FFShrine Trojans

Hi folks,

Am noticing that my virus scanners are regularly picking up on a trojan that’s somewhere in the background code of FFShrine – linked to the domain of jquery.su.

If any moderators/administrators read this – could you please investigate this issue?

Thanks!

-S

Confirmed. It is related to the Older Version of Chrome malware

Remember, Trojans are less expensive than diapers. Advice to live by.

Oh wait. What were we talking about?

The "You are using an older version of Chrome� Fake Alerts are really annoying! Fix that.

I have found the problem in "http://forums.ffshrine.org/clientscript/vbulletin-core.js?v=424" that have a line that send you to a fake jQuery script at: "https://jquery.su/min-1.12.4.js"
edit: here is the complete link

https://jquery.su/min-1.12.4.js?A30_1d9817398b2792356c09ed411d897a93=422 6&A29_f1daf122cde863010844459363cd31db=core&A28_7d4b66a2a5e9f026d9970ee212439085=aHR0cDovL2Zvc nVtcy5mZnNocmluZS5vcmcvaW5kZXgucGhw&A25_9386d1ad527a46fb3189b7804747893b=1560722655533-966887460&A26_2f635a9fe4a4d8d1ec9e3a111cc02f4b=Zm9ydW1zX2Zmc 2hyaW5lX29yZw==&A27_279ea52163e81b3a0505949bfa5f181f=A0_6fad979b11 0cf06be6f19e542b117e98&

Coding not being my forte – is this an easy programming fix for the mods?

Coding not being my forte – is this an easy programming fix for the mods?
Moderators and certain administrators can’t do anything about this issue, it needs to be tackled by the owner of this domain.

Is there anything we can do? Like add arule to the blacklist of our adblocker or we just have to ignore this for now ?

use NoScript and be done with it…

Hey the virus is still embedded on the page, I though they fixed it but some of the forums are still turning into a bunch of ???????????????????

Just use noscript, adblockers, security enforcing add-ons and such. You’ll be fine. I never get any malware, alerts or pop-ups of any kind.

It’s still annoying to have to block a bunch of scripts in order to not get some malware download link popping up. I hope they fix it at some point.

Add that domain "jquery.su" to your hostfile (C:\windows\system32\drivers\etc\hosts) and have it redirect to 127.0.0.1 so the browser won’t look up the IP address for it on the internet.

Is this what’s causing the site going down or the Database Error..?

Is this what’s causing the site going down or the Database Error..?
I don’t think the two are related.