[False alarm] MALWARE POP UPS in wesnoth.org
Moderator: Forum Moderators
[False alarm] MALWARE POP UPS in wesnoth.org
[2015-02-23] Locking this topic as it turned out to not be a problem with wesnoth.org at all. Read on for details. ― shadowm
Anyone else have seen a popup that try to install malware when you click a link at forums or any other wesnoth.org page?
It looks like if wesnoth.org has suffered a hacking attack or something like that.
Pepe
------------------------------------------------------
Note: you can see some new links with capitol letters and a green arrow that popups to install supposed utility or security software.
Im afraid that this post has some of that links that i have not writen myself in it.
Anyone else have seen a popup that try to install malware when you click a link at forums or any other wesnoth.org page?
It looks like if wesnoth.org has suffered a hacking attack or something like that.
Pepe
------------------------------------------------------
Note: you can see some new links with capitol letters and a green arrow that popups to install supposed utility or security software.
Im afraid that this post has some of that links that i have not writen myself in it.
Last edited by Iris on February 23rd, 2015, 4:11 am, edited 2 times in total.
Re: MALWARE POP UPS in wesnoth.org
Pepe,
No, I don’t. It sounds like you have adware installed on your own computer.
Check your browser add-ons and check with your computer support for help with removing adware from your computer.
No, I don’t. It sounds like you have adware installed on your own computer.
Check your browser add-ons and check with your computer support for help with removing adware from your computer.
Wesnoth Bestiary ( PREVIEW IT HERE )
Unit tree and stat browser
Canvas ( PREVIEW IT HERE )
Exp. map viewer
Unit tree and stat browser
Canvas ( PREVIEW IT HERE )
Exp. map viewer
Re: MALWARE POP UPS in wesnoth.org
Thank for answer.
I cannot undertand how can i see that popups at my windows 7 computer and at an Ubuntu virtual machine too.
I will try to check my machine for some kind of virus anyway.
Malware name is something like eFix Pro
Pepe
---------------------------------------------------------------------------------------------------------------
I cannot undertand how can i see that popups at my windows 7 computer and at an Ubuntu virtual machine too.
I will try to check my machine for some kind of virus anyway.
Malware name is something like eFix Pro
Pepe
---------------------------------------------------------------------------------------------------------------
Re: MALWARE POP UPS in wesnoth.org
If you don’t see this on every other site, perhaps there’s malware on your computer redirecting requests for the Google Analytics script — that’s the only Javascript request shared by both the forums and the front page. If both Windows 7 and your Ubuntu VM are on the same host, the malware running on the host may be rewriting HTTP traffic to/from GA or wesnoth.org at the driver level, or redirecting name lookups for google-analytics.com by tampering with your DNS or
etc\hosts
configuration (yes, %systemroot%\system32\drivers\etc\hosts
is a thing on Windows).Author of the unofficial UtBS sequels Invasion from the Unknown and After the Storm.
- Elvish_Hunter
- Posts: 1576
- Joined: September 4th, 2009, 2:39 pm
- Location: Lintanir Forest...
Re: MALWARE POP UPS in wesnoth.org
Yes, by a quick search it appears to be one of these annoying adware, and as such your antivirus may not recognize it as malware. Some of the removal procedures that I found (like this one, for example) suggest to try using MalwareBytes Anti-Malware and AdwCleaner, but I never used these programs so far, so I can't vouch for them.Pepe wrote:Malware name is something like eFix Pro
Current maintainer of these add-ons, all on 1.16:
The Sojournings of Grog, Children of Dragons, A Rough Life, Wesnoth Lua Pack, The White Troll (co-author)
The Sojournings of Grog, Children of Dragons, A Rough Life, Wesnoth Lua Pack, The White Troll (co-author)
Re: MALWARE POP UPS in wesnoth.org
Yes, i had a malware in my w7 host computer. Im cleaning it now. i have removed something with the name WP from my program list with an installation date of today. I dont know what it is but i have antivirus working in my hard disk now.
Thanks for help.
Wesnoth was the first web i saw today and i thought it was under some kind of hacking attack but i saw that other web pages were poping too with that malware in my computer.
Pepe
-------------------------------------------------------
Thanks for help.
Wesnoth was the first web i saw today and i thought it was under some kind of hacking attack but i saw that other web pages were poping too with that malware in my computer.
Pepe
-------------------------------------------------------
- Paulomat4
- Moderator Emeritus
- Posts: 730
- Joined: October 16th, 2012, 3:32 pm
- Location: Wesmere library, probably summoning Zhangor
Re: MALWARE POP UPS in wesnoth.org
I used adwCleaner once, and found it to be very easy to use and effective.Yes, by a quick search it appears to be one of these annoying adware, and as such your antivirus may not recognize it as malware. Some of the removal procedures that I found (like this one, for example) suggest to try using MalwareBytes Anti-Malware and AdwCleaner, but I never used these programs so far, so I can't vouch for them.
Creator of Dawn of Thunder and Global Unitmarkers
"I thought Naga's used semi-automatic crossbows with incendiary thermite arrows . . . my beliefs that this race is awesome are now shattered." - Evil Earl
"I thought Naga's used semi-automatic crossbows with incendiary thermite arrows . . . my beliefs that this race is awesome are now shattered." - Evil Earl