Author Topic: infected pages  (Read 3821 times)

Offline dman11235

  • DnD Handbook Writer
  • ****
  • Posts: 2571
  • Disclaimer: not at full capacity yet
    • View Profile
infected pages
« on: May 14, 2014, 06:28:24 PM »
So I'm using Chrome, and it tells me that there's malware on a few of the pages on the boards.  The ones I get the message on are small rants page 49 and 50 and awesome stuff on the last couple pages.  It's not all pages, I get no message from page 1, for instance, or from the pages I checked of the things that make you lol thread.  Chrome tells me it's goodanime dot net that is the culprit, there's material from that site on those pages, and the site is a known distributor of malware.
My Sig's Handy Haversack  Need help?  Want to see what I've done?  Want to see what others have done well?  Check it out.

Avatar d20

Offline Gazzien

  • DnD Handbook Writer
  • ****
  • Posts: 2113
  • Science? Science.
    • View Profile
Re: infected pages
« Reply #1 on: May 14, 2014, 06:31:23 PM »
Probably people linking to that page from those threads, by the sounds of it.

Offline EjoThims

  • DnD Handbook Writer
  • ***
  • Posts: 531
  • The Ferret
    • View Profile
Re: infected pages
« Reply #2 on: May 14, 2014, 06:51:45 PM »
goodanime.net is an anime streaming video site.

Site itself gives a warning, but seems to check out okay with these two:

http://sitecheck.sucuri.net/results/goodanime.net
https://www.virustotal.com/en/url/cebd19a7abe57314f61b78c91b868ac266126576e44e9feb67921b9ee40d421e/analysis/


But http://quttera.com lists it as blacklisted with 6 suspicious files

Offline dman11235

  • DnD Handbook Writer
  • ****
  • Posts: 2571
  • Disclaimer: not at full capacity yet
    • View Profile
Re: infected pages
« Reply #3 on: May 14, 2014, 06:56:10 PM »
Specifically I should mention that the message is that content fro mthat site has been inserted on the pages.  Copy/paste from the warning:

Quote
Content from www.goodanime.net, a known malware distributor, has been inserted into this web page. Visiting this page now is very likely to infect your computer with malware.
My Sig's Handy Haversack  Need help?  Want to see what I've done?  Want to see what others have done well?  Check it out.

Avatar d20

Offline phaedrusxy

  • DnD Handbook Writer
  • ****
  • Posts: 10708
  • The iconic spambot
    • View Profile
Re: infected pages
« Reply #4 on: May 14, 2014, 08:22:59 PM »
I bet it's someone's avatar. This page also gave me the warning: http://www.minmaxboards.com/index.php?topic=13590.0
I don't pee messages into the snow often , but when I do , it's in Cyrillic with Fake Viagra.  Stay frosty my friends.

Offline dman11235

  • DnD Handbook Writer
  • ****
  • Posts: 2571
  • Disclaimer: not at full capacity yet
    • View Profile
Re: infected pages
« Reply #5 on: May 14, 2014, 08:58:48 PM »
yeah, I thought sig initially, but avatar makes more sense.  Is there a way to see who has posted on a thread's page without actually going to that page?  If so we can safely figure out who's posted and narrow down who's at fault if it is a person.  I'm 99% certain it's a profile because it happened pretty much all at once, so it would have changed every place the profile shows up.
« Last Edit: May 14, 2014, 09:01:24 PM by dman11235 »
My Sig's Handy Haversack  Need help?  Want to see what I've done?  Want to see what others have done well?  Check it out.

Avatar d20

Offline bhu

  • Uncle Kittie
  • DnD Handbook Writer
  • ****
  • Posts: 16054
  • Fnord bitches
    • View Profile
Re: infected pages
« Reply #6 on: May 15, 2014, 11:40:27 PM »
Infection may have been temporary, the pages no longer show as ebil.

Offline dman11235

  • DnD Handbook Writer
  • ****
  • Posts: 2571
  • Disclaimer: not at full capacity yet
    • View Profile
Re: infected pages
« Reply #7 on: May 16, 2014, 05:13:44 PM »
Yeah, those are fine....NOw others are infected!?  Same infection website, the good anime place.  It's the rants and lol thread right now.

EDIT: I meant the happy happy thread, not lol.  HOwever, since I posted this, the rants thread is fine.  Something weird is going on indeed.  GHOSTS IN THE MACHINE.  Or just ghosts.  Or aliens.  Or douchebags.  Probably the last one.
« Last Edit: May 16, 2014, 05:17:38 PM by dman11235 »
My Sig's Handy Haversack  Need help?  Want to see what I've done?  Want to see what others have done well?  Check it out.

Avatar d20

Offline bhu

  • Uncle Kittie
  • DnD Handbook Writer
  • ****
  • Posts: 16054
  • Fnord bitches
    • View Profile
Re: infected pages
« Reply #8 on: May 22, 2014, 02:20:01 AM »
http://www.google.com/safebrowsing/diagnostic?site=goodanime.net

Should we all scramble to do backups again?

Is there a way to download the site now while things are still relatively ok?