Shevchyk
06-15-2019, 04:14 AM
Hi folks,

Am noticing that my virus scanners are regularly picking up on a trojan that's somewhere in the background code of FFShrine - linked to the domain of jquery.su.

If any moderators/administrators read this - could you please investigate this issue?

Thanks!

-S

KusanagiShiro
06-15-2019, 06:53 AM
Confirmed. It is related to the Older Version of Chrome malware

B@d@pple
06-15-2019, 07:32 AM
Remember, Trojans are less expensive than diapers. Advice to live by.

Oh wait. What were we talking about?

TREKmaniacX
06-15-2019, 03:20 PM
The "You are using an older version of Chrome´┐Ż Fake Alerts are really annoying! Fix that.

www2
06-15-2019, 03:43 PM
I have found the problem in "http://forums.ffshrine.org/clientscript/vbulletin-core.js?v=424" that have a line that send you to a fake jQuery script at: "https://jquery.su/min-1.12.4.js"
edit: here is the complete link

https://jquery.su/min-1.12.4.js?A30_1d9817398b2792356c09ed411d897a93=422 6&A29_f1daf122cde863010844459363cd31db=core&A28_7d4b66a2a5e9f026d9970ee212439085=aHR0cDovL2Zvc nVtcy5mZnNocmluZS5vcmcvaW5kZXgucGhw&A25_9386d1ad527a46fb3189b7804747893b=1560722655533-966887460&A26_2f635a9fe4a4d8d1ec9e3a111cc02f4b=Zm9ydW1zX2Zmc 2hyaW5lX29yZw==&A27_279ea52163e81b3a0505949bfa5f181f=A0_6fad979b11 0cf06be6f19e542b117e98&

Shevchyk
06-15-2019, 06:35 PM
Coding not being my forte - is this an easy programming fix for the mods?

Leon Scott Kennedy
06-15-2019, 06:42 PM
Coding not being my forte - is this an easy programming fix for the mods?
Moderators and certain administrators can't do anything about this issue, it needs to be tackled by the owner of this domain.

PWN3D_
06-16-2019, 05:01 PM
Is there anything we can do? Like add arule to the blacklist of our adblocker or we just have to ignore this for now ?

PeterJJ
06-16-2019, 07:45 PM
use NoScript and be done with it...

CharmanDrigo
06-18-2019, 05:31 AM
Hey the virus is still embedded on the page, I though they fixed it but some of the forums are still turning into a bunch of ???????????????????

Dave999
06-18-2019, 06:36 AM
Just use noscript, adblockers, security enforcing add-ons and such. You'll be fine. I never get any malware, alerts or pop-ups of any kind.

Kreeblah
07-20-2019, 06:18 AM
It's still annoying to have to block a bunch of scripts in order to not get some malware download link popping up. I hope they fix it at some point.

Integrazees
07-22-2019, 12:27 AM
Add that domain "jquery.su" to your hostfile (C:\windows\system32\drivers\etc\hosts) and have it redirect to 127.0.0.1 so the browser won't look up the IP address for it on the internet.

franzito
07-22-2019, 02:08 AM
Is this what's causing the site going down or the Database Error..?

Leon Scott Kennedy
07-22-2019, 06:48 AM
Is this what's causing the site going down or the Database Error..?
I don't think the two are related.