Doctor Go
06-16-2019, 05:04 PM
Following the site shut-down last week, every time I go to the site, the screen goes crazy and I get this error message:

.
.
.
.

Well, I would add an image of what I get on screen, but the Shrine WON'T let me add or attach an image. Following all of the rules, size, dimensions, etc. but no luck.

Anyway, there's a weird screen that takes over the browser every time I open the Shrine. Mods should take a look at it. They can also email me and I will email the image that I can't upload here.

Mattrex87
06-16-2019, 09:41 PM
Currently the only way to get rid of it, until you shut down your browser session, is to refresh the homepage.

Doctor Go
06-17-2019, 03:02 AM
Which is what appears to get rid of it. Until you open the webpage again.

Any fix for this on the horizon? It just seems annoying, not destructive - yet.

Lefance
06-17-2019, 04:43 AM
I had the exactly same problem, been avoiding FFS for a few days due that... but now it seems to work again. Phew!

Mattrex87
06-17-2019, 01:35 PM
Yeah, seems to be gone now.

JonC
06-17-2019, 02:10 PM
Nope, still the same. Virus warning, happens twice every time you opening, or go back to, any page.

PPKA
06-17-2019, 04:29 PM
Following the site shut-down last week, every time I go to the site, the screen goes crazy and I get this error message:


This happens to me too when I try to sign in with Chrome. With Internet Explorer there is no problem.

Dracula
06-17-2019, 07:31 PM
Has anyone confirmed the problem has been cleaned up? Was FFShrine hacked?

JonC
06-18-2019, 02:54 AM
Still happening, but now only once per page upload.
So progress?
Either that, or the second attack is now getting through. I don't know.

DavidRaphael
06-19-2019, 05:07 AM
It appears to be KPOT Stealer malware, which is pretty nasty if not removed from your computer and can lead to personal data being stolen and even ID fraud.

I saw the pop-up with the fake Chrome updater a few times so have kept away from the site for a few days.

I just tried the site now for the first time and didn't see it this time. That said, I do have malwarebytes, cybersec, adblock and a host of other plugins.

I would think the site needs a serious security update, especially because it's not yet HTTPS.

dR

QMarks
06-19-2019, 05:22 AM
For now just use uBlock Origin or something like that and block the jquery.su domain to be safe.

DavidRaphael
06-19-2019, 05:33 AM
I'm using uBlock Origin but I can't work out how to specifically block the jquery.su domain.

QMarks
06-19-2019, 05:35 AM
Open the uBlock Origin Dashboard, go to the My filters tab, and add the domain there.

That being said, I heard it might still occasionally slip by somehow regardless, so you might also want to go with NoScript on top of that just to be sure.

KusanagiShiro
06-19-2019, 06:26 PM
I reached out to Sarah and she is looking into it

uyjulian
07-18-2019, 12:46 AM
This message?

sisterfate
07-26-2019, 08:17 PM
Same for me today - it has returned! :(

ani2424
07-26-2019, 11:33 PM
Is there something I should do if I experienced this? How do I remove it? On a mac.

uyjulian
07-27-2019, 02:30 AM
Is there something I should do if I experienced this? How do I remove it? On a mac.

Refresh the page, and it will disappear for a few days.

DO NOT install anything on your system.