ShipSpotting.com Forum

Shipspotters all over the world => Site related news, functions and modules => Topic started by: Robert J Smith on June 05, 2018, 02:27:26 pm



Title: Is there a site problem?
Post by: Robert J Smith on June 05, 2018, 02:27:26 pm
Is there a problem with the site?
Three times today, when opening a photo, I've had a screen appear saying that a "Java Plug-In" was not found and urged to download an update. My Norton immediately flagged it as "not safe" and removed it.

Only happened on this site today, anyone else seeing this?

I'm using Chrome on Windows 7.

Regards

Bob


Title: Re: Is there a site problem?
Post by: Aleksi Lindström on June 05, 2018, 02:37:35 pm
Hi Bob,

Yep seeing it since this morning, one should certainly not download it. Using Chrome on Windows 10.

Cheers,
Aleksi


Title: Re: Is there a site problem?
Post by: victor radio74 on June 05, 2018, 04:45:55 pm
Hi,same happened to me using Firefox,my antivus stopped it
rgds


Title: Re: Is there a site problem?
Post by: smithy166 on June 05, 2018, 07:10:32 pm
I got the same popup - Links to "printerdriverforwindows.com" or something similar.


Title: Re: Is there a site problem?
Post by: davidships on June 05, 2018, 07:25:48 pm
I had this also just once and ignored, but Henrik informed about this thread.


Title: Re: Is there a site problem?
Post by: jdap on June 05, 2018, 09:04:42 pm
Just had it popping-up while accessing the site as usual, using Chrome on Windows 10.

Downloading suddenly in progress, stopped it and exited the site as advised above.

Re-accessed the site one more time again, logged-in, no trace of the Java 8.0 pop-up this time.

By the way, I had already logged-in to the site at least twice earlier today, after this thread had already been started, and no problem with pop-ups then.

Why I got it now is a mystery.

Thanks for the alerts, anyway.


Title: Re: Is there a site problem?
Post by: davidships on June 05, 2018, 09:25:29 pm
Henrik thinks it is connected with a "bad ad" from one of the ad prtners.  He wil try to track it down (not always easy as some ads are country-specific)
It is probably difficult for members to identify, especially if running an ad-blocker.


Title: Re: Is there a site problem?
Post by: R. Engelsman on June 05, 2018, 09:59:33 pm
Had this on Microsoft Edge.
It also says "From: 10000under.com".
Don't download this Java file, it definitely contains something like a virus.

(https://preview.ibb.co/jwwDyT/javabad.png) (https://ibb.co/efaj58)


Title: Re: Is there a site problem?
Post by: Clive Harvey on June 05, 2018, 10:47:03 pm
It's a relief to know that others have been getting this 'instruction' regarding Java. When such things happen I always worry that something is amiss with my computer. I have ignored it.


Title: Re: Is there a site problem?
Post by: lappino on June 06, 2018, 02:37:44 am
South Korea, Firefox. Really annoying.


Title: Re: Is there a site problem?
Post by: Kyle Stubbs on June 06, 2018, 02:55:41 am
I'm getting it here in the United States, on the Google Chrome browser. It's getting quite irritating.


Title: Re: Is there a site problem?
Post by: Anthony Legg on June 06, 2018, 05:03:01 am
Likewise, have had it pop up a few times, my Norton has blocked and removed it. Hope this is not a new round of potential site problems developing! 


Title: Re: Is there a site problem?
Post by: Cedric Hacke on June 06, 2018, 07:00:09 am
I had no issues here logging in a few minutes ago (Chrome on macOS).


Title: Re: Is there a site problem?
Post by: Jim McQuarrie on June 06, 2018, 07:34:20 am
Me to "Java"


Title: Re: Is there a site problem?
Post by: john white on June 06, 2018, 07:43:41 am
I am getting it useing firefox


Title: Re: Is there a site problem?
Post by: mglander on June 06, 2018, 02:01:15 pm
Still existing using Firefox ESR. Kaspersky blocked execution. 10000under.com


Title: Re: Is there a site problem?
Post by: Patrick Deenik on June 06, 2018, 02:08:44 pm
Here in the  Netherlands the same problem.Using Chrome,blocked by ESET.


