Both at work and at home got attacked by the Data Resource malware virus when visiting Eham. Home anti-virus recognized it and fended it off. Work anti-virus did not and had to go through a malware removal process.
I am sorry that you got infected. I know that some others also were infected.
Overnight on Saturday or early Sunday the ad server that we share with contesting.com, eham.net and also with a sister site (liveatc.net) was compromised and in addition to our normal banners it was also delivering up a popup banner that linked to the Malware.
Once we were aware of the issue we tracked it down the the only common element shared by all three sites - the ad server. We shut down the ad server and that indeed fixed the the problem. We then worked on isolating the the route of attack and also looked for and found the changes in the ad server setup that was delivering the malware pop banner. We then worked on that machine to make it more secure and brought the ad server up but only in a state that would allow us to access the ads and setup that would enable us to move the ad content to a different system.
We have not been totally happy with our ad server software for about a year so pushed us over the edge. I have been spending way to many hours moving our ad content from that software to a totally different solution that should be more secure, more robust, require less admin duties and more features going forward.
We regret that our ad sever was used to do harm to our users computers.
I am not totally sure but I think only users of IE and/or Windows machines were affected by the malware.
The slowness that some users saw was when our ad server was offline - some browsers were waiting for that connection to time out before serving up the site - since I and others did not see this behavior we that everyone was having the same experience that we were having with the site loading quickly even without the ad server being up. I think again this is dependent on what browser you are using. Had we noticed I would have removed the old ad code more quickly in the process.
Thanks
