isn't actually a problem, but I wanted to make sure, as this has never happened before. I didn't want to make a whole new post of this. I thought there was an "alert a mod" link somewhere, but I must've missed it when I went looking for it.