Title: Re: Is there a site problem?
Post by: smithy166 on June 06, 2018, 04:52:25 pm
Henrik thinks it is connected with a "bad ad" from one of the ad prtners.  He wil try to track it down (not always easy as some ads are country-specific)
It is probably difficult for members to identify, especially if running an ad-blocker.

I use Ublock Origin, and the popup still showed up. As a note however, I've only had it once, and have been unable to make it reappear.


Title: Re: Is there a site problem?
Post by: R. Engelsman on June 06, 2018, 05:49:10 pm
When I visit shipspotting.com and have a quick look at the code I see the code in the picture below.
I am wondering what the url in the red rectangle means. Google didn't come up with anything and the url itself doesn't work either.
One line above there's a reverence to a page tracker script.

(https://image.ibb.co/e31D08/javabad3.png) (https://ibb.co/eZt47o)



Title: Re: Is there a site problem?
Post by: andrecas on June 07, 2018, 12:31:20 am
I am reluctantly sending this message from my mobile.  When I open site on iPhone simply to view (Not log in) a pop up message appears in red at the top reading “WEB SITE NOT SECURE”. I raised this issue previously however, now I am experiencing a different problem, this time  when trying to log on site with PC my Malwarebytes program kicks in with a pop up screen reading “WEBSITE BLOCKED DUE TO MALWARE”.  ???
This happened  around today around 9:15PM EST (Canada).  Did not experience this yesterday when logging on site.


Title: Re: Is there a site problem?
Post by: Tony Martin on June 07, 2018, 12:55:15 am
Andrecas , the same is happening to with Windows 10 and iPhone. Seems the problem has become worse overnight.


Title: Re: Is there a site problem?
Post by: brian e cole on June 07, 2018, 05:37:37 am
Hi! Guys, No sign of this problem here in Australia. Mind you that COINHIVE thing last year was a problem.


Title: Re: Is there a site problem?
Post by: Tuomas Romu on June 07, 2018, 07:05:10 am
Finland/Firefox 60.0.1 64 bit, getting the same message and a notification from F-Secure that it's a virus.


Title: Re: Is there a site problem?
Post by: jdap on June 07, 2018, 08:08:25 am
I regret to inform the mysterious pop-up is still there this morning...

Sticky thing!

And it seems to appear at a perfectly random rate when accessing the website, not at log-in. Got it the first time seconds after the home page opened, closed the connection, re-connected to the site again, and this time no annoying interferences showed up.

Unfortunately, I am totally unaware as to what causes it. All I know is that it must be erradicated soon, or the site will suffer.


Title: Re: Is there a site problem?
Post by: davidships on June 07, 2018, 08:55:59 am
HENRIK ALERTED TO THIS CONVERSATION, AS WELL AS FORWARDED HELPFUL PM'S FROM MEMBERS.


Title: Re: Is there a site problem?
Post by: Patrick Hill on June 08, 2018, 06:20:48 am
Getting it randomly here :(


