Silent Hunter Mods Forum

Off-Topic Area => League of gentlemen and bandits => : Phoenix 1957 September 29, 2010, 05:03:20 PM

: SubSim problem
: Phoenix 1957 September 29, 2010, 05:03:20 PM
Today when I log into SubSim I was told I needed to install Java ok never had that before.  scrtg
And then the next time I went to log in My nod 32 antivirus software went crazy and warned me that this site was trying to send Trojans to my computer
What gives  mtzi
: Re: SubSim problem
: Phoenix 1957 September 29, 2010, 07:53:51 PM
I Found this in my quarantine folder of Nod32it was never allowed to install

29/09/2010 ….  drerlre.co.cc/client.zip… java/TrojanDownloader.agent.NBU trojan
 29/09/2010 … drerlre .co.cc/1.zip ….. A variant of java/Mugade

(I removed the http:// to stop them being active links)

I connected using my Firefox browser  realno
: Re: SubSim problem
: Carotio September 29, 2010, 08:40:22 PM
 ???

I have no problems. I logged in early today and just now. I don't see any of that...
: Re: SubSim problem
: Phoenix 1957 September 29, 2010, 09:16:13 PM
Hhmmm Ok but I just un-installed Firefox and ran some hitman software that found nothing but would not un-install again.
So Restored my machine to before today’s java up data check all was ok then started up IE 64bit version check around the sites I used no problems so far.
But opened the SubSim forum and you guessed it these pages use a version of java to view them NFW am I doing that again the pages load ok without it   mtzi

Just posted this on Subsim
: Re: SubSim problem
: Phoenix 1957 September 29, 2010, 09:41:09 PM
I hit the red cross on the up-date and left the forum and just returned but the message did not re-appear  scrtg
: Re: SubSim problem
: Phoenix 1957 September 30, 2010, 02:35:53 PM
Well looks like I was right.

http://www.subsim.com/radioroom/showthread.php?t=175533 (http://www.subsim.com/radioroom/showthread.php?t=175533)
: Re: SubSim problem
: Herr-Berbunch September 30, 2010, 05:51:28 PM
Hope it's all sorted, but if not...(http://epicponyz.files.wordpress.com/2009/06/unclean.jpg)
: Re: SubSim problem
: Carotio September 30, 2010, 06:40:43 PM
Well, obviously several people using different combinations of browsers and security software reports it, then there must be a general problem somewhere. I have just not seen it. I'm using FireFox with no-script most of the time plus using Comodo IS but without the anti-virus, for the av I use AVG. On both desktop and laptop.
: Re: SubSim problem
: Phoenix 1957 October 04, 2010, 12:46:48 PM
I would still advise caution when viewing the Subsim forum
As this nasty little bugger is still around as I found out today Monday 4 October 2010

 lam1
: Re: SubSim problem
: Phoenix 1957 October 04, 2010, 05:29:13 PM
Looks like Neal is getting touchy about this Trojan thing
Now he is trying to make out we don’t know what we are talking about
Is this a case of head in the sand
 roga1

: Re: SubSim problem
: Phoenix 1957 October 05, 2010, 01:17:10 PM
Looks like it might be sorted for now  j12
: Re: SubSim problem
: Phoenix 1957 October 05, 2010, 01:50:47 PM
I wonder that if like me you have recently re-installed your Machine


And then when entering SubSim clicked “Yes” to installing flash player 10.1
And then you were asked to add the Java update if so this may explain a lot.
Because it looks like Subsim may have not Known that the link they offered to
Add this Flash Player link may have contained a little added program Please see below  realno


(http://img835.imageshack.us/img835/4839/captureflasplayer.png)

That could be why some have seen this and a lot have not.  scrtg

: Re: SubSim problem
: Phoenix 1957 October 07, 2010, 10:31:37 AM
All clean that’s Great lets take a look today Thursday 7 Oct

(http://img841.imageshack.us/img841/6056/capturessscreen1.png)

(http://img63.imageshack.us/img63/3778/capturessscreen2.png)

