Malware/tojan alert?

CHEWBACCA · Post by **CHEWBACCA** » Thu Aug 25, 2022 9:04 pm

Seems my anti virus is detecting it when I log in here....

CHEWBACCA · Post by **CHEWBACCA** » Thu Aug 25, 2022 9:08 pm

HunterST_BFC · Post by **HunterST_BFC** » Thu Aug 25, 2022 9:24 pm

CHEWBACCA wrote: ↑
Thu Aug 25, 2022 9:04 pm
Seems my anti virus is detecting it when I log in here....

and me with BullGuard.

just this site

grapidianclaret · Post by **grapidianclaret** » Thu Aug 25, 2022 9:30 pm

My anti virus too.

Bosscat · Post by **Bosscat** » Thu Aug 25, 2022 9:34 pm

Tojans are nasty bits of work

Devils_Advocate · Post by **Devils_Advocate** » Thu Aug 25, 2022 9:38 pm

I've just had to send CT my mothers maiden name to log on

Volvoclaret · Post by **Volvoclaret** » Thu Aug 25, 2022 9:44 pm

You have a Mother !!

dougcollins · Post by **dougcollins** » Thu Aug 25, 2022 9:47 pm

So that's what Lennon was on about:

He wear no shoeshine he got Tojan football He got monkey finger he shoot coca-cola He say "i know you, you know me" One thing I can tell you is you got ...

HahaYeah · Post by **HahaYeah** » Thu Aug 25, 2022 10:04 pm

Cpu usage at 100% only on this site!

exilecanada · Post by **exilecanada** » Thu Aug 25, 2022 10:51 pm

I'm also getting the alert.

mybloodisclaret · Post by **mybloodisclaret** » Thu Aug 25, 2022 10:57 pm

Should I be worried? I've got AVG but not getting the warning

Vegas Claret · Post by **Vegas Claret** » Thu Aug 25, 2022 10:59 pm

pops up because of all the crap posted on here

I use a chromebook for all my internet stuff, don't really need to worry about viruses

Wembley09 · Post by **Wembley09** » Thu Aug 25, 2022 11:25 pm

I'm getting this too from my anti virus (Eset) on my Laptop. I did a full removal of my firefox browser software early today, followed by a full antivirus scan.. because I thought I'd somehow got a trojan.
But after a clean scan and a fresh Firefox install, I was still getting the same error afterwards. So I tried on my tablet and got the same antivirus warning.

No idea what or where that url is coming from [qbhomu.github.io etc] but it's only giving me this warning on UpTheClarets.. no where else.
It pops whenever I hit refresh on a page, or move from the main site to the message board etc.

lesxdp · Post by **lesxdp** » Fri Aug 26, 2022 8:23 am

I have Eset and am getting exactly the same. No idea what to do about it.

Wembley09 · Post by **Wembley09** » Fri Aug 26, 2022 12:58 pm

Just make sure to keep selecting 'disconnect'
Apparently if you click 'ignore' it will ignore the warning and allow the website.

I searched Eset help forums yesterday.

I'm still getting the constant warning today, again only on UpTheClarets.

JarrowClaret · Post by **JarrowClaret** » Fri Aug 26, 2022 1:41 pm

Not seen it myself although I only use my IPhone, have you mailed the admins? They may not look at this if they don’t know

Hipper · Post by **Hipper** » Fri Aug 26, 2022 2:56 pm

Windows Edge, only Windows Defender. No issues (including CPU running at normal rate).

dibraidio · Post by **dibraidio** » Fri Aug 26, 2022 3:02 pm

I've done some security updates that may have stopped this. Next step is a php and wordpress upgrade which could mean some serious updates to the site. I'll have to plan that for a quiet news day and be prepared to reinstall all out custom code which will get wiped out by the upgrade.

Is anybody still getting this?

HahaYeah · Post by **HahaYeah** » Fri Aug 26, 2022 3:38 pm

HahaYeah wrote: ↑
Thu Aug 25, 2022 10:04 pm
Cpu usage at 100% only on this site!

Back to normal now.

Jakubclaret · Post by **Jakubclaret** » Fri Aug 26, 2022 3:51 pm

Linux fine.

exilecanada · Post by **exilecanada** » Fri Aug 26, 2022 4:03 pm

Seems ok today.

Bosscat · Post by **Bosscat** » Fri Aug 26, 2022 4:29 pm

No probs on Chrome (I use Malwarebytes on both the Phone and computer and also have Macafee antivirus) occasinally it says "have blocked some website or other access etc" in a drop down box but I just ignore it.

Never had this problem at all (touch wood)

Wembley09 · Post by **Wembley09** » Fri Aug 26, 2022 6:10 pm

Mines fine now too, no more warnings from my anti-virus.

longsidepies · Post by **longsidepies** » Sun Aug 28, 2022 8:02 am

AVG this morning (Sunday), reporting "Threat detected - infected with HTML script - Inf (susp)

exilecanada · Post by **exilecanada** » Sun Aug 28, 2022 4:35 pm

I'm also getting an alert today (Sunday). I also use AVG.

