lfnetwork.com mark read register faq members calendar

Thread: Epic Malware
Thread Tools Display Modes
Post a new thread. Add a reply to this thread. Indicate all threads in this forum as read. Subscribe to this forum. RSS feed: this forum RSS feed: all forums
Old 06-12-2009, 09:32 AM   #1
JesusIsGonnaOwnSatan
ANTA BAKAAA?!
 
JesusIsGonnaOwnSatan's Avatar
 
Join Date: Sep 2008
Location: Over the bridge from Australia
Posts: 1,213
Epic Malware

Note: Since I haven't loaded that thread, I don't know if the problem has been brought up on the thread itself.

This screenshot was taken at on the 13th of July, 09 on Google Chrome while loading up the "Epic Pictures" thread.

Show spoiler


One question: WTH?



mfw I read the Revan novel

it is not a cry of joy.
JesusIsGonnaOwnSatan is offline   you may: quote & reply,
Old 06-12-2009, 11:25 AM   #2
acdcfanbill
..the wonders I have seen
 
acdcfanbill's Avatar
 
Status: Super Moderator
Join Date: Jun 2001
Location: Random Hell Wholes around the
Posts: 5,698
Imperialist Meatbags Guild Member The Walking Carpets Guild Member LFN Staff Member 10 year veteran! 
http://safebrowsing.clients.google.c...lancfonce.com/

Someone must have linked that site on lucasforums somewhere I suppose. Perhaps they were hosting an epic image.

acdcfanbill is offline   you may: quote & reply,
Old 06-12-2009, 09:51 PM   #3
JesusIsGonnaOwnSatan
ANTA BAKAAA?!
 
JesusIsGonnaOwnSatan's Avatar
 
Join Date: Sep 2008
Location: Over the bridge from Australia
Posts: 1,213
ah, that makes sense. well, it would be appreciated if a mod went and removed the dodgy linkage. i'm sure the thread creator would concur.



mfw I read the Revan novel

it is not a cry of joy.
JesusIsGonnaOwnSatan is offline   you may: quote & reply,
Old 06-12-2009, 10:08 PM   #4
stoffe
Network Caretaker
 
stoffe's Avatar
 
Status: Administrator
Join Date: Apr 2002
Posts: 5,833
Helpful! 10 year veteran! Notable contributor 
Quote:
Originally Posted by JesusIsGonnaOwnSatan View Post
ah, that makes sense. well, it would be appreciated if a mod went and removed the dodgy linkage. i'm sure the thread creator would concur.
The only references to that site I could find in that thread were two embedded images in your post. Changed them to ordinary links instead, just in case.

stoffe is offline   you may: quote & reply,
Old 06-13-2009, 08:27 AM   #5
jrrtoken
Senior Member
 
jrrtoken's Avatar
 
Join Date: Jun 2008
Posts: 1,995
Just an FYI, I just got a message similar to this when viewing the "Good, Evil and Neutrality" thread in Kavar's. If that isn't odd enough, I was also using my Wii's browser when that message appeared.
jrrtoken is offline   you may: quote & reply,
Old 06-13-2009, 09:57 AM   #6
stoffe
Network Caretaker
 
stoffe's Avatar
 
Status: Administrator
Join Date: Apr 2002
Posts: 5,833
Helpful! 10 year veteran! Notable contributor 
Quote:
Originally Posted by PastramiX View Post
Just an FYI, I just got a message similar to this when viewing the "Good, Evil and Neutrality" thread in Kavar's. If that isn't odd enough, I was also using my Wii's browser when that message appeared.
What address is it reporting as suspicious? I can't see anything weird in that thread at a quick glance.

stoffe is offline   you may: quote & reply,
Old 06-13-2009, 11:59 AM   #7
jrrtoken
Senior Member
 
jrrtoken's Avatar
 
Join Date: Jun 2008
Posts: 1,995
Quote:
Originally Posted by stoffe View Post
What address is it reporting as suspicious? I can't see anything weird in that thread at a quick glance.
It wasn't the same message as the OP. It was a JavaScript pop-up window that redirected me to a HTML page that supposedly showed the "My Computer" contents as if in Windows.
jrrtoken is offline   you may: quote & reply,
Old 06-13-2009, 01:33 PM   #8
Jeff
Rating: Awesome
 
Jeff's Avatar
 
Status: Administrator
Join Date: Jan 2005
Location: Chicago, IL, USA
Posts: 8,431
Current Game: SWTOR
Imperialist Meatbags Guild Officer The Walking Carpets Guild Officer Notable contributor LFN Staff Member 
Quote:
Originally Posted by PastramiX View Post
It wasn't the same message as the OP. It was a JavaScript pop-up window that redirected me to a HTML page that supposedly showed the "My Computer" contents as if in Windows.
I think this has also happened to a couple staff members. If this happens to anyone, please try to take a screenshot or at least remember which ads were showing on the page so we can see what is behind this.


