.com.unity Forums - Bad site?

.com.unity Forums (http://forum.shrapnelgames.com/index.php)

- WinSPMBT (http://forum.shrapnelgames.com/forumdisplay.php?f=78)

- - Bad site? (http://forum.shrapnelgames.com/showthread.php?t=50968)

Firefox just reported that this site is a bad site (phishing, malware, etc).
Any idea why?

Same here, no idea why

Firefox and/or Google are reporting the site may have been attacked and may now be infecting visitors with malware.

Shrapnel need to check the integrity of the site and then apply for it to be removed from the list.

I will open a thread in the Shrapnel general forum too.

Same issue yesterday evening, worked fine when I looked in earlier in the morning. Here now using the "new" Win10 Explorer browser and no warnings showed up, though not surprised. Mozilla says they that they are getting this warning through GOOGLE it's intertwined with their search engine.

Regards,
Pat

I had the warning too, but only for the forums. Not other parts of the Shrapnel Games site...

Sites usually seem to get that if they have served up what Google thinks is a "dodgy" advert.

I'm just ignoring the warning for now, hopefully Shrapnel will sort things out with Google to get themselves unlisted soon.

cheers
Andy

What's Phishing? Sounds like organized crime to me! Call the FBI. Makes me wonder if computers are just a front for organized crime. Microsoft could be the ring leader. What's Malware? If Malware is a high level of commercialism, all websites are effected, which leads me back to orginized crime. What we need is a communications blackout. That would end the whole problem!

Quote:

Originally Posted by Mobhack (Post 831412)

Occasionally, linking to a site that has been infected with malware gets you listed too. Happened to the forum I admin where a user had linked to a website which was hijacked and used to spread malicious software. I had to pull the link down to get the site reported as safe.

Edit: the content of the page had changed when it was hijacked - when it was originally linked to it contained no such thing.

Annoying, but you can bypass it.

Seems like this work today;)... Let's see how long?

Not fixed yet - Firefox is still marking the forums as bad. (I just ignore the warnings since I know it is not really a suspect site!).

Hopefully Shrapnel will get it cleared by Google soon. There seems to be some sort of process they can go through to get unlisted, so hopefully they are working on it.

cheers
Andy

Quote:

Originally Posted by Mobhack (Post 831429)

They have not replied to thread in general shrapnel forum or via contact form - can we be sure they are working on it?

We are working on it. With Google it takes time. Their last scan didn't report any problems, but if you don't contact them directly the report stays up for a long while...

But we are working to resolve with Google.

Just opened/closed the site 4 times all without the warning page coming up. At least on my Mozilla Firefox browser everything appears to be working fine since I posted on the site issue earlier. Must've cleared up earlier today as early this morning the warning page was still coming up.

Regards,
Pat

Fixed now.

Thanks whoever!

Sorry it took so long. The Google scan after the 14th showed no problems so we thought Google would remove the warning. They put it up fast enough. But no, you have to contact them to get it removed. BTW, there never was an issue. We were never hacked.

Did anyone click on the "Get me out of here!" box? I did that to a similar message at another affected site a couple years ago and within a few hours my computer had slowed noticeably. Kept getting worse, virus scans (ESET) didn't work, and a couple other anti-viruses brought in as reinforcement were "eaten" by whatever it was.

Within a few days my desktop was nothing but a mess of colored boxes and finally had to go in for reformatting. This time I did NOT click on that box. I can still be taught!

Anyway it's good to have you back. Cheers!

Thank God, I didn't pressed that "get me out of here" thing at all;)... Sorry about hearing about possible virus(?) comtamination from this site (I
suppose?).

No.........Tim said quite clearly there was never a real issue, they were NOT hacked. I never ONCE had any warning messages and I have all the necessary software to give me warning for problem sites and using IE Shrapnel was clean as driven snow.

Don

Sorry Don, my bad. Didn't mean to imply there was anything wrong at Shrapnel or Camo forums. Just that an experience at ANOTHER site with a similar warning was most unpleasant. Obviously not all sites and warnings are the same, and I regret any misunderstandings that might arise from my poorly worded comment. Please delete it if you deem it proper. Thanks.

