Hard Light Productions Forums

General FreeSpace => FreeSpace Discussion => Topic started by: The E on May 19, 2011, 02:18:07 pm

Title: FSMods infected again?
Post by: The E on May 19, 2011, 02:18:07 pm

When trying to visit the site, Chrome warns in big scary letters that it contains content from a malware site.

Title: Re: FSMods infected again?
Post by: FreeSpaceFreak on May 19, 2011, 02:21:45 pm

Confirmed, my avast reports a trojan blocked - freespacemods.net/e107_files/e107.js

Title: Re: FSMods infected again?
Post by: 0rph3u5 on May 19, 2011, 03:03:42 pm

Thanks for the advance warning ... so all Asc-related-PR action halted for the time being...

Title: Re: FSMods infected again?
Post by: achtung on May 20, 2011, 04:24:04 am

Working on cleaning this up now. I really need to keep my eyes on those e107 updates. Looks like it was some javascript ****ery.

EDIT: Should be clean, please confirm.

EDIT2: Looks like entry was through a disabled calendar plugin. It also looks like it affects the current version of e107 as well. I wasn't just being a lazy oaf! :p I'll keep a close eye out for any more intrusions until a fix is released.

Title: Re: FSMods infected again?
Post by: Nuclear1 on May 20, 2011, 05:04:13 am

It seems to be just fine for me.

Title: Re: FSMods infected again?
Post by: FreeSpaceFreak on May 21, 2011, 04:13:27 am

Still infected for me, after refreshing too.

Title: Re: FSMods infected again?
Post by: achtung on May 22, 2011, 12:32:47 am

Yep, same exploit as before. I'm going to sift through what logs I have and see if I can find out how it's getting in. For now, I've removed the offending javascript so things should be safe for a moment.

Title: Re: FSMods infected again?
Post by: achtung on May 22, 2011, 06:47:52 pm

Site is going down until further notice. Database has been backed up, as well as files.

Title: Re: FSMods infected again?
Post by: achtung on May 25, 2011, 04:11:06 pm

Cautiously bringing everything back.

Title: Re: FSMods infected again?
Post by: BengalTiger on May 25, 2011, 04:11:41 pm

That's good news.

Title: Re: FSMods infected again?
Post by: jr2 on May 26, 2011, 06:18:01 pm

:yes:

Title: Re: FSMods infected again?
Post by: 0rph3u5 on May 27, 2011, 04:30:03 pm

Wonderful, man...

... now let's produce some material to celebrate once the forums/downloads are back up!

Title: Re: FSMods infected again?
Post by: Nyctaeus on May 27, 2011, 04:49:56 pm

Quote from: 0rph3u5 on May 27, 2011, 04:30:03 pm

Wonderful, man...

... now let's produce some material to celebrate once the forums/downloads are back up!

I'm preparing something nice for that occasion :D. Nice to see FSMods in one piece.