Virus infection in this forum?

[DRG]

now it's showing a new ISP but still from Kassel Germany

[DRG]

and now a new one from 94.130.90.154......still Kassel Germany

[DRG]

Now it shows the block from 94.130.90.167

Kassel once again

IP address or hostname
94.130.90.167
Lookup
IP 94.130.90.167 Hostname static.167.90.130.94.clients.your-server.de ASN AS24940
Country Germany (DE) Provider Hetzner Online GmbH DMA 0
City Latitude 51.299301147461 Area 0
Region Longitude 9.4910001754761 TimeZone Europe/Berlin
Postal Code Continent EU DateTime 2017-11-27 16:54:21

[DRG]

This time 94.130.102.124

guess where.......Kassel

then again 94.130.128.151

Kassel


http://www.ip-tracker.org/blacklist-...94.130.128.151
Blacklist Status: Not Blacklisted

[Warhero]

Hmm seems that source of infection is in Germany (Kassel)... Could Shrapnelgames able to remove threat from here? Or via German authorities (police for example)?

Warhero

[Imp]

Originally Posted by Warhero

Hmm seems that source of infection is in Germany (Kassel)... Could Shrapnelgames able to remove threat from here? Or via German authorities (police for example)?

Warhero

And the chances of that being a legit IP address or it actualy originating from that country let alone town is,
You might win the lottery.

Its not a problem so long as you own decent antivirus software, not nice but will be sorted at some point.

To politicaly correct nowadays first Kapersky software I had asked me twice if it could fight back as my computer had been underattack for 3 minutes. As they were originaly major hackers in both cases reported threat disabled & let me continue.
Of course this was banned you cannot defend your property aggresivly.

[Mobhack]

As an experiment I stripped Chrome of all ad blockers and privacy guard extensions then opened up the shrapnel forums with the browser "nekkid".

On opening the task manager, no process was taking any inordinate amount of CPU, whether it was any of the several chrome services running or a.n. other. Active coin miners are supposed to eat CPU cycles - and nothing was doing so.

So my conclusion is that the "threat" was very low - none of Malwarebytes or Spybot Search and Destroy found anything "placed on" my PC either.

So I am perfectly happy to continue on the forums with Firefox with Privacy Badger and Ghostery as usual, and Ad Block Plus of course - otherwise many web pages cannot be seen for intrusive ads!. But then - those are the sort of things a sensible web user has added to their browser these days in any case. Nb - those extensions are available for Chrome as well.

[mkr8683]

I'm getting it too.

From Norton -

"JSCoinminer Download 10"

[RightDeve]

Cpu usahe might be low, but bitcoin miners ate kniwn for their use of gpu hardware.

And ip address diesnt mean nothing in this day and age when professional hackers normly use proxies to mask their true origin.

[scorpio_rocks]

RightDeve is correct - miners famously use graphic card processes.

I am still getting a blocked "malicious link" and "malicious webpage" by Kaspersky due to a "Trojan Script" //forum.shrapnelgames.com/clientscript/vbulletin_read_marker.js?v=381