Results 1 to 8 of 8

Thread: Virus threats on the site lately

  1. #1
    Senior Member
    Join Date
    Dec 2010
    Posts
    6,283

    Virus threats on the site lately

    Hi Alan, Over the course of the last 2-3 days, my virus protection program (Avast) has popped-up this warning about blocking a virus on/in the site. Don't know of that is something that needs addressing or what. Just thought I would mention it.

    SimpleLivingvirusthreat.jpg
    To give pleasure to a single heart by a single act is better than a thousand heads bowing in prayer." Mahatma Gandhi
    Be nice whenever possible. It's always possible. HH Dalai Lama
    In a world where you can be anything - be kind. Unknown

  2. #2
    Simpleton Alan's Avatar
    Join Date
    Dec 2010
    Location
    Ohio
    Posts
    9,401
    Thanks for pointing that out, it's the first I've heard of it. The message you shared refers to a re-direct to another site which appears to be on an internet blacklist, which means that one or more of the major tech players such as Google, etc., may have found something fishy on that site which has yet to be addressed. The site in question is a long standing Yahoo site which provides an API (Application Programming Interface) repository which our site software uses to power its BB Code functions.

    A couple of quick scans I've just completed of our site found no instances of virus or malware and a quick internet search came up empty on any indication of why the yahooapis site is on a blacklist.

    To be safe, I've put in a ticket with our web host asking them to do a more complete scan of our site for problems. I'll let you know how that goes.
    "Things should be made as simple as possible, but not one bit simpler." ~ Albert Einstein

  3. #3
    Senior Member Tradd's Avatar
    Join Date
    Dec 2010
    Location
    The Suburban Midwest
    Posts
    7,468
    I have to say I’ve not gotten any notices of weirdness with the site. I only surf it on my iPhone and iPad with Safari.

  4. #4
    Senior Member
    Join Date
    Dec 2010
    Posts
    6,283
    Thanks, Alan. Just as an FYI, got it again this morning when I came to the home page to login. This is the only site I'm getting it from and my virus protection seems to be blocking it every time.

    Again, thank you for this and all the other things you do around here!!!
    To give pleasure to a single heart by a single act is better than a thousand heads bowing in prayer." Mahatma Gandhi
    Be nice whenever possible. It's always possible. HH Dalai Lama
    In a world where you can be anything - be kind. Unknown

  5. #5
    Simpleton Alan's Avatar
    Join Date
    Dec 2010
    Location
    Ohio
    Posts
    9,401
    Got a response back from my support ticket affirming that there are no virus or malware problems with our site. After doing a little more research on the yui.yahooapis.com site I was surprised to find that it is no longer in service and hasn't been since 2017. This led me to research how our vBulletin software deals with the API call to Yahoo and I found that vBulletin inserted local API to their product in one of their security updates years ago which made their embedded call to Yahoo obsolete, although the call seems to still be referenced somewhere in the thousands of files which make up our version of the software.

    If I were more confident in my ability to find and remove that call without breaking something, I'd do it, and maybe after more research I will. In the meantime I'm afraid you'll have to put up with that annoying message. I'm also curious why it's only just now showing up after all this time? I suppose getting to the bottom of things like this is what keeps our hobbies interesting.
    "Things should be made as simple as possible, but not one bit simpler." ~ Albert Einstein

  6. #6
    Senior Member iris lilies's Avatar
    Join Date
    Mar 2013
    Location
    Always logged in
    Posts
    25,465
    Quote Originally Posted by Alan View Post
    Got a response back from my support ticket affirming that there are no virus or malware problems with our site. After doing a little more research on the yui.yahooapis.com site I was surprised to find that it is no longer in service and hasn't been since 2017. This led me to research how our vBulletin software deals with the API call to Yahoo and I found that vBulletin inserted local API to their product in one of their security updates years ago which made their embedded call to Yahoo obsolete, although the call seems to still be referenced somewhere in the thousands of files which make up our version of the software.

    If I were more confident in my ability to find and remove that call without breaking something, I'd do it, and maybe after more research I will. In the meantime I'm afraid you'll have to put up with that annoying message. I'm also curious why it's only just now showing up after all this time? I suppose getting to the bottom of things like this is what keeps our hobbies interesting.
    I’m glad you consider this potentially interesting. A challenge that is for you so good for you.

  7. #7
    Senior Member
    Join Date
    Dec 2010
    Posts
    6,283
    Quote Originally Posted by Alan View Post
    Got a response back from my support ticket affirming that there are no virus or malware problems with our site. After doing a little more research on the yui.yahooapis.com site I was surprised to find that it is no longer in service and hasn't been since 2017. This led me to research how our vBulletin software deals with the API call to Yahoo and I found that vBulletin inserted local API to their product in one of their security updates years ago which made their embedded call to Yahoo obsolete, although the call seems to still be referenced somewhere in the thousands of files which make up our version of the software.

    If I were more confident in my ability to find and remove that call without breaking something, I'd do it, and maybe after more research I will. In the meantime I'm afraid you'll have to put up with that annoying message. I'm also curious why it's only just now showing up after all this time? I suppose getting to the bottom of things like this is what keeps our hobbies interesting.
    Thanks for the information. I did do a deep virus scan of my computer and everything came out clean. Interesting why now and also if I am actually the only one getting it. I may try a different browser next time I visit the site.

    Thanks again!
    To give pleasure to a single heart by a single act is better than a thousand heads bowing in prayer." Mahatma Gandhi
    Be nice whenever possible. It's always possible. HH Dalai Lama
    In a world where you can be anything - be kind. Unknown

  8. #8
    Senior Member jp1's Avatar
    Join Date
    Dec 2010
    Location
    San Francisco
    Posts
    9,829
    I come here typically from either my iPhone or my windows 10 computer. Neither has been giving me any warnings.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •