o.O Malware?

Discussion in 'Site and Forum Feedback' started by Zephyr8965, Jan 1, 2010.

Remove all ads!
  1. Zephyr8965

    Zephyr8965 Member

    Joined:
    Dec 29, 2009
    Messages:
    57
    Likes Received:
    0
    Okay, so I clicked a link to download the 12 tutorials for modding ToEE in a single pdf just now, and google threw a big fit about me going to a reported attack site. While I'm certain it's not Co8's doing, I figure I might let you guys know about this. It said that another domain was running malware to your users through your site, so perhaps it's the ads or something.

    Anyway, here's the url of the page with the information:

    http://safebrowsing.clients.google.....co8.org/others/NPC & Related ToEE MODing.pdf
     
  2. Gaear

    Gaear Bastard Maestro Administrator

    Joined:
    Apr 27, 2004
    Messages:
    10,999
    Likes Received:
    24
    Hm, that's odd. Why did Google have anything to say about it? Are you using Chrome, or did you do a Google search for that .pdf or something?

    I just tried the direct link myself and had no problems. (Using I.E.)
     
  3. Zephyr8965

    Zephyr8965 Member

    Joined:
    Dec 29, 2009
    Messages:
    57
    Likes Received:
    0
    I use firefox with google being my default search provider. Not sure if that has anything to do with it.

    Also, the link to world builder did the same thing.


    EDIT: Oh, and no, I didn't use google to search for anything. I simply clicked the links in the posts here on co8. The 12 tutorials link was in a post that was linked from the tutorial page that you linked me to.
     
  4. Gaear

    Gaear Bastard Maestro Administrator

    Joined:
    Apr 27, 2004
    Messages:
    10,999
    Likes Received:
    24
    Okay. Well, at any rate, our server is maintained fairly rigorously from what I understand, and I assume virus scans are a part of that. Thanks for the heads-up though.
     
  5. Zephyr8965

    Zephyr8965 Member

    Joined:
    Dec 29, 2009
    Messages:
    57
    Likes Received:
    0
    No problem. The report said it was reported only one time, recently, so it was probably just an attack on the server that was likely swatted aside, but not before google could get a report out of it. I was just worried that other people might be driven away from the site with warnings like that popping up.
     
  6. Damaja

    Damaja Member

    Joined:
    Jan 24, 2010
    Messages:
    1
    Likes Received:
    0
    lemme tell ya, malware is a rough virus. I could not get it out of my PC and was forced to reformat.
     
  7. Zephyr8965

    Zephyr8965 Member

    Joined:
    Dec 29, 2009
    Messages:
    57
    Likes Received:
    0
    *facepalm*
     
  8. taltamir

    taltamir Established Member

    Joined:
    May 16, 2004
    Messages:
    741
    Likes Received:
    0
    Recent scans are still showing malware:
    http://safebrowsing.clients.google....box_sig2_ted.jpg&client=googlechrome&hl=en-US

    so you should do exactly that, go to http://www.google.com/webmasters/tools/ and ask google to scan and review co8 so it can give you more specific information about where the malware occurs.
     
    Last edited: Apr 5, 2010
  9. taltamir

    taltamir Established Member

    Joined:
    May 16, 2004
    Messages:
    741
    Likes Received:
    0
    I don't want to "impersonate" the site owner, but do you want me to go to google tools and ask for a detailed report on the site (with exactly which malware is found where?)

    i tried showing this to some people and they wouldn't visit the site due to the malware warning, and besides which, it is a PITA to have to click through it every time.

    if the site is really completely clean then we need to inform them of a false positive issue and have them stop the warning.
     
  10. Gaear

    Gaear Bastard Maestro Administrator

    Joined:
    Apr 27, 2004
    Messages:
    10,999
    Likes Received:
    24
    Agetian actually did that already some time ago and they said they were going to take it down.

    I can't comment much otherwise, as such site matters are the domain of adminstrators.
     
  11. taltamir

    taltamir Established Member

    Joined:
    May 16, 2004
    Messages:
    741
    Likes Received:
    0
    I found something interesting.

    You asked me on another thread
    I get this message on various pages such as
    http://www.co8.org/forum/showthread.php?t=7978

    http://www.co8.org/forum/showthread.php?t=7719&page=3

    http://www.co8.org/forum/showthread.php?t=7956

    After restarting chrome, visiting different threads triggers it at different time. The big thing is that they simply did not remove the message. Last time they checked the site was 1st of april, and it showed the issue then.

    the real interesting thing is that this thread generates two messages in a row:
    http://www.co8.org/forum/showthread.php?t=7737

    http://i1026.photobucket.com/albums/y325/taltamir/warning1.png
    http://i1026.photobucket.com/albums/y325/taltamir/warning2.png
     
    Last edited: Apr 14, 2010
  12. Gaear

    Gaear Bastard Maestro Administrator

    Joined:
    Apr 27, 2004
    Messages:
    10,999
    Likes Received:
    24
    Well the warning on the last two lists the (clickable) images that represent the different modpacks, which live on our server (the images).

    I've kicked this up to Agetian again, at any rate.
     
    Last edited: Apr 14, 2010
Our Host!