Win 8 MSE detecting malware in ocuk thread

ColEx · 5 Dec 2012 at 16:55

I was browsing the console forum, and i came across this thread http://forums.overclockers.co.uk/showthread.php?t=18466232. Windows 8 MSE seems to think the OP's signature is malware, is anyone else getting this? I think its a false positive, but I just want to be sure.

Edit: Apparently MSE thinks its this: Trojan:JS/IframeRef

Cuchulain · 5 Dec 2012 at 16:57

It's electroblasters sig which links to a site that's parked that probably has some spurious code on it.

ColEx · 5 Dec 2012 at 17:05

My thoughts to, probably nothing to worry about.

ElectroBlaster · 6 Dec 2012 at 12:03

Guys I dont have a sig anymore? I stopped using the rotator thing years ago... afaik anyway?

I will double check again but in my profile there is no sig code at all!

EDIT: Ok guys I think I know whats gone on here! I used to have my own webspace and domain and had that for a few years and then stopped using it back in 2008 I think? Anyway I never renewed it and they closed it down. So now checking that domain it throws up some random page that I have no clue about... hence why this sig problem has been noticed now! I just stopped using my sig thing and forgot about it! I shall dig into this and find out whats going on.

Abooie · 6 Dec 2012 at 12:19

Just entering this thread caused Defender to popup on my Surface.

ColEx · 6 Dec 2012 at 13:37

ElectroBlaster said:
Guys I dont have a sig anymore? I stopped using the rotator thing years ago... afaik anyway?

I will double check again but in my profile there is no sig code at all!

EDIT: Ok guys I think I know whats gone on here! I used to have my own webspace and domain and had that for a few years and then stopped using it back in 2008 I think? Anyway I never renewed it and they closed it down. So now checking that domain it throws up some random page that I have no clue about... hence why this sig problem has been noticed now! I just stopped using my sig thing and forgot about it! I shall dig into this and find out whats going on.

That's weird, I see a little box in your signature space and it's being blocked by IE 10, so something fishy is going on.

ElectroBlaster · 6 Dec 2012 at 14:16

This is really odd... I go into my usercp thing and there is nothing there at all!

Fishy... something is not right here!

ElectroBlaster · 6 Dec 2012 at 14:20

Right guys I have been in the sig box and just dropped in a test! But there was nothing in there at all? no links nothing?

bledd · 6 Dec 2012 at 14:24

You still have the offending bit in your sig..

PaulyD · 6 Dec 2012 at 14:25

Yep, I see the box to with a broken link to

http://www.altairst8te.co.uk/new/rotate.php

Its now at the end of your test sig

ElectroBlaster · 6 Dec 2012 at 14:26

Oh ok! Guys I swear there is nothing else there to edit? I will get onto a pc running xp and have another look now!

PapaLazaru · 6 Dec 2012 at 14:29

This thread is causing and MSE message on mine as well. Just did it even though your sig has been removed?

ElectroBlaster · 6 Dec 2012 at 14:32

I have just been onto an older machine running xp and I just cant see anything there? Only the test text I added just a minute ago!

I think a mod or don needs to get into this and see why everyone else can see a link or box and I cant!

PapaLazaru · 6 Dec 2012 at 14:33

I'm still getting it mate.

ColEx · 6 Dec 2012 at 14:36

Still getting it too, a mod/don should check it out.

ElectroBlaster · 6 Dec 2012 at 14:36

Right ok I dont know why but, firefox is not letting me see that dodgy link! I just jumped into IE7 and now I can see the box, clear as day!

I will log in with that and get the link nuked asap!

Edit: That should be it now! dont understand why firefox was not showing that box/link? Thats why I just assumed things were ok, if I had seen a red box it would have been sorted ages ago.

ColEx · 6 Dec 2012 at 14:41

Its gone

. I wonder what it was then? And why Firefox wouldn't show the link? And IE does?

ElectroBlaster · 6 Dec 2012 at 14:44

I tried to find the code in that box but nothing so I just hit delete!

Hmmm I like firefox but now im getting paranoid about it lol.

PapaLazaru · 6 Dec 2012 at 14:45

It's gone.

ElectroBlaster · 6 Dec 2012 at 14:54

Good

I have noticed something, I took the link and it opens but the url changes from www to ww2? Anybody know what thats about?

I might get onto that hosting company and see whats the deal here!