Please Help Me, Recieving Malicous URL on a forums Web Site Thread!

General Topics
1

I run Avast , also use Opera as my favorite browser
Yesterday when I started to come to the pages of Harmony central, hXXp://acapella.harmony-central.com/showthread.php?2879166-When-I-come-to-the-forums-my-suddenly-antivirus-does-not-like-it# a warning would pop up from my anti virus-

Infection Details

URL: hXXp://cdn.vigllnk.com/api/vglnk.js
Process: file://C:\Program Files (x86)\Opera\oper…
Infection: al

I have ran a Full Boot virus scan, as well as a post boot full system scan and still have this popping up.
I have also ran Superantispyware, as well as Malwarebytes, and still keep having it pop up an alarm each page of the forums I come to.

It seems to be happening to others in other spots of these forums as well Here for example hXXp://acapella.harmony-central.com/…n-This-Forum!#
Only seems to be happening to Avast users

Here is one users screen shot showing his error

http://img.photobucket.com/albums/v463/Ted_SHRED/alert.jpg

I get the same message with the exception mine would say Opera instead of google Chrome

In my browser settings I told it to not allow Java for hXXp://cdn.vigllnk.com/api/vglnk.js (listed in the warning screen) I also tried listing http://acapella.harmony-central.com and
shutting of Java for this site. Did not change anything still getting the warning popping up on screen

This is frustrating, Can not decide what to think!
I also get it if I use Firefox and IE
But only getting it here at Harmony Central, does not matter what pages I try within the forums

Any thoughts/suggestions advice or help? Not just for myself but for several of us using Avast.

2

please replace all links with hxxp thx.

ps: also, could someone move that thread to the appropriate section?

3

https://www.virustotal.com/url/b704ca0324889feffc2101ba2e148eb1dcf7458076f8a636627ff27ac0c6aa25/analysis/1329854146/
http://sitecheck.sucuri.net/results/http://cdn.vigllnk.com/api/vglnk.js

sounds clean, except for Avast ?!?

ps: I don’t get this link connection when I browse these forums anyway
hxxp://cdn.vigllnk.com/api/vglnk.js

…

4

Hi TESmith,

The URL mentioned, cdn.vigllnk has a L where the I should be: cdn.viglink
cdn.vigllnk redirects to a Google Analytics page.

Thus, providing suspicion of the URL.

Did the webmaster intentionally place 2 "L"s?

5

"Did the web master intentionally place 2 “L"s?”

This is something I have no clue about, but suddenly after a day and a half of this, with myself and several others speaking up, the problem has suddenly stopped.

I can only guess what ever error(s) they must have fixed it. I am no longer getting any warnings all is fine (But of course out of curiosity and to learn I would have liked to know for certain where the problems were for certain. I appreciate your time trying to help, Thanks