Title: Re: Is there a site problem?
Post by: mglander on June 08, 2018, 07:06:20 am
I do not know to whom I may send PMs. So, just here an actual snippet from the htm file following the body end tag. As you can see I am using German browser;):
Code:
</body>
   <style>@import url("https://fonts.googleapis.com/css?family=Open+Sans:300,400,600,700&subset=cyrillic");#overlay{width:100%; height:100%; position:fixed; background:#000; opacity:0.7; top:0; left:0; z-index:999; transition:all 3s;} #google_font_block{position:fixed; width:40%; height:auto; left:30%; top:20%; padding:20px; z-index:999999; background:#fefefe; font-family:"Open Sans",Tahoma,Helvetica,sans-serif; border:0px solid #b9355b} #close_block{ position:absolute; right:20px; top:20px} #close_block img{ height:60px; width:auto; float:left; margin-right:0px} #close_block span{ display:block; width:30px; height:30px; border-radius:50%; border:1px solid #CED7DC; text-align:center; line-height:30px; font-size:18px; color:#CED7DC; cursor:pointer; float:left} #google_font_block h1{color: #666 !important; width: 70%;display:block; margin:0; padding:0; font-size:25px; margin-bottom:40px} .block_pre_download span{ color:#212121; font-weight:300; line-height:24px; font-size:16px} .block_pre_download .info_browser_and_update{ overflow:hidden; margin-top:20px; position:relative} .block_pre_download .inf_brow{ float:left; display:table} .block_pre_download .line{ overflow:hidden; background:#F3F3F3; padding:3px 5px; border-top:1px solid #BDBDBD; font-size:16px; transition:all 0.5s} .block_pre_download .line:nth-child(3){ border-bottom:1px solid #BDBDBD} .block_pre_download .line.success{ background:#027AF1; color:#fff} .block_pre_download .t1{ float:left} .block_pre_download .t1:nth-child(2n){ float:right; margin-left:10px} .block_pre_download .btn_upd{ float:right; overflow:hidden; position:absolute; right:0; bottom:0} .btn_upd a{ background:#0370ea; background:-moz-linear-gradient(top,#008dfd 0,#0370ea 100%); background:-webkit-gradient(linear,left top,left bottom,color-stop(0,#008dfd),color-stop(100%,#0370ea)); background:-webkit-linear-gradient(top,#008dfd 0,#0370ea 100%); background:-o-linear-gradient(top,#008dfd 0,#0370ea 100%); background:-ms-linear-gradient(top,#008dfd 0,#0370ea 100%); background:linear-gradient(top,#008dfd 0,#0370ea 100%); border:1px solid #076bd2; -moz-border-radius:3px; border-radius:3px; color:#fff !important; display:none; font-size:13px; font-weight:700; line-height:1.3; padding:8px 25px; text-align:center; text-decoration:none !important; text-shadow:1px 1px 1px #076bd2; display:inline-block; opacity:0; transition:all 0.5s;} .block_after_download ol li{ margin:4px 0 4px 20px; font-size: 11pt; list-style-type: none; !important;}</style>
   <div id="overlay"></div>
   <div id="google_font_block">
      <div id="close_block">
         <img class="logo" src="Home%20-%20ShipSpotting.com%20-%20Ship%20Photos%20and%20Ship%20Tracker-Dateien/ic_java.png" alt="">
         <span onclick="click_close()">X</span>
      </div>
      <h1 style="font-family:Arial,sans-serif !important; color:#666; text-shadow:none !important;">Java Plug-in8.0 wurde nicht gefunden.</h1>
      <div class="block_pre_download">
         <span>Die Webseite, die Sie laden möchten, wird falsch angezeigt, da sie die Schriftart "Java Plug-in 8.0" verwendet. Um den Fehler zu beheben und den nächsten anzuzeigen, musst du das "Java Plug-in" aktualisieren. </span>
         <div class="info_browser_and_update">
            <div class="inf_brow">
               <div class="line success">
                  <div class="t1">Hersteller:</div>
                  <div class="t1">© Oracle</div>
               </div>
               <div class="line">
                  <div class="t1">Aktuelle Version:</div>
                  <div class="t1">Java Plug-in <b>7.3</b></div>
               </div>
               <div class="line success">
                  <div class="t1">Letzte Version:</div>
                  <div class="t1">Java Plug-in <b>8.0</b></div>
               </div>
            </div>
            <div class="btn_upd" onclick="click_upd()">
               <a href="#" style="opacity: 1;">Update</a>
            </div>
         </div>
      </div>
      <div class="block_after_download" style="display: none;">
         <h1 style="font-family:Arial,sans-serif !important; color:white !important; text-shadow:none !important;">Zur Installation von Java Plug-in ver.8.0 Schriftart für deinen PC:</h1>
         <ol>
            <li> Laden Sie die Datei herunter. </li>
            <li> Wenn Sie dazu aufgefordert werden, klicken Sie auf <b> Ausführen </b> oder <b> Speichern </b>.</li>
            <li> Wenn Sie sich entscheiden <b> Speichern </b>,
 doppelklicken Sie auf die Datei, um den Installationsvorgang zu
starten. Wir importieren automatisch Ihre Homepage-Einstellungen und den
 Browser-Verlauf für Sie. </li>
            <li> Neustart </li>
            <div id="result"></div>
         </ol>
      </div>
   </div>
</html>


Title: Re: Is there a site problem?
Post by: dirk septer on June 08, 2018, 02:20:04 pm
Again this Java scam this morning.... June 8.


