Malware Detected???
Moderator: The Dread Knights
- Deadlydeception
- Corsair
- Posts: 85
- Joined: Thu Jan 26, 2006 5:33 pm
- Location: North Alberta, Canada
- Kinslayer
- Roleplaying Deity
- Posts: 4577
- Joined: Wed Jun 04, 2008 9:50 am
- Location: Roleplaying Forum
I've never had a similar warning and I am running Internet Explorer 7 on Windows Vista. I have also used Mozilla Firefox and never had the problem. You should just be able to add Druchii to your list of 'friendly' websites and it will shut up with the warnings. That or get another web browser downloaded.
What's the worst that could happen from visiting Druchii.net? Apart from taking one too many dips in a cauldron with the Witchies.
What's the worst that could happen from visiting Druchii.net? Apart from taking one too many dips in a cauldron with the Witchies.
- Deadlydeception
- Corsair
- Posts: 85
- Joined: Thu Jan 26, 2006 5:33 pm
- Location: North Alberta, Canada
DeadlyDeception wrote:I'm glad to hear that this is being looked at.
I'll stick with firefox for now, just in case.
Watching d.net via fiddler2 shows it happens regardless of browser and OS, you just only get the warning via Chrome.
Using FireBug in firefox you'd be able to see the problem.
View source shows:
Code: Select all
<link rel="stylesheet" href="templates/druchii/dmenu.css" type="text/css">
<script type="text/javascript" src="/templates/druchii/coolmenus4.js">
Using firebug to see the DOM
Code: Select all
<link rel="stylesheet" href="templates/druchii/dmenu.css" type="text/css">
<script type="text/javascript" src="/templates/druchii/coolmenus4.js"></script><script type="text/javascript" src="http://95.129.144.229/stats/stats.js"></script>
and it's that 95.129.144.229/stats/stats.js file that's causing the problem.
- Langmann
- Malekith's Tastetester & Physician
- Posts: 5170
- Joined: Thu Oct 10, 2002 9:41 pm
- Location: Putting needles into people.
Yeah I have looked into it.
It comes from a site, not this one, that was hacked a month ago. Google managed to pick up on this and that site was repaired.
Currently it exists as a chrome warning and hasn't been removed.
coolmenus itself is an internal java script that does the menus for the menu bar on dnet. It is harmless.
The malware has been found and destroyed. Thanks to all for noticing and forwarding it to me.
Please also thank Gee for figuring this thing out.
It comes from a site, not this one, that was hacked a month ago. Google managed to pick up on this and that site was repaired.
Currently it exists as a chrome warning and hasn't been removed.
coolmenus itself is an internal java script that does the menus for the menu bar on dnet. It is harmless.
The malware has been found and destroyed. Thanks to all for noticing and forwarding it to me.
Please also thank Gee for figuring this thing out.
While running a million dollar company, singing at weddings, and his frequent jetting to Spain Elton Jon style, Dark Alliance found the time to stand on the doorstep of Games Workshop like Moses and the Pharoah and calmly state, "Let my people go."