Notices
Site Feedback / Suggestions If you have any suggestions or want to see something voice your opinion in here.

Malware?

Thread Tools
 
Search this Thread
 
Old May 9, 2012 | 09:24 AM
  #1  
ak47po's Avatar
Thread Starter
Evolved Member
15 Year Member
Photogenic
Photoriffic
Liked
iTrader: (3)
 
Joined: Mar 2006
Posts: 3,835
Likes: 3
From: out
Exclamation Malware?

Got this warning today.


Reply
Old May 9, 2012 | 03:12 PM
  #2  
droppinbottom's Avatar
Evolving Member
iTrader: (5)
 
Joined: Mar 2008
Posts: 338
Likes: 0
From: Corpus Christi Texas
I use the same program and have not had any issues with this site.
Reply
Old May 10, 2012 | 07:31 AM
  #3  
Speedlimit's Avatar
Admin Emeritus
 
Joined: Jan 2003
Posts: 2,239
Likes: 101
From: NR Reading PA
Hi,

I did down load that thread several times and took a quick look at the source and it did not trigger any AV on my system. Sometimes an ad rotating through can generate a real AV alert or a false positive. Thanks.

Bob..
Reply
Old May 10, 2012 | 10:08 AM
  #4  
user 629782012's Avatar
Account Disabled
 
Joined: Apr 2011
Posts: 251
Likes: 0
Sounds like you have something on your computer trying to move around while you view websites.

I've never had any issues with the forums.

take your computer in to a professional to be cleaned you more than likely have a virus/malware in your registry.
Reply
Old May 16, 2012 | 11:11 AM
  #5  
mokaone's Avatar
Newbie
15 Year Member
iTrader: (2)
 
Joined: Sep 2006
Posts: 7
Likes: 0
From: CA
I've noticed this lately, as well. Malwarebytes says it's blocking access to 89.187.53.203. It doesn't happen all the time, and never happens again if I've tried reloading the thread. Normally I see this when coming from google to a direct thread, although, it just happened again when trying to access the main page (evolutionm.net).
Reply
Old Jun 20, 2012 | 10:51 AM
  #6  
mokaone's Avatar
Newbie
15 Year Member
iTrader: (2)
 
Joined: Sep 2006
Posts: 7
Likes: 0
From: CA
I've attached a screenshot of the source code from a thread which was trying to connect to the same IP as i mentioned in my previous post. The domain name highlighted is associated with the IP address, and as you can see (if you google it), it has been blacklisted by a few websites for malware.

The thread that caused this is can be found here, but as mentioned before, it does not happen all the time. As a matter of fact, i tried refreshing the page, looked at the source code again, and that script was not present.


Malware?-ihsxb.png
Reply
Old Jun 20, 2012 | 12:36 PM
  #7  
Speedlimit's Avatar
Admin Emeritus
 
Joined: Jan 2003
Posts: 2,239
Likes: 101
From: NR Reading PA
Thank you again for taking time to provide detailed useful information. I have passed your report to IB.

Bob..
Reply
Old Feb 10, 2013 | 10:32 AM
  #8  
ak47po's Avatar
Thread Starter
Evolved Member
15 Year Member
Photogenic
Photoriffic
Liked
iTrader: (3)
 
Joined: Mar 2006
Posts: 3,835
Likes: 3
From: out
Happened again.


Reply
Old Feb 10, 2013 | 02:56 PM
  #9  
AWDBus's Avatar
Evolving Member
iTrader: (9)
 
Joined: Aug 2006
Posts: 348
Likes: 0
From: Alma AR
Can IE run a program (add on) called ad block plus? Might want to try that. I know Firefox, Opera, and Chrome can and that may help .
Reply
Old Feb 10, 2013 | 04:45 PM
  #10  
Speedlimit's Avatar
Admin Emeritus
 
Joined: Jan 2003
Posts: 2,239
Likes: 101
From: NR Reading PA
Hi,

I'm not getting any alerts but will continue to monitor. In almost all cases an ad/link rotating through generates a real AV alert or a false positive. Thank you for letting us know.

Bob..
Reply
Old Mar 22, 2013 | 03:21 PM
  #11  
ikt's Avatar
ikt
Evolved Member
iTrader: (18)
 
Joined: Oct 2009
Posts: 1,574
Likes: 11
From: the internet
Originally Posted by AWDBus
Can IE run a program (add on) called ad block plus? Might want to try that. I know Firefox, Opera, and Chrome can and that may help .
well, for one, evom is add supported (someone gotta pay for this), and two, you run the risk of blocking any killer evom deals we get from time to time.

you probably have whats called a "browser hijacker" in your cache somewhere. IE sucks, it's really susceptible to hijacking. If you use a real browser, you won't have any issues, and you won't to block potential deals either.

you can download "hijackthis"-its free and will prevent that

some forums do run hidden scripts on your site cookie to intercept your amazon and ebay orders, and plug their own commission referral links in to get paid like they sent you there (looking at you, evoxforums )...but evoM and IB isn't one of those kinda operations.
Reply
Old Apr 15, 2013 | 07:09 AM
  #12  
H00N's Avatar
Newbie
 
Joined: Mar 2013
Posts: 0
Likes: 0
From: Aus
I am using Firefox and I am also getting an alert from Avast!



Just adding to the thread that its happening to others too.
Reply
Old Apr 15, 2013 | 08:11 AM
  #13  
Speedlimit's Avatar
Admin Emeritus
 
Joined: Jan 2003
Posts: 2,239
Likes: 101
From: NR Reading PA
Thank you for the feedback. I cannot duplicate the warning on that URL but will keep an eye on it.

Bob
Reply
Old Apr 16, 2013 | 04:09 AM
  #14  
H00N's Avatar
Newbie
 
Joined: Mar 2013
Posts: 0
Likes: 0
From: Aus
Got the same again tonight and took a screenie of the pop up from Avast!.



Hope this helps.
Reply
Old Apr 16, 2013 | 04:43 AM
  #15  
Speedlimit's Avatar
Admin Emeritus
 
Joined: Jan 2003
Posts: 2,239
Likes: 101
From: NR Reading PA
Ok, thank you. If it happens again and if you can, please copy the URL in your browser and the 'More Details'. It may be an ad that rotated through.

Bob
Reply



All times are GMT -7. The time now is 09:28 PM.