Security Alert On This Forum

[Garrycol]

Hi - I cannot find an Admin section so will post here.

Over the past two days, whenever I open this forum - and no other forum or websites - I get security alerts from my anti-virus software which later says it found two suspicious files and they have been quarantined.

This is the first alert I get followed by some others.

Security Alert.jpg (177.31 KiB) Viewed 4482 times

As I said - only on this forum.

Anyone else have similar issues.

Garry

[VinceAtReal4x4s]

Never heard of that one.

[Garrycol]

Just came back and in to look at posts and the alerts popped straight up - same as above initially and second alert says "Real Time Protection detected 3 suspicious patterns. We moved the files to quarantine".

As I said on when this forum is accessed.

I will clear cookies etc for the forum and see if that changes anything.

Garry

[BobbyD]

@ Garry,
What are the names of the quarantined files?

Thank you,
Robert

[rmel]

Anti virus packages will write a log file Of any suspicious scan entry. That file should give you a good idea of what is triggering this quarantine action.


Sent from my iPhone using Tapatalk

[Garrycol]

@ Garry,
What are the names of the quarantined files?

Thank you,
Robert

Hi Robert - is as per the screen shot above.

I have cleared history, logged out, removed cookies, removed the forum from my system and did a disk cleanup via two separate systems.

On reinstalling the forum and logging in, I get the same security alerts - as indicated it is only this site and only started a couple of days ago.

System is otherwise OK and does not seem to be infected with anything - after the file/s have been quarantined all is OK with no alerts until I come back to the forum next time when the same security alert process plays out again.

Thanks

Garry

[TechMOGogy]

I get no errors and have tried from home and work computers.
At work I run local, firewall and 3rd party scanners so it should pick up anything suspicious.
I just ran 2 free online web scanning services and both came up clean.
Perhaps false positives from your AV/Malware software?
Dan

521A4532-CB22-4502-A2AC-D0D2A7F547F2.jpeg (387.72 KiB) Viewed 4379 times

FC9C8F02-2915-47BE-A464-ED1DFC14E9EE.jpeg (104.4 KiB) Viewed 4379 times

[BobbyD]

I believe it is a semi false positive. A common tracking pixel called s.thebrighttag.com is in the site pages. That tag is owned by Signal. A real affiliate tracking marketing company. BUT now there is a malware in the wild of the same name made by the bad guys... not Signal. So, there is more than one virus checker that is confused... intentionally. Deep sigh.

Robert

[Garrycol]

Thanks for the responses - I think the issue is along the lines of confused anti virus software do some files that are similar something a bit nasty.

After the files are quarantined the system goes quiet and seems happy until the forum is opened next time - I guess something I have to live with. I will uninstall the anti virus software and reinstal and see what happens.

Thanks

Garry

[Garrycol]

I have changed anti-virus software and not having any issues.

Thanks to all who commented.

Cheers

Garry