ComicVine not safe?

Avatar image for dernman
dernman

36142

Forum Posts

10092

Wiki Points

0

Followers

Reviews: 0

User Lists: 9

I see an orange warning of a virus threat for ComicVine.

Avatar image for pikahyper
pikahyper

19027

Forum Posts

37057995

Wiki Points

0

Followers

Reviews: 5

User Lists: 581

#2 pikahyper  Moderator

@dernman: from what? application, plugin, browser, etc.

Avatar image for dernman
dernman

36142

Forum Posts

10092

Wiki Points

0

Followers

Reviews: 0

User Lists: 9

@pikahyper: I think it's my Norton toolbar on my browser gives ratings to sites..

Avatar image for pikahyper
pikahyper

19027

Forum Posts

37057995

Wiki Points

0

Followers

Reviews: 5

User Lists: 581

#4 pikahyper  Moderator

@dernman: hmm that is odd, Internet Explorer? This is something the engineer's will need to look into so what browser and specific version are you using? and what is your operating system? the more details they have the easier it will be for them to duplicate the problem.

Avatar image for dernman
dernman

36142

Forum Posts

10092

Wiki Points

0

Followers

Reviews: 0

User Lists: 9

@pikahyper: Firefox updated regularly. Windows 7 Home premium.

Avatar image for dernman
dernman

36142

Forum Posts

10092

Wiki Points

0

Followers

Reviews: 0

User Lists: 9

#6  Edited By dernman

@dernman: So I go further into the report and this is what it says..

One threat found.

Threat Name: Trojan.Maliframe!html

Location: http://static.comicvine.com/uploads/original/1/19151/422701-vertigo+logo.jpg

I hope that helps.

Avatar image for cgoodness
Cream_God

15519

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 2

I see your problem, you have Norton, it deletes everything that isn't a virus and allows every virus.

Avatar image for pikahyper
pikahyper

19027

Forum Posts

37057995

Wiki Points

0

Followers

Reviews: 5

User Lists: 581

#8 pikahyper  Moderator

@dernman: that image has been a problem in the past, where are you seeing it? I thought I deleted every version of it, basically if you look at the image in hex (I think it was hex) there is a url redirect to a site that no longer exists, it isn't dangerous but we don't want it causing problems so where ever you are finding that image I'll try to get rid of it.

Avatar image for dernman
dernman

36142

Forum Posts

10092

Wiki Points

0

Followers

Reviews: 0

User Lists: 9

@pikahyper:

Not seeing it myself I don't think. I just looked further into Norton's report page to see what they're saying is the problem. I get the this page is suspect on the toolbar for everywhere I go on CV.

http://safeweb.norton.com/report/show?url=http:%2F%2Fwww.comicvine.com%2F&product=other&version=22.5.2.15&lang=0901&source=toolbar

Avatar image for pikahyper
pikahyper

19027

Forum Posts

37057995

Wiki Points

0

Followers

Reviews: 5

User Lists: 581

#10 pikahyper  Moderator

@dernman: hmm, it is most likely cached somewhere then, like Norton is pulling the results from a cached page on another server or maybe from your own cache on your computer, try clearing your browser cache to see if that does anything, if not post back here and in a few hours when I get home I'll see if I can find that image lurking anywhere.

Avatar image for dernman
dernman

36142

Forum Posts

10092

Wiki Points

0

Followers

Reviews: 0

User Lists: 9

Cleared. Nothings changed.

Avatar image for cosmosis
Cosmosis

299

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Could this be related to why the site keeps making me prove that I'm not a bot? I mean, I know I'm not a very emotional guy, but...

Avatar image for mysticmedivh
mysticmedivh

32487

Forum Posts

570

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Heh. I went to the link and Norton deemed it as a threat too.

Avatar image for pikahyper
pikahyper

19027

Forum Posts

37057995

Wiki Points

0

Followers

Reviews: 5

User Lists: 581

#14 pikahyper  Moderator

@cosmosis: nothing to do with it, you get that page because your traffic on the site is abnormal.

