Jet Offensive

The Jet Offensive => Site Feedback => Topic started by: bojanglesman on August 21, 2014, 07:07:03 PM

Title: Malware?
Post by: bojanglesman on August 21, 2014, 07:07:03 PM
Just got this on here, any idea?  Probably just some dumb picture site that got labeled as malicious, but just wanted to make sure.  Iranians and such.........

(http://oi57.tinypic.com/xbijqs.jpg)
Title: Re: Malware?
Post by: Miamipuck on August 21, 2014, 07:22:55 PM
It means you have aids.
Title: Re: Malware?
Post by: bojanglesman on August 21, 2014, 07:25:03 PM
It means you have aids.

(http://37.media.tumblr.com/df68b296a5dba3576c447746010fb22a/tumblr_n3ryrzez971rpghfqo1_250.gif)
Title: Re: Malware?
Post by: Badger on August 21, 2014, 08:06:13 PM
Just got this on here, any idea?  Probably just some dumb picture site that got labeled as malicious, but just wanted to make sure.  Iranians and such.........

(http://oi57.tinypic.com/xbijqs.jpg)

What thread was it specifically?

My work filter has blocked certain pages of certain threads because of an image hosted on it being from a site of ill repute.
Title: Re: Malware?
Post by: dcm1602 on August 21, 2014, 08:28:03 PM
Isnt doublelol a meme thing ?

Id assume its highly probably this happened because of a meme/gif someone posted?
Title: Re: Malware?
Post by: bojanglesman on August 21, 2014, 09:11:58 PM
What thread was it specifically?

My work filter has blocked certain pages of certain threads because of an image hosted on it being from a site of ill repute.

Annoyances thread.
Title: Re: Malware?
Post by: Badger on August 21, 2014, 09:12:04 PM
Isnt doublelol a meme thing ?

Id assume its highly probably this happened because of a meme/gif someone posted?

Posting any image hosted on a site that raises red flags for malware can result in the message that Bo got.

Disclaimer: I may be talking out of my derriere
Title: Re: Malware?
Post by: Badger on August 21, 2014, 09:16:17 PM
Annoyances thread.

Browsed the first two and last two pages, didn't see anything. I give up.
Title: Re: Malware?
Post by: bojanglesman on August 21, 2014, 09:20:35 PM
Browsed the first two and last two pages, didn't see anything. I give up.

No worries just making sure the Algerians hadn't forced us into andthehomeofhthejets.com or whatever the freak our next website will be.
Title: Re: Malware?
Post by: Tommy on August 22, 2014, 12:58:31 AM
Jetssnuggle.com!
Title: Re: Malware?
Post by: IATA on August 26, 2014, 08:58:49 AM
just had the same problem in the annoyances thread. it was when i clicked on the link to bring me to the front page of the thread.
Title: Re: Malware?
Post by: Badger on August 26, 2014, 09:12:54 AM
I'm getting it now too. I guess it only happens on Chrome?
Title: Re: Malware?
Post by: Johnny English on August 26, 2014, 09:17:17 AM
I ran the Google Safe Browse check and it hasn't seen anything, but that's dated. Can you give me the exact page URL that's throwing the issue?
Title: Re: Malware?
Post by: Johnny English on August 26, 2014, 09:22:41 AM
Sucuri shows no detected malware currently.

http://sitecheck.sucuri.net/results/jetoffensive.com

Probably Chrome being overzealous with a link that has had previous problems with malware, but I'll check some other things. Site software is at the latest release so we should be pretty secure.
Title: Re: Malware?
Post by: Badger on August 26, 2014, 09:28:30 AM
I ran the Google Safe Browse check and it hasn't seen anything, but that's dated. Can you give me the exact page URL that's throwing the issue?

http://www.jetoffensive.com/index.php?topic=97.0
Title: Re: Malware?
Post by: Johnny English on August 26, 2014, 09:35:56 AM
That's strange, there are no images or links on that page. I will investigate.
Title: Re: Malware?
Post by: Badger on August 26, 2014, 09:45:35 AM
That's strange, there are no images or links on that page. I will investigate.

Yeah, that's where I hit a dead end on this the other day.
Title: Re: Malware?
Post by: Badger on August 26, 2014, 11:03:19 AM
I think I got it.

I moved the first page of replies here:

http://www.jetoffensive.com/index.php?topic=1222.0

And now the annoyances thread is fine, but this quarantine thread has the malware warning.

JE, I don't know if you want to investigate further or if you just want to delete it.
Title: Re: Malware?
Post by: Johnny English on August 26, 2014, 11:43:30 AM
Thanks, I will investigate. We're going to run Google Analytics on the site and see what it comes up with.
Title: Re: Malware?
Post by: guinness77 on August 26, 2014, 12:44:46 PM
Maybe the Interwebz is trying to tell others something about this site. I blame Alleycat.
Title: Re: Malware?
Post by: Badger on August 28, 2014, 10:45:37 AM
First page of the TV Shows thread is doing this now.

Edit: first two pages.
Title: Re: Malware?
Post by: Johnny English on August 28, 2014, 11:08:28 AM
Yes, I get the same thing with Chrome.
Title: Re: Malware?
Post by: IATA on August 28, 2014, 11:18:17 AM
TV thread dosen't do it for me in Chrome. Could it be someone avatar or sig images?
Title: Re: Malware?
Post by: Johnny English on August 28, 2014, 11:18:42 AM
All right, I done mended it. The problem was that 624's avatar linked to an image on doblelol.com, a site that Google has classified as being at risk of serving malware. Setting him to "no avatar" resolved the problem. 624 also has a post on the Quarantine thread, hence the issue there as well.

I disabled Fenwyr's avatar because he was also linking to an external site, although there's no suggestion that it was causing any problems. So everyone knows, when you set your avatar please DO NOT link it using a URL; do a right click on the image you want to use, save it to your hard drive, then upload it to JO using the Browse button in your profile. That way we don't have to worry about the source of the link being compromised and throwing malware warnings in this way.
Title: Re: Malware?
Post by: Badger on August 28, 2014, 11:20:23 AM
Great job. I can't even remember what his avatar was.

I disabled Fenwyr's avatar because he was also linking to an external site, although there's no suggestion that it was causing any problems. So everyone knows, when you set your avatar please DO NOT link it using a URL; do a right click on the image you want to use, save it to your hard drive, then upload it to JO using the Browse button in your profile. That way we don't have to worry about the source of the link being compromised and throwing malware warnings in this way.

This times 1,000.
Title: Re: Malware?
Post by: Johnny English on August 28, 2014, 11:22:36 AM
I put Fen's avatar back by saving and uploading.

I'm not going to go through every member account and check that there's no hotlinking for avatars, please can you all just take a minute to make sure that you're not doing it? Thanks.
Title: Re: Malware?
Post by: Miamipuck on August 31, 2014, 09:55:01 PM
Hahahahaha I have been doing the save browser thing right that was the best way.
Title: Re: Malware?
Post by: Badger on November 18, 2014, 11:23:04 AM
So everyone knows, when you set your avatar please DO NOT link it using a URL; do a right click on the image you want to use, save it to your hard drive, then upload it to JO using the Browse button in your profile. That way we don't have to worry about the source of the link being compromised and throwing malware warnings in this way.

Quoted for prrrrt.
Title: Re: Malware?
Post by: Miamipuck on November 18, 2014, 11:35:19 AM
Quoted for prrrrt.

(http://i.imgur.com/DuXtjbl.jpg)