topic Re: High Risk Website in Water Cooler

High Risk Website

ThornOfCrowns — Tue, 04 Mar 2014 11:03:05 GMT

I'm getting a warning when I access the main page of the Community Site. Anyone else getting this?

Re: High Risk Website

ThornOfCrowns — Tue, 18 Mar 2014 10:20:03 GMT

Bumping this as it's happening again today.

Re: High Risk Website

Miguel_Angel_Baeyens — Tue, 18 Mar 2014 10:24:58 GMT

Hi,

I'm not getting that issue, using IE 10 and 11 and 11 RT, Chrome for Windows and iOS, Firefox and Safari for iOS. Do you have installed any extension or add-in onto your browser to get that information?

I'm mentioning Carlos Rodriguez and Sara Leslie to keep them on the loop.

Regards,

Miguel

Re: High Risk Website

ThornOfCrowns — Tue, 18 Mar 2014 11:02:25 GMT

Hi Miguel,

thanks for the reply.

I'm using a straight copy of IE8 (8.0.7601.17514) with no extensions / addins or toolbars added. I can't change the browser as it's a fixed NHS England standard.

The message went away for a while after my first post, but has returned today, the only difference is that the js is now core126.js.

Regards,

James.

Re: High Risk Website

Miguel_Angel_Baeyens — Tue, 18 Mar 2014 11:16:37 GMT

Hi James,

Do you happen to be using Sophos antivirus software? I have read some issues with false positives and some addthis js files, as it seems to be the case. We'll be checking with them anyway.

Thanks for reporting.

Miguel

Re: High Risk Website

ThornOfCrowns — Tue, 18 Mar 2014 11:36:08 GMT

Hi Miguel,

yes we use Sophos here.

Regards,

James.

Re: High Risk Website

Tue, 18 Mar 2014 15:52:51 GMT

Hi James,

Do you get the error each time you hit the community home page during the same session, or just the first time?

Next time you visit the community after being idle for, say, at least an hour (or overnight if that's easier), could you try hit a link to a page (such as this one) BEFORE going to the homepage?

I wonder whether you have some malware on your machine and it is attempting to "phone home" and the antivirus software is actually catching it.

Carlos

Re: High Risk Website

ThornOfCrowns — Tue, 18 Mar 2014 15:59:14 GMT

Hi Carlos,

I get the message as long as I'm on a page within the Community and it happens frequently. It doesn't happen on any other website I visit.

The message stopped for a few weeks between my original post and today which is why I bumpd the original post. I will save this page to my favourites and access it tomorrow morning, before I hit the home page.

Thanks for your help,

James.

Re: High Risk Website

ThornOfCrowns — Wed, 19 Mar 2014 09:14:34 GMT

Came straight to this page - addthis message does not appear. Carlos Rodriguez

I will now go to the landing page and see what happens.

EDIT:

Message does not appear now.

Regards,

James.

Re: High Risk Website

Wed, 19 Mar 2014 20:16:15 GMT

Hi James,

Miguel's instincts were right, it appears. It's apparently a false-positive:

AddThis JS being blocked by Sophos Anti-Virus

I would guess this should be resolved soon, as AddThis is software we use in QC and is legit. If this hasn't been resolved within a reasonable amount of time with upcoming updates to your virus definition from Sophos, please let us know.

Thank you for bringing this to our attention!

Carlos