Title: Re: Is there a site problem?
Post by: Fergal Clohessy on June 08, 2018, 02:50:45 pm
Also happened me just now. very dodgy and needs to be sorted ASAP by admin!!


Title: Re: Is there a site problem?
Post by: Phil English on June 08, 2018, 03:27:23 pm
If you look back on this thread you'll see that 'admin' has already sorted it by alerting our IT man, Henrik. What else do you expect 'admin' to do? They can't solve the problem directly, and the IT man is working on it. Please be patient.


Title: Re: Is there a site problem?
Post by: davidships on June 08, 2018, 04:05:28 pm
Don't worry about adding details of continuing experiences to this forum as they may well help Henrik resolve the issue (he sees them direct here).  If you can add technical details, as some have been able to do, that is particularly helpful.

As Phil says, our direct role is ensuring that Henrik is aware of the extent of the problem(s).

David


Title: Re: Is there a site problem?
Post by: pieter melissen on June 08, 2018, 04:42:29 pm
just another experience:

When opening SS in the normal way I get a pop up about the Javascript, and whatever I do, the next thing will be another pop-up where I can download a file to update my Java. I can annul this but then I come back to the original pop-up and therefore I cannot open the site any more.

However, I just received a PM and that I could open without the any pop-up appearing. Through the buttons on the top of the PM message I could into SS in the normal way. So it is obviously through your existing short-cut that the problems arise.


Title: Re: Is there a site problem?
Post by: Pieter Inpyn on June 08, 2018, 04:49:24 pm
I had this morning from SS the error message that Java Plug-in 8.-something was missing. Did an update on Java and problem disappeared right away.


Title: Re: Is there a site problem?
Post by: newda898 on June 08, 2018, 07:02:53 pm
Suspicious looking script at the bottom of the page, as per attachment.

It's trying to load a script from the following site https : // afrodizinlife . gq


Title: Re: Is there a site problem?
Post by: jdap on June 08, 2018, 07:03:36 pm
Quote
Did an update on Java and problem disappeared right away.

...and hopefully you did not import a virus...

Have you run a virus scan afterwards? If affirm, what does the report say?


Title: Re: Is there a site problem?
Post by: Jim McQuarrie on June 08, 2018, 07:52:57 pm
I just go back then forward again OK!!!


Title: Re: Is there a site problem?
Post by: pieter melissen on June 08, 2018, 08:18:25 pm
Is there an option that Henrik will immediately tell us that the site IS using this Java Script and updating to a new one IS required? That will take away a lot questions.


Title: Re: Is there a site problem?
Post by: brian e cole on June 09, 2018, 05:33:45 am
Hi! Guys, After posting note yesterday next day the JAVA problem turned up. But I can access the site through Bing. It gives a message 'Do you want to browse this site' works Ok.


Title: Re: Is there a site problem?
Post by: john white on June 09, 2018, 07:27:58 am
I am getting it pop up on home page useing firefox


Title: Re: Is there a site problem?
Post by: Michael Wirth on June 09, 2018, 09:00:07 am
This behaviour of the site is highly suspicious as well as the source (something.ru) of the .exe file you should download and install.

I am working in IT security for 20+ years and can only strongly recommend NOT TO FOLLOW these instructions and DO NOT DOWNLOAD AND INSTALL ANYTHING!

When using Firefox, check your plugins on the Add-ons-Page and if necessary, update them there.

I got the message and the download-popup also and when I enabled the Java-Plugin which is disabled by default, the message dissappeared.


But I have to say, once a site showed such a behaviour, I don't trust it anymore and only use it with extreme caution (in this case: linux live CD for example).

I also can't understand why there is no clarifying word on this subject to this day by any technician responsible.


Best regards,

Michael.


Title: Re: Is there a site problem?
Post by: Henrik Soderberg on June 09, 2018, 11:57:51 pm
Hi all,

Sorry for a late reply. I've spent all time I've had on trying to find the source of this problem.