1 hour removing it and un-installing firefox because there is no way im trusting this again
on going on to another site crap started to pop up also wanting to be downloaded  hmmmmmmmmmmm
let someone else post about it on subsim i had a gut full

and this time I dont have flash player 10 installed at all  scrtg
: Re: SubSim problem
: Phoenix 1957 October 07, 2010, 02:39:16 PM
Wasn’t that lucky a total re-install    mtzi
: Re: SubSim problem
: Phoenix 1957 October 08, 2010, 09:32:24 AM
Other members of Subsim are now reporting problems
Another thread has shown up in the SH3 forums
also one about downloads not working I hope that’s not part of this also
rogue address showing on warnings is
91.188.60.234 server don’t look like that’s in America

(http://img841.imageshack.us/img841/2518/ssrdirect.png)

I wonder if that’s a members I.P also
: Re: SubSim problem
: Carotio October 09, 2010, 12:35:19 AM
I wonder if that’s a members I.P also

Nope, it ain't
: Re: SubSim problem
: Herr-Berbunch October 12, 2010, 01:52:42 PM
No, I know Ediko comes from Latvia, but he's a good kid and owes subsim a lot (or if SS doesn't come on this site - alot  flammoe) so I doubt it'd be him.
: Re: SubSim problem
: Phoenix 1957 October 12, 2010, 04:38:33 PM
No, I know Ediko comes from Latvia, but he's a good kid and owes subsim a lot (or if SS doesn't come on this site - alot  flammoe) so I doubt it'd be him.

I didn’t mean to suggest that anyone is responsible for anything
Its just dam annoying that every time you open Subsim in the mornings this happens
And I can’t see how anyone can think it is a False Positive is beyond me.  scrtg
: Re: SubSim problem
: Phoenix 1957 October 18, 2010, 09:04:41 PM
I have been over and over the posts here and still cannot see how anyone would think that I suggested that any one person was responsible for the problems on Subsim still that said it looks like the problems are still continuing as the two latest posts on the subject show.
Whether or not this subject is liked on Subsim it has been found even by Google itself that there are infectious links on pages and also contained within threads on the site.
I myself no longer post about anything I find on the site because it seemed that being the messenger is considered being a trouble maker who don’t know what he is talking about and is just trying to make trouble.
I don’t even bother logging in when browsing the site anymore and if a warning pops up I just leave the site.
: Re: SubSim problem
: Carotio October 19, 2010, 12:45:46 AM
NOW I have seen a warning too. Using FireFox on WinXP

Translation:
Reported attack site!

This website (www.subsim.com) has been declared as an attack site and has been blocked as per your security settings.

Attack sites try to install programs that steal private information, use your computer to attack others, or damage your system.

Some attack sites intentionally distribute harmful software, but many are compromised without the knowledge or consent of the site's owners.

(http://i7.photobucket.com/albums/y288/Carotio/Subsim/20101018_subsim.jpg)

And clicking on the right button leads you to this info, in English:
http://safebrowsing.clients.google.com/safebrowsing/diagnostic?client=Firefox&hl=da&site=http://www.subsim.com/radioroom/forumdisplay.php?f=170
: Re: SubSim problem
: Carotio October 19, 2010, 12:57:02 AM
I wonder if the upload function at subsim where everybody can upload mods has been missused by someone with evil intention...  scrtg
Maybe a virus of some sort has been spread that way.... That would be a real PITA. Damn hackers  2guns

