Doctor Go
06-16-2019, 05:04 PM
Following the site shut-down last week, every time I go to the site, the screen goes crazy and I get this error message:
.
.
.
.
Well, I would add an image of what I get on screen, but the Shrine WON'T let me add or attach an image. Following all of the rules, size, dimensions, etc. but no luck.
Anyway, there's a weird screen that takes over the browser every time I open the Shrine. Mods should take a look at it. They can also email me and I will email the image that I can't upload here.
Mattrex87
06-16-2019, 09:41 PM
Currently the only way to get rid of it, until you shut down your browser session, is to refresh the homepage.
Doctor Go
06-17-2019, 03:02 AM
Which is what appears to get rid of it. Until you open the webpage again.
Any fix for this on the horizon? It just seems annoying, not destructive - yet.
Lefance
06-17-2019, 04:43 AM
I had the exactly same problem, been avoiding FFS for a few days due that... but now it seems to work again. Phew!
Mattrex87
06-17-2019, 01:35 PM
Yeah, seems to be gone now.
Nope, still the same. Virus warning, happens twice every time you opening, or go back to, any page.
Following the site shut-down last week, every time I go to the site, the screen goes crazy and I get this error message:
This happens to me too when I try to sign in with Chrome. With Internet Explorer there is no problem.
Dracula
06-17-2019, 07:31 PM
Has anyone confirmed the problem has been cleaned up? Was FFShrine hacked?
Still happening, but now only once per page upload.
So progress?
Either that, or the second attack is now getting through. I don't know.
DavidRaphael
06-19-2019, 05:07 AM
It appears to be KPOT Stealer malware, which is pretty nasty if not removed from your computer and can lead to personal data being stolen and even ID fraud.
I saw the pop-up with the fake Chrome updater a few times so have kept away from the site for a few days.
I just tried the site now for the first time and didn't see it this time. That said, I do have malwarebytes, cybersec, adblock and a host of other plugins.
I would think the site needs a serious security update, especially because it's not yet HTTPS.
dR
QMarks
06-19-2019, 05:22 AM
For now just use uBlock Origin or something like that and block the jquery.su domain to be safe.
DavidRaphael
06-19-2019, 05:33 AM
I'm using uBlock Origin but I can't work out how to specifically block the jquery.su domain.
QMarks
06-19-2019, 05:35 AM
Open the uBlock Origin Dashboard, go to the My filters tab, and add the domain there.
That being said, I heard it might still occasionally slip by somehow regardless, so you might also want to go with NoScript on top of that just to be sure.
KusanagiShiro
06-19-2019, 06:26 PM
I reached out to Sarah and she is looking into it
uyjulian
07-18-2019, 12:46 AM
This message?

sisterfate
07-26-2019, 08:17 PM
Same for me today - it has returned! :(
ani2424
07-26-2019, 11:33 PM
Is there something I should do if I experienced this? How do I remove it? On a mac.
uyjulian
07-27-2019, 02:30 AM
Is there something I should do if I experienced this? How do I remove it? On a mac.
Refresh the page, and it will disappear for a few days.
DO NOT install anything on your system.
Powered by vBulletin® Version 4.2.4 Copyright © 2019 vBulletin Solutions, Inc. All rights reserved.