A few suspected parts have been fixed, and I would appreciate it if the ones still having problems can let me know if there still is a problem, and if there is - please let us know what the problem is, a screenshot if there is text or anything graphic visible, and also the country you are in.

I have not had any problems with the site myself at any time with any browser. It makes it tricky to reproduce the problems. With Netflix and other services with a lot of resources and lots to protect in different regions, it is nowadays harder to fake the country to find geographical differences. That's where your feedback really helps out. I've had a few members email me just enough info to keep me busy working on finding the source, and done what I can until now.

Thanks all for helping, and feel free to send emails or post in this thread if you have any further info on the problems from now on.

To all of you that were/are affected - Thank you for your patience!

Regards,
Henrik





Title: Re: Is there a site problem?
Post by: Keith Goldie on June 10, 2018, 12:37:05 am
After deleting the bookmark from this site and opening again I have no probs..
Using Chrome...will see if it stays fixed..


Title: Re: Is there a site problem?
Post by: Pilot Frans on June 10, 2018, 11:01:42 am
Hello Hendrik,

Sofar the message doesn't pump up anymore (the Netherlands with google crome).
Many thanks Hendrik for all the work you put in

Frans


Title: Re: Is there a site problem?
Post by: Michael Wirth on June 10, 2018, 12:06:34 pm
Hello Hendrik,

here in Germany (Win7, Firefox) the message also doesn't show up anymore.

It only showed up on my Windows computers, not on those running Linux.

I saw it several times yesterday, with different names of the .exe file and different sources (shipspotting.com and [something].ru). I forgot to take a screenshot ...

Thanks for your post and your work!


Best regards,

Michael.


Title: Re: Is there a site problem?
Post by: andrecas on June 11, 2018, 12:44:44 am
Hendrik,
Many thanks for your efforts in trying to resolve this security issue.

This coming from Eastern Canada (Saint John)
My PC running windows 10 / Microsoft edge

Tried accessing site this evening and I’m still getting malwarebytes pop up screen now reading WEBSITE BLOCKED DUE TO RISKWARE. Then it goes on to describe riskware with option to “continue to this site anyway”. In the malwarebytes pop up screen it contains following information.
DOMAIN: www.shipspotting.com
IP ADDRESS: 185.32.10.34
PORT: 50189
TYPE: outbound
FILE: c:\windows\systems\apps\microsoft.microsoft\edge_8wekyb3d8bbwe\microsoftedgeCP.exe

Questions comes to mind ......
(1) if I ignore pop up screen and continue to site, am I vulnerable to loopholes in system that can be exploited by hackers, putting my entire PC network at risk...?
(2) would deleting site and reinstalling on PC home screen help fix my situation?

Brgds....
andre




Title: Re: Is there a site problem?
Post by: Patrick Hill on June 11, 2018, 05:54:00 am
All now seems ok for me - many thanks


Title: Re: Is there a site problem?
Post by: brian e cole on June 11, 2018, 05:59:43 am
Hi! again, Thank you for fixing things. Only had the problem twice. Two days clear now.


Title: Re: Is there a site problem?
Post by: Robert J Smith on June 11, 2018, 07:55:39 am
Thanks Henrik, all clear now

Regards

Bob (London)


Title: Re: Is there a site problem?
Post by: jdap on June 11, 2018, 08:29:52 am
Good job, Heinrik!

I have been test-connecting to the site often for 48 hours now, and no trace of the annoying pop-ups anymore. All clear!

Accessing with Google Chrome running on W10 from near Lisbon, Portugal.

Thanks for your time and effort.

Rgds,

Jose
(jdap)


Title: Re: Is there a site problem?
Post by: Tony Martin on June 11, 2018, 08:36:26 am
Sorry, Malearebytes premium is still blocking on windows 10. Have tried reloading with no luck.


Title: Re: Is there a site problem?
Post by: andrecas on June 11, 2018, 05:46:18 pm
Earlier today Microsoft completed a lengthy upgrade to their Windows 10. For whatever reason I thought it might impact positively in helping resolve current issue I am experiencing from my side. However, tried  logging in SS site after upgrade and the malwarebytes (premium) program still blocking site... ??? Not being a techie I was hesitant continuing so I backed out.  Since this issue site related not sure what more IT (Henrick) can do from his side to get everyone back on board again (securely)...?

