25 replies to this topic

[ginetto]

Is 2 days now that when I enter and every time I click anything in the repository forum, a Malware alert pops us and ask me to discard the page or proceed at my own risk.
I never had this problem before ; it started yesterday and today it doubled, meaning that as soon I click on proceed at my own risk, another alert shows up and ask me the same thing.
Pretty annoying having to clik 4 times for every change of page .
I attack a couple of the pop ups I get in Chrome; it says the site with problem which is not gplr but obviously some frigging kid was able to inject.

Attached Files

•  1.jpg   82.41K   11 downloads
•  2.jpg   87.44K   10 downloads

[maddog]

I've read how Bill and Keith are fighting a running battle, with various nasties.  I'm using Firefox as my browser, with no problems . . . . yet.

[Dario Andretti]

I just got this massage

Reported Attack Page!
  
  
  
  
    
    
  
  This web page at gplr.srmz.net has been reported as an attack page and has been blocked based on your security preferences.
    

    
    
  
  Attack pages try to install programs that steal private information, use your computer to attack others, or damage your system.Some attack pages intentionally distribute harmful software, but many are compromised without the knowledge or permission of their owners.

[Pablo_Fernandez]

Same problem here using Chrome. Same problem as the previous at Sp.geezers
Weird....

[sky]

yea same.
however i noted that on the start page - i've linked the recent posts thingy as start - there is a window of sorts near the topmost entry. it has been there the last 2 or so days, but didn't show anything, like a popup window trying to show a picture that isn't there. now today it showed some scroll controls in that "window". if you scrolled around it asked to install a plugin. so i clicked search for whatnot update. firefox asked to install java - which i refused. ain't going to get this machine infested with java! then i entered some thread or other and on clicking my favorite link in the toolbar, it popped the red screen of "reported attack site". obviously i clicked "dun care, get me in anyway", so here i am posting.

that java window might be what's causing this. it appears next to the avatar of the poster in the new posts list - in case that helps as a pointer. see screenshot. no such thing at the srmz for me though.

Attached Files

•  gplr.jpg   54.93K   9 downloads

Edited by sky, 19 December 2012 - 10:26 AM.

[M Needforspeed]

using last version of Firefox, and I get the message, too

With Firefox, there is a permanent banner on top that propose to click on a solution.  Keith, Bill, perhaps it point out to a Stop Badware free software that can get help getting rid of this

Attached Files

•  Stop Badware solution .JPG   107.36K   3 downloads

Edited by M Needforspeed, 19 December 2012 - 12:57 PM.

[MECH]

I noticed the same problem and have sent Bill a message about it.
Hopefully he can solve this problem. I feel sorry for him having to fix these problems again.
Right now i'm still able to see this page on my XP machine but W7 refuses to load
It's strange though that the repository suffers from this and not the srmz forum.
I would expect this forum to be less easy to get into then the repository (and less interesting for people to hack)

[Richard Cooke]

MECH, on 19 December 2012 - 04:18 PM, said:

I noticed the same problem and have sent Bill a message about it.
Hopefully he can solve this problem. I feel sorry for him having to fix these problems again.
Right now i'm still able to see this page on my XP machine but W7 refuses to load
It's strange though that the repository suffers from this and not the srmz forum.
I would expect this forum to be less easy to get into then the repository (and less interesting for people to hack)

The hackers probably think there is information worth stealing here

[maddog]

maddog, on 19 December 2012 - 08:05 AM, said:

I've read how Bill and Keith are fighting a running battle, with various nasties.  I'm using Firefox as my browser, with no problems . . . . yet.

As soon as I hit the send button on this earlier message, Firefox blanked out the site, so it's not immuned.  I've now entered via a Firefox override, to demonstrate a reckless nature.

[ginetto]

Here is a description for the alert; seems like a try to inject stuff like trojans on computers...

Attached Files

•  rep1.jpg   125.38K   13 downloads

[francesco]

Same here,I enter from SRMZ ignoring the warning.

[Dario Andretti]

Are we, our computers and our systems in danger because of this problem?

[sky]

maybe i should switch to the macbook for browsing the repository . although there is java on the mac, too. bugger.

[MECH]

Dario Andretti, on 20 December 2012 - 08:06 AM, said:

Are we, our computers and our systems in danger because of this problem?

Only if you don't have antivirus/firewal installed.
But there are anti virus programs that only stop execution and let files pass on to your pc (Antivir)
It seems my AVG blocked everything If you use Firefox i advise you to install NoScript as well.
It can be tedious giving several parts of a page acces but atleast the risk is less

So should you find odd .exe files in folders on your pc that weren't there before do not click on those but let your anitvirus check it.
Even if it doesn't find anything and you are shure it shouldn't be there toss it!

Edited by MECH, 21 December 2012 - 06:07 AM.

[maddog]

It's not one to sneeze at . . . .

Attached Files

•  Viral Bug 12.12.jpg   30.19K   13 downloads

[stefano]

signaling also with safari

Attached Files

•  error.jpg   90.33K   0 downloads

[M Needforspeed]

sky, on 20 December 2012 - 11:22 AM, said:

maybe i should switch to the macbook for browsing the repository . although there is java on the mac, too. bugger.

  Roman,,

tried on the Mac Book with Safari, and get the same warning

Edited by M Needforspeed, 21 December 2012 - 03:26 PM.

[sky]

avg pops this up. i kept the window so it shows the full url. i didn't have any anti virus kit aside the default w7 stuff until earlier tonight...

Attached Files

•  gplr2a.jpg   70.43K   7 downloads

Edited by sky, 21 December 2012 - 02:49 PM.

[Bill]

OK sorry guys didn't get the message till yesterday, we are clean now.
I think I have it secured now so we should not have it return anytime soon.
This fix has been working on theh main forum and so far after many attempts to hack it all have failed.
I love logs sometimes

IE users.
Please use a different browser in the meantime while we monitor, It will prevent a lot of grief.

[sky]

thank you bill, good stuff keeping our playgrounds alive and kickin

[ginetto]

Thanks a Lot Bill
I still have the alert when I access the forum but I guess is just because it was hacked before

[Lee]

Thanks Bill for your quick work in fixing this.  It's great to be back.

[MECH]

Thx Bill

[Border Reiver]

Thanks Bill.

Rob

[gliebzeit]

Yahoo!!!  The Google Chrome malware warning is finally gone!  Thank you, Bill, for all your dedication and perseverance.