Anyway, I can access and read the forum from IE, I have even posted about my experience there too now:
http://www.subsim.com/radioroom/showpost.php?p=1517384&postcount=36
: Re: SubSim problem
: Phoenix 1957 October 19, 2010, 04:21:45 PM
I was one of the first to post about this problem on Subsim as I am running Nod 32 version Eset Smart Security.
It seems Nod32 was one of the first anti virus programs to react to the Trojans and possible viruses found on some of the pages contained within Subsim.
But the warnings were ignored at first because I presume it had not come from a trusted source on the Subsim site. My post was received in bad favour even to the point of one member telling me to turn down my security settings so as I would no longer receive the Trojan reports “like I did he said” yes lets do that NOT!.
Now that most members there are now beefing up there security software and the other versions are catching up more and more reports will be sent in to the virus software manufactures and messages will start to appear about known problems shown up by there test on pages on the site.
It’s not a matter of them taking anyone’s word on this the objects found trying to infiltrate our computers has been passed on with details of where it came from contained in their coding.
The original threads about this problem have been merged into one and placed in an area that not many people take the time to read I posted there in hope that a solution could be found before it got to this stage. But as you now see if you visit Subsim threads are cropping up in most of the forums.

No one likes to see this happen to a site it’s a matter of trust when you are offered the chance to up-load files on a site if this is how it appeared.
It seems the “norm” in this day and age is to cause as much trouble as possible for others just take a look on “Facebook”

And also on a side note I would like to thank the person who pointed my thread out to
Neal Stevens who by the way is not getting “touchy” about the problem but is maybe getting slightly miffed.


I really hope this is sorted soon Subsim is still the greatest Submarine site for information, Mods and general talk threads.   Steve   tiphat
There you go origanal thread removed
: Re: SubSim problem
: Phoenix 1957 October 19, 2010, 07:46:39 PM
Browser warning messages are not a possible infection.
Subsim at this time appears clean  thup1
: Re: SubSim problem
: Carotio October 19, 2010, 09:32:25 PM
Browser warning messages are not a possible infection.
Subsim at this time appears clean  thup1

I still got the message today. However, you can get rid of it and continue using FireFox, but with a cost.
Functions -> Settings -> Security -> and then untab the middle option of blocking websites
Keep it that way when visiting subsim. There probably is something spooky over there at the moment, and Neal should have it solved with help from his host, I guess. So till that happens, this is a work-around.
: Re: SubSim problem
: Phoenix 1957 October 20, 2010, 08:48:57 PM
I'm glad people are finding this so dam funny on Subsim BUT.

Lets not forget that there was an original threat containing Trojans and some other type of nasty just because it was not seen by everyone is not the issue.
To prove what was happening when I view Subsim main page I click yes to install the items to gain screen shots of what happened.
I will tell you what happened my computer started sending out information of which I have no idea and I had to pull the connection.
I then tried to remove what had been installed and then my computer froze up so a total re-install needed. So I am glad that the site has no problems now but it did have
if Neal managed to remove the nasty from the code or whoever placed it in the site realized he had been found out and removed it no one knows it seems.
So now some of you are seeing warnings a little late yes but would you not rather be warned then to go through what I had to do.
So just go on amusing yourselves about this for some it was not so funny    lam1 mtzi
: Re: SubSim problem
: Phoenix 1957 October 21, 2010, 03:40:46 PM
I would post a update on this but I do not want to receive a ban from this site (SHMF)   mtzi

Posted on subsim ....

As for you saying that my antivirus is a free $1 worthless package I would reply well At least it found the Trojans and blocked them the first time and to prove to you it was Real I was stupid enough to let them in.

29/09/2010 … drerlre.co.cc/client.zip …java/trojandownloader.agent.nbu
29/09/2010 … drerlre.co.cc/1.zip … a variant of java/mugade
I already said that they seemed to have gone

But I dont see why other people who in this instance are just blowing wind try to
Rubbish anyone who reported this
: Re: SubSim problem
: Phoenix 1957 October 21, 2010, 06:13:41 PM
More possible attacks reported on Subsim

Post by Respenus ….



Just got this:

21.10.2010 14:51:45 Web Anti-Virus Detected: HEUR:Exploit.Script.Generic Firefox betaword.co.cc /images/js.php//JIM

21.10.2010 14:51:47 Web Anti-Virus Detected: Trojan-Downloader.Java.Agent.hx Java(TM) Platform SE binary betaword.co.cc /images/jar5.php/bpac/a.class

21.10.2010 14:51:49 Web Anti-Virus Detected: Trojan-Downloader.Java.Agent.hw Java(TM) Platform SE binary betaword.co.cc /images/j.php/M8PFGFzL.class

This attack repeated 4 times. I'm using KAV Pure English version, latest database.