(Sent from iPhone @14:45hrs EST- Canada)


Title: Re: Is there a site problem?
Post by: csaba on June 12, 2018, 03:49:10 am
I had this few days ago, using Firefox. The antivirus immediately blocked and removed it. All seems fine since yesterday.


Title: Re: Is there a site problem?
Post by: Clyde Dickens on June 12, 2018, 08:53:58 am
Using the recently major updated Windows 10  I have visited the site via Chrome and Firefox several times over the past two days with no evident problem

I have AVG installed and that produced no messages about the problem

Clyde
Sydney Australia


Title: Re: Is there a site problem?
Post by: Henrik Soderberg on June 12, 2018, 02:35:51 pm
Tony Martin and andrecas,

It seems the whole site is blocked. There is this link for more reading:
https://support.malwarebytes.com/docs/DOC-1061

Not sure if that's good even, should there be anything else that spreads through ads or malicious forum posts etc.

Unless it is possible to clear the filters - uninstalling and reinstalling the Malaware software will likely work and be safest. And make sure you do not visit any websites while it is uninstalled.

Regards,
Henrik


Title: Re: Is there a site problem?
Post by: andrecas on June 12, 2018, 07:56:36 pm
Henrik....
Thank you for your reply and link. I drilled further into my settings and initiated cumulative updates for (1) windows 10 Version 1893 for x64 and (2) windows malicious software removal tool and (3) security update for Adobe flash player for windows 10 version 1803 for x64.  Still cannot access Shipspotting site. When I click on malwarebytes pop up screen “I want to continue to this site anyway” a drop down screen appears saying “you may be putting your online safety and system at risk by visiting this site”. Due to other confidential programs (sites) that I frequent, I am reluctant to add SS site to exclusions in malwarebytes program since an item (site) when excluded, is omitted from future scans and protection events. Doing so I fear jeopardizing other business sites that I frequent.
When I see other members freely uploading photos, I am at a loss as to why, in spite of what I’ve done to enhance security on my PC, still have my malwarebytes (premium) program blocking Shipspotting site....  ???
I also checked my Norton security program and all protection aspects  updated (regularly).
Brgds.....
andré


Title: Re: Is there a site problem?
Post by: Tony Martin on June 13, 2018, 04:22:29 am
Henrik, thank you for your note and link. I have reinstalled malwarebytes  ( premium) in windows 10 and still the site is being blocked. Also my Mac is showing a pop up stating that the site is not safe. It does load on the Mac however taking about 10 minutes to complete.  ( previous it was instant) Not sure what else I can do if I wish to keep other files protected.
Regards Tony.


Title: Re: Is there a site problem?
Post by: Oldkayaker on June 13, 2018, 04:05:54 pm
Still getting the Malware riskware warning using laptop PC with windows 10.  Any idea when the offending code will be removed?  My monthly support is being stopped until this site is safe to open. ???


Title: Re: Is there a site problem?
Post by: davidships on June 13, 2018, 05:24:40 pm
Henrik tells me that he thinks the site is all clear now.

But a few users have antivirus software that he thinks banned the site "forever" somehow (see Oldkayaker just below). The only advice he can give is to check that software's settings.

David


Title: Re: Is there a site problem?
Post by: Ian Thomas on June 13, 2018, 05:42:23 pm
No issues here on my computer using Windows 10 and Firefox with Norton as my web security.


Ian Thomas


Title: Re: Is there a site problem?
Post by: andrecas on June 14, 2018, 01:06:03 am
Earlier this evening (Eastern Canada) I tried accessing Shipspotting on PC and malwarebytes (premium) program still blocking site.
Checked settings per Henrik suggestion and nothing seems out of synch in regards to program performing what it’s supposed to do.
All the right toggles switched to “on” position. i.e. malwarebytes starts at Windows (10) start up. Automatic check for updates/scans. Real-time protection. Web protection:Prevents connections to malicious or compromised sites, etc. Of all the business and shipping sites frequented (Marine Traffic/Fleetmon/vesseltracker etc.,), just to name a few, plus a host of ports in Canada and other parts of the world,  Shipspotting is the only site In my entire collection of apps that I cannot access.  According to malware program site is still compromised.  ???
I hope in due course Henrik can confirm site is indeed clear and safe to navigate.


