[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 112: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 112: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/functions.php on line 4668: Cannot modify header information - headers already sent by (output started at [ROOT]/includes/functions.php:3815)
[phpBB Debug] PHP Warning: in file [ROOT]/includes/functions.php on line 4670: Cannot modify header information - headers already sent by (output started at [ROOT]/includes/functions.php:3815)
[phpBB Debug] PHP Warning: in file [ROOT]/includes/functions.php on line 4671: Cannot modify header information - headers already sent by (output started at [ROOT]/includes/functions.php:3815)
[phpBB Debug] PHP Warning: in file [ROOT]/includes/functions.php on line 4672: Cannot modify header information - headers already sent by (output started at [ROOT]/includes/functions.php:3815)
XWidgetSoft Forum :: View topic - WARNING: XWidget Attempting Connection cnrdn 42.156.140.191
XWidgetSoft Forum
https://www.bbs.xwidget.com/

WARNING: XWidget Attempting Connection cnrdn 42.156.140.191
https://www.bbs.xwidget.com/viewtopic.php?f=3&t=6903
Page 1 of 1

Author:  XWUser [ June 24th, 2018, 1:21 pm ]
Post subject:  WARNING: XWidget Attempting Connection cnrdn 42.156.140.191

I've been a Pro member for about a year now.
Recently, I've been getting warnings from MalwareBytes that XWidget.exe is trying to establish an outgoing connection with cnrdn.com at IP address 42.156.140.191.
This entity is apparently based in Eastern China & the IP address has been associated with threat events (malware, phishing) according to various sources.
Why is XWidget.exe trying to establish this unauthorized connection?

Author:  Tony [ June 24th, 2018, 2:41 pm ]
Post subject:  Re: WARNING: XWidget Attempting Connection cnrdn 42.156.140.

Hi,
Thanks for you report,This is an abandoned feature of China-online-update-users-statistics that has been removed long time ago and only for Chinese-Language-Users ,Other language versions of XWidget do not have this feature . this IP address is xwidget chinese-online-update-users-statistics server powerby famous chinese statistics provider http://www.cnzz.com/, xwidget connect this link to get new Chinese-Version information and record the Chinese users number of online upgrade users , please upgrad to the last version of XWidget without this function. Thank you.

Tony

Author:  XWUser [ June 24th, 2018, 3:34 pm ]
Post subject:  Re: WARNING: XWidget Attempting Connection cnrdn 42.156.140.

I have never installed a Chinese language version. Don't speak Chinese, so there can be no doubt of that fact.
I find this very disturbing.
Have XWidget v1.9.14.618 installed, but I'll be uninstalling it & running numerous anti-malware tools to ensure it is actually gone.
I purchased & used XWidget in good faith, but in light of this situation, I feel my trust was misplaced.
How disappointing and shameful.

Author:  Tony [ June 24th, 2018, 3:41 pm ]
Post subject:  Re: WARNING: XWidget Attempting Connection cnrdn 42.156.140.



Attachments:
false_positive.png
false_positive.png [ 90.62 KiB | Viewed 5049 times ]

Author:  XWUser [ June 24th, 2018, 4:05 pm ]
Post subject:  Re: WARNING: XWidget Attempting Connection cnrdn 42.156.140.


Author:  Tony [ June 24th, 2018, 4:11 pm ]
Post subject:  Re: WARNING: XWidget Attempting Connection cnrdn 42.156.140.

This is a false positive, you can check other ALL famous Anti-virus engine scan report are 100% : https://www.virustotal.com/#/file/d3659 ... /detection



Author:  Jimking [ June 25th, 2018, 2:08 am ]
Post subject:  Re: WARNING: XWidget Attempting Connection cnrdn 42.156.140.

Some antivirus software are very sensitive to false alarms. Antiviruses or antimalware with false alarms exist for years. But this does not mean that there is something to worry about at all cost. Even malawarebytes that you reported confirms it.
As you can see from above from the official scannings, XWidget is 100% CLEAN!
More than that..

Page 1 of 1 All times are UTC - 8 hours
Powered by phpBB® Forum Software © phpBB Group
http://www.phpbb.com/