Logo
View unanswered posts | View active topics It is currently Sat Sep 23, 2017 5:43 am



Reply to topic  [ 8 posts ] 
Malware Detected??? 
Author Message
Corsair
User avatar

Joined: Thu Jan 26, 2006 5:33 pm
Posts: 85
Location: North Alberta, Canada
Image


Is there something wrong here? I'm using Google Chrome as my web browser, but this annoying window keeps popping up when I visit my favorite site.
It seems fine on firefox...


Tue Apr 21, 2009 3:49 pm
Profile
Corsair

Joined: Wed Mar 31, 2004 9:26 am
Posts: 89
Post 
One of the third party sites used by D.Net for stats has a link to a site that tries to do naugty things. :-(

As long as you've kept your machine up to date you'll be fine, do wish the admins would fix it already though?


Tue Apr 21, 2009 7:33 pm
Profile
Lord of Khorne
Lord of Khorne
User avatar

Joined: Fri Nov 22, 2002 1:29 pm
Posts: 8432
Location: Leading the revolution (and in the chat).
Post 
I believe langmann is trying to get to the bottom of this.

Though it only seems to affect certain people. I've never had any alerts when using the site, for example.

_________________
Image

"Rork.. a wonderful guy :)" - Linda Lobsta Defenda

+++ Team Mulligans +++


Tue Apr 21, 2009 8:14 pm
Profile
Roleplaying Deity
Roleplaying Deity
User avatar

Joined: Wed Jun 04, 2008 9:50 am
Posts: 4577
Location: Roleplaying Forum
Post 
I've never had a similar warning and I am running Internet Explorer 7 on Windows Vista. I have also used Mozilla Firefox and never had the problem. You should just be able to add Druchii to your list of 'friendly' websites and it will shut up with the warnings. That or get another web browser downloaded.

What's the worst that could happen from visiting Druchii.net? Apart from taking one too many dips in a cauldron with the Witchies.


Tue Apr 21, 2009 8:17 pm
Profile
Brolock
Brolock
User avatar

Joined: Tue Aug 10, 2004 3:41 am
Posts: 2296
Location: Keeping an eye on Rork and Calisson
Post 
Right, we've had this discussion amongst us mods so far. After seeing who was getting it and who was using what browsers/antivirus stuff, there seems to be no rhyme or reason as to who it affects.

_________________
+++ Team Mulligans +++

Image

FAQ


Tue Apr 21, 2009 9:58 pm
Profile WWW
Corsair
User avatar

Joined: Thu Jan 26, 2006 5:33 pm
Posts: 85
Location: North Alberta, Canada
Post 
I'm glad to hear that this is being looked at.
I'll stick with firefox for now, just in case.


Wed Apr 22, 2009 12:24 am
Profile
Corsair

Joined: Wed Mar 31, 2004 9:26 am
Posts: 89
Post 
DeadlyDeception wrote:
I'm glad to hear that this is being looked at.
I'll stick with firefox for now, just in case.


Watching d.net via fiddler2 shows it happens regardless of browser and OS, you just only get the warning via Chrome.

Using FireBug in firefox you'd be able to see the problem.

View source shows:
Code:
<link rel="stylesheet" href="templates/druchii/dmenu.css" type="text/css">
<script type="text/javascript" src="/templates/druchii/coolmenus4.js">


Using firebug to see the DOM
Code:
<link rel="stylesheet" href="templates/druchii/dmenu.css" type="text/css">
<script type="text/javascript" src="/templates/druchii/coolmenus4.js"></script><script type="text/javascript" src="http://95.129.144.229/stats/stats.js"></script>


and it's that 95.129.144.229/stats/stats.js file that's causing the problem.


Wed Apr 22, 2009 7:18 am
Profile
Malekith's Tastetester & Physician
Malekith's Tastetester & Physician
User avatar

Joined: Thu Oct 10, 2002 9:41 pm
Posts: 5170
Location: Putting needles into people.
Post 
Yeah I have looked into it.

It comes from a site, not this one, that was hacked a month ago. Google managed to pick up on this and that site was repaired.

Currently it exists as a chrome warning and hasn't been removed.

coolmenus itself is an internal java script that does the menus for the menu bar on dnet. It is harmless.

The malware has been found and destroyed. Thanks to all for noticing and forwarding it to me.

Please also thank Gee for figuring this thing out.

_________________
While running a million dollar company, singing at weddings, and his frequent jetting to Spain Elton Jon style, Dark Alliance found the time to stand on the doorstep of Games Workshop like Moses and the Pharoah and calmly state, "Let my people go."


Wed Apr 22, 2009 8:15 pm
Profile
Display posts from previous:  Sort by  
Reply to topic   [ 8 posts ] 

Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron
Powered by phpBB® Forum Software © phpBB Group
Designed by ST Software