Avatar image for pikahyper
pikahyper

19027

Forum Posts

37057995

Wiki Points

0

Followers

Reviews: 5

User Lists: 581

#15 pikahyper  Moderator

@mysticmedivh: It will do that for anyone using Norton, as I said in a previous post it has a redirect url embedded in the image, it isn't a threat though. A couple of other anti-virus programs pick it up as well.

Avatar image for goonage
goonage

2085

Forum Posts

931

Wiki Points

0

Followers

Reviews: 2

User Lists: 1

#16  Edited By goonage

@dernman said:

@pikahyper: I think it's my Norton toolbar on my browser gives ratings to sites..

This happened to me too, not only with Norton but also with Adblock. Apparently they both think there is a virus and CV is trying to download something on my computer.

I'm using Chrome on Windows 10.

Avatar image for pikahyper
pikahyper

19027

Forum Posts

37057995

Wiki Points

0

Followers

Reviews: 5

User Lists: 581

#17 pikahyper  Moderator

@goonage: Adblock shouldn't notice it, mine never has, you are using standard Adblock?

Avatar image for dernman
dernman

36142

Forum Posts

10092

Wiki Points

0

Followers

Reviews: 0

User Lists: 9

#18  Edited By dernman

@goonage said:
@dernman said:

@pikahyper: I think it's my Norton toolbar on my browser gives ratings to sites..

This happened to me too, not only with Norton but also with Adblock. Apparently they both think there is a virus and CV is trying to download something on my computer.

I'm using Chrome on Windows 10.

I have ABP but I haven't received any notice there. Just the Norton.

Avatar image for pikahyper
pikahyper

19027

Forum Posts

37057995

Wiki Points

0

Followers

Reviews: 5

User Lists: 581

#19 pikahyper  Moderator

@dernman: ya I'm using ABP as well, have been for years and never seen it have a problem with that image even when its been brought up as a problem for others in the past.

Avatar image for pikahyper
pikahyper

19027

Forum Posts

37057995

Wiki Points

0

Followers

Reviews: 5

User Lists: 581

#20 pikahyper  Moderator

@dernman: honestly I can't find that image in any galleries any more so it must just be sitting on the server somewhere but not actively being used, I'll contact an engineer and ask them to manually delete the image from the server as that will be the only way to get rid of it at this point.

Avatar image for goonage
goonage

2085

Forum Posts

931

Wiki Points

0

Followers

Reviews: 2

User Lists: 1

#21  Edited By goonage

@pikahyper: @dernman: I'm using standard Adblock. Everytime I enter the site I have a message from Adblock on the bottom right saying: "Adblock has blocked a download from a website known to host malware."

Avatar image for dernman
dernman

36142

Forum Posts

10092

Wiki Points

0

Followers

Reviews: 0

User Lists: 9

@pikahyper: If you can give me a heads up when they get it done and I'll tell you if it's changed on my end.

Avatar image for pikahyper
pikahyper

19027

Forum Posts

37057995

Wiki Points

0

Followers

Reviews: 5

User Lists: 581

#23 pikahyper  Moderator

@goonage: bizarre, I will have to test that out, CV must be on one of their lists based off old information cause like I mentioned before that image is not actually used anywhere on the site, even if it was malicious it couldn't actually do anything unless it was accessed, you wouldn't just automatically download it by visiting the site you'd have to go somewhere the image is used.

Avatar image for pikahyper
pikahyper

19027

Forum Posts

37057995

Wiki Points

0

Followers

Reviews: 5

User Lists: 581

#24 pikahyper  Moderator

@dernman: ok I will, I'm guessing it might not change anything though as Norton, like Adblock, might be working off of some old list, if that is true then one of the engineers will have to actually contact Norton and be like "please scan the site again, there are no malicious files and we would like to be removed from your blacklist" or some such hassle, CV would have to contact any company that has us on a blacklist for being a malware hosting site :/

Avatar image for dernman
dernman

36142

Forum Posts

10092

Wiki Points

0

Followers

Reviews: 0

User Lists: 9

@pikahyper: I was thinking something like that from reading one of the links from the report page but since I'm a dinosaur with computers I didn't know if I was understanding right..