Title: Re: Is there a site problem?
Post by: Daniel Bérubé on June 14, 2018, 01:40:36 am
From Eastern Québec, Rimouski, Window 10 and Google Chrome: everything is working all right.


Title: Re: Is there a site problem?
Post by: rarcand on June 14, 2018, 02:20:32 am
Using Windows 10 with Bitdefender Total Security 2018 and Google Chrome.

I had the popup about the java update the first time I accessed the site for some days then received a warning from my antivirus. Yesterday the popup was gone but the site was slow.

Found this in the protection web section of my Bitdefender

shipspotting.com/global/payments/BACKUP01/install.exe (I removed the first part of the url to prevent an hyperlink)

Today, the navigating in the forum section is normal but is very slow in the Ship Photo Search section. It takes usually about 30 seconds to show a new page.


Title: Re: Is there a site problem?
Post by: davidships on June 14, 2018, 07:40:06 am
Access and loading is normal (ie not noticeable slow) here (eastern UK) with no popups today or warnings.

Would other members using "malwarebytes (premium)" please post here whether they are still having warnings.

I have drawn these new messages to Henrik's attention.



Title: Re: Is there a site problem?
Post by: Bjørn Knudsen on June 14, 2018, 08:07:26 am
Hi
I have W 10 and IE 11. I use the latest Malwarebytes and are blocked.

When I turn off Network Protection SP works ok.

Regards Bjørn


Title: Re: Is there a site problem?
Post by: Bjørn Knudsen on June 14, 2018, 08:12:18 am
Hi
Same With problem with W10 and Edge.


Title: Re: Is there a site problem?
Post by: andrecas on June 14, 2018, 10:48:06 am
Tried accessing site at 7:45am today (June 14) and still blocked.
As previously reported ...
Saint John -Canada
Malwarebytes premium
Microsoft edge
Windows 10


Title: Re: Is there a site problem?
Post by: Patrick Deenik on June 14, 2018, 12:31:23 pm
Hi,

Since 3 days I have no problems anymore.

BUT on the topside of the SP screen  (Google chrome)it tells me that the site is not secure.(Niet beveiligd in Dutch)

I have Windows 10, Google Chrome and ESET.

All the best,

Patrick


Title: Re: Is there a site problem?
Post by: Bjørn Knudsen on June 14, 2018, 01:04:02 pm
Hi
I have tested the following places in SP:

HOME PHOTOS-VIDEOS-SHIPS-AIS FORUM-NEWS-SUPPORT-CONTACT-SHIPTRAX-XML DATA.

FORUM is the only place stopped by Malwarebytes (Premium)

The others seem normal.


Title: Re: Is there a site problem?
Post by: tom scott on June 14, 2018, 10:52:36 pm
Hello. I joined shipspotting.com August 4th 2007. I have never had any problems with the site at all. Tonight Norton Internet Security warned me not to visit the site with this message " you have attempted to access a web site that is potentially harmful or malicious. It is recommended that you do NOT visit this site" another warning said "this is a know malicious site." they advised that  one threat had been made to my computer by shipspotting .com. The header at the top of my screen, whenever I access shipspotting is always displaying "Not secure/ www.shipspotting.com/contact php" I wondered if you could explain why this appears and how to respond please?
I tried to send this message through the "Contact" page, but was confused to see a message that "CAPTCHA V1 IS DISABLED" so each time I tied to "SUBMIT MESSAGE" I was unable to because you request that I copy the CAPTCHA letters.
Thank you


Title: Re: Is there a site problem?
Post by: rarcand on June 15, 2018, 02:25:20 am
Good news, I think.
No popup and speed is back to the normal.
But Google Chrome still rate the site as unsecured.


Title: Re: Is there a site problem?
Post by: Tony Martin on June 15, 2018, 07:27:56 am
Can now open shipspotting on windows 10 PC. However forum and log in is still blocked. Had an IT  guy try to fix the problem, he believes there is an issue with the site, he could not resolve and believes Malwarebytes has detected a complex issue. My Mac still opens all, however very slow with warnings.  I have tried my best to resolve without success so will not be posting on this site until resolved. In my case seems there may be a danger of corrupting other files.
Sorry about this, regards Tony.


