Calgarypuck Forums - The Unofficial Calgary Flames Fan Community
Old 01-18-2017, 09:16 AM   #21
photon
The new goggles also do nothing.
 
photon's Avatar
 
Join Date: Oct 2001
Location: Calgary
Exp:
Default

Quote:
Originally Posted by TheScorpion View Post
Sucuri reports malware. Lots.
It's not really lots, it's one.

The malware is on a template for Wordpress (which runs the main page), so it gets reported in multiple URLs, but it's only in one place. And as far as I can tell it's a pretty old piece of malware so I doubt any browsers are vulnerable to it nowadays.

The forum itself is fine, it just gets flagged along with the main site.

I've removed this particular piece of code a number of times, but it somehow keeps finding a way back in after many months of no problem and I've updated everything I can think of related to Wordpress so I'm not really sure how it keeps finding its way back in.

Should have it cleaned out in a few minutes.
__________________
Uncertainty is an uncomfortable position.
But certainty is an absurd one.
photon is offline   Reply With Quote
Old 01-18-2017, 09:19 AM   #22
TheScorpion
First round-bust
 
TheScorpion's Avatar
 
Join Date: Feb 2015
Location: speculating about AHL players
Exp:
Default

Quote:
Originally Posted by photon View Post
It's not really lots, it's one.

The malware is on a template for Wordpress (which runs the main page), so it gets reported in multiple URLs, but it's only in one place. And as far as I can tell it's a pretty old piece of malware so I doubt any browsers are vulnerable to it nowadays.

The forum itself is fine, it just gets flagged along with the main site.

I've removed this particular piece of code a number of times, but it somehow keeps finding a way back in after many months of no problem and I've updated everything I can think of related to Wordpress so I'm not really sure how it keeps finding its way back in.

Should have it cleaned out in a few minutes.
Just one? Hmm, that's good to hear. Sucuri displays every different page as containing the malicious code, but it makes sense that it would be just the same thing showing up throughout.

Anyhow, thanks for replying!
__________________
"This has been TheScorpion's shtick for years. All these hot takes, clickbait nonsense just to feed his social media algorithms." –Tuco

TheScorpion is offline   Reply With Quote
Old 01-18-2017, 09:31 AM   #23
photon
The new goggles also do nothing.
 
photon's Avatar
 
Join Date: Oct 2001
Location: Calgary
Exp:
Default

Ok I've edited the file and the scan shows it's clean now. I also have to have the site removed from Google's blacklist, I'm requesting a reevaluation from Google now.
__________________
Uncertainty is an uncomfortable position.
But certainty is an absurd one.
photon is offline   Reply With Quote
The Following 9 Users Say Thank You to photon For This Useful Post:
Old 01-18-2017, 10:26 AM   #24
CroFlames
Franchise Player
 
CroFlames's Avatar
 
Join Date: Feb 2015
Exp:
Default

I'm still getting the message on my browser. Using Firefox.
CroFlames is offline   Reply With Quote
Old 01-18-2017, 10:30 AM   #25
sureLoss
Some kinda newsbreaker!
 
sureLoss's Avatar
 
Join Date: May 2004
Location: Learning Phaneufs skating style
Exp:
Default

Quote:
Originally Posted by CroFlames View Post
I'm still getting the message on my browser. Using Firefox.
Yes you will still get the message until google removes calgarypuck from their blacklist.

Photon already submitted a request to have it removed, just waiting on them to re-evaluate.
sureLoss is offline   Reply With Quote
The Following User Says Thank You to sureLoss For This Useful Post:
Old 01-18-2017, 11:10 AM   #26
FanIn80
GOAT!
 
FanIn80's Avatar
 
Join Date: Jun 2006
Exp:
Default

Does this have anything to do with the malware warnings I keep getting when I try to watch donkey porn at work?
FanIn80 is offline   Reply With Quote
Old 01-18-2017, 11:21 AM   #27
cKy
First Line Centre
 
Join Date: Jan 2008
Location: Okotoks
Exp:
Default

my works corporate Trend Micro is losing it's marbles when I come here. Getting 6 risk popups everytime I load a page from the below addresses.

http://forumcdn.calgarypuck.com/clie...lobal.js?v=384
http://forumcdn.calgarypuck.com/clie...tant.css?v=384
http://forumcdn.calgarypuck.com/clie..._menu.js?v=384
http://forumcdn.calgarypuck.com/clie...itor.css?v=384
http://forumcdn.calgarypuck.com/clie...tedit.js?v=384
__________________

cKy is offline   Reply With Quote
Old 01-18-2017, 11:25 AM   #28
photon
The new goggles also do nothing.
 
photon's Avatar
 
Join Date: Oct 2001
Location: Calgary
Exp:
Default

Yeah the forumcnd.calgarypuck.com domain is probably part of the Google blacklist list, so it'll flag those even though those files haven't been changed. When Google completes the re-evaluation and removes the site from its blacklist things should be back to normal.
__________________
Uncertainty is an uncomfortable position.
But certainty is an absurd one.
photon is offline   Reply With Quote
Old 01-18-2017, 02:30 PM   #29
GioforPM
Franchise Player
 
Join Date: Oct 2014
Location: Springbank
Exp:
Default

Same for me on Chrome. Internet Explorer is fine (what have I done???)
GioforPM is offline   Reply With Quote
Old 01-18-2017, 04:03 PM   #30
cam_wmh
Franchise Player
 
cam_wmh's Avatar
 
Join Date: Aug 2009
Exp:
Default

Quote:
Originally Posted by photon View Post
It's not really lots, it's one.