Funkydrummer · Post by **Funkydrummer** » Sun Aug 28, 2022 4:39 pm

I've got AVG on both my Android 'phone and tablet and everything is fine.

Bullabill · Post by **Bullabill** » Mon Aug 29, 2022 12:22 am

I'm getting HTML:Script-inf(susp)

Bullabill · Post by **Bullabill** » Mon Aug 29, 2022 1:13 pm

Bullabill wrote: ↑
Mon Aug 29, 2022 12:22 am
I'm getting HTML:Script-inf(susp)

Any answers yet? I'm still getting this message and don't know whether it's serious.

winsomeyen · Post by **winsomeyen** » Mon Aug 29, 2022 1:32 pm

Still getting the AGV message.

CHEWBACCA · Post by **CHEWBACCA** » Mon Aug 29, 2022 2:42 pm

Yep malware warning is back again.

dibraidio · Post by **dibraidio** » Mon Aug 29, 2022 3:09 pm

Is it still happening? I've made another update that should resolve this.

It's great that people report these, it really helps to resolve the issues when these threads give clear error messages etc. I've accessed the site via AVG and it looks ok to me.

Stevie2112 · Post by **Stevie2112** » Mon Aug 29, 2022 3:23 pm

Got this just now
HTML:Script-Inf(Susp)

dibraidio · Post by **dibraidio** » Mon Aug 29, 2022 3:30 pm

It looks like someone has alerted AVG that our advertising banner is malware. I'll now need to contact AVG and ask them to whitelist us to get this message removed. That's all it is. There is no Malware or trojan. There was an issue before due to an outdated wordpress plugin that someone had hacked but that's no longer there.

Middle-agedClaret · Post by **Middle-agedClaret** » Mon Aug 29, 2022 3:35 pm

Thanks, dibradio for checking/sorting this and all the other background work you and other site administrators do.

HahaYeah · Post by **HahaYeah** » Mon Aug 29, 2022 3:39 pm

Still fine since the fix, so well done and thanks.

JimmyRobbo · Post by **JimmyRobbo** » Mon Aug 29, 2022 4:54 pm

Bullabill wrote: ↑
Mon Aug 29, 2022 1:13 pm
Any answers yet? I'm still getting this message and don't know whether it's serious.

Mine still doing it each time I reload a current page. Seems fine upon first load.

Edit: I'm using AVAST

CHEWBACCA · Post by **CHEWBACCA** » Mon Aug 29, 2022 5:01 pm

Still popping up here.

winsomeyen · Post by **winsomeyen** » Mon Aug 29, 2022 5:53 pm

Still getting the same problem om AVG.

KateR · Post by **KateR** » Mon Aug 29, 2022 6:01 pm

not just me then, good

exilecanada · Post by **exilecanada** » Mon Aug 29, 2022 6:44 pm

I'm still getting the alert.

gsyclaret · Post by **gsyclaret** » Mon Aug 29, 2022 6:46 pm

Vegas Claret wrote: ↑
Thu Aug 25, 2022 10:59 pm
pops up because of all the crap posted on here

I use a chromebook for all my internet stuff, don't really need to worry about viruses

Same here, no problems

winsomeyen · Post by **winsomeyen** » Tue Aug 30, 2022 7:09 am

Malware still alive and kicking this morning. UTC

beeholeclaret · Post by **beeholeclaret** » Tue Aug 30, 2022 7:15 am

I’m getting the AVG warning when viewing this site on my PC. Nothing on my Apple iPhone.

dibraidio · Post by **dibraidio** » Tue Aug 30, 2022 7:43 am

As I said yesterday, we are waiting for avast to whitelist utcmedia.co.uk. At the moment it thinks that our advert code is malware.
If the message you are getting is something other than that please can you share the message.

winsomeyen · Post by **winsomeyen** » Tue Aug 30, 2022 8:39 am

dibraidio wrote: ↑
Tue Aug 30, 2022 7:43 am
As I said yesterday, we are waiting for avast to whitelist utcmedia.co.uk. At the moment it thinks that our advert code is malware.
If the message you are getting is something other than that please can you share the message.

Thanks for your efforts. UTC

winsomeyen · Post by **winsomeyen** » Wed Aug 31, 2022 11:38 am

Alert still appearing.

dibraidio · Post by **dibraidio** » Thu Sep 01, 2022 8:30 am

Got this message from Avast this morning:

Thank you for reporting this false positive.

We have now cleared its reputation in our database based on the findings and removed the detection. This change may take up to 24 hours to take full effect. Please accept our apology for the inconvenience caused.

Thanks to those who posted the full error messages, these are really really useful for sorting these issues out.