I was referring to "Warhero"s comment not yours

Quote:

Originally Posted by jivemi (Post 831441)

<clip>
Within a few days my desktop was nothing but a mess of colored boxes and finally had to go in for reformatting. This time I did NOT click on that box. I can still be taught!

One time I got the virus from hell. I'd have loved to shake the hand of whoever created it before I punched their lights out.

What it did was make EVERY file on my computer "read only" and "invisible".

I was able to log onto my PC using a bootable CD I'd made long before (yeah I'm paranoid, I also changed the boot order in to BIOS to check for a CD first then the "C" drive) but couldn't see ANY files on the computer. But I knew there was no way they'd all been deleted that fast so I used some DOS commands to find out what the hell was going on. Problem is apparently the virus was activated during the "shut down" sequence and any attempts I'd made to recover my hard drive were nullified.
The only option was reformat the drive and reload Windows from scratch.

I got this message this morning.

cbreedon:

We have scanned the site. We have found no troubles. Even Google says we are clean. Are you still getting this?

I hadn't been bad since I posted that, but I am no loner getting the message. It was every time I clicked on anything. Looks like what ever you did worked.

Thanks

I am not getting any messages about a bad site anymore either.

I'm still getting it from time to time. These last few days in fact. Says there is a Trojan on the site somewhere.

Quote:

Originally Posted by RecruitMonty (Post 831855)

I'm still getting it from time to time. These last few days in fact. Says there is a Trojan on the site somewhere.

This is what I get in my anti-virus:

