Post by Jackal on Jul 27, 2011 17:31:20 GMT -8
Forum URL: shelpey.proboards.com and testtournament.proboards.com
Refer to these threads if you need to, posted on techsupportforum.com: The original thread in which I explain the problem, and the follow-up thread in which we discover the source of the problem.
So here's what happened. In a nutshell, I was infected with the Google Redirect virus and had to download Malwarebytes' Anti-Malware as part of the malware eradication process. Since downloading MBAM, whenever I would open firefox it would give me a popup from my tray that it had blocked access to a potentially malicious website. The popup looks like this, with different but very similar IP addresses being shown:
![]()
After scanning my computer for remainders of the virus about eight or ten times, and installing numerous other defenses, I discovered that the source of the popups was something on my very own proboards forum. I get the notification whenever I visit either of those two URLs, which are both my sites and probably have somewhat similar coding. Other forums so far have not given me this same message. [EDIT]: I just found one that did.
Based on this, I'm determining that something about those two sites has the same potentially malicious threat. The only similarity they share that is not also shared by other sites not giving me a popup would be their coding. If needbe, I can provide a list of the codes in the headers and footers of both forums.
Also, on these forums I use a remote CSS hosting code. I checked ripway.com, the site I use to host the files, in case that is what's causing the problem, but ripway appears to be fine according to MBAM.
Can anyone take a look at these two forums and try to help me determine where the problem is? Thanks in advance.
[edit]: I've been super tired the past few days, and I think that my mind is working again. It's probably from an ad on the page, isn't it? Not all pages will load the same ad, and it just happened that mine both did and that's why they gave me an issue. It's nothing to do with my sites in particular. I bet you that's what someone is going to tell me, but it's still good to ask and be sure. If these ARE dangerous addresses, can they be added to a list of IPs that proboards doesn't allow in ads or something? I have the IP log from MBAM linked in one of the posts on techsupportforum.
Refer to these threads if you need to, posted on techsupportforum.com: The original thread in which I explain the problem, and the follow-up thread in which we discover the source of the problem.
So here's what happened. In a nutshell, I was infected with the Google Redirect virus and had to download Malwarebytes' Anti-Malware as part of the malware eradication process. Since downloading MBAM, whenever I would open firefox it would give me a popup from my tray that it had blocked access to a potentially malicious website. The popup looks like this, with different but very similar IP addresses being shown:
After scanning my computer for remainders of the virus about eight or ten times, and installing numerous other defenses, I discovered that the source of the popups was something on my very own proboards forum. I get the notification whenever I visit either of those two URLs, which are both my sites and probably have somewhat similar coding. Other forums so far have not given me this same message. [EDIT]: I just found one that did.
Based on this, I'm determining that something about those two sites has the same potentially malicious threat. The only similarity they share that is not also shared by other sites not giving me a popup would be their coding. If needbe, I can provide a list of the codes in the headers and footers of both forums.
Also, on these forums I use a remote CSS hosting code. I checked ripway.com, the site I use to host the files, in case that is what's causing the problem, but ripway appears to be fine according to MBAM.
Can anyone take a look at these two forums and try to help me determine where the problem is? Thanks in advance.
[edit]: I've been super tired the past few days, and I think that my mind is working again. It's probably from an ad on the page, isn't it? Not all pages will load the same ad, and it just happened that mine both did and that's why they gave me an issue. It's nothing to do with my sites in particular. I bet you that's what someone is going to tell me, but it's still good to ask and be sure. If these ARE dangerous addresses, can they be added to a list of IPs that proboards doesn't allow in ads or something? I have the IP log from MBAM linked in one of the posts on techsupportforum.
