Anti-malware Warnings?

[Golddisk]

On one of my sites I have recently had a user report that they received warnings from Malwarebytes while visiting my site in regards to a malicious link. I looked into their claims and found:

Both were marked as outbound traffic, one of them was marked as google.com.kh (this is an official google site, but it has nothing to do with my website... Nor is it linked anywhere on my site). I also haven't had anyone else report a problem with the site.

I did a brief Google search which confirmed my suspicions that this is most likely a problem on the user's end and not my site's end. However, I just want to be sure. Is this correct? Is it most likely a problem on the user's end?

 

[MasterA]

I am not sure if it is a problem on the user's end but you can try to use the Google Webmaster Tools. I used it and found a malicious link on my site from someone's avatar. If it doesn't show anything, then I think it is most likely just on your user's end.

 

[John]

Yeah. Avatars and signature links quite often are linked to malicious websites. Really the only thing you can do is look around to find the link, then delete the image or re-host it somewhere safe.

 

[Golddisk]

So far Google webmaster tools hasn't identified any security issues.

 

[MasterA]

So far Google webmaster tools hasn't identified any security issues.

If that is the case, I don't think there is an issue. At least Google didn't detect anything so I think you are fine.

 

[Cosmic]

John's right about signature, avatar, and any other user-submitted links causing these warnings. Ads could also cause them, potentially. Sometimes, attackers will embed malicious code into the advertisements that run on ad networks. There's nothing anyone can really do about that unfortunately, although modern browsers are good at blocking malware that is embedded into sites.

I'd only be worried if Google Chrome pitched a fit on viewing the site, or if Google Webmaster Tools displayed errors (as MasterA observed). Google is pretty good at detecting malware. There are also tools for scanning sites for malware, but I can't vouch for any. Google is doing this anyway.

 

[Page]

Yeah. Avatars and signature links quite often are linked to malicious websites. Really the only thing you can do is look around to find the link, then delete the image or re-host it somewhere safe.

You are right about that, I had one very small image 88x31 that was an malicious

 

[Cosmic]

It may be a good idea to re-host 88x31 affiliate images on imgur when people give you a link from their site. Those links can cause virus warnings, and technically, someone can get the IPs of visitors to your site if they really want to, by hosting the image on their server and seeing what IPs fetch it.

 

[Page]

It may be a good idea to re-host 88x31 affiliate images on imgur when people give you a link from their site. Those links can cause virus warnings, and technically, someone can get the IPs of visitors to your site if they really want to, by hosting the image on their server and seeing what IPs fetch it.

It's been fixed, and I have changed all other images just in case. Most of the images on my site are uploaded onto my server anyway

 

[Mikaya]

This has been solved (plus it's been over a week since any replies), so I'm going to archive this now. 🙂