Malwarebytes Popping Up Malicious Website Warnings

Anybody else having issues with Malwarebytes popping up malicious website warnings on the DAZ website?  This is the only site it's happening on.  Using Search in the forum was the worst.  Every single click resulted in another warning.

Comments

  • Happens in both Firefox and Chrome.

  • TaozTaoz Posts: 10,005

    Nothing here (Premium version).

     

     

  • SimonJMSimonJM Posts: 6,009

    Nothing happening here, also with premium version

  • WendyLuvsCatzWendyLuvsCatz Posts: 38,885
    edited January 2017

    have you got one of those addon scripts people use to sort bargains and sales running?

    do you have adblocker on? I do.

    it reports many blocked popups

    Post edited by WendyLuvsCatz on
  • nonesuch00nonesuch00 Posts: 18,444
    edited January 2017

    I think it's comming from that ScriptMonkey addon tool people use for sales and sorting. I'd recommend not using such tools.

    Post edited by nonesuch00 on
  • namffuaknamffuak Posts: 4,265
    edited January 2017

    The last 3 lines of all the pages are probably, as nonesuch00 says, inserted by ScriptMonkey. It's a web-bug tracker (it references a gif of size 0). It looks like the latest update to MalwareBytes is now blocking access to rfihub.com. I just used AdblockPlus to block rfihub.com and the MalwareBytes popup stopped. Just view the pages cource in your browser and scroll to the bottom - the forum isn't letting me post a readble copy.


     

    Post edited by namffuak on
  • AllenArtAllenArt Posts: 7,172
    edited January 2017

    It happened to me today as well. I do have the premium version.

    Laurie

    Post edited by AllenArt on
  • Did you try with different browsers? Would you care to post a screenshot of those warnings and list the addons you are using? Try disabling each add-on (that could affect the Daz website) one at time and see which one's causing this behavior. You should be able to narrow down the culprit if the warning disappears while disabling a particular add-on.

    Without those all we can provide are intelligent guesses based upon inaccurate assumptions.

  • AllenArtAllenArt Posts: 7,172
    edited January 2017

    I turned off every extension in Chrome and it still did it. Have not tried in Firefox.

    Laurie

    Edit: Just checked Firefox and it happens there as well. Also disabled every extension and it still does it.

    Post edited by AllenArt on
  • isidornisidorn Posts: 1,601

    DAZ has cost me more money than any other evil software, so they might be on to something. wink

  • 3Ddreamer3Ddreamer Posts: 1,321

    I have Malewarebyte Premium, the daz Add-on script for sales on Cyberfox on 2 different computer and not seeing this error yet - I noticed the the add-on had changed features last night, so I wonder if that fixes/triggers the malware popup when I go on tonight

  • Here's the screenshot.  Yes, I do have those add-ons and ad blocker.  I'll do some tests and see what happens.

     

    susp website.png
    422 x 312 - 17K
  • sandmanmaxsandmanmax Posts: 992
    edited January 2017
    namffuak said:

    The last 3 lines of all the pages are probably, as nonesuch00 says, inserted by ScriptMonkey. It's a web-bug tracker (it references a gif of size 0). It looks like the latest update to MalwareBytes is now blocking access to rfihub.com. I just used AdblockPlus to block rfihub.com and the MalwareBytes popup stopped. Just view the pages cource in your browser and scroll to the bottom - the forum isn't letting me post a readble copy.


     

    THAT'S IT!!!  rfihub.com - I blocked it with AdBlock Plus.  Hopefully that will stop the notifications.

    Post edited by sandmanmax on
  • isidorn said:

    DAZ has cost me more money than any other evil software, so they might be on to something. wink

    LOL!  I had the same thought.

  • SimonJMSimonJM Posts: 6,009

    A quick google of rfihub found this

  • N-RArtsN-RArts Posts: 1,537

    Yay... Something else to be worried about when I go online... indecision

    Ad Blocker says, "Your filter must follow the AdBlock Plus Syntax". So how would I add something to the filter list?

     

     

  • nonesuch00nonesuch00 Posts: 18,444

    I have a made typo earlier - I'd recommend removing ScriptMonkey - credit card companies are investigating stealing of some financial informations from me via webbrowser interface as I type this. Lucky I noticed the activity before they could do much damage. Since being on the internet since it's public availibility I didn't have a problem with my credit cards until this scriptmonkey.

    There is very good reason napi interface and such are being discontinued.

  • DAZ_RawbDAZ_Rawb Posts: 817

    The good news: We didn't use rfihub to serve any ads on our site, so you're safe there.

     

    The better news: The web team was able to disable the rfihub analytics code on our system, so as the cache clears out for pages it will drop off. I thought I had this removed a while back but it still had something that kept it alive in a config setting that was on display in the bottom of a locked filing cabinet stuck in a disused lavatory with a sign on the door saying 'Beware of the Leopard'. That config setting has been fully removed now and should be gone for good.

  • SimonJMSimonJM Posts: 6,009
    DAZ_Rawb said:

    The good news: We didn't use rfihub to serve any ads on our site, so you're safe there.

     

    The better news: The web team was able to disable the rfihub analytics code on our system, so as the cache clears out for pages it will drop off. I thought I had this removed a while back but it still had something that kept it alive in a config setting that was on display in the bottom of a locked filing cabinet stuck in a disused lavatory with a sign on the door saying 'Beware of the Leopard'. That config setting has been fully removed now and should be gone for good.

    Use jaguars instead cheeky

  • namffuaknamffuak Posts: 4,265

    Thanks for the update!

  • barbultbarbult Posts: 25,111

    Thanks, DAZ_Rawb for taking care of things.

Sign In or Register to comment.