Avatar image for pikahyper
pikahyper

19027

Forum Posts

37057995

Wiki Points

0

Followers

Reviews: 5

User Lists: 581

#26 pikahyper  Moderator

@dernman: I'm sure you got the jist of it, sites get on these lists all the time, it happens a lot with search engines as well, search engines decide a site is hosting malware or illegal content or is pornographic and then the site gets branded. In chrome malware/malicious sites bring up a warning page warning users not to visit the site and make you click a couple of things before you can ignore the warning, we don't want that kind of stuff, anything that can hurt our traffic is very important to the staff and engineers.

For this specific situation I found a conversation from earlier in the year or last year (it only had a partial timestamp) and from the snippet I read it looks like one of the ad providers CV used that paid to be used here was actually malicious and they injected code into the site and that specific Vertigo image for some bizarre reason (probably others as well) and even though CV stopped using the ad provider we've been branded with the scarlet letter ever since. Every once in a while CV gets bad ad providers, ones that do things that were not agreed upon like having ads that auto-play audio or video or take up the whole screen or popup and obscure key sections of the site or host malware, that kind of stuff is against the rules they agreed to but people tend to just ignore ads by default and without any reports the engineers won't know the site was wronged so ads keep being used. CV is not the only one this happens to of course, I'm sure thousands of sites deal with this kind of thing every day around the world, ad providers tend to be shady but a necessary evil.

Avatar image for cosmosis
Cosmosis

299

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

@cosmosis: nothing to do with it, you get that page because your traffic on the site is abnormal.

I'm not sure what could cause that; I'm not doing anything differently than I have in the past five years of using the site.

Avatar image for pikahyper
pikahyper

19027

Forum Posts

37057995

Wiki Points

0

Followers

Reviews: 5

User Lists: 581

#28 pikahyper  Moderator

@cosmosis: I don't know much about the page but from what I've read I think it looks at your ISP not just your specific IP, probably for combating bots and people using multiple accounts, so if you haven't changed it could be that more people/bots are using your ISP and causing problems that you are getting swept into.

Avatar image for cosmosis
Cosmosis

299

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

@pikahyper: Hmm...so the fact that someone in my vicinity (in an internet sense) might be doing something potentially naughty is causing me problems? That's unfortunate, especially since that sounds like something that can't be fixed on either of our ends.

Avatar image for pikahyper
pikahyper

19027

Forum Posts

37057995

Wiki Points

0

Followers

Reviews: 5

User Lists: 581

#30  Edited By pikahyper  Moderator

@cosmosis: pretty much, they'd have to be doing a lot though as that thing is not easy to bring up from what I understand, it really is mainly for bots and scrappers so that's a lot of traffic in a short period of time, lots of people use the same ISPs so I'm sure it is a pretty high threshold otherwise we'd be getting tons of people complaining about it.

Avatar image for cosmosis
Cosmosis

299

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

@pikahyper: Well, the internet is like the subway in any major city; it's a safe bet that, at any given moment, someone is doing something incredibly unwholesome in it.

Avatar image for pikahyper
pikahyper

19027

Forum Posts

37057995

Wiki Points

0

Followers

Reviews: 5

User Lists: 581

#32 pikahyper  Moderator
Avatar image for dernman
dernman

36142

Forum Posts

10092

Wiki Points

0

Followers

Reviews: 0

User Lists: 9

@pikahyper: Just letting you know that the warning is not longer there. CV now has a green checkmark saying safe.

Avatar image for sirfizzwhizz
sirfizzwhizz

43810

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 1

Nothing to do with the problem at hand, but I feel so much smarter reading posts from this. You guys are magical compared to my internet knowledge.

Avatar image for cgoodness
Cream_God

15519

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 2

Avatar image for sirfizzwhizz
sirfizzwhizz

43810

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 1

@sirfizzwhizz: why'd you search this up and read it?

I was reporting another issue altogether, and saw the title, clicked it, and read it. Boredom.

Avatar image for cgoodness
Cream_God

15519

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 2

@sirfizzwhizz: if you have Norton, that's your problem, AVAST is SWAT, Bitdefender is FBI, Norton is Mall Security

Avatar image for jslack
jslack

143

Forum Posts

29824

Wiki Points

0

Followers

Reviews: 1

User Lists: 0

#39 jslack  Moderator

Norton and Mcafee are absolutely terrible, FYI.