I clicked on Jenny100's WadjetEye link and Norton kicked it back at me stating: Web Attack: Nuclear Exploit Kit Redirect 4

Just clicked on Jenny's link, and it did not give me that message. I have Avast.

Probably something that was already in your Internet cache, doing a delayed reaction thing.
Wadjet Eye doesn't use a redirect.
You might want to scan your computer and delete your Internet cache.
The sneaky stuff installs itself, then does nothing for a while, then resurfaces to redirect you when you try to go to a valid Internet site.
So it's not like Norton is wrong -- it's something that took over your browser so it's not going to the site you told it to go to.

EDIT (Feb 14, 2016) -- since oldbroad isn't the only one who gets this message, that means the problem is less likely to be from something in cache (or Flash cache) and more likely to be something Norton doesn't like about the site itself.

Until we know for sure that this is a false alarm, I wouldn't recommend anyone visit the Wadjet Eye website. "Nuclear Exploit Kit Redirect 4" is some bad stuff and can be polymorphic (polymorphic infections can't be detected by signature).
https://en.wikipedia.org/wiki/Polymorphic_code

Thanks Jenny100. I'll do that!

And thanks Marian for checking it out also.

It must be Norton only. I got the same message. Ugh!
Will clear cache.

---------------
Didn't work. Got the same message.

How exactly do I clear my cache? I looked in How to for Dummies but I guess I'm too dumb for that. It didn't help me.

The Norton scan and MalwareBytes scans were clean.

OK, found it by googling. Did it. Still get the Norton block.

Did you delete Flash cookies and cache?
They are in a different place from regular Internet cache and cookies.
Nuclear Exploit Kit Redirect 4 often attacks through Flash.
I have Flash disabled by default, and I'm not seeing any message.

EDIT --

Those of you who are getting the warning, do you also get it when you go to Google's cache of the Wadjet Eye website at EDITED.

I see that Google cache that you linked to.
My Flash is "never activate".

----------------
Why don't I move the tech questions to glitches.
Give me a few minutes and I will do that.

Do you get the Norton warning with Google's cache of the Wadjet Eye website?

No - didn't get warning on Google Cache but I did get the warning when I clicked the "current page" link of the WadjetEye games main page on that Google page.

BTW - ran Malwarebytes also. Clear...

I'd be interested to know whether anyone who doesn't have Norton is getting the warning. According to Norton/Symantec, Nuclear Exploit Kit Redirect 4 is bad
https://www.symantec.com/security_response/attacksignatures/detail.jsp?asid=26991

Nuclear Exploit Kit Redirect 4 is polymorphic and changes its signature, making it much more difficult for anti-malware programs to detect (unless it's caught in the act, like while you're browsing).

I still don't think the problem is at Wadjet Eye -- but it might be coming through scripting in an ad (possibly the Facebook ad at Wadjet Eye).

Thanks Jenny! :valentines:


The link that produces the warning: EDITED

Same here.

I don't .. I am at that site all the time.. desktop uses avast... surface pro uses windows
defender

Here as well

Is the Norton warning still there today?
Is it only EDITED that triggers it or does the main page at EDITED do the same thing?

Both links are affected -

I noticed I get a 1 on my adblock... is this the same thing?? My WOT is green.

I wonder if Wadjet Eye knows, and if they can do something about it.
If Norton is correct, this is very sneaky and serious malware.
I would like to know for sure that it's a false alarm before sending anyone else to Wadjet Eye.

I will pm Dave

Thanks, Winfrey.

First response:


*sigh*. I assume it's a false positive, but I'm having our webmaster look at it

Thanks Jenny and Winfrey.

I have the latest Kaspersky Internet Security 2016 and I get blocked on both links the warning goes something like:

The requested URL cannot be provided

Object URL:

EDITED

Reason:

The object is infected by HEUR:Trojan.Script.Iframer

Second response.. I will keep you updated. Although I am there a couple times a day and so far no problems for me.

Dave's response:

Hi. We're looking into it. Most likely it's a false positive from Norton (since Norton is notorious for that kind of thing!). Our webmaster is on vacation and can't look into it right now, but I'm updating all the system software and hopefully that will help.