🎉 Celebrating 25 Years of GameDev.net! 🎉

Not many can claim 25 years on the Internet! Join us in celebrating this milestone. Learn more about our history, and thank you for being a part of our community!

MSE warns about linked site

Started by
5 comments, last by AnnaMarie 9 years, 10 months ago

Accessing an older link (http://www.gamedev.net/topic/595984-culling-standard-cw-vs-ccw/) I got a warning from MSE, but only once:

Microsoft Security Essentials blocked content on this website
qoisty.in.ua
Hosted by: www.gamedev.net

Could be an ad that only appears every now and then?

Fruny: Ftagn! Ia! Ia! std::time_put_byname! Mglui naflftagn std::codecvt eY'ha-nthlei!,char,mbstate_t>

Advertisement
I had the same problem with Avast yesterday. Not sure in which thread it happened.

But I should probably switch to another antivirus anyway, Avast detected my Monogame project as a virus after I added an (empty) for-loop. biggrin.png

I don't see anything suspicious about the page itself, so my guess would be that it may have been triggered by an ad -- if anyone sees the a similar message it would really help us out if you can note any ads being displayed at the time so we can try to track down any that cause problems.

- Jason Astle-Adams

Just got another message in this thread.
The infected URL is 75.102.9.195/4slEq91QPW.js?RZGeWlA=041800b3427cd1

And another one: 75.102.9.195/aWThNpr3fgmGA.js?a13wxDLSo6XWPRJ5yVpes4nK=041800b3427cd16
For some reason I don't see any ads (even with disabled adblock), only a green "sponsor" area after the first post, so I can't tell you which ad causes it. sad.png

I only get this on page load and it does not always occur, but most of the threads I've accessed are old "out of date" ones. Does not seem to be a connection between what old thread it is. just randomly based on when I load the pages.

I too am getting this problems and it seems to be trying to access a site named ploskinis.com, which is the same ip as listed above. It appears to inject a javascript url to that domain but I see it only in the specific instance noted below.

For me it is only triggered when I search for a forum post and click from there. For example:

I clicked this article from the front page:

http://www.gamedev.net/page/resources/_/technical/game-programming/anatomy-of-an-idle-game-a-starters-guide-to-angularjs-r3767

No warning. After searching the article through the google search in the top right I am taken to the exact same link but javascript has been inserted into the web page. Reloading the searched link will always trigger it. However, reloading the link not searched appears to never trigger it.

Here is the link from the front page, no search:

http://oi57.tinypic.com/6tpseg.jpg

Here is the link from the search, with javascript inserted:

http://oi57.tinypic.com/2n71rg2.jpg

Probably worth noting, I ONLY saw the warning when I viewed the post in the exact same tab that I was searching in. If I copy and paste the URL to a new tab the javascript I noted above is indeed absent. I see it only when using the search function and date doesn't matter. I tried this one from 2014, and tried another article from 1999.

Sorry for the large links, I thought there was a way to shorten them but I must have forgotten. I hope that helps! biggrin.png

Edit:

After testing the same idea of it being linked to the search I tried every article on the front page with the same results. I even tried it with this post and I can indeed confirm for me the insertion only occurs when using the search.

This topic is closed to new replies.

Advertisement