Malicious Site

[saatuk]

Any idea why coming to PE via Opera gets a red screen with a 'malicious site' warning? It's been happening for weeks and I'm getting tired of it.

[Zeuhlmate]

I have noticed it too.
It seems to be an Opera 'feature' - if you choose the menu and 'about' then there is a link where you can 'rate' Opera and send them a comment about this.
I have just done that.

[saatuk]

Done

[lak611]

My antivirus software is doing this.
9830

[interbellum]

My antivirus software is doing this.
9830

Mine (ESET) did too, but after a few days not anymore.

[lak611]

Mine (ESET) did too, but after a few days not anymore.
I'll see what happens. I've been using the site on mobile with the Tapatalk app recently but haven't tried on desktop PC since then.

Sent from my XT1575 using Tapatalk

[interbellum]

Well, according to Duncan there's nothing to worry about, as it's the URL from one of the elements from the PE-site.

[stevea]

Its a known exploit of vBulletin and it causes anyone accessing this site via Google (and possibly other search engines) to get redirected to a malicious download site.

Opera gets its information about malicious sites from a Yandex blacklist. http://www.yandex.com/infected?url=www.progressiveears.org/

I would say it is something to worry about.

If you want protect your own computer from being redirected and you know how to, add a local host entry of:

127.0.0.1 myfilestore.com

[lak611]

I checked on desktop Windows using chrome earlier and ESET didn't give the malicious site pop-up.

Sent from my XT1575 using Tapatalk

[Zeuhlmate]

Doesn't it just say that some of us users have put up links that could containe malware?



Its a known exploit of vBulletin and it causes anyone accessing this site via Google (and possibly other search engines) to get redirected to a malicious download site.

Opera gets its information about malicious sites from a Yandex blacklist. http://www.yandex.com/infected?url=www.progressiveears.org/

I would say it is something to worry about.

If you want protect your own computer from being redirected and you know how to, add a local host entry of:

127.0.0.1 myfilestore.com

[stevea]

It redirects you to http://myfilestore.c0m/ download.php?id=5e0777d3 (which I have munged to stop it working).

What that php file does is controlled by someone else - they could put anything they like in there (malware, ransomware, keyloggers etc.)

Read all about it here:

https://www.vbulletin.com/forum/forum/vbulletin-4/vbulletin-4-questions-problems-and-troubleshooting/4028975-how-to-fix-myfilestore-com-redirect-malware

[everyday]

I kept getting the 'site has been hacked' warning on Firefox. Eventually got back in by searching for a thread on John Wetton in PE on google.

[Zeuhlmate]

What says the PE administrators?

[interbellum]

My antivirus software is doing this.
9830

It's back again. Maybe a "weekend"-issue ;)