# Community Gallery website - malicious code?

**URL:** <https://forums.realmacsoftware.com/t/community-gallery-website-malicious-code/4389>\
**Category:** RapidWeaver Classic\
**Created:** [December 3, 2015, 7:33pm UTC](https://forums.realmacsoftware.com/t/community-gallery-website-malicious-code/4389 "2015-12-03T19:33:01Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![lynnnight](https://avatars.discourse-cdn.com/v4/letter/l/e274bd/32.png) [@lynnnight](https://forums.realmacsoftware.com/u/lynnnight)\
**Post date:** [December 3, 2015, 7:33pm UTC](https://forums.realmacsoftware.com/t/community-gallery-website-malicious-code/4389/1 "2015-12-03T19:33:01Z")

</div>

My Avast software found malicious code when I clicked on the link of the Accurate Building Inspections website in the Community Gallery. I’m not that savvy with virus software so not sure why this happened but thought I’d report it since I’ve not seen it before. [http://rapidweavercommunity.com/gallery/accurate-building-inspections](http://rapidweavercommunity.com/gallery/accurate-building-inspections) Maybe someone can tell me why the site/code was flagged?

The message:  
Infection detected!

> **[Accurate Building Inspections](http://www.buildingreport.net/)**
>
> Trained and highly experienced pre-purchase inspection providers Accredited, Insured, Licensed inspectors Arranging most inspections within 24 hours. A verbal and emailed report on the day of inspection Written report mailed within 48 hours. A money...

  
The requested URL contains malicious code that can damage your computer. If you want to access the URL anyway, turn off the Avast web shield and try it again.  
Infection type: URL:Mal

---

<div class="post-metadata">

**Author:** ![theMountainMoves](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/themountainmoves/32/3836_2.png) [@theMountainMoves](https://forums.realmacsoftware.com/u/theMountainMoves)\
**Post date:** [December 3, 2015, 8:17pm UTC](https://forums.realmacsoftware.com/t/community-gallery-website-malicious-code/4389/2 "2015-12-03T20:17:51Z")

</div>

My guess is that because the site’s protocol is “HTTP” and not “HTTPS”, Avast is warning you that whatever information you are exchanging will be easily intercepted by hackers. By having the prefix “HTTPS”, the site’s connection will ensure the security of heavy transactions (such as a $400 Building & Pest Report).

---

<div class="post-metadata">

**Author:** ![lynnnight](https://avatars.discourse-cdn.com/v4/letter/l/e274bd/32.png) [@lynnnight](https://forums.realmacsoftware.com/u/lynnnight)\
**Post date:** [December 3, 2015, 8:41pm UTC](https://forums.realmacsoftware.com/t/community-gallery-website-malicious-code/4389/3 "2015-12-03T20:41:55Z")

</div>

@theMountainMoves I visit many sites that do not have https and I have never got that warning. Strange.

---

<div class="post-metadata">

**Author:** ![teefers](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/teefers/32/8173_2.png) [@teefers](https://forums.realmacsoftware.com/u/teefers)\
**Post date:** [December 3, 2015, 9:24pm UTC](https://forums.realmacsoftware.com/t/community-gallery-website-malicious-code/4389/4 "2015-12-03T21:24:08Z")

</div>

I got the same thing! This is not due to http vs https.

 ![](https://europe1.discourse-cdn.com/flex005/uploads/realmacsoftware1/original/2X/8/8a561d2984aea261b6d0f17afd6dad4569e10cc9.png)

---

<div class="post-metadata">

**Author:** ![theMountainMoves](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/themountainmoves/32/3836_2.png) [@theMountainMoves](https://forums.realmacsoftware.com/u/theMountainMoves)\
**Post date:** [December 3, 2015, 9:27pm UTC](https://forums.realmacsoftware.com/t/community-gallery-website-malicious-code/4389/5 "2015-12-03T21:27:24Z")

</div>

[http://quttera.com/detailed\_report/www.buildingreport.net](http://quttera.com/detailed_report/www.buildingreport.net)

A quick scan of the site reveals that there is only one “Potentially Suspicious File”, and judging from the code structure, it’s cosmetic-based. I wouldn’t really warrant this as malicious; although it’s interesting how Avast concluded it to be just that. 😰

---

<div class="post-metadata">

**Author:** ![bitbumpy](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/bitbumpy/32/5939_2.png) [@bitbumpy](https://forums.realmacsoftware.com/u/bitbumpy)\
**Post date:** [December 3, 2015, 9:32pm UTC](https://forums.realmacsoftware.com/t/community-gallery-website-malicious-code/4389/6 "2015-12-03T21:32:15Z")

