Hi guys!

Hate to de-lurk for this reason rather than a happy and contributory manner, but for those who google the site "Galbadia Hotel" or indeed "ffshrine" will find that the links in the search results are appended with a link saying "This site may harm your computer" - if you click on the site link itself, you get the following:


Warning - visiting this web site may harm your computer!
You can learn more about harmful web content and how to protect your computer at StopBadware.org.

Suggestions:

* Return to the previous page and pick another result.
* Try another search to find what you're looking for.

Or you can continue to http://www.ffshrine.org/ at your own risk.

If you are the owner of this web site, you can request a review of your site using Google's Webmasters Tools.
Advisory provided by Google


I assume this is bad. Not because the site appears to have been hacked or have anything harmful associated with it, but maybe some person or organisation has some sort of vendetta with the site and have reported it.

Just thought I'd bring this to your attention.

Hi again!

Nah, its because i am, Harold Shipman, Myra Hindley, skeletor and rain man all rolled into one. Pretty much pure evil. Thats maybe why your getting a warning. Also welcome :)

I got that too.

it'll probably harm your mind more than your PC

LOL, this is so awesome :D.

****.

sry.

haha

ITS ALL THE ADWARE SARAH PUT IN THE SITE!

Srsly though, can you sort this out Sarah?

It's a pain in the ass to have to change my firefox options every time I come here :(

I don't see anything?


Edit: Never mind I saw it.

yeah what's up with that? i just got the message too, first time for me :(

Yeah, I just got that message when searching for a soundtrack and came here to see if other people had seen it. Ridiculous.

google is hatin' on the shrine :(

woohoo guys, we are baddass.

thats why the one piece of software u should spend good money on is a security suite...i mean u can get hacked just by watching a quicktime video...thats one of the reasons why they are always updating the damn thing every week

It's not like Sarah even exists anymore.





*INTIMIDATING SHOUT* at you all !

The mainpage is infected. Sarah knows about it, I think

Trucy is infected.......with Love from Apollo.

just sayin'~

yeah what's up with that? i just got the message too, first time for me :(

Google is tellin' me that you're bad for my PC. Sorry, just keepin' it real!

woohoo guys, we are baddass.

Was going to say that too... x]

I don't get it blocking me. This site is listed in my favorites, so i just click it and it comes straight to the main page. I haven't searched for it through Google in ages.

I get a virus that my anti-virus software how to heal everytime i come on here lol.

What did you just say?

This happened to me too. This is my first visit in a looooooooooooooooooong time (are people like Trent still here?), but it's my first. i.e. this never cropped up, er ... a year a go for instance.

What did you just say?

I get avirus when I go to the main site and so my anti-virus has to get rid of it.

I get avirus when I go to the main site and so my anti-virus has to get rid of it.

oh dear...it's like visiting your favorite whore time and again only to get VD, and continually have to get rid of it.

If this is true my PS3 might be in trouble...

I hope it is....I really hope it is




























Ps. I dont really

spunodi don't listen to google google is a baby word! think about it

Yeah, I was wondering about this too. I signed up to download Dakota Star songs, and t3h google is scaring my :(

There's more information on this here (http://www.google.ca/support/bin/answer.py?answer=45449&topic=360&hl=en&sa=X&oi=malwarewarninglink&resnum=8&ct=help).

There's also a link for the admins here to basically ask them to unblock it. Honestly, I think it's important, because this would turn away a ton of people who should come to this great site. :)

http://www.americanmcgee.com/wordpress/2008/03/11/this-site-may-harm/

Look there, McGee had problems with it too but solved it... Maybe it's usefull?

it has been fixed!

I went on google and it still says the same thing though =/

it will take a while for google to reindex afaik but the virus is no longer present so should sort itself out in a while~

oh ok :]

This is good news. :)

I posted about this in the mods section -- I didn't realize there was a thread about it here too. I shoulda checked this first. Glad to know it's getting sorted. I have an antivirus enabled, of course, and it never reported any problems with the site.

it will take a while for google to reindex afaik but the virus is no longer present so should sort itself out in a while~

Sarah could use Google webmaster tools to request a site review to speed the process, but considering Ddiao was in the db for over a week without any action from Sarah, I doubt they'll bother doing even this simple task.

OR: Lyke, omgz we just killded da Prince in Kara but no phat l3wtz calls GM bawbawbawbawbawbawbaw.

