EntropiaForum.com
Go Back   EntropiaForum.com > Information > About EntropiaForum
Notice
About EntropiaForum EntropiaForum news, announcements, and information.

Reply
 
LinkBack Thread Tools
Old 06-29-2008, 16:56   #1
Stalker
Rayne Jade's Avatar
EntropiaForum Senior Member, click here for more information.
Rayne Jade ProficientRayne Jade ProficientRayne Jade ProficientRayne Jade ProficientRayne Jade ProficientRayne Jade ProficientRayne Jade ProficientRayne Jade ProficientRayne Jade ProficientRayne Jade ProficientRayne Jade Proficient  
  Activity Longevity
10/2013/20
Posts: 2,000
Blog Entries: 1
Gender: Male Ingame: Female
Avatar Name:
Rayne Jade Blackmoore
Soc: Praetorian Guard
Location: Atrax Beach, with the rest of the nuts...
EFD: 7,849.35
Reputation: Proficient
Fame: 991 Achievements: 17
Style: Minopolis Araneatrox
Coolness Calypso Ground Assessment Ranged Damage Assessment Melee Damage Assessment
Combat Sense Avoidance Treatment Wounding
Serendipity Medicine Martial Arts Extraction
New Ads...?

I am seeing a lot of new ads on the forum ad banner... Verizon, Coke, etc. That does not really bother me, but at the same time these started appearing I get a lot of these requests to add certain urls to my trusted list and web pages open automatically to even more ads. Is this a result of these new ads on the forum? Anyone else having this issue? The constant clicking "NO" make navigation here difficult at best.

THis is what I am seeing... sometimes 3 times before I can navigate to the requested page.


Click to enlarge

Last edited by Rayne Jade; 06-29-2008 at 17:04.
__________________
Rayne Jade Blackmoore
HoF's: 6 Solo / 9 Team / 9 Mining **** Globals: 304 Solo / 118 Team / 66 Mining / 7 Crafting
Unlocks: MMS, RDA, MDA, Serendipity, CGA, Extraction, Martial Arts,
Medicine, Coolness, Treatment, Avoidance, Wounding, Combat Sense
Ingame since 23 JULY 2005 - Reached 130K Skills on 20 AUG 2008 - Watch My Quest
Rayne Jade is online now Reply With Quote
Old 06-29-2008, 17:12   #2
Old Alpha
byubi's Avatar
byubi Qualifiedbyubi Qualifiedbyubi Qualifiedbyubi Qualifiedbyubi Qualifiedbyubi Qualifiedbyubi Qualified  
  Activity Longevity
10/203/20
Posts: 712
Gender: Male Ingame: Male
Avatar Name:
uzumaki byubi naruto
Soc: Replay
Location: Tunisia
EFD: 84.98
Reputation: Qualified
Fame: 364 Achievements: 7
Style: Segna Chomper
Flower

Thats weird, never happened to me before.
__________________
byubi is online now Reply With Quote
Old 06-29-2008, 17:20   #3
Mature
Falagor's Avatar
Falagor Poor  
  Activity Longevity
3/203/20
Posts: 34
Gender: Male Ingame: Male
Avatar Name:
Falagor Falagor Frostmaster
Soc: Stalkers
Location: Poland
EFD: 505.38
Reputation: Poor
Fame: 0 Achievements: 0

Wierd... seems that you have trojan . Perform computer scan. I dunno if telling names of mostly used online antyviruses is against the forum rules so if you do not know any PM me and i will advice you the best. Also some tool (or manual) control of registry entries and startup programs would be good to have (also no names , most common tool starts with letter "H" ;P).
After scaning and finding virus the best option is changing the password imidiatly to the important aplications (bank accounts, Entropia, etc ).

@edit

Took a look on the rules again and only names that are forbiden are the names of the games and advertisment. So atyviruses are neither games and neither advertisment then:

Online antiviruses: Kaspersky, Bitdefender, Trendmicro Housecall (i advice this one mostly, because it can be run on Mozilla too, and after scaning it shows vulnerabilities in your system update).

The tool: HiJackThis (a bit complicated and better not delete any entries there if you are not sure if they are not necessary or malvare but there are few forums where you can paste the logs and people will be glad to help you ).