"yahoo-dom-event.js?v=381 Verboten: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...hoo-dom-event/ 02.11.2015 20:21:36
yahoo-dom-event.js?v=381 Gefunden: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...hoo-dom-event/ 02.11.2015 20:21:36
yahoo-dom-event.js?v=381 Verboten: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...hoo-dom-event/ 02.11.2015 20:20:16
yahoo-dom-event.js?v=381 Gefunden: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...hoo-dom-event/ 02.11.2015 20:20:16
yahoo-dom-event.js?v=381 Verboten: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...hoo-dom-event/ 02.11.2015 20:18:22
yahoo-dom-event.js?v=381 Gefunden: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...hoo-dom-event/ 02.11.2015 20:18:22
yahoo-dom-event.js?v=381 Verboten: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...hoo-dom-event/ 02.11.2015 20:17:16
yahoo-dom-event.js?v=381 Gefunden: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...hoo-dom-event/ 02.11.2015 20:17:16
yahoo-dom-event.js?v=381 Verboten: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...hoo-dom-event/ 01.11.2015 16:27:45
yahoo-dom-event.js?v=381 Gefunden: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...hoo-dom-event/ 01.11.2015 16:27:45
yahoo-dom-event.js?v=381 Verboten: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...hoo-dom-event/ 01.11.2015 16:27:04
yahoo-dom-event.js?v=381 Gefunden: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...hoo-dom-event/ 01.11.2015 16:27:04
yahoo-dom-event.js?v=381 Verboten: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...hoo-dom-event/ 01.11.2015 16:26:56
yahoo-dom-event.js?v=381 Gefunden: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...hoo-dom-event/ 01.11.2015 16:26:56
yahoo-dom-event.js?v=381 Verboten: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...hoo-dom-event/ 01.11.2015 16:25:35
yahoo-dom-event.js?v=381 Gefunden: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...hoo-dom-event/ 01.11.2015 16:25:35
yahoo-dom-event.js?v=381 Verboten: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...hoo-dom-event/ 01.11.2015 16:24:58
yahoo-dom-event.js?v=381 Gefunden: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...hoo-dom-event/ 01.11.2015 16:24:57
yahoo-dom-event.js?v=381 Verboten: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...hoo-dom-event/ 31.10.2015 16:52:16
yahoo-dom-event.js?v=381 Gefunden: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...hoo-dom-event/ 31.10.2015 16:52:16
yahoo-dom-event.js?v=381 Verboten: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...hoo-dom-event/ 31.10.2015 16:51:31
yahoo-dom-event.js?v=381 Gefunden: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...hoo-dom-event/ 31.10.2015 16:51:31
yahoo-dom-event.js?v=381 Verboten: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...hoo-dom-event/ 31.10.2015 16:51:18
yahoo-dom-event.js?v=381 Gefunden: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...hoo-dom-event/ 31.10.2015 16:51:18
yahoo-dom-event.js?v=381 Verboten: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...hoo-dom-event/ 30.10.2015 14:58:14
yahoo-dom-event.js?v=381 Gefunden: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...hoo-dom-event/ 30.10.2015 14:58:14
yahoo-dom-event.js?v=381 Verboten: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...hoo-dom-event/ 30.10.2015 14:57:22
yahoo-dom-event.js?v=381 Gefunden: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...hoo-dom-event/ 30.10.2015 14:57:22
connection-min.js?v=381 Verboten: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...ui/connection/ 02.11.2015 20:21:36
connection-min.js?v=381 Gefunden: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...ui/connection/ 02.11.2015 20:21:36
connection-min.js?v=381 Verboten: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...ui/connection/ 02.11.2015 20:20:15
connection-min.js?v=381 Gefunden: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...ui/connection/ 02.11.2015 20:20:15
connection-min.js?v=381 Verboten: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...ui/connection/ 02.11.2015 20:18:22
connection-min.js?v=381 Gefunden: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...ui/connection/ 02.11.2015 20:18:22
connection-min.js?v=381 Verboten: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...ui/connection/ 02.11.2015 20:17:16
connection-min.js?v=381 Gefunden: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...ui/connection/ 02.11.2015 20:17:16
connection-min.js?v=381 Verboten: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...ui/connection/ 01.11.2015 16:27:45
connection-min.js?v=381 Gefunden: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...ui/connection/ 01.11.2015 16:27:45
connection-min.js?v=381 Verboten: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...ui/connection/ 01.11.2015 16:27:04