I'm just glad that it doesn't seem to have hurt the site's overall Google ranking, at least not that much, anyway, if at all.

Yeah, I get the same warning message too. I stay away from sites that say that mostly, but since I have been here before that warning, I came anyway.

Sarah could use Google webmaster tools to request a site review to speed the process, but considering Ddiao was in the db for over a week without any action from Sarah, I doubt they'll bother doing even this simple task.

already done. said it could take up to two weeks.

Nah... it's already sorted!

Nah... it's already sorted!

yay! :D

only on some datacenters, actually. it's still there on some :-(

Ouch. Well, at least it's a start.

it has been fixed!

Actually, no it hasn't. I went to the main page yesterday, and got the virus. Luckily, Norton anti-virus pwned the virus. xD It's probably because of all the ads, some ad companies like to sneak in malware and viruses to pop up extra ads when you aren't on their host's site to earn extra money...

Maybe it was fixed, and then it cropped up again, yeah. I was back over at Google today and the message was up again. Honestly, if these ads are causing the problem, then we need to ditch them.

Actually, no it hasn't. I went to the main page yesterday, and got the virus. Luckily, Norton anti-virus pwned the virus. xD It's probably because of all the ads, some ad companies like to sneak in malware and viruses to pop up extra ads when you aren't on their host's site to earn extra money...

It was fixed.

Without the ads it might be harder to finance ffs. If they're really back and are liable to continually return then we may be between a rock and a hard place!

oh teh noes!

Without the ads it might be harder to finance ffs.
More than one of us have said more than once that if there are problems with funding, we'd be happy to donate to some sort of donation box, if only one were available. Especially if it would help get rid of bad ads that have the potential damage the site and scare visitors away. We just wish that someone would listen.

I don't know how much the forum costs at the moment. I think it is pretty steep, not sure how feasible it would be for us to finance it, even a lot of it, though really we'd need to talk to sarah about this.

I remember seeing Sarah saying something that the site cost was about 700-800 bucks a month.

Don't quote me though.

lol virus come bback

More than one of us have said more than once that if there are problems with funding, we'd be happy to donate to some sort of donation box, if only one were available. Especially if it would help get rid of bad ads that have the potential damage the site and scare visitors away. We just wish that someone would listen.

what ads?

if a lot of people were willing to donate it'd help, sure, but I don't see that happening. two or three people donating 10$ a month isn't going to do much, and I'd rather not even take that money from people to be honest ;-;;

What ads? I don't know. I'm just going by what's being said here, which is that ads being posted by unscrupulous advertisers are causing viruses to be introduced into the site. If that's not the case, that's fine -- I don't really visit the main site that much myself, so I have little way of knowing independently whether that's actually true or not.


As for this whole thing about 2-3 people donating $10 a month or so -- who says it'd be that little? You wouldn't know until you tried. As for the idea of just not taking that money, why not? They're our boards too -- we're the ones who post on them and enjoy them. If there's something we could do that would help the site and/or the boards, we wanna help.

It was fixed.

Without the ads it might be harder to finance ffs. If they're really back and are liable to continually return then we may be between a rock and a hard place!

I'm not saying they should remove all the ads, just get new ones that aren't put up there by the companies that use viruses and malware in their ads.

There were times (still are) where I think someone within this site is causing my computer problems. I won't get into detail but I certainly don't trust this site, not with my computer or my sanity! So I took a super hiatus and usually when I come back I have to try logging in up to 15 times, mostly being redirected to another "you're not logged in" page, smells like fish..


ALSO damnit, if I click on the "bullets" icon b4 I post it sends out a relentless pop-up bubble noise that doesn't end till' I escape off line. WTF is that Ender, WTF!

Yeah the forums do boot me off often. Even after clicking the 'remember me' it still asks me for login info after I come in like the next day. I didn't even delete cookies or anything for it to prompt me to do so =/

Its fine for me. The site is listed in my favorites, and all i do is click ffshrine out of the list, and it comes straight to the front page, and I'm already logged in. The only problems I seem to get, is sometimes when i post, it lags, then says the page timed out, and i have to post again. But that's it.

I'm never booted off the site as far as being logged in goes. I'm using the latest version of Firefox 2.0. What browser are you guys that are getting booted using?


I don't get timeout errors either, but I do get annoying problem where sometimes the page starts to load, then will seem to just stop for a while before it starts again. I suppose that could cause a timeout on some browsers.

I use both Safari and Firefox, and non of this happens to me?

