AG still setting off anti-virus alerts!

**builthatch** · 01-07-2015, 11:39 AM

randomly my anti-virus program (avast!) will warn me about AG. this happens without any real pattern and this site is the only one that does it. it's been happening for a while...it was fixed when it got really bad...then it started again. the problem is, once it does it, that thread will not work or it won't let me reply.

for instance, because of the alert, now i can't reply to this thread - http://www.autogeekonline.net/forum/...or-sill-2.html

what's the story? i'm going to see if i can report a false positive the next time to see if that helps. but, what makes it happen? this is the only vbulletin forum, or any forum, for that matter, where this happens for me.

**Admin** · 01-07-2015, 05:25 PM

does it give you the name of the the alert, or what it is? I will do a search and see if I can find anything. Sometimes there could be hidden scripts inside images or links that go to a website that has been flagged. Do you remember any of the other post that gave you a warning.

**Admin** · 01-07-2015, 05:29 PM

its very odd i just check and we are currently in the green with avg-
http://www.avgthreatlabs.com/website...geekonline.net

let me know if you find another thread.

**SonOfOC** · 01-07-2015, 05:49 PM

Originally Posted by builthatch

randomly my anti-virus program (avast!) will warn me about AG. this happens without any real pattern and this site is the only one that does it. it's been happening for a while...it was fixed when it got really bad...then it started again. the problem is, once it does it, that thread will not work or it won't let me reply.

for instance, because of the alert, now i can't reply to this thread - http://www.autogeekonline.net/forum/...or-sill-2.html

what's the story? i'm going to see if i can report a false positive the next time to see if that helps. but, what makes it happen? this is the only vbulletin forum, or any forum, for that matter, where this happens for me.

This happened right around the Autopia site takeover. You will need to go into avast and disable web scanning or add "Autogeek" URL into the exclusion list.

**builthatch** · 01-07-2015, 10:08 PM

thanks. i'll do that next. i'm not totally comfortable having a site excluded just in case there is a real threat but at least i'll be able to use the forum without issue!

here is what it says when it happens -

EDIT: welp, AG image attachment size limits strike again. hold on...let me go host it somewhere else :sheesh:

here:

**builthatch** · 01-08-2015, 12:50 PM

in addition to the above, here is another thread that did it:

Improve AutoGeekOnline PHONE APP - Suggestion

i'm not going to add AG to my exclusions list. i hate to do that but i have no choice, haha.

**joe_sun** · 01-20-2015, 03:30 PM

Getting the same error, here's a screen shot

Mike Phillips · 01-20-2015, 04:02 PM

Recently I've seen a number of old thread brought back to life. Nothing wrong with this in my book because in most cases the information contained is just as relevant today as when the thread was created.

That said,

I've noticed a bunch of old threads and even new threads replied to by new members and the posts are more or less gibberish. At least the single sentence doesn't really align with the conversation taking place in the thread.

So I hit the Quote reply so I can then go to Editor Mode and take a peak at their code and I've been noticing a common denominator and that is the new person making the post has included a picture file that ends in .png

But the picture doesn't show up?

I recently remarked about this new trend in a thread that was just moved to the Moderators forum for these reasons.

However, I documented my reply by taking a screen shot to show you instead of copying and pasting my reply.

Here's the screenshot....

Maybe someone with a lot of spam background can shed some light?

**dpk20x** · 01-20-2015, 04:25 PM

Darn you Lupemartin!!

**joe_sun** · 01-21-2015, 12:18 AM

Originally Posted by Mike.Phillips@Autogeek

Recently I've seen a number of old thread brought back to life. Nothing wrong with this in my book because in most cases the information contained is just as relevant today as when the thread was created.

That said,

I've noticed a bunch of old threads and even new threads replied to by new members and the posts are more or less gibberish. At least the single sentence doesn't really align with the conversation taking place in the thread.

So I hit the Quote reply so I can then go to Editor Mode and take a peak at their code and I've been noticing a common denominator and that is the new person making the post has included a picture file that ends in .png

But the picture doesn't show up?

I recently remarked about this new trend in a thread that was just moved to the Moderators forum for these reasons.

However, I documented my reply by taking a screen shot to show you instead of copying and pasting my reply.

Here's the screenshot....

Maybe someone with a lot of spam background can shed some light?

Okay so I know I'm new here but I've been a lurker for a while and just decided to sign up.

This is been intriguing me so I did some research tonight and it seems that code can be embedded into a .png file that when saved onto a server can spread a virus.

Here's an article I found

PNG Image Metadata Found Leveraging iFrame Injections | Threatpost | The first stop for security news