Active discussions

Meet the Other Phone. Flexible and made to last.

Meet the Other Phone.
Flexible and made to last.

Buy now

Please or to access all these features

Talk
Site stuff

Join our Innovation Panel to try new features early and help make Mumsnet better.

See all MNHQ comments on this thread

Original poster

My virus scanner keeps blocking threats from Mumsnet!

121 replies

bebejones · 05/09/2011 19:45

Not sure if this is the right place but my virus scanner (AVG) keeps blocking threats when I am on MN. Then it stops me from using the site until I close it & open it up again. The last one was a 'blackhole' something! Not sure what this is...anyone?

OP posts:
IwanttobeShirleyValentine · 09/09/2011 11:22

Just got it again today!
Inernet explorer and AVG.

I got the Black hole warning when I logged into MN home page from google.

mistlethrush · 09/09/2011 11:36

Just happened to me again on trying to access from previous history links - ie. The 'family friendly firm to nominate' banner was up at the top - there was the ad before the Chedds add to the rhs (has it got a toy soldier on it - shows how much attention I pay to that sort of thing, sorry!)

nocake · 09/09/2011 12:42

I've just had a warning from my virus checker (Sophos).

IHeartIona · 09/09/2011 13:52

I just had a trojan horse blocked by avast too, when I clicked on my link to Mumsnet Talk

farming4 · 09/09/2011 14:12

Hi - another block - black hole warning when I tried to access the talk homepage from google search. On Internet explorer and using AVG. Ta

Original poster
bebejones · 09/09/2011 14:16

Just when I thought I was 'safe' again!!

Logged in, clicked on talk & up pops a blocked threat from AVG!

File name: 180daysleft.com/main.php?page=0b1eba0446e855de
Threat name: Exploit Blackhole Exploit Kit (type 1889)

Didn't notice what ad was at the top, sorry! (I'm using IE, not sure what version, 7 maybe?!)

OP posts:
Original poster
bebejones · 09/09/2011 14:17

Mine must have been around the same time as farming4

OP posts:
SuePurblybilt · 09/09/2011 16:03

Just had another

URL: 180daysleft.com/main.php?page=0b1eba0446e855de
Name: Blackhole Exploit Kit (type 1889)

Any news MNHQ?

MNHQ
DarrenMumsnet · 09/09/2011 16:33

Without wanting to sound like a broken record, we are still running tests to diagnose the cause of this problem. We'll keep going with this and will update further when we have more news.

Thanks to all of you for the information you're sending through, please keep it coming as it does help us.

SuePurblybilt · 09/09/2011 16:42

Ta muchly Smile

QueenofJacksDreams · 09/09/2011 17:06

I've just had threat blocked by Avast! Its telling me its a trojan horse, happened as soon as I clicked Active Conversations.

QueenofJacksDreams · 09/09/2011 17:06

Oh yes sorry this is the info Avast! gave me -
"Infection Details
URL: h46r.com/in.cgi?mumsnet
Process: file://C:\Program Files (x86)\Mozilla Fi...
Infection: html:Framer-inf [Trj]"

NetworkGuy · 09/09/2011 17:18

"I don't open adverts, ever"

Unfortunately, in some cases it can be just the 'display' of the advert which causes the problem. I regularly use NewsNow.co.uk for updates on news stories (it scans thousands of web sites every few minutes).

At one point some years back there was a Flash advert which opened a new tab... as the NewsNow site refreshes the page every 5 minutes, it was opening new tabs in my browser day and night while I was unaware (I have over a dozen machines and more in the garage) and crashed the system eventually.

That's when I added Flash Block for Firefox and don't have Flash installed on all my machines, just a couple at present (1 Mac, 1 laptop). It was not in the same league as a virus/ trojan/ malware but a nuisance which should have been handled some other way... but point is, the effect was caused by some advert I never, ever, clicked... just the display of it was enough to cause my PC to run out of memory after a while.

ChickensHaveNoEyebrows · 09/09/2011 17:25

I'm getting the 180 days one. My Norton thingy told me , and I'm using internet explorer.

TheregoesBod · 09/09/2011 17:29

Me too ten minutes ago, exactly the same as bebejones. Never happened to me before - is it safe to use the site at the moment?

mummylin2495 · 09/09/2011 17:49

just this second had the 180 day thing too .It was on talk page .Im getting fed up with this and i think that there should be a post from MNHQ to warn others who may not be aware of this and may not be up to date with their anti virus protection

NetworkGuy · 09/09/2011 18:15

"who may not be aware of this and may not be up to date with their anti virus protection" - though of course it may also be a false alarm, which can happen...

Not quite sure whether it would be easy to do for everyone affected (some don't want to delve into their computer facilities any further than they have to), but most browsers can show the web page source code. So it is not impossible to make a copy of the HTML (the code used to describe the contents for your browser) and send that to MNHQ for the Tech bods to examine.

Even if you have some browser settings disabled, and your anti-virus reports a problem (so the 'nasty' is not appearing on your computer), the browser page may give the Tech staff enough info to determine what's the cause, and allow them to disable it faster.

I suppose it will need someone from MNHQ to ask DamianTech if that might help... (or Damian, if he pops back to the thread).

mummylin2495 · 09/09/2011 18:22

i have done that NetworkGuyi copied the whole thing out with the ones i had previous to the last one,and from what i have read on her we are all getting the same ones.I sent what i had copied to MNHQ.

LottieJenkins · 09/09/2011 18:25

Ive just had two Trojans stopped by my Avast!!!

NetworkGuy · 09/09/2011 18:32

well done mummylin - hopefully someone at MNHQ / Damian will report back as to whether its useful.

mummylin2495 · 09/09/2011 18:34

i did have an email back to say it would be passed on to tech.

Deux · 09/09/2011 18:54

I'm running Explorer and Avast and it has blocked 2 trojan horse warnings. I don't click on ads and not sure exactly what was on the page. It just kind of sprung up leaving me wondering where it came from.

NessaRose · 09/09/2011 19:46

Just had another blocked warning for a trojan horse. Still on IE and running avast. I was on the home page.

ScaredyDog · 09/09/2011 19:46

Just had a warning about exploit blackhole toolkit - just clicked on a link in chat and it came up.

This explains what it is.

Really hope you get this sorted soon MN, lots of people aren't web savvy enough to have decent anti-virus and are clearly at risk of being hacked :(

I'd refreshed the main page of Chat when it happened, but I've been getting similar warnings for days now.

NessaRose · 09/09/2011 19:48

I think I am going to run a virus scan to see if any thing's on the laptop.