Notices
Site Feedback / Suggestions If you have any suggestions or want to see something voice your opinion in here.

Malware?

Thread Tools
 
Search this Thread
 
Old May 9, 2012, 09:24 AM
  #1  
Evolved Member
Thread Starter
iTrader: (3)
 
ak47po's Avatar
 
Join Date: Mar 2006
Location: out
Posts: 3,835
Received 3 Likes on 3 Posts
Exclamation Malware?

Got this warning today.


Old May 9, 2012, 03:12 PM
  #2  
Evolving Member
iTrader: (5)
 
droppinbottom's Avatar
 
Join Date: Mar 2008
Location: Corpus Christi Texas
Posts: 338
Likes: 0
Received 0 Likes on 0 Posts
I use the same program and have not had any issues with this site.
Old May 10, 2012, 07:31 AM
  #3  
Admin Emeritus
 
Speedlimit's Avatar
 
Join Date: Jan 2003
Location: NR Reading PA
Posts: 2,239
Received 100 Likes on 69 Posts
Hi,

I did down load that thread several times and took a quick look at the source and it did not trigger any AV on my system. Sometimes an ad rotating through can generate a real AV alert or a false positive. Thanks.

Bob..
Old May 10, 2012, 10:08 AM
  #4  
Account Disabled
 
user 629782012's Avatar
 
Join Date: Apr 2011
Posts: 251
Likes: 0
Received 0 Likes on 0 Posts
Sounds like you have something on your computer trying to move around while you view websites.

I've never had any issues with the forums.

take your computer in to a professional to be cleaned you more than likely have a virus/malware in your registry.
Old May 16, 2012, 11:11 AM
  #5  
Newbie
iTrader: (2)
 
mokaone's Avatar
 
Join Date: Sep 2006
Location: CA
Posts: 7
Received 0 Likes on 0 Posts
I've noticed this lately, as well. Malwarebytes says it's blocking access to 89.187.53.203. It doesn't happen all the time, and never happens again if I've tried reloading the thread. Normally I see this when coming from google to a direct thread, although, it just happened again when trying to access the main page (evolutionm.net).
Old Jun 20, 2012, 10:51 AM
  #6  
Newbie
iTrader: (2)
 
mokaone's Avatar
 
Join Date: Sep 2006
Location: CA
Posts: 7
Received 0 Likes on 0 Posts
I've attached a screenshot of the source code from a thread which was trying to connect to the same IP as i mentioned in my previous post. The domain name highlighted is associated with the IP address, and as you can see (if you google it), it has been blacklisted by a few websites for malware.

The thread that caused this is can be found here, but as mentioned before, it does not happen all the time. As a matter of fact, i tried refreshing the page, looked at the source code again, and that script was not present.


Malware?-ihsxb.png
Old Jun 20, 2012, 12:36 PM
  #7  
Admin Emeritus
 
Speedlimit's Avatar
 
Join Date: Jan 2003
Location: NR Reading PA
Posts: 2,239
Received 100 Likes on 69 Posts
Thank you again for taking time to provide detailed useful information. I have passed your report to IB.

Bob..
Old Feb 10, 2013, 10:32 AM
  #8  
Evolved Member
Thread Starter
iTrader: (3)
 
ak47po's Avatar
 
Join Date: Mar 2006
Location: out
Posts: 3,835
Received 3 Likes on 3 Posts
Happened again.


Old Feb 10, 2013, 02:56 PM
  #9  
Evolving Member
iTrader: (9)
 
AWDBus's Avatar
 
Join Date: Aug 2006
Location: Alma AR
Posts: 348
Likes: 0
Received 0 Likes on 0 Posts
Can IE run a program (add on) called ad block plus? Might want to try that. I know Firefox, Opera, and Chrome can and that may help .
Old Feb 10, 2013, 04:45 PM
  #10  
Admin Emeritus
 
Speedlimit's Avatar
 
Join Date: Jan 2003
Location: NR Reading PA
Posts: 2,239
Received 100 Likes on 69 Posts
Hi,

I'm not getting any alerts but will continue to monitor. In almost all cases an ad/link rotating through generates a real AV alert or a false positive. Thank you for letting us know.

Bob..
Old Mar 22, 2013, 03:21 PM
  #11  
ikt
Evolved Member
iTrader: (18)
 
ikt's Avatar
 
Join Date: Oct 2009
Location: the internet
Posts: 1,574
Likes: 0
Received 10 Likes on 10 Posts
Originally Posted by AWDBus
Can IE run a program (add on) called ad block plus? Might want to try that. I know Firefox, Opera, and Chrome can and that may help .
well, for one, evom is add supported (someone gotta pay for this), and two, you run the risk of blocking any killer evom deals we get from time to time.

you probably have whats called a "browser hijacker" in your cache somewhere. IE sucks, it's really susceptible to hijacking. If you use a real browser, you won't have any issues, and you won't to block potential deals either.

you can download "hijackthis"-its free and will prevent that

some forums do run hidden scripts on your site cookie to intercept your amazon and ebay orders, and plug their own commission referral links in to get paid like they sent you there (looking at you, evoxforums )...but evoM and IB isn't one of those kinda operations.
Old Apr 15, 2013, 07:09 AM
  #12  
Newbie
 
H00N's Avatar
 
Join Date: Mar 2013
Location: Aus
Posts: 0
Likes: 0
Received 0 Likes on 0 Posts
I am using Firefox and I am also getting an alert from Avast!



Just adding to the thread that its happening to others too.
Old Apr 15, 2013, 08:11 AM
  #13  
Admin Emeritus
 
Speedlimit's Avatar
 
Join Date: Jan 2003
Location: NR Reading PA
Posts: 2,239
Received 100 Likes on 69 Posts
Thank you for the feedback. I cannot duplicate the warning on that URL but will keep an eye on it.

Bob
Old Apr 16, 2013, 04:09 AM
  #14  
Newbie
 
H00N's Avatar
 
Join Date: Mar 2013
Location: Aus
Posts: 0
Likes: 0
Received 0 Likes on 0 Posts
Got the same again tonight and took a screenie of the pop up from Avast!.



Hope this helps.
Old Apr 16, 2013, 04:43 AM
  #15  
Admin Emeritus
 
Speedlimit's Avatar
 
Join Date: Jan 2003
Location: NR Reading PA
Posts: 2,239
Received 100 Likes on 69 Posts
Ok, thank you. If it happens again and if you can, please copy the URL in your browser and the 'More Details'. It may be an ad that rotated through.

Bob


Quick Reply: Malware?



All times are GMT -7. The time now is 12:33 AM.