THE PORTAL HUB - Pinzgauers, Haflingers, Volvo 303s and more!

Hi - I cannot find an Admin section so will post here.

Over the past two days, whenever I open this forum - and no other forum or websites - I get security alerts from my anti-virus software which later says it found two suspicious files and they have been quarantined.

This is the first alert I get followed by some others.
As I said - only on this forum.

Anyone else have similar issues.

Garry

Never heard of that one.

Just came back and in to look at posts and the alerts popped straight up - same as above initially and second alert says "Real Time Protection detected 3 suspicious patterns. We moved the files to quarantine".

As I said on when this forum is accessed.

I will clear cookies etc for the forum and see if that changes anything.

Garry

@ Garry,
What are the names of the quarantined files?

Thank you,
Robert

Anti virus packages will write a log file Of any suspicious scan entry. That file should give you a good idea of what is triggering this quarantine action.


Sent from my iPhone using Tapatalk

BobbyD wrote:@ Garry,
What are the names of the quarantined files?

Thank you,
Robert

Hi Robert - is as per the screen shot above.

I have cleared history, logged out, removed cookies, removed the forum from my system and did a disk cleanup via two separate systems.

On reinstalling the forum and logging in, I get the same security alerts - as indicated it is only this site and only started a couple of days ago.

System is otherwise OK and does not seem to be infected with anything - after the file/s have been quarantined all is OK with no alerts until I come back to the forum next time when the same security alert process plays out again.

Thanks

Garry

I get no errors and have tried from home and work computers.
At work I run local, firewall and 3rd party scanners so it should pick up anything suspicious.
I just ran 2 free online web scanning services and both came up clean.
Perhaps false positives from your AV/Malware software?
Dan

I believe it is a semi false positive. A common tracking pixel called s.thebrighttag.com is in the site pages. That tag is owned by Signal. A real affiliate tracking marketing company. BUT now there is a malware in the wild of the same name made by the bad guys... not Signal. So, there is more than one virus checker that is confused... intentionally. Deep sigh.

Robert

Thanks for the responses - I think the issue is along the lines of confused anti virus software do some files that are similar something a bit nasty.

After the files are quarantined the system goes quiet and seems happy until the forum is opened next time - I guess something I have to live with. I will uninstall the anti virus software and reinstal and see what happens.

Thanks

Garry

I have changed anti-virus software and not having any issues.

Thanks to all who commented.

Cheers

Garry