Malware in a vbulletin.org thread

[just.b.jealous]

Hello. I was in the middle of uninstalling all modifications because I just upgraded to 4.0.

Everything was going fine until I clicked the thread 'vMoods aka Mood Manager' by '-=Sniper=-'. When I clicked this thread, my browser blocked me from going into the thread. This has happened 3 times now.

See photo;



I want to click the 'uninstall' on this thread, but I am leery about stepping in there.



EDIT: Thread link; https://vborg.vbsupport.ru/showthread.php?t=217847

[TheLastSuperman]

Originally Posted by just.b.jealous

Hello. I was in the middle of uninstalling all modifications because I just upgraded to 4.0.

Everything was going fine until I clicked the thread 'vMoods aka Mood Manager' by '-=Sniper=-'. When I clicked this thread, my browser blocked me from going into the thread. This has happened 3 times now.

See photo;



I want to click the 'uninstall' on this thread, but I am leery about stepping in there.



EDIT: Thread link; https://vborg.vbsupport.ru/showthread.php?t=217847

More than likely it's a simple image they included (not an attachment to be clear) that is shown in the thread.. I bet the images he used to show the mod are hosted on TinyPic.info or one in a post etc.

From what I can remember tinypic.info is typically a safe site and any site at some point in time could be found to have something and flagged by Google or others as a unsafe site and on occasion it's a false-positive as w/ some anti-virus softwares that you may see on occasion as well point being some sites are cleaned up promptly but can still take up to 30 days for the site to be labeled as safe again. You did report the thread promptly correct?

[Lynne]

I am having no problems viewing the page. The only images on the page are from our site or from the authors site. I didn't have a problem viewing the authors website either. :/

[BirdOPrey5]

I'm getting it to... It's in post #91 so for some people it may be page 2/3/4 etc... of the thread.

It is a pic on tinypic.info that is no longer valid.

I will report the post and ask it be edited/removed.

But there was never any malware.

[Lynne]

Ah, I thought it was in the first page of the thread which is the only page I looked at the source code of.

I've removed the other image. Silly Chrome!