It may just be my internet explorer =/

I, too, have that Google warning... Havin Firefox 2.0, as well

So, who of the people not having the problem and those who have it, actually have the Google Bar installed?

I have "Googlebar" installed, though I believe what I'm using is third-party.

What about antivirus / security software? I'm using Norton.

I'm using Norton.

LULZ, Norton! =D
(fyi, I used Norton twice, and it caused two times the absolute crash of my system so I had to format my HDD)

I'm using Sygate Firewall and Antivir, however, I doubt that it comes from said programs.
It's two possibilities: The Ad-Blocker or the Googe Bar. However, I more think it's the Google Bar, seeing as the ABP I use is Firefox-exclusive.
However, Google Bar is the same for all browsers - this one might be the cause for the warning.

Also:


Review Results from StopBadware
Email sent: 04/23/2008
We have received and processed your request for review of your website, ffshrine.org/. It appears that your site does not currently host or distribute badware. As such, the Google warning page for your site has either already been removed or should be removed shortly. In addition, if your site has been listed in our Badware Website Clearinghouse, we will be removing your site from the Clearinghouse list.

Sometimes website owners are confused about why Google placed a warning in the search results for their site. In many cases, a website run by an innocent site owner has been hacked by a malicious third party, causing the site to distribute badware without the site owner's knowledge. If your site was distributing badware because it has been hacked, then simply removing the bad code from your site is not enough to keep your site clean in the future. You will also need to work with your hosting provider to fix all security vulnerabilities associated with your site.

Please note that we will be retesting your website at periodic intervals in order to monitor that it remains free from badware. If we find that you are hosting or distributing badware in the future, the reviews process may take considerably longer than the original review.

The StopBadware Team

Yeah, I've heard bad stuff about Norton in the past, but I've always run it and never had any major problems with it. Guess either I'm lucky or some of the people that use it have been unlucky. In any case, though, I am considering other free alternatives and maybe ditching it. Still, I have a good while left on my subscription, so I see no reason to ditch it straightaway because it's working for me.

Sarah get some ads from Pokemon USA please

Odd, luckily I am using Linux so I will not be affected. Wonder how this site got infected.

Love your username. :)

Agent0042 I like my username more than yours.

...

(sorry!)

Love your username. :)
LOLZ Thanks, it is cool because 42 is the meaning of life, the universe, and everything! XD

Speaking of anti-virus software...does anyone reccommend any good *free* anti-virus? I mean, I'm going to dish out the money soon to buy a subscription for McAfee... but at the moment, it looks like my computer is need for some serious protection.

My friend RAMChYLd recommends either AVG (http://free.grisoft.com) or Avast. I'm thinking of maybe trying out the former myself, mainly because while Norton is working for me, I'm beginning to realize it's a space hog.

I use AVG currently, but sometimes I feel like I'm not getting enough (thus why I'm buying the Mcafee subscription).

:) Thanks though.

honestly though i don't think this site could stay up without ads because i doubt people would pay enough for it to make it so that then again maybe i am wrong we may have some rich millionaire here that is hiding out and doesn't want to be known

Why does everyone keep mentioning ads?

I see none.

mainsite/gh

Seeing as the main issue here are the adverts, have you lot tried Adblock Plus? Its and extension for Firefox and it blocks the built in to the page adverts from being displayed.

Get it here: https://addons.mozilla.org/en-US/firefox/addon/1865

You still get the message from Google though, but i've never had any problems after using GH so im pretty much ignoring it.

I use Avira Anti-Vi. It seems to do the job for me. :)

Yeah, I use AdBlock Plus.

According to this Google related URL and the warning...

http://www.google.com/safebrowsing/diagnostic?site=http://gh.ffshrine.org/

Safe Browsing
Diagnostic page for gh.ffshrine.org/
What is the current listing status for gh.ffshrine.org/?

Site is listed as suspicious - visiting this web site may harm your computer.

Part of this site was listed for suspicious activity 3 time(s) over the past 90 days.

What happened when Google visited this site?

Of the 624 pages we tested on the site over the past 90 days, 274 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 06/03/2008, and the last time suspicious content was found on this site was on 06/03/2008.

Malicious software includes 257 trojan(s), 19 scripting exploit(s). Successful infection resulted in an average of 2 new processes on the target machine.

Malicious software is hosted on 2 domain(s), including playon1ine.com, 1ive.net.

