The forum of the forums
Welcome to the Official Support Forum of Forumotion!

To take full advantage of everything offered by our forum, please log in if you are already a member, or join our community if you've not yet.



Create a free forum like this one.

(Only Topic)Possible hack, Need assistance/Pop up message

View previous topic View next topic Go down

Important (Only Topic)Possible hack, Need assistance/Pop up message

Post by dbagnall on April 3rd 2011, 9:14 pm

Every user on my forum is reciving the message in the screenshot, I have no idea what it is. I have not changed anyting in my admin pannel or spammed anyone

My forum is http://suicidegamers.realmsn.com/
or http://suicidegamers.co.uk/



The site Hosted.3rdfleet.com is noting to do with us

Made an Only Topic ~ Joph25


Last edited by dbagnall on April 4th 2011, 12:24 am; edited 1 time in total

dbagnall
New Member

Posts : 8
Reputation : 0
Language : Manchester, United Kingdom

Back to top Go down

Important Re: (Only Topic)Possible hack, Need assistance/Pop up message

Post by sign da tits on April 3rd 2011, 9:23 pm

@dbagnall wrote:Every user on my forum is reciving the message in the screenshot, I have no idea what it is. I have not changed anyting in my admin pannel or spammed anyone



The site Hosted.3rdfleet.com is noting to do with us
Well, I'd get some good security or detection of malware and removal time to hook you up with some things.

http://www.microsoft.com/security/pc-security/malware-removal.aspx

http://www.microsoft.com/en-gb/security_essentials/default.aspx

sign da tits
Forumember

Male Posts : 236
Reputation : 30
Language : British English, AutoIt
Location : England!

http://www.devforumz.com/

Back to top Go down

Important Re: (Only Topic)Possible hack, Need assistance/Pop up message

Post by Jophy on April 4th 2011, 6:17 am

Hello,

I will report the problem to Typlo. Please be patient. Thanks.

Jophy
ForumGuru

Male Posts : 17924
Reputation : 835
Language : English
Location : Somewhere

Back to top Go down

Important Re: (Only Topic)Possible hack, Need assistance/Pop up message

Post by Jasonlim on April 4th 2011, 6:56 am

Hi, I am the admin of www.fiestaclubmalaysia.com. I am getting the exact same error too. Is our forums being hacked or otherwise? Please assist. Thank you.

Jason Lim

Jasonlim
New Member

Posts : 8
Reputation : 0
Language : English

Back to top Go down

Important Re: (Only Topic)Possible hack, Need assistance/Pop up message

Post by Jophy on April 4th 2011, 2:19 pm

I'd made this topic an (Only Topic), please report your problems here so in case Typlo looks on this thread, he can take a look at your forums. Thanks.

Jophy
ForumGuru

Male Posts : 17924
Reputation : 835
Language : English
Location : Somewhere

Back to top Go down

Important Re: (Only Topic)Possible hack, Need assistance/Pop up message

Post by dbagnall on April 4th 2011, 2:36 pm

Joph25 wrote:I'd made this topic an (Only Topic), please report your problems here so in case Typlo looks on this thread, he can take a look at your forums. Thanks.

Thanks, Im quite sure its the theme we are all using, I have now removed it from mine and there popup has gone, but i still would like to see this fixed as i want to still use that theme

dbagnall
New Member

Posts : 8
Reputation : 0
Language : Manchester, United Kingdom

Back to top Go down

Important Re: (Only Topic)Possible hack, Need assistance/Pop up message

Post by Sanket on April 4th 2011, 2:37 pm

I don't seem to be getting that error. Is it still happening? or happening on a specific browser?

Sanket
ForumGuru

Male Posts : 48766
Reputation : 2819
Language : English
Location : Mumbai

http://webartzforum.com

Back to top Go down

Important Re: (Only Topic)Possible hack, Need assistance/Pop up message

Post by dbagnall on April 4th 2011, 2:40 pm

@Sanket wrote:I don't seem to be getting that error. Is it still happening? or happening on a specific browser?

Yep still got that problem, im using IE9. I also get the popup on my iPhone

dbagnall
New Member

Posts : 8
Reputation : 0
Language : Manchester, United Kingdom

Back to top Go down

Important Re: (Only Topic)Possible hack, Need assistance/Pop up message

Post by Sanket on April 4th 2011, 2:44 pm

Did you try firefox?

Sanket
ForumGuru

Male Posts : 48766
Reputation : 2819
Language : English
Location : Mumbai

http://webartzforum.com

Back to top Go down

Important I May Have The Source Of This Annoyance

Post by MADBIKER1960 on April 4th 2011, 2:55 pm

Hello;

My sites:
http://www.nfsworldunited.com/
http://www.wurc4it.com/

as well have been infected with these pop-ups and when I contacted the Administrator of the website that it allegedly belongs to he has informed me that one of his members has a Forumotion based website of his own.

Somehow they were linked and were on good terms but they had a fallout.
After their fallout, the subdomain was blocked and denied access to the main site with this popup.

The address of that site is http://stonlinerp.forum-motion.com/

I hope this helps out the persons in charge of getting rid of this popup, I wonder how many more Forumotion sites have been infected with it.

It is a nuisance, more then anything.

DJMB1960
I Listen to Blade Radio.
What are you listening to?

MADBIKER1960
Forumember

Male Posts : 97
Reputation : 0
Language : English
Location : Toronto, Ontario. CANADA

http://nfsworldcommunity.canadian-forum.com/

Back to top Go down

Important Re: (Only Topic)Possible hack, Need assistance/Pop up message

Post by dbagnall on April 4th 2011, 3:00 pm

I dont have firefox, but i just tested with google chrome. The problem seems to be gone on all browsers i have tested

dbagnall
New Member

Posts : 8
Reputation : 0
Language : Manchester, United Kingdom

Back to top Go down

Important Re: (Only Topic)Possible hack, Need assistance/Pop up message

Post by MrMario on April 4th 2011, 3:36 pm

Seeing as your all have the same theme, that someone installed a code in that theme to do this, when they created it. Better off changing it.

MrMario
Helper
Helper

Male Posts : 22186
Reputation : 1830
Language : test

http://test.com

Back to top Go down

Important Re: (Only Topic)Possible hack, Need assistance/Pop up message

Post by MADBIKER1960 on April 4th 2011, 4:33 pm

Hello;

Here is the response I got from the owner of the site in question:

Hey there,

I am the owner of 3rdfleet.com and aswell Team Leader of at LaterFire. I can assure you this wasnt meant to be harm to any site.

We simply blocked one site that was using our domain and serverspace. The site we have blocked has been hosted on a forum motion webserver. Sadly it appears all sites hosted there have been affected by our domain-block. As I said. I assure you we meant no harm with this, nor is it really our fault.

To me it appears like a bug, when you block one site you block all. The Forum Motion Admins should do a little digging in this matter. Until that, we have removed the block from the specific site so it shouldnt affect any others anymore.

Please have in mind this was no virus or any malware. Its just bad coding from Forum Motion in that case. Thats why I never use thoose Free-Providers. But thats just my opinion.

If you have any further Problems you can contact me:

swing@laterfire.com | cris.carter@3rdfleet.com


With kind regards

And it appears that the pop up has disappeared.

Perhaps the admins can look into this problem and why it worked the way it did.

DJMB1960

MADBIKER1960
Forumember

Male Posts : 97
Reputation : 0
Language : English
Location : Toronto, Ontario. CANADA

http://nfsworldcommunity.canadian-forum.com/

Back to top Go down

Important Re: (Only Topic)Possible hack, Need assistance/Pop up message

Post by Jophy on April 5th 2011, 1:18 am

Is it sorted for everyone else?

Jophy
ForumGuru

Male Posts : 17924
Reputation : 835
Language : English
Location : Somewhere

Back to top Go down

Important Re: (Only Topic)Possible hack, Need assistance/Pop up message

Post by Crystal Dayra on April 5th 2011, 1:39 am

Greetings, I am Crystal Dayra - Server Admin for Hosted.3rdfleet.com and close friend of Swing/Cris Carter as quoted above.

First and Foremost please allow me to clarify a mis-statement by Cris that is quoted above.

The problem is not caused by Forum Motion or the forums themselves, the problem also is not a hack or bug in the system. Please allow me to explain

The problem was actually caused by these themes (maybe others but I haven't confirmed any others yet)

http://en.hitskin.com/search-a-skin/assassins-creed-167473.htm
http://en.hitskin.com/search-a-skin/bluey-design-167451.htm

The problem itself is that these themes have a hot-link in them so that they will load an image directly from the hosted.3rdfleet.com server. This image to be exact;

http://hosted.3rdfleet.com/storp/forums/Themes/Krilliunsmf2/images/theme/backdrop.png

The problem occurred when I password protected the directory on my server which held that file, resulting in any website attempting to load it to have a username and password pop-up.

In a normal situation me password protecting my data shouldn't have any effect on anything but the data folder on my server, and that if it wasn't for the hot-linking to my server your forums would've never been effected. So its important to note that this was not done intensionally and ultimately is not a problem on our end.

Please also note that I nor anyone from 3rdfleet.com is responsible for those theme's as such we imagine that the hot-link to our site was likely an oversight on the creators part, as he was probably using the images from our server to recreate the look of a theme contained there or something along those lines.

At this time, even tho this hot-linking is resulting in a fair amount of bandwidth usage as the above themes have proved to be fairly popular, we've opted to remove the password protection and allow this hot-linking to continue for the time being until the creator can get his theme updated and fixed as the fix should be fairly simple.

In the mean time I've requested that the 2 theme's I've identified as using image hot-links from my server be taken down to prevent the issue from spreading to more forums.

Reference Post: http://help.forumotion.com/t88294-requesting-the-removal-of-a-skin

I also recommend anyone currently using these themes to look for another suitable match if possible in case the theme creator choose's not to update his theme in the future.

If anyone has any questions, comments, suggestions, or concerns feel free to contact me at Crystal.Dayra@3rdfleet.com and I will do my best to accommodate you.

Crystal Dayra
New Member

Posts : 4
Reputation : 0
Language : Engish

Back to top Go down

View previous topic View next topic Back to top


 
Permissions in this forum:
You cannot reply to topics in this forum