connection-min.js?v=381 Gefunden: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...ui/connection/ 01.11.2015 16:27:04
connection-min.js?v=381 Verboten: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...ui/connection/ 01.11.2015 16:26:56
connection-min.js?v=381 Gefunden: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...ui/connection/ 01.11.2015 16:26:56
connection-min.js?v=381 Verboten: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...ui/connection/ 01.11.2015 16:25:35
connection-min.js?v=381 Gefunden: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...ui/connection/ 01.11.2015 16:25:35
connection-min.js?v=381 Verboten: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...ui/connection/ 01.11.2015 16:24:58
connection-min.js?v=381 Gefunden: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...ui/connection/ 01.11.2015 16:24:57
connection-min.js?v=381 Verboten: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...ui/connection/ 31.10.2015 16:52:16
connection-min.js?v=381 Gefunden: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...ui/connection/ 31.10.2015 16:52:16
connection-min.js?v=381 Verboten: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...ui/connection/ 31.10.2015 16:51:30
connection-min.js?v=381 Gefunden: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...ui/connection/ 31.10.2015 16:51:30
connection-min.js?v=381 Verboten: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...ui/connection/ 31.10.2015 16:51:18
connection-min.js?v=381 Gefunden: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...ui/connection/ 31.10.2015 16:51:18
connection-min.js?v=381 Verboten: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...ui/connection/ 30.10.2015 14:58:14
connection-min.js?v=381 Gefunden: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...ui/connection/ 30.10.2015 14:58:14
connection-min.js?v=381 Verboten: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...ui/connection/ 30.10.2015 14:57:22
connection-min.js?v=381 Gefunden: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clien...ui/connection/ 30.10.2015 14:57:22
JSPack Verboten: HEUR:Trojan.Script.Generic http://forum.shrapnelgames.com/clien...r.js?v=1.0.1// 27.10.2015 18:00:49
JSPack Gefunden: HEUR:Trojan.Script.Generic http://forum.shrapnelgames.com/clien...r.js?v=1.0.1// 27.10.2015 18:00:49
JSPack Verboten: HEUR:Trojan.Script.Generic http://forum.shrapnelgames.com/clien...r.js?v=1.0.1// 27.10.2015 17:55:54
JSPack Gefunden: HEUR:Trojan.Script.Generic http://forum.shrapnelgames.com/clien...r.js?v=1.0.1// 27.10.2015 17:55:54
JSPack Verboten: HEUR:Trojan.Script.Generic http://forum.shrapnelgames.com/clien...r.js?v=1.0.1// 27.10.2015 17:55:51
JSPack Gefunden: HEUR:Trojan.Script.Generic http://forum.shrapnelgames.com/clien...r.js?v=1.0.1// 27.10.2015 17:55:51
JSPack Verboten: HEUR:Trojan.Script.Generic http://forum.shrapnelgames.com/clien...r.js?v=1.0.1// 27.10.2015 17:55:17
JSPack Gefunden: HEUR:Trojan.Script.Generic http://forum.shrapnelgames.com/clien...r.js?v=1.0.1// 27.10.2015 17:55:17
JSPack Verboten: HEUR:Trojan.Script.Generic http://forum.shrapnelgames.com/clien...r.js?v=1.0.1// 27.10.2015 17:54:52
JSPack Gefunden: HEUR:Trojan.Script.Generic http://forum.shrapnelgames.com/clien...r.js?v=1.0.1// 27.10.2015 17:54:52
JSPack Verboten: HEUR:Trojan.Script.Generic http://forum.shrapnelgames.com/clien...r.js?v=1.0.1// 27.10.2015 17:54:08
JSPack Gefunden: HEUR:Trojan.Script.Generic http://forum.shrapnelgames.com/clien...r.js?v=1.0.1// 27.10.2015 17:54:08
JSPack Verboten: HEUR:Trojan.Script.Generic http://forum.shrapnelgames.com/clien...r.js?v=1.0.1// 27.10.2015 17:54:01
JSPack Gefunden: HEUR:Trojan.Script.Generic http://forum.shrapnelgames.com/clien...r.js?v=1.0.1// 27.10.2015 17:54:01
JSPack Verboten: HEUR:Trojan.Script.Generic http://forum.shrapnelgames.com/clien...r.js?v=1.0.1// 27.10.2015 17:53:48
JSPack Gefunden: HEUR:Trojan.Script.Generic http://forum.shrapnelgames.com/clien...r.js?v=1.0.1// 27.10.2015 17:53:48
JSPack Verboten: HEUR:Trojan.Script.Generic http://forum.shrapnelgames.com/clien...r.js?v=1.0.1// 27.10.2015 02:51:18
JSPack Gefunden: HEUR:Trojan.Script.Generic http://forum.shrapnelgames.com/clien...r.js?v=1.0.1// 27.10.2015 02:51:18
JSPack Verboten: HEUR:Trojan.Script.Generic http://forum.shrapnelgames.com/clien...r.js?v=1.0.1// 27.10.2015 02:49:19
JSPack Gefunden: HEUR:Trojan.Script.Generic http://forum.shrapnelgames.com/clien...r.js?v=1.0.1// 27.10.2015 02:49:19
vbulletin_lightbox.js?v=381 Verboten: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clientscript/ 02.11.2015 20:21:39
vbulletin_lightbox.js?v=381 Gefunden: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clientscript/ 02.11.2015 20:21:39
vbulletin_post_loader.js?v=381 Verboten: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clientscript/ 02.11.2015 20:21:37
vbulletin_md5.js?v=381 Verboten: HEUR:Trojan.Script.Iframer http://forum.shrapnelgames.com/clientscript/ 02.11.2015 20:21:37