Has this site acted as an intermediary resulting in further distribution of malware?

Over the past 90 days, gh.ffshrine.org/ appeared to function as an intermediary for the infection of 3 site(s) including wykop.pl, riemurasia.net, geocities.com/lain_de_la_red2007_03.

Has this site hosted malware?

No, this site has not hosted malicious software over the past 90 days.

How did this happen?

In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.

Next steps:

Return to the previous page.
If you are the owner of this web site, you can request a review of your site using Google Webmaster Tools. More information about the review process is available in Google's Webmaster Help Center.

The last time Google visited this site was on 06/04/2008, and the last time suspicious content was found on this site was on 06/03/2008.

keke. should be sorted for good. big thanks to ketzu ~

Just now GH installed smart.dll on my system, which was infected with PSW.Generic6.NKO. Thankfully, it seems AVG caught it before it did any harm. Doing a quick Google Search on what smart.dll is, it seems it's part of a lot of different programs (legitimate ones, like WindowBlinds), but there's a trojan that fakes being smart.dll. One forum post I came across suggested it's for stealing passwords to Final Fantasy 11 (which matches the Google scan saying it's related to the site playon1ine.com, which sounds like a FF11 scam site).

The forum post I came across describing the smart.dll password stealing trojan also said installing the Noscript plugin in Firefox seemed to help to stop it from installing.

as far as I know all infected code was removed. google agrees with me so far ;(

if something else is still installing stuff I have no clue what it could be

I was getting virus warnings a few days ago whenever I activated a hyperlink on this site (I use McAffee), but that seems to have stopped. Thanks to whoever neutralized the problem. ^_^

Actually, scratch that. I JUST NOW got a warning from my Spybot Search and Destroy real-time blocker saying that Windows detected a value attempted to be added to the Logon registry, whatever that means. Absolutely no clue if it's related to using the FFShrine main site, but I'm letting you know just in case. Geez, scary... <_<

that doesn't sound like it's related.

if you get one when opening urls let me know which urls they are

I keep getting a virus message on the main page and it always freezes my firefox so bad I have to restart my computer

no offense, but this is something you guys seriously need to sort out

aryan jellyfish, this is off-topic and all, but I'm looking for "Space Channel 5 Part 2 Moji Moji - Can't Stop Remix" and you said in a post long ago that it was added to galbidia hotel but it wasn't.

I'm desperately looking for this soundtrack so I would just like to know if you have the soundtrack or any means for me to get it.

aryan jellyfish, this is off-topic and all, but I'm looking for "Space Channel 5 Part 2 Moji Moji - Can't Stop Remix" and you said in a post long ago that it was added to galbidia hotel but it wasn't.

I'm desperately looking for this soundtrack so I would just like to know if you have the soundtrack or any means for me to get it.

Thread 46519
I dont know if its what your looking for but....idk

I keep getting a virus message on the main page and it always freezes my firefox so bad I have to restart my computer

no offense, but this is something you guys seriously need to sort out

no one else has mentioned anything and google no longer reports us as being infected, so I'm guessing it's something on your end

no one else has mentioned anything and google no longer reports us as being infected, so I'm guessing it's something on your end

yeah I managed to fix it, for some reason Threatfire didnt like your website (so screw them right?:iveseenthings:)

Thread 46519
I dont know if its what your looking for but....idk

Yes, but the "Can't Stop Remix" download link is expired, so I'm still trying to get it. Is it supposed to be in Galbadia Hotel but never got there?

You should probably redirect your question to that section. More people can help you there than in a thread over in this section that doesn't really have much of anything to do with what you're asking about.

no one else has mentioned anything and google no longer reports us as being infected, so I'm guessing it's something on your end



Yeah, I don't think so. That's the offending object right there, and it's there right now. Somehow this thing keeps ending up on the front page.

thanks for spotting that. the last bit of code they hid was pretty clever, google hadn't detected it ("The last time Google visited this site was on 06/22/2008, and the last time suspicious content was found on this site was on 06/03/2008.") and I probably wouldn't have either.

it's removed now.

I got that too.

Same here. Google Chrome does that to me as well.

Why did you revive this just to say that?

Why did you revive this just to say that?

I dunno why he did, but just now in Firefox I got the same warning every time I clicked on a new link. It didn't matter if it was GH or the forums. Made it impossible to log in. I had to open Safari, which I never use, just to log in to type this.

So yeah, not sure what the deal is, but it is really annoying.