Man I just love KAV. Slows down computers to a halt, but creates a damn good barrier.

Hope this helps a bit.

And also by SashaKA001 …..


Java\JRE6\bin\java.exe
: Re: SubSim problem
: Phoenix 1957 October 22, 2010, 10:35:49 PM
I cant say if these attacks are happening or not because I use Eset Smart Security
And as a new Trojan is discovered nod32 updates itself every hour so if its been listed
No other Nod 32 user should see the Trojan as it would be blocked.  chatten
: Re: SubSim problem
: Carotio October 22, 2010, 11:34:04 PM
Hard to say. As mentioned somewhere else, I use Comodo/AVG. And lots of other community members use all sorts of combinations of firewall/AV, and why some programs warn about security risks and others don't is a science in itself. Sometimes you can wonder if your own choice is weak because it doesn't warn, and sometimes if it's too sensitive with false alerts.
: Re: SubSim problem
: Phoenix 1957 October 23, 2010, 03:21:35 AM
And that is the real problem there is no way of being really sure
It looks like it is still attacking in some form or other but that said
Your antivirus may have already updated itself to the threats before
You encounter them so they are blocked I just keep an eye on my system
If it seems to be doing something over the internet when I think it should
Not be then I will pull the plug and do a full scan just to make sure.
: Re: SubSim problem
: Phoenix 1957 October 24, 2010, 12:25:55 PM
The Trojan and Re-Directors Attacks are still present on Subsim


Why are people getting paranoid about the red warning messages produced by
Your browser these are just that warning messages nothing more the Trojan or
Redirectors depending on what type of attack you may receive will be shown by
Your own anti-virus software as show by the Elder-Pirate post on Subsim.
And as for the adverts producing the attacks ( as shown by the fact it seems to be contained in a Java update)
this was said in some of the first thread posts that had been left out in the merging of the threads by Neal Stevens   scrtg

: Re: SubSim problem
: Phoenix 1957 October 29, 2010, 11:30:17 AM
If you received the notification to up-date your Java script
and if you clicked yes then you would be at danger of hosting
the exploit code somewhere on your computer.
if not you should be ok and clear of any problem the messages
received through your browser were never a problem just
a bit of a nuisance to some who didn’t really believe there
was a problem in the first place.
check out this link
http://www.siliconindia.com/shownews/0day_bug_detected_in_Firefox_35__36-nid-73275-cid-2.html
 (http://www.siliconindia.com/shownews/0day_bug_detected_in_Firefox_35__36-nid-73275-cid-2.html)

Thank you Neal for the update I’m glad it’s all sorted now    clap1
: Re: SubSim problem
: Carotio October 29, 2010, 11:45:57 AM
Well, it looks like the no-script plugin for Firefox saved me from ever seeing that.
If you don't use it yet, it's worth trying. I'm using only this plus AdBlock Plus.
http://noscript.net/
http://adblockplus.org/en/
: Re: SubSim problem
: Phoenix 1957 January 14, 2011, 12:58:10 PM
Has Subsim got a problem or have I been Banned as I cannot connect to the site
14/01/2011 11:57am
: Re: SubSim problem
: Herr-Berbunch January 14, 2011, 01:00:31 PM
Nope, I can't get on either!  bts1
: Re: SubSim problem
: Phoenix 1957 January 14, 2011, 01:16:19 PM
Oh no not another Subsim Fire  scrtg
: Re: SubSim problem
: fred8615 January 14, 2011, 03:34:15 PM
I can't get in either.
: Re: SubSim problem
: Phoenix 1957 January 14, 2011, 04:39:46 PM
Wow it's 15:41 and Subsim is still a no go  strmucn
: Re: SubSim problem
: Herr-Berbunch January 14, 2011, 05:31:42 PM
1630 and it's back up, woohoo.  Now my workload will suffer again - got loads done this afternoon.  yes1
: Re: SubSim problem
: Phoenix 1957 January 14, 2011, 05:35:30 PM
Thats great but no post on the problem  scrtg
: Re: SubSim problem
: Herr-Berbunch January 14, 2011, 05:40:12 PM
I expect Neal is reattaching all the hair he's been pulling out for the last eight hours.
: Re: SubSim problem
: Phoenix 1957 January 14, 2011, 05:46:18 PM
I expect Neal is reattaching all the hair he's been pulling out for the last eight hours.

