Virus infection in this forum?

Warhero · #1 November 19th, 2017, 11:00 AM

I have noticed already 2-3 days that every time as I come into this forum, my Avast says "Threat blocked, The connection to JS: Miner-C [Tr] is blocked. The site's infection was coinhive.com" and says that you must scan your computer

...

Anyone got same message/virus warning here?

Warhero

DRG · #2 November 19th, 2017, 11:06 AM

Not here and my anti-virus/ Malware checker tends toward over aggressivness

Mobhack · #3 November 19th, 2017, 12:18 PM

I have Avast, and it does not report this. Seems that the problem is at your end somewhere?.

Its warning you about some sort of bitcoin miner and its likely in JavaScript. I'd scan your computer for malware.

Ghostery shows 1 advertising script (nothing to do with yours) - blocked
Privacy badger shows 1 tracker (Newssltest) - Blocked
Ad Block Plus shows 6 advertisements blocked (but wont say what 6)
But JS: Miner-C [Tr] isnt one of them.

Warhero · #4 November 19th, 2017, 01:16 PM

Well I have ran Avast every time and nothing serious found (fortunately)... Btw, it's interesting that this warning comes only here but not in WinSPWW2 forum.

Warhero

Mobhack · #5 November 19th, 2017, 02:01 PM

I checked between the 2 - and on the WW2 forum there was a report of a tracker from "coinhive.com" via privacy badger. Which is worrying. In fact - privacy badger is now showing that site on both forums, not just WW2.

I simply put that on Privacy Badger's block list for now, as its a tracker and not anything more serious.

DRG · #6 November 19th, 2017, 02:32 PM

Shrapnel has been notified

FASTBOAT TOUGH · #7 November 19th, 2017, 03:49 PM

Now I'm concerned. Has anyone else had issues "bouncing" from thread to thread and seeing the following from... showuptimeexclusivesystem4updates and
freesoftwarestation telling you your flash player needs to be updated? I HAVE MODIFIED THE ABOVE FROM OG ADDY.

I run total Bitdefender Total Security Suite 2018, also ran the following Malwarebytes (Free Version), the new Defender (That was just downloaded with the new OS earlier this week.), MS Malicious Software Tool (Which did find 300+ infected files earlier in the week.), MS Emergency Repair Kit, downloaded AVG (Free) and Roadkiller all negative ACCEPT as noted but afterwards.

My Bitdefender is blocking and identifying the above as malware. That BITCOIN ISSUE COULD BE A LITTLE MORE SERIOUS THAN NOTED DEPENDING ON WHICH VERSION HAS GOTTEN INTO YOUR SYSTEM. ALSO ZEUS is on the rise again from latest malware reports, they believe due to the holiday season and improved "spoofing" of otherwise legitimate websites.

I would be curious what Shrapnel comes up with, it might just blow my current sense of relief and security.

Reports,
Pat

Suhiir · #8 November 19th, 2017, 07:31 PM

I was getting some pop-ups for a porn/dating site yesterday when I opened these forums, seems to be fixed today.

BUT I'd just updated to the new version of Firefox so I assumed the problem was with Firefox not these forums.

RightDeve · #9 November 19th, 2017, 09:09 PM

Same here too. Mine is advert pop up, but only when using incognito in chrome for ascertaining whether the image i uploaded shows up correctly. VirusTotal.com, Google Web Safety Checker, and Windows Defender all show negative at the time.

Kinda worried, probably related that the forum has seen a surge of new members probably spammers with vietnamese nicknames.

For now only accessing the site with mobile device.

FASTBOAT TOUGH · #10 November 20th, 2017, 02:09 AM

This is just for FYI, just checked my Bitdefender logs the first attack on my system occurred on 17 DEC @ 1036 and was blocked successfully along with 24 others thus far. That would be about normal for me when looking into the site prior to getting ready for work. Just trying to provide some kind of timeline for the "IT" person.

Regards,
Pat