Page 2 of 2
Re: Is the Forum infected?
Posted: Mon Jun 04, 2012 9:57 pm
by Keith B
Which module is alerting you? Malicious site protection?
Re: Is the Forum infected?
Posted: Mon Jun 04, 2012 10:03 pm
by AEA
Keith B wrote:Which module is alerting you? Malicious site protection?
Yes I assume that is it.
It pops up a small window in the right hand bottom of the screen notifying that MWB has blocked access to a possible malicious site. That alert does not stay on the screen very long, but I went into my MWB logs to cut and paste the IP in my first post.
As I said before, there were several log entries (about 3-4) that showed the same IP but different ports. And.....like a dummy, I have cleared my logs so I cannot give any further info.
I am not a webmaster, but I do believe there is a program that site owners can run to scan their sites for any malicious items....but I do not know the name of it. I believe it is different for whatever type of Board you are using.
The other site I spoke of that got infected never got anything out of the scan. But they said that they updated their website software and that took care of the problem for awhile. But, it eventually came back to bite them again.
Re: Is the Forum infected?
Posted: Mon Jun 04, 2012 10:11 pm
by Keith B
The IP for the forum is a server farm that hosts multiple sites. Malwarebytes has probably flagged the IP overall as there may be another site on one of the servers that has either been reported or is known to be a malicious site. I really don't believe there is an issue with the forum itself.
My suggestion is send the warning to Malwarebytes support and ask them to tell you why they are popping a warning up. You should have support with your subscription,
Re: Is the Forum infected?
Posted: Mon Jun 04, 2012 10:13 pm
by DocV
AEA wrote:Just to be clear. I have not seen it as something continuous. Only a few times and in all instances, I failed to remember the thread I was reading......
If it happens again I will remember what thread and will try to duplicate it myself.
I don't mean to create a stir with this. I only wanted to bring the possibility of a bug. I asked in my original post if anyone else has seen this.
Not causing a stir with me.
Just checking. Do you see any IPs other than the one at Limestone?
Re: Is the Forum infected?
Posted: Mon Jun 04, 2012 10:15 pm
by AEA
OK, I will look into that.
Re: Is the Forum infected?
Posted: Mon Jun 04, 2012 10:17 pm
by AEA
DocV wrote:AEA wrote:Just to be clear. I have not seen it as something continuous. Only a few times and in all instances, I failed to remember the thread I was reading......
If it happens again I will remember what thread and will try to duplicate it myself.
I don't mean to create a stir with this. I only wanted to bring the possibility of a bug. I asked in my original post if anyone else has seen this.
Not causing a stir with me.
Just checking. Do you see any IPs other than the one at Limestone?
I only checked with whois on google and there were of course many links. I only took the real whois site and that got Limestone. I stopped there.