</div>

This is my site…

Made with foundation and a few other pretty basic stacks. Nothing out of the ordinary…  
Not sure what it could be…  
Interesting though…

---

<div class="post-metadata">

**Author:** ![theMountainMoves](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/themountainmoves/32/3836_2.png) [@theMountainMoves](https://forums.realmacsoftware.com/u/theMountainMoves)\
**Post date:** [December 3, 2015, 9:34pm UTC](https://forums.realmacsoftware.com/t/community-gallery-website-malicious-code/4389/7 "2015-12-03T21:34:40Z")

</div>

> [@teefers](#):
>
> I got the same thing! This is not due to http vs https.
> 
> ![](https://europe1.discourse-cdn.com/flex005/uploads/realmacsoftware1/original/2X/8/8a561d2984aea261b6d0f17afd6dad4569e10cc9.png)

That is highly unusual…

---

<div class="post-metadata">

**Author:** ![teefers](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/teefers/32/8173_2.png) [@teefers](https://forums.realmacsoftware.com/u/teefers)\
**Post date:** [December 3, 2015, 9:50pm UTC](https://forums.realmacsoftware.com/t/community-gallery-website-malicious-code/4389/8 "2015-12-03T21:50:58Z")

</div>

I don’t know what is causing this but I wonder what other malware software would do.

I’ve been learning foundation so I have tried a number of sites out that use that, aslo have armadillo mentioned in use in the gallery, it should be clean.

@bitbumpy what else might you be using?  
Just thinking something is setting it off, don’t know how windows antiVirus like Norton would react.

---

<div class="post-metadata">

**Author:** ![theMountainMoves](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/themountainmoves/32/3836_2.png) [@theMountainMoves](https://forums.realmacsoftware.com/u/theMountainMoves)\
**Post date:** [December 3, 2015, 9:57pm UTC](https://forums.realmacsoftware.com/t/community-gallery-website-malicious-code/4389/9 "2015-12-03T21:57:39Z")

</div>

Can Avast make exceptions to blocking certain sites?

---

<div class="post-metadata">

**Author:** ![teefers](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/teefers/32/8173_2.png) [@teefers](https://forums.realmacsoftware.com/u/teefers)\
**Post date:** [December 3, 2015, 10:04pm UTC](https://forums.realmacsoftware.com/t/community-gallery-website-malicious-code/4389/10 "2015-12-03T22:04:32Z")

</div>

I don’t think so… it’s an all or nothing thing, It is free so not real feature packed. I know a lot of MAC users don’t have anything. I don’t really need to see this site just wanted to check it out, but if the real customers get a message like that it would not be good for site traffic.

---

<div class="post-metadata">

**Author:** ![bitbumpy](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/bitbumpy/32/5939_2.png) [@bitbumpy](https://forums.realmacsoftware.com/u/bitbumpy)\
**Post date:** [December 3, 2015, 10:34pm UTC](https://forums.realmacsoftware.com/t/community-gallery-website-malicious-code/4389/11 "2015-12-03T22:34:26Z")

</div>

@teefers besides foundation and armadillo, the stacks used are:

Image List by doobox (old version) and;  
PayPalStack by Bryn Owen Design (this is only on the paypal receipt page)

Thats it. No extra code or anything…

---

<div class="post-metadata">

**Author:** ![lynnnight](https://avatars.discourse-cdn.com/v4/letter/l/e274bd/32.png) [@lynnnight](https://forums.realmacsoftware.com/u/lynnnight)\
**Post date:** [December 3, 2015, 10:39pm UTC](https://forums.realmacsoftware.com/t/community-gallery-website-malicious-code/4389/12 "2015-12-03T22:39:21Z")

</div>

Yes, I guess that would be my concern as a site creator. I wouldn’t want any user getting such a message, and then assuming that the site code has malware or a virus in it. I certainly wouldn’t expect this from Rapidweaver code, which is why this is so strange. @bitbumpy I hope you find out what’s creating the flag.

---

<div class="post-metadata">

**Author:** ![joeworkman](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/joeworkman/32/23780_2.png) [@joeworkman](https://forums.realmacsoftware.com/u/joeworkman)\
**Post date:** [December 3, 2015, 11:05pm UTC](https://forums.realmacsoftware.com/t/community-gallery-website-malicious-code/4389/13 "2015-12-03T23:05:01Z")

</div>

I find it suspicious that they do not tell you what the problem is. You have to download their utility and run a scan. I smell bullshit… Why do you even have this installed?