Why did you revive this just to say that?

considering he replied AFTER I said it was sorted-- and after people haven't had this problem for a while-- I'd say it's more than relevant. your post, however, was not.

stop being a twat.

Was there really any point in that? That post is two weeks old.

Are you still annoyed with me over questioning the ban on Swami or something?

Also I was googling some stuff and came across forum links with the message about how it might harm your computer or w/e.

This is happening to me with Firefox. Every page I visit and every time I visit the site I have to keep clicking on ignore the warning. It's getting pretty annoying.

If it's really bugging you that much, you can just turn it off. Tools, Options... and then click off the checkbox for "Tell me if the site I'm visiting is a suspected attack site" and then click OK.

The Attack Site thing is back up. I can't get access to the main site. :/ Here's what it said:


Of the 846 pages we tested on the site over the past 90 days, 9 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2009-02-11, and the last time suspicious content was found on this site was on 2009-02-10.

Malicious software includes 16 scripting exploit(s), 3 trojan(s). Successful infection resulted in an average of 3 new processes on the target machine.

Malicious software is hosted on 5 domain(s), including ffshrie.com/, yinjoy.net/, cgi35.plala.or.jp/bto/.

This site was hosted on 3 network(s) including AS21844 (THEPLANET), AS32748 (STEADFAST), AS19166 (ALPHARED).

http://safebrowsing.clients.google.com/safebrowsing/diagnostic?client=Firefox&hl=en-US&site=http://gh.ffshrine.org/


Seriously? What is going on? I mean yeah the MP3s are up, but I still don't know why it kept getting this virus issue. I don't want my computer to be infected. T__T

Lurker here, I was disappointed to find this site down a few days ago when I came looking for a soundtrack, but glad that it's up again... only to get this warning from my antivirus program...

13/02/2009 8:50:33 AM SYSTEM 1692 Sign of "SWF: Downloader [Trj]" has been found in "http://images.hkinchina.info/movies/ver.swf" file.

Not a big fan of trojans, and I really hope there wasn't some other undesirable crap that managed to get past my anti-virus/spyware/malware defenses. I hope this helps in cleaning it up.

I love this site and hope it stays up forever, but I don't want to visit here if it'll just fuck my shit up >_>

I believe this is my first post, and I'd like to post more often, but it's kinda hard to do especially when I'm more active with other sites along with personal stuff.

Hope this post helps out. I highly recommend everyone to post logs of their anti-whatever programs to help the site admins out to help speed the process up.

Firefox is warning me, also, that this site and galbadia hotel may harm my computer.

I just do the usual. Just ignore it.

Roger! Wilco!

The google pop-up is very annoying. ANything to get rid of it would be great.

The question is more: does the site really harm your computer ? This, and the many broken links, are quite problematic...

I don't go to the main site, ever. This computer is new and I don't want anything screwing with it. I can get downloads from the forums and post my own stuff here, so there's no real problem. It would be great if the main site was running, but I'm afraid to use it.

I'm not really a regular here, I mainly just go to Galbadia Hotel for OST downloads (for games I own, of course).

But one thing that has remained constant throughout my visits to GH and my lurking of these forums is the malicious downloads that ALWAYS seem to flood my system every time I visit. I know how to control them and get rid of them, but the point is that THEY SHOULDN'T HAPPEN! Not everyone can control these pests like I can.

What kind of site do you run here?? Google says it's possible that this could be a result of third-party injection (via ads, etc), but this doesn't seem likely since no third party scripts even show up on NoScript except for statcounter.com (which I know is trusted). The main page especially is riddled with malicious scripts and drive-by downloads. Either someone on the inside (a staff member who has access to the server's files) has a vendetta against this site, or the main admin (I presume this is Sarah?) put them there on purpose! I don't mean to accuse or insult, but I find it highly stupid that there's been malware on this site for christ knows how long and nothing has been done about it. People can bitch and whine all they want that ffshrine is a safe site and the malware has been eliminated, but that's just not true. It's still at large, and is still attempting to intrude my system as I type.

I can't visit this site anymore without AVG buzzing me about tracking cookies and attempted registry edits. Spybot goes crazy with registry change confirmations.

Google does take a while to update it's warnings, but it's never THAT long, probably 3-5 days at most. This malware has been present for months, and still is.

Do something about these threats soon, or you could risk losing a LOT of members. I'm sure people don't take kindly to the way these threats are being just being ignored.