R1200RS + R1250RS Forum
Print view
Tue Jun 16, 2020 4:34 pm
Zitat von v8guy im Beitrag #30Zitat von fred_jb im Beitrag #28 OK, thanks for the input as you are obviously a lot more familiar with the underlying technology than I am. A couple of questions then, if it is a client side problem: a) why have a lot of people, in diverse locations, developed the same client based problem at the same time? and b) why are the people seeing this* not seeing similar problems with other websites? * (Looks like it is being seen by anyone with the Premium version of Malwarebytes, which runs continuously in background, unlike the free version which only runs when the user manually initiates a scan)
Fred
|
|
reply
|
I'm also running Malwarebytes Premium. But this evening, thankfully, no popup warnings. BTW, all I can do is report symptoms. This tech talk is miles above my receding hairline |
|
Zitat von fred_jb im Beitrag #31 It's hard to say, of course.. but I was just pointing out that you shouldn't rule out the possibility of the root cause being client-side. However, it's very possible that some combination of factors originating server-side is tickling the nose of your particular AV client. If I had to guess, I'd say the reported SSL failure you observe under as yet undetermined conditions, perhaps related to whether the server's front-end cache already holds the requested document or not, may be why the AV gets upset. I have not been able to repeat that error condition, so it's hard to dig any deeper into what causes it.
Current: 2015 BMW R1200RS Sport SE, 2003 Yamaha TDM900
Past: 1999 Honda CLR125, 1995 Honda CB500, 1998 Triumph Sprint Sport, 1995 Honda VFR750FS, 2006 Suzuki DRZ400SM, 2001 Triumph Speed Triple, 2015 Honda VFR800X "Being shot out of a cannon will always be better than being squeezed out of a tube" - HST |
|
|
This is now getting worse, and although I can whitelist the server address in Malwarebytes, I am reluctant to do so in case one day there really is malware on the server which might then get onto my PC. Fred |
|
|
|
Fred, your experience would be enough for me to bin Malwarebytes and look for another product. I just use the Windows Defender that comes free with Windows 10. I use Google Chrome browser which adds another layer of protection and embedded into that I have ublock to stop pop-ups and embedded adverts. None of these require a paid subscription. |
Zitat von wessie im Beitrag #36 Thanks Wessie. I've worked in IT for many years so I'm aware of the alternatives, and have used many of them in the past, but like you I'm fairly happy with Windows Defender and Google Chrome. I use AdBlock for ad blocking which seems to work well enough, though increasingly websites are detecting adblockers and asking you to turn off before displaying the content you are after. I'm reluctant to abandon Malwarebytes, because generally I have found it very effective, and a go to tool for me when cleaning up infected PCs for friends and relatives. I took advantage of a special offer a few years ago to get a lifeftime license to the Premium Malwarebytes version for a single payment. As a result I am not paying an annual subscription for it, so at this point it is effectively free. Having worked in IT, I tend to be a bit reluctant to accept a problem like this as just one of those things - there is always a reason! Although the reaction by Malwarebytes may be inappropriately extreme, there has to be something provoking it, and as it doesn't happen on any other websites, then I do think the reason must lie with the hosting of this website, possibly something that has recently changed in their hardware or software. From the link you posted earlier it seems like it is inconveniencing users of other websites hosted by the same company, so I do hope someone has prodded them to investigate the issue, and that it eventually stops as suddenly as it started! Fred |
|
|
I suspect that the host has been reported for hosting some potentially malicious content, and as such has been flagged by some AV vendors as potentially problematic. It seems that Malwarebytes has progressed beyond simple blacklisting of atomic indicators, given that it sometimes permits and other times warns when requesting resources from the host in question, and is making these occasional interventions based on the hostname and some other ephemeral condition. To me, this can only be a good thing - it's a sign that the security product is doing more than just the bare minimum of checking hostnames and MD5s - despite the occasional interruption and inconvenience.
Current: 2015 BMW R1200RS Sport SE, 2003 Yamaha TDM900
Past: 1999 Honda CLR125, 1995 Honda CB500, 1998 Triumph Sprint Sport, 1995 Honda VFR750FS, 2006 Suzuki DRZ400SM, 2001 Triumph Speed Triple, 2015 Honda VFR800X "Being shot out of a cannon will always be better than being squeezed out of a tube" - HST |
|
|
After some idle musing... If we think of AV in terms of the decisions we make when we ride our bikes:
Current: 2015 BMW R1200RS Sport SE, 2003 Yamaha TDM900
Past: 1999 Honda CLR125, 1995 Honda CB500, 1998 Triumph Sprint Sport, 1995 Honda VFR750FS, 2006 Suzuki DRZ400SM, 2001 Triumph Speed Triple, 2015 Honda VFR800X "Being shot out of a cannon will always be better than being squeezed out of a tube" - HST |
|
Zitat von v8guy im Beitrag #39 I like the analogy. What I would like even more, as you alluded to in your previous post, is a realistic indication from Malwarebytes about what is actually causing it to block the download of some image files on some occasions, while allowing the very same images to be displayed at other times, and why it is only happening on this one website. Malwarebytes shouting "Trojan" is not particularly helpful. The only clue I have is that while an image is being blocked, if I enter the image address in a separate browser tab, as well as it being blocked and not displaying, I get the following message in the browser window: This site can’t provide a secure connection files.homepagemodules.de sent an invalid response. Try running Windows Network Diagnostics. ERR_SSL_PROTOCOL_ERROR As far as my very limited knowledge goes, this seems to indicate that Malwarebytes did not on that occasion like the way the request for that component of the webpage was responded to, though on the next occasion, sometimes minutes later, sometimes the next day, it is perfectly happy and will allow the same image to display. This to me indicates the issue is with the server which on some occasions and for some images is not serving them to the browser in a way which Malwarebytes finds acceptable. Very mysterious, but I feel it must be something about this particular server, as if it was entirely due to a problem with Malwarebytes it would be happening on other websites too. Fred |
|
|
Bloody Hell! |
|