Last edited by Falagor; 06-29-2008 at 17:42.
__________________
Globals / HoFs / Spacecrafts
Mining: # / #
Hunting: ##
Crafting: #
I have never deposited and will never deposit
Falagor is offline Reply With Quote
Old 06-29-2008, 17:31   #4
Old Alpha
Shadowsong's Avatar
Shadowsong CapableShadowsong CapableShadowsong CapableShadowsong CapableShadowsong CapableShadowsong CapableShadowsong CapableShadowsong CapableShadowsong CapableShadowsong CapableShadowsong Capable  
  Activity Longevity
5/2012/20
Posts: 925
Gender: Male Ingame: Female
Avatar Name:
Krystal Shadowsong Nova
Soc: Groene Draeck
EFD: 14.00
Reputation: Capable
Fame: 76 Achievements: 2
Style: TI Second Entity

Looks like malware to me. The screenshot shows current site as 127.0.0.1 - that's localhost, in other words, your machine.

Virus scan and malware hunter for starters, and I would suggest you check out this page for info on the exploit vulnerability in ieframe.dll.

This is a known issue with IE7, so if you've auto-upgraded, go to MS for more critical update patches.

Good luck.
__________________
Shadowsong is offline Reply With Quote
Old 06-29-2008, 17:51   #5
Provider
schaefer13 Amateurschaefer13 Amateurschaefer13 Amateurschaefer13 Amateur  
  Activity Longevity
3/2016/20
Posts: 134
Gender: Male Ingame: Male
Avatar Name:
Armin Tarjan
Soc: Entropia Asia
Location: Germany
EFD: 199.78
Reputation: Amateur
Fame: 0 Achievements: 0
Style: Old EF Skin

Quote:
Originally Posted by Rayne Jade View Post
same time these started appearing I get a lot of these requests to add certain urls to my trusted list and web pages open
In the picture you have posted, it is the site 127.0.0.1 that is requesting the permission. This number is localhost, your computer! So it's very likely, that your computer is infected.

I would recommand to use Spybot Search and Destroy www.safer-networking.org and Lavasoft Adaware http://lavasoft.com to find an remove you trojan, virus, malware...

After that, make sure your virus scanner is up to date and perform a full system scan. If you don't have one, get one! There are some scanners free of charge for the private use. I would recommand to get AVG http://free.grisoft.com or avast http://www.avast.com

Ciao, Armin
schaefer13 is offline Reply With Quote
Old 06-29-2008, 17:53   #6
Dominant
Snabble BeginnerSnabble Beginner  
  Activity Longevity
6/206/20
Posts: 469
EFD: 6,081.56
Reputation: Beginner
Fame: 98 Achievements: 1

yes you are infected

those popups are not comming from these forums, they are comming from your infections lol
Snabble is offline Reply With Quote
Old 06-29-2008, 22:56   #7
Stalker
Rayne Jade's Avatar
EntropiaForum Senior Member, click here for more information.
Rayne Jade ProficientRayne Jade ProficientRayne Jade ProficientRayne Jade ProficientRayne Jade ProficientRayne Jade ProficientRayne Jade ProficientRayne Jade ProficientRayne Jade ProficientRayne Jade ProficientRayne Jade Proficient  
  Activity Longevity
10/2013/20
Posts: 2,000
Blog Entries: 1
Gender: Male Ingame: Female
Avatar Name:
Rayne Jade Blackmoore
Soc: Praetorian Guard
Location: Atrax Beach, with the rest of the nuts...
EFD: 7,849.35
Reputation: Proficient
Fame: 991 Achievements: 17
Style: Minopolis Araneatrox
Coolness Calypso Ground Assessment Ranged Damage Assessment Melee Damage Assessment
Combat Sense Avoidance Treatment Wounding
Serendipity Medicine Martial Arts Extraction

Thanks guys and gals! I got the crap removed and all is working fine now!

