Page 1 of 2 1 2 LastLast
Results 1 to 10 of 12
  1. #1
    ROG Member Array
    Join Date
    Aug 2014
    Reputation
    10
    Posts
    7

    I always get windows defender warnings the first time I come to the site for the day

    It's weird, the domain is always some .in or .asia.

    Here is latest one I got tonight.

    Here is what I am seeing:

    Click image for larger version. 

Name:	rog.asus.com.jpg 
Views:	15 
Size:	27.1 KB 
ID:	40890

    When I close my tab and open another tab, I don't have the message anymore.

  2. #2

  3. #3
    Helium Chilled Array _ PC Specs
    _ PC Specs
    Laptop (Model)G46VW
    MotherboardRampage IV Gene
    ProcessorIntel Core i7-3930K
    Memory (part number)Corsair Dominator Platinum 32GB (CMD32GX3M4A2133C9)
    Graphics Card #1ROG Matrix GTX 780 Ti
    Sound CardROG SupremeFX III
    MonitorASUS VG248QE with GSync mod
    Storage #1Plextor PX-M2 SSD 120GB
    Storage #2G.Skill Phoenix Blade 480GB PCIe SSD
    CPU CoolerCooler Master Seidon 240M
    CaseCooler Master HAF-X
    Power SupplySeasonic X-750
    Keyboard Corsair K90
    Mouse ROG Gladius
    Headset ROG Orion
    OS Windows 8.1 Update 1
    Network RouterASUS RT-AC66U
    _'s Avatar
    Join Date
    Dec 2011
    Reputation
    119
    Posts
    5,750

    Please let us know:

    a) The exact page you went to.
    b) whether you are using Chrome/IE/FF and which version.
    c) If you are using Chrome, load the same tab in Incognito mode and try again please (there maybe a vulnerability in Chrome Extension Manager) to see if you get the same.

  4. #4
    ROG Member Array
    Join Date
    Aug 2014
    Reputation
    10
    Posts
    7

    Thanks Richard.

    It's the home page. http://rog.asus.com
    I'm running windows 8.1 IE 11 with auto updates turned on.

    It only happens sporadically and closing the tab and renavigating to the site resolves the error.

    Chino, it only happens once every couple days and normally opens. I wondered if it is some bad ad tag in the system, but there are no ads on that page.

  5. #5
    Helium Chilled Array _ PC Specs
    _ PC Specs
    Laptop (Model)G46VW
    MotherboardRampage IV Gene
    ProcessorIntel Core i7-3930K
    Memory (part number)Corsair Dominator Platinum 32GB (CMD32GX3M4A2133C9)
    Graphics Card #1ROG Matrix GTX 780 Ti
    Sound CardROG SupremeFX III
    MonitorASUS VG248QE with GSync mod
    Storage #1Plextor PX-M2 SSD 120GB
    Storage #2G.Skill Phoenix Blade 480GB PCIe SSD
    CPU CoolerCooler Master Seidon 240M
    CaseCooler Master HAF-X
    Power SupplySeasonic X-750
    Keyboard Corsair K90
    Mouse ROG Gladius
    Headset ROG Orion
    OS Windows 8.1 Update 1
    Network RouterASUS RT-AC66U
    _'s Avatar
    Join Date
    Dec 2011
    Reputation
    119
    Posts
    5,750

    Thank you we will look into it today.

  6. #6
    ROG Member Array
    Join Date
    Aug 2014
    Reputation
    10
    Posts
    7

    Hey Marshall, I got the error again just now. The server first returned a 500 error, then when I refreshed.


    Windows Defender blocked content on this website
    tfeaw.faugor.in
    Hosted by: rog.asus.com

  7. #7
    ROG Enthusiast Array
    Join Date
    Sep 2014
    Reputation
    10
    Posts
    53

    Sounds like you have a nasty malware on your computer, do a malware scan asap with the free version of malwarebyte http://www.malwarebytes.org/

    I know that the rog.asus.com site uses addthis.com and scorecardresearch.com probably for advertising, but I did not allowed these domain here because I disallow cookie and javascript by default so it is possible that you got a warning about one of the addthis.com and scorecardresearch.com ads, they are usually displaying ads like fake Download buttons and this can be interpreted as malware
    Last edited by class101; 09-14-2014 at 04:48 PM.

  8. #8
    Helium Chilled Array _ PC Specs
    _ PC Specs
    Laptop (Model)G46VW
    MotherboardRampage IV Gene
    ProcessorIntel Core i7-3930K
    Memory (part number)Corsair Dominator Platinum 32GB (CMD32GX3M4A2133C9)
    Graphics Card #1ROG Matrix GTX 780 Ti
    Sound CardROG SupremeFX III
    MonitorASUS VG248QE with GSync mod
    Storage #1Plextor PX-M2 SSD 120GB
    Storage #2G.Skill Phoenix Blade 480GB PCIe SSD
    CPU CoolerCooler Master Seidon 240M
    CaseCooler Master HAF-X
    Power SupplySeasonic X-750
    Keyboard Corsair K90
    Mouse ROG Gladius
    Headset ROG Orion
    OS Windows 8.1 Update 1
    Network RouterASUS RT-AC66U
    _'s Avatar
    Join Date
    Dec 2011
    Reputation
    119
    Posts
    5,750

    We don't use any advertising networks. There are no ads run here.

  9. #9
    Helium Chilled Array _ PC Specs
    _ PC Specs
    Laptop (Model)G46VW
    MotherboardRampage IV Gene
    ProcessorIntel Core i7-3930K
    Memory (part number)Corsair Dominator Platinum 32GB (CMD32GX3M4A2133C9)
    Graphics Card #1ROG Matrix GTX 780 Ti
    Sound CardROG SupremeFX III
    MonitorASUS VG248QE with GSync mod
    Storage #1Plextor PX-M2 SSD 120GB
    Storage #2G.Skill Phoenix Blade 480GB PCIe SSD
    CPU CoolerCooler Master Seidon 240M
    CaseCooler Master HAF-X
    Power SupplySeasonic X-750
    Keyboard Corsair K90
    Mouse ROG Gladius
    Headset ROG Orion
    OS Windows 8.1 Update 1
    Network RouterASUS RT-AC66U
    _'s Avatar
    Join Date
    Dec 2011
    Reputation
    119
    Posts
    5,750

    Found out we use addthis.com for the wordpress site sharing buttons only.

    We've checked our site again and everything comes up clean, so as soon as you see it again please follow this instructions for IE:

    F12 to enable developer options (at the bottom)
    View --> Source --> Original.
    File --> Save --> create html file.

    Then please email that html file to rog_forum (at@) asus (dot.) com.

    Then we can see what you're seeing to try to determine where it's coming from.

  10. #10
    ROG Member Array
    Join Date
    Aug 2014
    Reputation
    10
    Posts
    7

    Hey Richard. I received the error just now. However the F12 tools only show the IE hijacked warning page and doesn't show the original. I'm going on vacation for 2 weeks. When I return I'll use Fiddler and open F12 tools before hitting the site to try to capture the traffic for you.

    This was the domain that it tried to this time.

    zqruo.galace.in

    I do suspect it is some javascript load after the page renders as the full page shows before windows defender takes it over.

Page 1 of 2 1 2 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •