Greetings(don't know if this is the right place to post this), when I try to click on a news story on the front page it gives me a ''reported attack page!'' warning it says
Reported Attack Page!
This web page at webarh.com has been reported as an attack page and has been blocked based on your security preferences.
Attack pages try to install programs that steal private information, use your computer to attack others, or damage your system.
Some attack pages intentionally distribute harmful software, but many are compromised without the knowledge or permission of their owners.
and avast also gives me a warning about that webarh place.
Just wondering if it is safe to read the news post or if i should wait until this gets sorted out?
"I much prefer the sharpest criticism of a single intelligent man to the thoughtless approval of the masses.''-Johannes Kepler.
Is anyone having trouble viewing individual bits in the News Archive? Whenever I try to open up ANY piece of news, I get taken to a "Reported Attack Page" message, however, out of caution, I have not ignored this warning.
Can anyone confirm this?
“The world breaks every one and afterward many are strong at the broken places. But those that will not break it kills. It kills the very good and the very gentle and the very brave impartially.”
I wonder if something is really wrong or if someone just reported the section.
“The world breaks every one and afterward many are strong at the broken places. But those that will not break it kills. It kills the very good and the very gentle and the very brave impartially.”
Yep, something is very, very wrong. It appears that we're one of the lucky websites to have been infected with some sort of "webarh" redirect hack (more on it here). I'm working with our hosting provider to see what can be done to remove the infection, but it's possible that a full reinstallation of the operating system and all of our scripts could be necessary. For now, I recommend sticking to the forums as it seems to only be affecting the main content areas of the website.
As soon as it's cleared up, I'll let everyone know.
Thanks for the confirmation Buck. I hope you're able to sort this out without too much trouble.
Reinstalling the OS should have too much impact on the overall setup, since I assume that you have everything backed up, right? It would probably just be a time-consuming process due to the length of the installation and the reconfiguring of the OS.
Thanks again Buck.
“The world breaks every one and afterward many are strong at the broken places. But those that will not break it kills. It kills the very good and the very gentle and the very brave impartially.”
I've just posted a response here, for any of you curious about what exactly took place tonight.
Crenshinibon wrote:Reinstalling the OS should have too much impact on the overall setup, since I assume that you have everything backed up, right?
I have all of our content backed up, but recovering from a full operating system reinstallation would still be very time-consuming. Luckily, it wasn't required in this instance, but the thought of having to go through all of that was enough to make me nauseous anyway. I may even end up going with our hosting provider's on-site backup service from here on out, but it's quite expensive (as much as $200/month, depending on which options you select). That's a decision to be made after I get some sleep, though...
I had the same problem just now when using the forums, but the actua villain seems to be Firwfox, although I can't log in with Chrome still to check, when I open GB on chrome I don't have the 'Attack' message.
Disabling 'Block reported attack sites' in Tools\options has allowed me to get here.
I said it was McAfee on FB, I was wrong, it is just Firefox. When I ran a test through McAfee it gave GB a clean bill of health, as did Google.
I'm still having problems with that log in error I mentioned a few weeks ago though Buck, even on computers in another part of the country!
[QUOTE=Darth Gavinius;1096098]Distrbution of games, is becoming a little like Democracy (all about money and control) - in the end choice is an illusion and you have to choose your lesser evil.
And everything is hidden in the fine print.[/QUOTE]
Firefox checks Google's list of "attack websites" every time you visit a site, and unfortunately GameBanshee was added to that list as of about 5:30pm CST yesterday when the redirects starting taking effect. Other browsers that I've checked load the site just fine.
After dealing with this nightmare all last night, I've submitted a request this morning for a review by Google in order to get off the list. Hopefully this happens sooner rather than later, as I'm sure it's driving a lot of visitors away.
As for the login issue, I have yet to figure out the cause. I've never received similar feedback from any other users, though, so I'm not sure how widespread the problem is. I'm going to be starting a semi-large project on the site soon, and I'll do my best to get a closer look at it then.
The strange thing was, that when I clicked on the 'What does this mean' (or whatever it said) I was told that Google had found no problems with the site, and that was this morning at about 11.30am GMT.
[QUOTE=Darth Gavinius;1096098]Distrbution of games, is becoming a little like Democracy (all about money and control) - in the end choice is an illusion and you have to choose your lesser evil.
And everything is hidden in the fine print.[/QUOTE]
Google managed to flag us as "unsafe" a few minutes after being hacked, but now that the website is cleaned up, it's taking them hours to declare us "safe" again. 8 hours after submitting my request to be re-reviewed, I still see:
"A review for this site is still being processed. Please check back later."
I'm getting the same issue. I had to disable my browser's security just to report this. Using Firefox. I'll be staying clear for a bit to give you guys time to find the problem.
Hope you guys suss it out soon. I really don't want to stay away but I know better than to ignore my browser's warnings. I hope you guys were not hacked.
The hack is gone but the warning is still there, and will be until Google gets around to removing it. Details [url="http://www.gamebanshee.com/news/100625-a-magical-evening-of-file-searching.html"]here[/url].
Stworca wrote:So you have no evil plan to take over the world using Gamebanshee site?
Ruling the world? My plans are much more lofty!
Anyway, Google has now set the status to:
"A review for this site has finished. The site was found clean. The badware warnings from web search are being removed. Please note that it can take some time for this change to propagate."
I guess it takes a few minutes to add the warnings, but a long time to remove them. Awesome.
Thanks for all the hard work in getting everything up and running. My day at work just wasn't the same without regularly checking the forums and the news. I was sad.
Can you update us when you find out where the breach occurred and how exactly these hellions were able to get these files onto GB? I assume that these files were just redirect scripts, is that correct?
“The world breaks every one and afterward many are strong at the broken places. But those that will not break it kills. It kills the very good and the very gentle and the very brave impartially.”
This web page at webarh.com has been reported as an attack page and has been blocked based on your security preferences.
Attack pages try to install programs that steal private information, use your computer to attack others, or damage your system.
Some attack pages intentionally distribute harmful software, but many are compromised without the knowledge or permission of their owners.
Usually such things happen because of the ads,be careful with them(I have bad experience with ads on a few other sites).
I am not afraid of this tbh(using firefox with adblock and noscript addons) and after the yesterdays problem I made a full scan with avast,spybot search and destroy,mailwarebytes antimailware,SUPERAntiSPyware,Ad-Aware,windows mailcious program removing tool,Sophos Anti Rootkit GUI,Hijack this and found nothing(cleared my registry with CCcleaner too).I recommend getting these btw(they are all free) if you want a safe and secure system.
I'm getting these "attack page" reports as well. Reported it this morning but it looks like webarh.com has hijacked some pages. Brother None's link takes me to a webarh.com URL and not a gamebanshee.com URL. Good thing I use NoScript.