Rayne Jade is online now Reply With Quote
Old 06-29-2008, 23:42   #8
711
EntropiaForum Owner/Admin
711's Avatar
711 Astonishing711 Astonishing711 Astonishing711 Astonishing711 Astonishing711 Astonishing711 Astonishing711 Astonishing711 Astonishing711 Astonishing711 Astonishing711 Astonishing711 Astonishing711 Astonishing711 Astonishing711 Astonishing  
  Activity Longevity
7/2011/20
Posts: 3,141
Blog Entries: 5
Gender: Male Ingame: Male
Location: EntropiaForum
EFD: 182,398.94
Reputation: Astonishing
Fame: 12 Achievements: 2
Flower

Just to be clear for other members reading this thread:

EntropiaForum does not display any advertisements for logged in users, other than the Entropia Universe-related EF Adspace ads.

Formerly, Google Adsense ads were displayed to normal registered users (disabled for members of the Donators, Adjusted, Improved and Modified usergroups). However, several weeks ago I removed those Google ads for all logged in members:

Google ads removed from EntropiaForum for all registered members

Google ads are now only displayed for visitors (or members who are not logged in to their accounts).

Thus, if you are seeing any advertisements on EntropiaForum, or popups/popunders that seem to originate from EF, it is very likely that your PC is infected by some kind of malware or browser hijacking tool, as was the case in this thread.

A very good and free tool to prevent such malware is BOClean

Other similar tools are available as well. A search of the Technical forum will show many threads where members share tips on such tools.
711 is offline Reply With Quote
Old 06-29-2008, 23:46   #9
Old
bloodrain's Avatar
bloodrain Weak  
  Activity Longevity
1/207/20
Posts: 84
Gender: Male Ingame: Male
Avatar Name:
vLsk Desert Wolf
Soc: Chi Unit
Location: Saudi
EFD: 1,020.14
Reputation: Weak
Fame: 0 Achievements: 0

711 has spoken
__________________
~DW~
bloodrain is offline Reply With Quote
Old 06-29-2008, 23:52   #10
Stalker
Rayne Jade's Avatar
EntropiaForum Senior Member, click here for more information.
Rayne Jade ProficientRayne Jade ProficientRayne Jade ProficientRayne Jade ProficientRayne Jade ProficientRayne Jade ProficientRayne Jade ProficientRayne Jade ProficientRayne Jade ProficientRayne Jade ProficientRayne Jade Proficient  
  Activity Longevity
10/2013/20
Posts: 2,000
Blog Entries: 1
Gender: Male Ingame: Female
Avatar Name:
Rayne Jade Blackmoore
Soc: Praetorian Guard
Location: Atrax Beach, with the rest of the nuts...
EFD: 7,849.35
Reputation: Proficient
Fame: 991 Achievements: 17
Style: Minopolis Araneatrox
Coolness Calypso Ground Assessment Ranged Damage Assessment Melee Damage Assessment
Combat Sense Avoidance Treatment Wounding
Serendipity Medicine Martial Arts Extraction

Quote:
Originally Posted by 711 View Post
Just to be clear for other members reading this thread:

EntropiaForum does not display any advertisements for logged in users, other than the Entropia Universe-related EF Adspace ads.

Formerly, Google Adsense ads were displayed to normal registered users (disabled for members of the Donators, Adjusted, Improved and Modified usergroups). However, several weeks ago I removed those Google ads for all logged in members:

Google ads removed from EntropiaForum for all registered members

Google ads are now only displayed for visitors (or members who are not logged in to their accounts).

Thus, if you are seeing any advertisements on EntropiaForum, or popups/popunders that seem to originate from EF, it is very likely that your PC is infected by some kind of malware or browser hijacking tool, as was the case in this thread.

A very good and free tool to prevent such malware is BOClean

Other similar tools are available as well. A search of the Technical forum will show many threads where members share tips on such tools.
I did not mean to imply that something malicious was happening due to the ads on EF... sorry if it came across like that.
Rayne Jade is online now Reply With Quote
Reply

Bookmarks

Thread Tools
 
EntropiaTracker.com Loot Trends
Hunting Loot: + 70.88 % Mining Loot: + 16.82 % Crafting Loot: + 5.75 %

~ Entropia Universe | Entropia Radio | Entropia Wiki | Entropia Tracker | Entropians IM ~

All times are GMT. The time now is 11:10. | Calypso Time: 11:10

Copyright ©2005 - 2008, EntropiaForum.com.
Entropia Universe is a registered trademark of Mindark PE AB.
All other copyrights and trademarks are property of their respective owners.
Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.