Request for Explanation of "BROWSER EXPLOIT" and request for re-eval

[rhermiz]

When our users try to get to car.com, they get the big red scary screen that says something to this effect: stop, this website will ruin your life and steel all your money. Yet, this rating we see here doesn't reflect what the user sees.

We've been informed about the error message about a month ago and tried to contact the site advisor team. But there have been no response for weeks. Can someone, please, explain to me what is the browser exploit we are using, so we can correct it. If we are actually doing that. I reviewed our client-side code and couldn't find any weird cookie manipulations. How do I get more info? Or get McAfee to re-evaluate my website? I already have 2 open ticket and tried to talk to customer sevice several times to no avail.

Re: [Ticket ID #JDT-43911-261] Website erroneously blocked  - Tue 4/19/2011 11:42 AM
Re: [Ticket ID #SLV-19245-359] Please retest car.com - Tue 5/10/2011 3:54 PM

car.com

We tested this site and didn't find any significant problems.

Are you the owner of this site? Leave a comment

Contact information:		Country	Popularity
		United States	Lots of users

AUTOMATED WEB SAFETY TESTING RESULTS FOR CAR.COM

BROWSER EXPLOIT:

Breached browser security

When we browsed this site, it made unauthorized changes to our test PC.

[rhermiz]

Update:

McAfee responded to my most recent ticket, I guess the first one was lost into oblivion. They think that since my site is rated "Green" I should be happy.

And still no details about the "Browser Exploit". We have to know what we're doing wrong because the average user of the  site advisor client would not know what the detail means. I mean the warning screen is pretty scary if you ask me...

From: McAfee SiteAdvisor Support[mailto:support@siteadvisor.com] 
Sent: Tuesday, May 10, 2011 6:03 PM
To: Rod Hermiz
Subject: Re: [Ticket ID #SLV-19245-359] Please retestcar.com
Hello Rod,
I am very glad to inform you that your site (www.car.com) has been rated Green by McAfeeSiteAdvisor.
Please click on the link below for more information
http://www.siteadvisor.com/sites/car.com
We appreciate your patience during this process.
Sincerely,
Vengadavan
Avert Services
McAfee SiteAdvisor

Message was edited by: rhermiz on 5/10/11 5:19:58 PM CDT

[Hayton]

I see the problem. The site has a green rating but there's a blocking page that says Don't Go There. I also note the Browser Exploit warning. There's been a spate of these recently and I'm wondering if there's some temporary  website poisoning going on - something injected into a web page (which would, if malicious, quickly be flagged by SiteAdvisor). Problem there is, you say you've checked the client-side code and found nothing. Could it be in third-party content? Advertisements? It's not only your site that's been affected, and malware in advertisements has been talked about a lot recently.

If you're sure that that's not applicable to your site I think you'll have to hope that someone from SiteAdvisor gets to see this tomorrow and follows it up. Sorry I can't offer any more help.

Message was edited by: Hayton on 11/05/11 05:35:00 IST

[rhermiz]

Thanks for yor attempt. We use the same third party advertisements at autobytel.com, myride.com and other domain names and none of those websites have a "browser exploit" warning.  Which makes isolating the culprit advertiser impossible... I hope that the site advisor team can give me specifics, otherwise I'm at a total loss.

Message was edited by: rhermiz on 5/11/11 3:51:40 AM CDT

[x-pmeyer · Accepted solution]

Hello Rhermiz,

I followed up with Site Advisor support. The Site Advisor exploit warning should be removed within the next hours.

Best regards,

Peter

[rhermiz]

Thank you, Peter. Much appreciated