Anyone have any idea? I can't come back on the forum, really and truly, until this is fixed.

All of that is complaining about JavaScript (the .js extension). Most of the complaints seem to be Heuristics results since HEUR is in the result string - i.e. the anti-virus software is making a guess.

I use the Firefox browser, and have the Ghostery script blocker add-on installed to deal with dodgy JavaScript. There is also another add-on called NoScript to deal with it. Not sure if you can run both together.

Some of the JavaScript may also come from banner ads - Again for FireFox, there is an add-on called AdBlock Plus. That one really makes visiting some news sites tolerable - no more waiting 30-40 seconds while multi-media carp loads and flashes away at you before the article loads!.

Seems the forums have been flagged again by Firefox.

And I strongly second Mobhack about Adblock Plus! Great product.

Yep Firefox / Google flagged site again :( I cannot agree more about NoScript and Adblock Plus - wouldn't dream of surfing without em! and is it just me or can you not include carrige return/enter anymore? ie I typed this on a seperate line / para.

Here WE go again, Firefox/Google together aren't making for a happy marriage as it's saying we're unsafe again. Accessed using my saved bookmarks. I'm using the top rated anti virus program two years running now and it hasn't made a peep about this when it first came up ~3 months ago or just now. This includes my freeware Malwarebytes and MS 10 Defender software. No fear here just an exercise in futility it seems.

Regards,
Pat

Noscript threw up a script that was not there before today:

suchka46.pw

Which looks distinctly dodgy, so I blocked that one. A Goggle search did not show much on that - though one phishing site did seem to mention it, but it was in Polish, I think.

No log in issues with MS EDGE. FIREFOX/GOOGLE still showing issue. No hits with my antivirus programs, though I haven't run the MS Malicious software scan for this month. I'll leave this now to people smarter then me.

Regards,
Pat

Shrapnel is aware and looking into it

Don

We have reviewed everything and this appears to be a fake attack. We are working with google to remove the ban.

Google needs to sort this, human nature someone will pick up on it & decide to attack it just because it came to their attention via google

Getting warnings of trojans by kaspersky...

My anti-virus says detects a threat from the shrapnel forums called JS/Iframe.MG trojan...

I'll pass that along

MalwareBytes is now detecting 15 problems on this site.
Previously it hadn't detected any.

Just finished updated scan with Malwarebytes freeware in "Threat Scan" mode didn't pick up anything. Are you using the paid version?
Using BitDefender Total Security 2015. System still clean, no alerts ans Mozilla Firefox with Google search still the only browser seeing the "bad site" warning. Don't know.

Regards,
Pat

Paid version of Malwarebytes.

BUT I made a mistake with the previous post ... it's NOD32, my primary anti virus program that's complaining ... lots!
I use Malwarebytes for active scans and NOD32 for real-time monitoring.

Quote:

Originally Posted by wulfir (Post 831999)

My anti-virus says detects a threat from the shrapnel forums called JS/Iframe.MG trojan...

Ulf, send me an email with the info that scanner is picking up if you can please. Shrapnel wants to take a look at it.

We *suspect* that there is some crossover in how some trojans are detected and that's why some are screaming about the same thing and others don't. As I said in another post and it's based on what I've been told and I have no doubt it's acccurate.......when Shrapnel reviews the info provided by the site that Google recommends be used to "clean up" .........the report comes back clean. Yet we have repeated reports of problems and yesterday McAfee reported the forums to me as a bad site but not today.

Don

Quote:

Originally Posted by DRG (Post 832008)

Ulf, send me an email with the info that scanner is picking up if you can please. Shrapnel wants to take a look at it.

I've sent you two examples of threat messages. When surfing around the Shrapnel Games forums I get about 30 such messages, many have slightly diffirent information but the threat is always identified as the JS/IframeMG trojan...

JUST CURIOUS...........for those of you who are reporting repeated threat warnings...which MS OS are you using ???

Don

I'm using MS 10. Security software as already posted no hits-still (Being a little more aggressive in my scan activity.). Browsers only had hits here with Firefox/w Google DID NOT have an issue with Firefox/w Yahoo (About 2/or 3 major upgrades ago.) and none using EDGE on either of these last two occasions.

So not sure if this is because of Firefox/w Google not working well together OR one or the other by themselves having an issue.

Had problems with Google for over a year dealing with similar issues when it was my browser with XP SP 3. That stopped when I switched back and forth between IE 8/or Firefox as my browsers.

I think this is a Google issue, though, to be truthful I generally like that browser.

Regards,
Pat

Windows 7. Firefox and Kaspersky.

Getting Google bad site warning (I can live with) but kaspersky coming up with 30 warnings and blocks for "iframe trojans" is a little off putting.

Windows 7, firefox, eset NOD32....