---

<div class="post-metadata">

**Author:** ![teefers](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/teefers/32/8173_2.png) [@teefers](https://forums.realmacsoftware.com/u/teefers)\
**Post date:** [December 3, 2015, 11:15pm UTC](https://forums.realmacsoftware.com/t/community-gallery-website-malicious-code/4389/14 "2015-12-03T23:15:06Z")

</div>

I think I say it in a MacWorld article. Coming from companies that used Windows (years working in IT) when I switched to MAC was looking for malWare prtection. Had it on multiple MAC’s for a least a couple of years, and it other then an daily virus def update kind of forgot it was there. Doesn’t POP up often.

---

<div class="post-metadata">

**Author:** ![lynnnight](https://avatars.discourse-cdn.com/v4/letter/l/e274bd/32.png) [@lynnnight](https://forums.realmacsoftware.com/u/lynnnight)\
**Post date:** [December 3, 2015, 11:26pm UTC](https://forums.realmacsoftware.com/t/community-gallery-website-malicious-code/4389/15 "2015-12-03T23:26:00Z")

</div>

Good to know @joeworkman, that Avast is not doing what it’s purported to do. I imagine I’m not the only one running this software in the background. I have Avast running to alert me about malware. I’m guess you don’t think it’s a valuable piece of software?

---

<div class="post-metadata">

**Author:** ![Butternut](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/butternut/32/3946_2.png) [@Butternut](https://forums.realmacsoftware.com/u/Butternut)\
**Post date:** [December 4, 2015, 12:47am UTC](https://forums.realmacsoftware.com/t/community-gallery-website-malicious-code/4389/16 "2015-12-04T00:47:02Z")

</div>

Not only Avast, but Avira as well.

 ![](https://europe1.discourse-cdn.com/flex005/uploads/realmacsoftware1/original/2X/3/31d73c2402f2013dc0d947579e0addb05cc1f9bc.jpg)

---

<div class="post-metadata">

**Author:** ![thang](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/thang/32/303_2.png) [@thang](https://forums.realmacsoftware.com/u/thang)\
**Post date:** [December 4, 2015, 1:52am UTC](https://forums.realmacsoftware.com/t/community-gallery-website-malicious-code/4389/17 "2015-12-04T01:52:29Z")

</div>

Don’t feel bad, you’re in good company. It seems like they’ll find something on most sites. In Realmacs case it was a .js file.

 ![](https://europe1.discourse-cdn.com/flex005/uploads/realmacsoftware1/original/2X/3/3438c6ea32d83463e858a69b58cb88d2b3b1f53a.jpg)

---

<div class="post-metadata">

**Author:** ![lynnnight](https://avatars.discourse-cdn.com/v4/letter/l/e274bd/32.png) [@lynnnight](https://forums.realmacsoftware.com/u/lynnnight)\
**Post date:** [December 4, 2015, 2:42am UTC](https://forums.realmacsoftware.com/t/community-gallery-website-malicious-code/4389/18 "2015-12-04T02:42:23Z")

</div>

Thanks for the information. Always learning!

---

<div class="post-metadata">

**Author:** ![Butternut](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/butternut/32/3946_2.png) [@Butternut](https://forums.realmacsoftware.com/u/Butternut)\
**Post date:** [December 4, 2015, 4:29am UTC](https://forums.realmacsoftware.com/t/community-gallery-website-malicious-code/4389/19 "2015-12-04T04:29:09Z")

</div>

> It seems like they’ll find something on most sites.

It is gratifying to hear that that this is probably not serious, but it is nevertheless the very first time I have ever seen that error message anywhere.

And so I would have to disagree. It is absolutely not an issue on most sites. Not at all.

---

<div class="post-metadata">

**Author:** ![peterdanckwerts](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/peterdanckwerts/32/22443_2.png) [@peterdanckwerts](https://forums.realmacsoftware.com/u/peterdanckwerts)\
**Post date:** [December 4, 2015, 9:41am UTC](https://forums.realmacsoftware.com/t/community-gallery-website-malicious-code/4389/20 "2015-12-04T09:41:35Z")

</div>

It is very worrying that some people may be losing many potential visitors just because of phoney malware warnings.

[Next page](https://forums.realmacsoftware.com/t/community-gallery-website-malicious-code/4389.md?page=2)
