Advertisement:

Author Topic: AVG 8.0 and Cookie from 209.160.23.104 ?  (Read 2728 times)

Offline l_d_allan

  • Jr. Member
  • **
  • Posts: 185
  • Gender: Male
    • Canon printing (more or less under construction)
AVG 8.0 and Cookie from 209.160.23.104 ?
« on: October 08, 2008, 10:26:39 AM »
smf 1.1.6  IE7

Avg 8.0 gave a low priority warning that a cookie "infection" related to:
209.160.23.104
was detected.
Fix?

Huh ... so I indicated "Make it so."

After that, www.berbible.org/forums "challenged" whether to accept a cookie from 209.160.23.104.

I didn't recognized that URL 209.160.23.104, so I clicked "Always Block".

After that, the forums stopped working. IE7 "hung" with status message in lower left indicating something like:
"waiting for reply from 209.160.23.104 "

I checked Internet options, and 209.160.23.104 was "Always block". I changed this to "Always allow". Forums are working again.

My practice is to be very conservative about "cookies". I have the browser set to "Challenge". If I don't recognize the source of the cookie, I usually indicate "Always Block".

Better safe than sorry.

I realize that cookies need to be allowed for SMF to work, but the ID of the cookie should be unambiguous.




2.0 semi-newbie. Rusty at bbCode tagging. Win7-64+Sp1 and IE9. Sysop of under-construction www.canprint.org
No mods installed. Huge fan of SMF, especially terrific support.

Offline l_d_allan

  • Jr. Member
  • **
  • Posts: 185
  • Gender: Male
    • Canon printing (more or less under construction)
Re: AVG 8.0 and Cookie from 209.160.23.104 ?
« Reply #1 on: October 08, 2008, 10:46:39 AM »
More info:

I am now unable to get to Admin or Logout. See attachments:

Attached are the messages I get. It seems like something has "timed out".

I wonder if the index.php or settings.php have a corrupted idea of the correct cookie to use?

$cookiename = 'SMFCookie876';  # Name of the cookie to set for authentication.

The current user is Blissful. There is a cookie in "Documents and Settings\Blissful":
blissful@berbible[2].txt that has a reference to SMFCookie876

See attached


« Last Edit: October 08, 2008, 10:48:47 AM by l_d_allan »
2.0 semi-newbie. Rusty at bbCode tagging. Win7-64+Sp1 and IE9. Sysop of under-construction www.canprint.org
No mods installed. Huge fan of SMF, especially terrific support.

Offline l_d_allan

  • Jr. Member
  • **
  • Posts: 185
  • Gender: Male
    • Canon printing (more or less under construction)
Re: AVG 8.0 and Cookie from 209.160.23.104 ?
« Reply #2 on: October 08, 2008, 11:25:12 AM »
Also unable to reply to messages or use New Topic.

Also, the "hang" while "Fetching Preview" is once again happening.

See attached.
Lynn is the Admin (see red circle)
Avatar isn't showing up (another red circle).
Timing out. (another red circle)
2.0 semi-newbie. Rusty at bbCode tagging. Win7-64+Sp1 and IE9. Sysop of under-construction www.canprint.org
No mods installed. Huge fan of SMF, especially terrific support.

Offline l_d_allan

  • Jr. Member
  • **
  • Posts: 185
  • Gender: Male
    • Canon printing (more or less under construction)
Re: AVG 8.0 and Cookie from 209.160.23.104 ?
« Reply #3 on: October 08, 2008, 11:38:09 AM »
Cookie for URL 209.160.23.104 brings up a website with:

Welcome to the home of ifrdmn.com

That appears to be a totally BOGUS website.

Excuse my frustration:
What the heck?  <g>

2.0 semi-newbie. Rusty at bbCode tagging. Win7-64+Sp1 and IE9. Sysop of under-construction www.canprint.org
No mods installed. Huge fan of SMF, especially terrific support.

Offline Deaks

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 22,477
  • Gender: Male
    • SMFReview on Facebook
    • pouvik on GitHub
    • @@smfreview on Twitter
    • SMFReview
Re: AVG 8.0 and Cookie from 209.160.23.104 ?
« Reply #4 on: October 20, 2008, 08:06:41 AM »
l_d_allan do you still need help with this

Offline l_d_allan

  • Jr. Member
  • **
  • Posts: 185
  • Gender: Male
    • Canon printing (more or less under construction)
Re: AVG 8.0 and Cookie from 209.160.23.104 ?
« Reply #5 on: October 20, 2008, 09:56:31 AM »
Thanks for checking.

I ended up doing a complete re-install, and smf 1.1.6 has been well behaved since then (about 10 days or so). So in that sense, no help is needed.

It does seem that somehow or other smf became dependent of a (random?) URL. I have no idea of how that would happen. What I noticed was that everything became "read-only". Perhaps the files in www.berbible.org/forums?  Or perhaps the MySql file associated with smf (which I can't get at).

I did ask again when there weren't any answers after several days:
http://www.simplemachines.org/community/index.php?topic=267252.0
2.0 semi-newbie. Rusty at bbCode tagging. Win7-64+Sp1 and IE9. Sysop of under-construction www.canprint.org
No mods installed. Huge fan of SMF, especially terrific support.