 rofl2
Lets hope he has it fixed (the site Not his hair)  rofl2006
: Re: SubSim problem
: Phoenix 1957 January 27, 2011, 03:41:39 PM
I see that Subsim is now 14 years old
Happy Birthday SubSim from SHMF

cband2 guitarist poze1
: Re: SubSim problem
: Phoenix 1957 June 08, 2011, 08:53:12 AM
Something strange at Subsim again today   scrtg

(http://sh5mods.silenthuntermods.com/SeaWolfU57/images/Demo/Capture subsim.JPG)

Looks like he forgot to put 50p in the meter
Hopefully nothing serious
: Re: SubSim problem
: Carotio June 08, 2011, 10:41:03 AM
So it appears. Both forum and site down with the same message.
There was a problem with the host once, when the building where the server is stored burned.
Back then subsim was offline for some time too. I wonder what's the reason this time...  scrtg
: Re: SubSim problem
: Herr-Berbunch June 08, 2011, 01:46:50 PM
There was a thread started by Castout on SUBSIM about this yesterday, and a few people added to it - Neal wanted to know times, etc., and he'd found several times that the max number of connections to the server had been reached, I'm hoping that this is all part of some maintenance and nothing more - although if it was maintenance then being informed would have been handy.  I had the same errors for a short period last Friday, but had broadband issues preceeding it so didn't think much of it at the time.
: Re: SubSim problem
: Phoenix 1957 June 08, 2011, 07:30:05 PM
all becomes clear  kaffee

http://www.subsim.com/radioroom/announcement.php?f=182 (http://www.subsim.com/radioroom/announcement.php?f=182)
: Re: SubSim problem
: Phoenix 1957 August 29, 2011, 12:13:33 PM
Cant seem to access Subsim at this time  scrtg
: Re: SubSim problem
: Phoenix 1957 January 18, 2012, 03:31:53 PM
Ok after last time I know I am going to regret this
but for those who might like to believe me when
I log into Subsim today my firewall came under attack
but once again my cheap crappy virus software (Nod 32)
stopped the attack in its tracks.
here is a pic of the attack

(http://img822.imageshack.us/img822/9138/capture2ga.jpg)

please take care at this time
: Re: SubSim problem
: Phoenix 1957 January 18, 2012, 11:37:38 PM
take a look here  mtzi

http://www.subsim.com/radioroom/showthread.php?t=191635 (http://www.subsim.com/radioroom/showthread.php?t=191635)
: Re: SubSim problem
: Phoenix 1957 May 21, 2012, 08:19:03 PM



Database error
 


The database has encountered a problem.
 



--------------------------------------------------------------------------------




Please try the following: •Load the page again by clicking the Refresh button in your web browser.
•Open the www.subsim.com home page, then try to open another page.
•Click the Back button to try another link.
 


The www.subsim.com forum technical staff have been notified of the error, though you may contact them if the problem persists.
 


 
We apologise for any inconvenience.
...

well there you go
: Re: SubSim problem
: Phoenix 1957 November 15, 2015, 04:09:25 PM
Oh no its gone again server surgery on going  strmucn
Sorry, the copyright must be in the template.
Please notify this forum's administrator that this site is missing the copyright message for SMF so they can rectify the situation. Display of copyright is a legal requirement. For more information on this please visit the Simple Machines website.