MyBB Community Forums
Malware notification on Plugin downloads - Printable Version

+- MyBB Community Forums (https://community.mybb.com)
+-- Forum: 1.8 Support (https://community.mybb.com/forum-175.html)
+--- Forum: Security Management and Support (https://community.mybb.com/forum-179.html)
+--- Thread: Malware notification on Plugin downloads (/thread-205600.html)



Malware notification on Plugin downloads - retoid - 2016-11-03

I am getting several malware notifications when attempting to download several plugins.
for example:
https://community.mybb.com/mods.php?action=view&pid=286
and
https://community.mybb.com/mods.php?action=view&pid=224


RE: Malware notification on Plugin downloads - Neeeeeeeeeel.- - 2016-11-03

Which AV do you have?


RE: Malware notification on Plugin downloads - retoid - 2016-11-03

(2016-11-03, 08:59 PM)Neeeeeeeeeel.- Wrote: Which AV do you have?

Avira - Free Version
But it's Chrome that is blocking it I believe.


RE: Malware notification on Plugin downloads - dragonexpert - 2016-11-03

I use Chrome and it is not triggering any warning.


RE: Malware notification on Plugin downloads - Neeeeeeeeeel.- - 2016-11-04

Avira has some options for "live web protection" or something similar... try disabling it. It's a false-positive for sure. Maybe because of "eval" function.


RE: Malware notification on Plugin downloads - VoIP - 2016-11-05

I tried replicating the issue with Chrome as well and it didn't cause any issues. Might be that i'm not a windows user.


RE: Malware notification on Plugin downloads - Vanz - 2016-11-05

I tested using Firefox and Chrome browsers, and have Malwarebytes AV and no trigger of any virus/malware.
Download successful.


RE: Malware notification on Plugin downloads - katos - 2016-11-05

The staff meticulously assess all plugins for malware before we allow them to go live as a download. Whilst we still encourage users to exercise caution just in case one slipped through, I strongly suspect that this is indeed a false positive. I cannot replicate the issue myself however will try later on my works laptop that has avira.

For your peace of mind, I have passed the link into our development team for assessment. Though I suspect they'll just confirm the above.


RE: Malware notification on Plugin downloads - Josh H. - 2016-11-05

I've skimmed through the code and don't see anything immediately suspicious so I also think it's most likely a false positive.