Malwarebytes q.dreniq.com alert

[stevecureboi]

Forum URL: thecurecommunity.freeforums.net/forum

Got a member who installed malwarebytes & now she's getting a warning on every forum page for q.dreniq.com

Here's the post
thecurecommunity.freeforums.net/post/171656/thread

As far as I know this is an adware redirect, but as we pay to not have ads, this shouldn't happen.
Can anyone shine a light on why?

Ta much

steve

[Brian]

Hi, stevecureboi.

I noticed you have ads enabled for guests. Are they logged into the forum when they receive this warning?

[stevecureboi]

Feb 5, 2017 11:51:32 GMT -8 Brian said:

Hi, stevecureboi .

I noticed you have ads enabled for guests. Are they logged into the forum when they receive this warning?

Guests can only view the forum, they can't log in or post

[Brian]

I'm asking if they were logged out at the time of receiving the warning, not when posting about receiving it. If they were viewing the forum as a guest at any point they would have received an advertisement.

[stevecureboi]

Feb 5, 2017 12:05:20 GMT -8 Brian said:

I'm asking if they were logged out at the time of receiving the warning, not when posting about receiving it. If they were viewing the forum as a guest at any point they would have received an advertisement.

Ah gotcha.
No, she's logged in. She has been looking for some malware/ virus software for a while on windows 10 with edge.

[Brian]

This seems to be caused by smiley 51 in Plugins > Manage > Smilie Dropdown. I suggest removing this smiley from the list as the host has expired and it leads to a parked domain.

For all intents and purposes I would recommend self-hosting all smileys and never hotlinking from other domains as it tends to cause issues of this type down the line.

[stevecureboi]

Thanks Brian we'll give that a go

[stevecureboi]

Just to check in & let you know it's now gone, so thanks Brian for your detective work.
Sorry so late with the update, but she's on the other side of the planet to me & I only saw the confirmation this morning.
Thanks again for your help.

s