Do we have a Malware problem with this site?

[Dave_S]

Re: Do we have a Malware problem with this site?

Avast I believe is purely an anti-virus program, and so wouldn't find malware. IE of course has always been pretty much an open invitation to 'every man and his dog', so no chance of hoping to catch malware with that.

The odd thing is, at least to my limited understanding, is why would Chrome react to just that one 'thread', and then only after later replies to it.

Tigger did point out to one member (via PM), that his protection software was indicating that member's PC was infected.

So, it is either a false positive, or Chrome is the only one clever enough to spot the "problem".

Either way, it matters not to me now, as I'll just not go into that 'thread' again. The problem, as far as I'm concerned, false or otherwise, is only present in the particular 'thread'.

As Paul says, run a Malware Bytes scan, then go and make a cup of tea.

Oh yes, and to be sure, just don't open the thread again.

Dave

[AndyMulhearn]

Re: Do we have a Malware problem with this site?

Err, Avast is a Malware scanner - https://forum.avast.com/index.php?topic=113973.0

[Dave_S]

Re: Do we have a Malware problem with this site?

Err, Avast is a Malware scanner - https://forum.avast.com/index.php?topic=113973.0

Ah, ok.

I thought it something like AVG, but then I have never used either.

Dave

[AndyMulhearn]

Re: Do we have a Malware problem with this site?

Ah, ok.

I thought it something like AVG, but then I have never used either.

No worries. I searched specifically for an anti-malware solution and this one came up as one of the best rated...

[Dave_S]

Re: Do we have a Malware problem with this site?

A 'false positive' or not, there has to be a 'root cause' that prompts Chrome to 'flag' a Malware warning when opening some 'welcome section' threads, but not others in the same section.

For example:

'Tigger' intro, dated July 2nd = No Malware warning.

'Berko' intro, dated July 6th = Malware warning

'Lord Beau' intro, dated July 9th = No Malware warning

'Will Forest' and 'Shezza' intros, dated July 16th = Malware warning.

It would seem that some 'posts' are carrying some association to 'Eclipse', which Chrome labels as a known Malware distributor.

Interesting to note that when 'Berko' first posted his intro, it wasn't 'flagged' by 'Chrome'. The Malware alert only appeared after others had posted a reply.

From what I can see, the "problem" only relates to posts in the welcome section, albeit not all.

Dave

[Robert Scott]

Re: Do we have a Malware problem with this site?

A 'false positive' or not, there has to be a 'root cause' that prompts Chrome to 'flag' a Malware warning when opening some 'welcome section' threads, but not others in the same section. Dave

The link I posted earlier in this thread appears to suggest that the root cause is a problem with the Chrome coding, possibly limited to some mirror sites.

Given that no other browsers or software checks are indicating any problem, I am inclined to go with this.

I did remove the 'New members' section for a short period while looking into this, but came to the conclusion that there was insufficient evidence to warrant this action. If I get enough posts saying I was wrong, I will reconsider.

[Dave_S]

Re: Do we have a Malware problem with this site?

It does indeed seem to be limited to Chrome Robert. albeit I've been using Chrome here, since I joined the forum, back 2012, and until recently, with no problem .

It could of course be that Chrome has tightened up its security, whereas other browsers are perhaps lagging behind in this respect. Of course one of the reasons that people use alternative browsers to IE, is that it has had a high number of security breaches. That said, as IE is part and parcel of Windows, and is installed on most all new PCs, it has always been a favourite target for the 'Hackers'.

Why this Malware warning only occurs in the Welcome section, and then not on all 'threads', will I guess remain a mystery. However, going on the theory that "there is no smoke without fire", there has to be something there that is associated with 'Eclipse', and one would hope a logical reason for Chrome to see this company as a known distributor of malware.

Logic says that if it was case of one or more members, unknowingly carrying and introducing something untoward, then in theory it should affect every other section that they post in, but that is not happening. It is solely limited to the 'welcome' section.

As you might remember, I have owned and run my own forum for six years now, and as such am fairly familiar with the problems that can occur, but I am at a loss to suggest a way forward with this, other than deleting and replacing the section and its coding.

Unfortunately, this means losing all of the historical data, which nobody wants to see happen.

Even if this 'doomsday' approach was taken, there is no guarantee that it won't re-appear.

I guess that you are "between a rock and a hard place" with this one.

Dave

[AndyA]

Re: Do we have a Malware problem with this site?

I just got a similar message when trying to view a new members thread.

malware.jpg

[Robert Scott]

Re: Do we have a Malware problem with this site?

I have removed the original 'New members' section from the forum and started a 'New members/2' section. Please let me know if you encounter similar problems with this.

[Dave_S]

Re: Do we have a Malware problem with this site?

Yep, very similar to what I initially saw, and am still seeing Andy.

Dave

[Dave_S]

Re: Do we have a Malware problem with this site?

Oops, we posted at the same time there Robert.

Dave

[shezza]

Re: Do we have a Malware problem with this site?

When I accessed the forum this morning, 'Chrome' blocked the page and flagged up the following message screen:

Dave

Yep and me!

[Robert Scott]

Re: Do we have a Malware problem with this site?

shezza: can you provide more information?

The message from Dave_S you quote was posted on 7 July 2014. When did Chrome block a page for you - and which page?

Did it occur after I removed the 'New members' section at 16:36 on Friday 18 July 2014.

Times are very important.

[Dave_S]

Re: Do we have a Malware problem with this site?

Hi Robert

I can't be specific on times, because the section is no longer there to see.

However, I can tell you that when 'Berko' posted his intro, I was the first member to respond, and there was no malware warning.

However, when I next went back into the thread, after several other members had posted in there, the Malware warning was 'flagged'.

When I checked other posts in the welcome section, some were 'flagged' as containing malware, while other were not.

I have not seen it in any other section posts, either before, or after you removed the section. As yet nobody has posted in the new section.

Hope this helps.

Dave

[Robert Scott]

Re: Do we have a Malware problem with this site?

Dave_S: thanks for your post, but I I was asking for information from shezza. I am sorry if this was not clear.

shezza posted after I had removed the original 'New members' section. I am trying to find out if he encountered the Chrome page block before or after the section was removed.