Follow me on Twitter
Follow StarWarsMMO.net on Twitter | Like us on Facebook
Jeff is offline   you may: quote & reply,
Old 06-13-2009, 11:22 PM   #9
JesusIsGonnaOwnSatan
ANTA BAKAAA?!
 
JesusIsGonnaOwnSatan's Avatar
 
Join Date: Sep 2008
Location: Over the bridge from Australia
Posts: 1,213
Quote:
The only references to that site I could find in that thread were two embedded images in your post.
.... youre kidding....

thats insane! why didnt i get this message when i went those sites and linked to them?
and those happened to be the most epic pictures in my post.



mfw I read the Revan novel

it is not a cry of joy.
JesusIsGonnaOwnSatan is offline   you may: quote & reply,
Old 06-16-2009, 08:20 AM   #10
BongoBob
Good Eye, Sniper
 
BongoBob's Avatar
 
Join Date: May 2003
Location: The Camper Velourium
Posts: 6,391
Current Game: BC2, FFXIII
The Walking Carpets Guild Member Forum Veteran 
Malware on LF?

Just a heads up, this morning I opened Yodas Swamp and recieved a pop up message (not window, message) saying "YOUR COMPUTER IS ON FIRE, LET US SCAN IT FOR YOU!!1" and redirected me to "My computer online scan" at
Code:
http://bestantivirusscan3.com
I proceeded to hit back on my browser, and it gave me the message and redirected me again, and kept doing it as long as I was hitting back only once, after I hit it twice I didn't get anything. I've refreshed the page and opened it up in new tabs over and over, but it hasn't happened again since.

Anyone else get this? Perhaps there is a bad ad doing this?

EDIT: didn't know this thread existed, else I would have just posted this here in the first place.

Sorry, but I do not know which ads were in rotation, and didn't think to get a screenshot. But I've been trying to make it happen again ever since.



Last edited by BongoBob; 06-16-2009 at 08:32 AM.
BongoBob is offline   you may: quote & reply,
Old 06-16-2009, 10:34 AM   #11
stoffe
Network Caretaker
 
stoffe's Avatar
 
Status: Administrator
Join Date: Apr 2002
Posts: 5,833
Helpful! 10 year veteran! Notable contributor 
Quote:
Originally Posted by BongoBob View Post
Just a heads up, this morning I opened Yodas Swamp and recieved a pop up message (not window, message) saying "YOUR COMPUTER IS ON FIRE, LET US SCAN IT FOR YOU!!1" and redirected me to "My computer online scan" at ... I proceeded to hit back on my browser, and it gave me the message and redirected me again, and kept doing it as long as I was hitting back only once, after I hit it twice I didn't get anything. I've refreshed the page and opened it up in new tabs over and over, but it hasn't happened again since.

Anyone else get this? Perhaps there is a bad ad doing this?
This is indeed most likely caused by a nasty javascript in one of the ad banners and not something on Lucasforums, I can't see anything that looks out of the ordinary in the page code here at least.

As far as I know we can't do anything about the content of the ad banners directly other than contacting the ad providers and ask them to remove the offending banner. So it would be helpful if you could take note of what advertising is being shown if it happens again.

stoffe is offline   you may: quote & reply,
Old 06-16-2009, 08:50 PM   #12
BongoBob
Good Eye, Sniper
 
BongoBob's Avatar
 
Join Date: May 2003
Location: The Camper Velourium
Posts: 6,391
Current Game: BC2, FFXIII
The Walking Carpets Guild Member Forum Veteran 
Oh definately, it never crossed my mind that the harmful code was in LF itself.

Damn it happening at 5AM when I had barely woken up and me not being awake enough to think to take a screnshot or something ><


BongoBob is offline   you may: quote & reply,
Post a new thread. Add a reply to this thread. Indicate all threads in this forum as read. Subscribe to this forum. RSS feed: this forum RSS feed: all forums
Go Back   LucasForums > Network > Forum Help & Feedback Center > Epic Malware

Tags
epic, malware, wth

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -4. The time now is 03:38 AM.

LFNetwork, LLC ©2002-2011 - All rights reserved.
Powered by vBulletin®
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.