The malware is on a template for Wordpress (which runs the main page), so it gets reported in multiple URLs, but it's only in one place. And as far as I can tell it's a pretty old piece of malware so I doubt any browsers are vulnerable to it nowadays.

The forum itself is fine, it just gets flagged along with the main site.

I've removed this particular piece of code a number of times, but it somehow keeps finding a way back in after many months of no problem and I've updated everything I can think of related to Wordpress so I'm not really sure how it keeps finding its way back in.

Should have it cleaned out in a few minutes.
Quote:
Originally Posted by photon View Post
Yeah the forumcnd.calgarypuck.com domain is probably part of the Google blacklist list, so it'll flag those even though those files haven't been changed. When Google completes the re-evaluation and removes the site from its blacklist things should be back to normal.
Yeah, seems this pops up every 6 months or so.

Any luck cleaning that piece of code? Or is this perpetual ?
cam_wmh is online now   Reply With Quote
Old 01-18-2017, 04:32 PM   #31
photon
The new goggles also do nothing.
 
photon's Avatar
 
Join Date: Oct 2001
Location: Calgary
Exp:
Default

I can edit the files in question to remove the offending code (which is what I do each time), but there's something somewhere which is letting some process edit the file to begin with. It must be related to Wordpress since it's a file in the Wordpress directories that's being edited. And it edits all the header template files so it's looking for a certain file pattern.

But I've updated to the latest version (again).

I guess I could, rather than trying to figure out what's letting in the process, just make the file completely read only so that it can't be updated.

Maybe I'll do that.
__________________
Uncertainty is an uncomfortable position.
But certainty is an absurd one.
photon is offline   Reply With Quote
The Following 3 Users Say Thank You to photon For This Useful Post:
Old 01-18-2017, 05:15 PM   #32
flambers
Franchise Player
 
Join Date: Aug 2002
Location: Calgary
Exp:
Default

Same (three different computers) as of 5pm mst

Last edited by flambers; 01-18-2017 at 05:17 PM.
flambers is offline   Reply With Quote
Old 01-18-2017, 05:28 PM   #33
CsInMyBlood
Franchise Player
 
CsInMyBlood's Avatar
 
Join Date: Oct 2001
Location: F*** me. We're so f***ing good, you check the f***ing standings? Lets f***ing go! F***ing practice!
Exp:
Default

Yeah, same. Happened for me at work and now at home.
__________________

Backlund for Selke 2017 2018
Oilers suck.
CsInMyBlood is offline   Reply With Quote
Old 01-18-2017, 05:50 PM   #34
Aleks
Powerplay Quarterback
 
Aleks's Avatar
 
Join Date: Jan 2010
Exp:
Default

just got the same warning
Aleks is offline   Reply With Quote
Old 01-18-2017, 06:03 PM   #35
jaginla
Crash and Bang Winger
 
jaginla's Avatar
 
Join Date: Nov 2013
Exp:
Default

Quote:
Originally Posted by Robbob View Post
Came to post the same thing. Work computer won't go here at all. Now I have to work.
This is the darkest timeline
jaginla is offline   Reply With Quote
The Following User Says Thank You to jaginla For This Useful Post:
Old 01-18-2017, 06:24 PM   #36
transplant99
Fearmongerer
 
transplant99's Avatar
 
Join Date: Oct 2001
Location: Wondering when # became hashtag and not a number sign.
Exp:
Default

count me in as well tho it looks like after reading this thread its ok to ignore the warning now.........yes?
__________________
transplant99 is offline   Reply With Quote
Old 01-18-2017, 06:39 PM   #37
MRCboicgy
Referee
 
MRCboicgy's Avatar
 
Join Date: Jan 2005
Location: Calgary
Exp:
Default

Just adding to the list. Firefox not liking it and right now, it's essentially a graphic-less page. Kinda retro-minimalist
__________________
You’re just old hate balls.
--Funniest mod complaint in CP history.
MRCboicgy is offline   Reply With Quote
Old 01-18-2017, 09:02 PM   #38
photon
The new goggles also do nothing.
 
photon's Avatar
 
Join Date: Oct 2001
Location: Calgary
Exp:
Default

Looks like Google finished the rescan and I don't get the warnings anymore.
__________________
Uncertainty is an uncomfortable position.
But certainty is an absurd one.
photon is offline   Reply With Quote
Old 01-18-2017, 09:18 PM   #39
TheScorpion
First round-bust
 
TheScorpion's Avatar
 
Join Date: Feb 2015
Location: speculating about AHL players
Exp:
Default

Currently using Chrome on an old Mac -- no warnings to be seen here.
__________________
"This has been TheScorpion's shtick for years. All these hot takes, clickbait nonsense just to feed his social media algorithms." –Tuco

TheScorpion is offline   Reply With Quote
Old 01-19-2017, 02:31 AM   #40
J79
Crash and Bang Winger
 
J79's Avatar
 
Join Date: Apr 2014
Location: Lelystad, The Netherlands
Exp:
Default

Quote:
Originally Posted by Robbob View Post
Came to post the same thing. Work computer won't go here at all. Now I have to work.
For me it's the other way around. No problems at the work computer (thank god, I was scared that I actually had to figure out how things work at the office)

At home it doesn't work... now I have to spend time talking to my wife! Damnit!
J79 is offline   Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -6. The time now is 11:29 AM.

Calgary Flames
2023-24




Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright Calgarypuck 2021