why do i get this pop up only from this site in my anti virus

[sudeki300]

 

[Costello]

View attachment 449839

do you get it on specific pages ? or every page?

sometimes people link to images or signatures off invalid domains, but this should only happen on specific pages

 

[sudeki300]

do you get it on specific pages ? or every page?

sometimes people link to images or signatures off invalid domains, but this should only happen on specific pages

hey Costello, i have just had the warning come up again while looking at the below news post. it seems it's happening on specific pages and not across the site.

 

[Kirbydogs]

hey Costello, i have just had the warning come up again while looking at the below news post. it seems it's happening on specific pages and not across the site.

View attachment 450382

I think I know what this is, I got a very similar thing. Did you download CheatEngine 7.5 recently? It's installer is packaged with malware. Go to control panel > Uninstall a program, and search for ReasonLabs. Let me know if it pops up. You should also download Malwarebytes and have it scan for threats. Microsoft Defender is also very helpful, but to be on the safe side, use Malwarebytes as well. If you have it, McAfee Personal Security might work as well.

Important: If you find ReasonLabs, or any software associated with it, let me know. It's a hard-to-find way to get rid of it.

 

[Hayato213]

hey Costello, i have just had the warning come up again while looking at the below news post. it seems it's happening on specific pages and not across the site.

View attachment 450382

It is probably just your Anti Virus, flagging the wrong thing, I clicked on that thread and nothing happens on my end.

 

[RedColoredStars]

What Antivirus are you using? Because no pop-up here from that page using Edge or Firefox. I use built in Microsoft Defender.

Edit: I figured it out based on your image. Bitdefender. I'll install Bitdefender and try, then report back.

 

[sudeki300]

I think I know what this is, I got a very similar thing. Did you download CheatEngine 7.5 recently? It's installer is packaged with malware. Go to control panel > Uninstall a program, and search for ReasonLabs. Let me know if it pops up. You should also download Malwarebytes and have it scan for threats. Microsoft Defender is also very helpful, but to be on the safe side, use Malwarebytes as well. If you have it, McAfee Personal Security might work as well.

Important: If you find ReasonLabs, or any software associated with it, let me know. It's a hard-to-find way to get rid of it.

never used cheatengine and don't know what it is, there is also no Reasonlabs on my pc.

Post automatically merged: Jul 31, 2024

What Antivirus are you using? Because no pop-up here from that page using Edge or Firefox. I use built in Microsoft Defender.

i'm using bitdefender with firefox browser, it's probably what Costello said about people linking images or signatures off invalid domains. only seems to happen on the front page news stuff.

@RedColoredStar, no need to go to the trouble of installing bitdefender though it's greatly appreciated, just wanted to put it out there.

 

[Kirbydogs]

never used cheatengine and don't know what it is, there is also no Reasonlabs on my pc.

Post automatically merged: Jul 31, 2024

i'm using bitdefender with firefox browser, it's probably what Costello said about people linking images or signatures off invalid domains. only seems to happen on the front page news stuff.

You might want to change its settings, then.

 

[impeeza]

do you get it on specific pages ? or every page?

sometimes people link to images or signatures off invalid domains, but this should only happen on specific pages

Yes in this case is @Bladexdsl who have on their signature a link to a picture on the URL http[colon]//old.rfarmor.com/images/smilies/pir8.gif some browsers try to automatically use HTTPS instead of HTTP and as that site changed name you get a Certificate error. The strange thing is the HTTP URL is correctly redirected to a new valid URL he also use that gif on some other posts as part of the text.

 

[sudeki300]

Yes in this case is @Bladexdsl who have on their signature a link to a picture on the URL http[colon]//old.rfarmor.com/images/smilies/pir8.gif some browsers try to automatically use HTTPS instead of HTTP and as that site changed name you get a Certificate error. The strange thing is the HTTP URL is correctly redirected to a new valid URL he also use that gif on some other posts as part of the text.

@impeeza, thank you for taking the time and using your detective skills to look into this, knew it wasn't the whole site as it comes up every now and again. thanks again buddy

 

[impeeza]

@impeeza, thank you for taking the time and using your detective skills to look into this, knew it wasn't the whole site as it comes up every now and again. thanks again buddy

Humm detective kabito, I bet will be best friend of detective Pikachú he he he.

 

[RedColoredStars]

Best solution. Tell @Bladexdsl to change their broken sig that hasn't worked in ages anyway. Would help if they used the correct url.

You might want to change its settings, then.

The only setting in Bitdefender for Network Protection is on or off, or adding the detection to exceptions. Better solution is the user fixing their signature.

 

[sudeki300]

look at everyone getting together and being a helpful community, warms the cockles that does.

 

[Bladexdsl]

what the fuck have you done now there's a pir8.gif at the end of my sig i can't get rid of?!

 

[impeeza]

what the fuck have you done now there's a pir8.gif at the end of my sig i can't get rid of?!

arrg you can drop some grog on it

 

[a_username_that_is_cool]

Bruh I use bitdefender and it just raised the "Blocked suspicious connection" thingy as I was reading this

 

[sudeki300]

Bruh I use bitdefender and it just raised the "Blocked suspicious connection" thingy as I was reading this

same here, was no issue till @Bladexdsl joined the thread.lol

 

[Bladexdsl]

well the image is on postimageorg now the other gif i can't remove now it's hardcoded in

 

[linuxares]

Solution, don't allow people to use URLs in signatures.

 

[impeeza]

what the fuck have you done now there's a pir8.gif at the end of my sig i can't get rid of?!

By the way, you are using the URL http[colon]//old.rfarmor.com/images/smilies/pir8.gif but you can change it for https://forum.netonix.com/images/smilies/pir8.gif which is the same item but with the new name.

ARGG y some grog!

Post automatically merged: Jul 31, 2024

Solution, don't allow people to use URLs in signatures.

how do you dare?!!