Ushi No Tane - Harvest Moon
https://fogu.com/hmforum/

Malicious Attack
https://fogu.com/hmforum/viewtopic.php?f=2&t=154907
Page 2 of 6

Author:  WorMzy [ Jan 01, 2013 5:39 pm ]
Post subject:  Re: Malicious Attack

Cherubae wrote:
it is maleware


Software with a penis? That's the worst sort of software!

I've had no problems here. Even when I've been on Windows.

Author:  Oslm-markguy [ Jan 01, 2013 5:49 pm ]
Post subject:  Re: Malicious Attack

I like Ushi without the Google banners! Much more faster and clean.

Author:  Anonymous Fish [ Jan 01, 2013 7:11 pm ]
Post subject:  Re: Malicious Attack

[quote="Cherubae"]As it is practically impossible to detect which of the banner ads have been infected (as I don't host them, Google is [i]suppose [/i]to be handling it), I've unplugged the ads from the forum for now. We'll see if that makes the porn go away (or maybe I'm suppose to be charging for "special bonus Fogu services", heh.)

[quote="Vann Borakul"]
I think it happened right after the website told me a plugin on this website said I needed to install a java runtime environment thing. I'm pretty sure the redirect happened before it finished
[/quote]

The site doesn't have anything you need to install.[/quote]

It didn't help, it just happened again. For me, it happens randomly when I try to click on links on your website. Like this time, it happened when I clucked the link to the updates page.

Author:  Ru-Ne Ni-Chaan [ Jan 01, 2013 8:03 pm ]
Post subject:  Re: Malicious Attack

They also appear like this.
Spoiler:
Image

meh ):

Author:  Cherubae [ Jan 02, 2013 7:37 am ]
Post subject:  Re: Malicious Attack

Anonymous Fish wrote:
It didn't help, it just happened again. For me, it happens randomly when I try to click on links on your website. Like this time, it happened when I clucked the link to the updates page.


I removed the banners from the forum, not from the entire site. If it still triggers when on the forum, then it wasn't the banners. If it doesn't trigger on the forum but it does on the other pages, then it is from Google's ad banners.

Ru-Ne Ni-Chaan wrote:
They also appear like this.
Spoiler:
Image

meh ):


That's adware that came bundled with something you installed, not the malware we're dealing with, sorry. You've got a separate issue ;)

Author:  Ru-Ne Ni-Chaan [ Jan 03, 2013 3:36 am ]
Post subject:  Re: Malicious Attack

:0 whooops I feel dumb now sorry cher.

Author:  Cherubae [ Jan 03, 2013 8:20 am ]
Post subject:  Re: Malicious Attack

Well, nobody has stated that they've received them on the forum anymore, soooo I'm going to make an educated guess that it is indeed coming from a banner ad being served by Google. Now to figure out which one of the hundreds of banners is causing the problem... meh...

Author:  Madame Madie [ Jan 03, 2013 8:47 am ]
Post subject:  Re: Malicious Attack

If it helps, Wormzy and I both run script blockers and ad blockers which is probably why we've had no issues.

I've heard there are a few really dodgy google ads going about just lately.

Author:  Oslm-markguy [ Jan 03, 2013 9:10 am ]
Post subject:  Re: Malicious Attack

What is the purpose of the ads anyways?

Author:  Cherubae [ Jan 03, 2013 9:39 am ]
Post subject:  Re: Malicious Attack

Oslm-markguy wrote:
What is the purpose of the ads anyways?


Well, you are free to send me money to run this place and compensate me for the time I write the guides if you'd like.

Madame Madie wrote:
If it helps, Wormzy and I both run script blockers and ad blockers which is probably why we've had no issues.


Mooombers shouldn't be seeing any of the Google banner ads. There is a filter that doesn't display the ads if you have over 2000 posts and you're logged into your forum account. The guides that are set up in this way check for the special no-ad forum cookie and doesn't display the banners.

If Mooombers are seeing the banner ads, then I've got something wonky that needs to be fixed.

(the banners are still not enabled on the forum at the moment, just the site guides)

Author:  Vann Borakul [ Jan 03, 2013 11:24 am ]
Post subject:  Re: Malicious Attack

I was just redirected here
Code:
http://0150091301031921507259318b7a922ef667d135e809766.qryusq.eu/sort.php


when clicking on the webpage comments board right after opening ushi

Author:  Cherubae [ Jan 03, 2013 12:35 pm ]
Post subject:  Re: Malicious Attack

Vann Borakul wrote:
I was just redirected here
Code:
http://0150091301031921507259318b7a922ef667d135e809766.qryusq.eu/sort.php


when clicking on the webpage comments board right after opening ushi


According to the access logs, you visited the main site (that still contained the banner ads) and then returned to the forum. Now, if you could remember what banner you saw when you went to /hm/ before coming back to the forum and going to the Webpage Comments, that would help ;)

Author:  Madame Madie [ Jan 03, 2013 12:41 pm ]
Post subject:  Re: Malicious Attack

Cherubae wrote:
Oslm-markguy wrote:
What is the purpose of the ads anyways?


Well, you are free to send me money to run this place and compensate me for the time I write the guides if you'd like.

Madame Madie wrote:
If it helps, Wormzy and I both run script blockers and ad blockers which is probably why we've had no issues.


Mooombers shouldn't be seeing any of the Google banner ads. There is a filter that doesn't display the ads if you have over 2000 posts and you're logged into your forum account. The guides that are set up in this way check for the special no-ad forum cookie and doesn't display the banners.

If Mooombers are seeing the banner ads, then I've got something wonky that needs to be fixed.

(the banners are still not enabled on the forum at the moment, just the site guides)

I'm usually logged out, I clear my cookies etc fairly regularly as part of CCleaners routine.
I've never seen a banner as a logged in moomber :D

Author:  Vann Borakul [ Jan 03, 2013 12:57 pm ]
Post subject:  Re: Malicious Attack

Cherubae wrote:
Vann Borakul wrote:
I was just redirected here
Code:
http://0150091301031921507259318b7a922ef667d135e809766.qryusq.eu/sort.php


when clicking on the webpage comments board right after opening ushi


According to the access logs, you visited the main site (that still contained the banner ads) and then returned to the forum. Now, if you could remember what banner you saw when you went to /hm/ before coming back to the forum and going to the Webpage Comments, that would help ;)

I only recall clicking my ushi bookmark which brings me to the index :?
http://www.fogu.com/hmforum/

I'll be sure to pay attention in case in happens again

Author:  Terranigma Freak [ Jan 03, 2013 8:38 pm ]
Post subject:  Re: Malicious Attack

I got it from clicking the redirect link after logging in.

Page 2 of 6 All times are UTC - 8 hours
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/