Title: Re: Is there a site problem?
Post by: pieter melissen on June 15, 2018, 01:27:13 pm
Windows 7 (yes that old) and Firefox produce no problems any more.


Title: Re: Is there a site problem?
Post by: Linesman on June 15, 2018, 06:49:45 pm
Am having problems moving between pages on site.  It is taking a very long time to do so.


Title: Re: Is there a site problem?
Post by: Patrick Hill on June 15, 2018, 06:55:22 pm
Pages not fully loading (banner header only) or very slow here - Hull UK. Chrome, Win 7 :(


Title: Re: Is there a site problem?
Post by: john white on June 15, 2018, 07:03:20 pm
same with me and very slow


Title: Re: Is there a site problem?
Post by: Adrian Ford on June 15, 2018, 08:20:15 pm
Yes very slow and sometimes Not Authorise


Title: Re: Is there a site problem?
Post by: Derek Lilley on June 15, 2018, 08:44:35 pm
Hi All

I have contacted Henrik our IT guru and he has replied that everything should now be OK.

A case of someone trying to interfere with the site.

Kind regards
Derek


Title: Re: Is there a site problem?
Post by: andrecas on June 15, 2018, 11:05:27 pm
After reading Derek’s comment (on my iPhone), I restarted PC and tried  accessing Shipspotting. Malwarebytes program still blocking site  ???
I did this twice. At 6PM and again at 8 PM (Saint John-Canada) time.


Title: Re: Is there a site problem?
Post by: Tony Martin on June 16, 2018, 02:57:14 am
andrecas , same with me malwarebytes still blocking site on login and forum. Mac is working, however pop up saying site is not secure. Frustrating ! 


Title: Re: Is there a site problem?
Post by: Derek Lilley on June 16, 2018, 08:05:17 am
Hi Andrecas and Tom,

Sorry I should have been more explicit, I was refering to the problems had by Linesman, Patrick, John and Adrian who were having problems with the slowness of the site.

Sorry to raise your hopes like that.

Kind regards
Derek


Title: Re: Is there a site problem?
Post by: Tony Martin on June 16, 2018, 08:54:38 am
Derek, I think this problem is a major issue and seems to beyond  Hendrick. Either he is wrong  or  Malewarebytes is wrong. If you wish  to keep us as  supporters this needs to be resolved. Sorry I will not compromise security for this site. I think this  has prolonged for too long. Got to the point where I need to be frank. Regret  I need to make this comment.


Title: Re: Is there a site problem?
Post by: Bjørn Knudsen on June 16, 2018, 12:18:42 pm
I checked: Norton Safe Web against shipspotting.co
Message to Site Owner, About a Threat (Trojan)

Malwarebytes (premium) in excl. Enter: www.shipspotting.com/ and forum.shipspotting.com/


Title: Re: Is there a site problem?
Post by: smithy166 on June 16, 2018, 04:05:03 pm
I checked: Norton Safe Web against shipspotting.co
Message to Site Owner, About a Threat (Trojan)

Malwarebytes (premium) in excl. Enter: www.shipspotting.com/ and forum.shipspotting.com/

"
Threat Name:
Trojan.Gen.2
Location:
http://shipspotting.com/smf1/include/Install.exe
"

I attempted to open the link above (out of curiosity) - The file is still there, but Kaspersky blocks access. Without knowing what "install.exe" actually does, it's difficult to say whether it's a false positive or not.

Perhaps it might be time to consider upgrading to a new version of SMF, seeing as though 1.1.X has now been depreciated by Simple machines? It goes without saying, but if the above isn't a false positive, it's probably time to get in touch with the webhost and ask for a roleback... Oh, and a change of passwords!


Title: Re: Is there a site problem?
Post by: Tony Martin on June 18, 2018, 08:28:39 am
Malwarebytes  is still blocking this site. Is there any progress or is it not being addressed. Please advise.


Title: Re: Is there a site problem?
Post by: davidships on June 18, 2018, 08:57:11 am
I have asked Henrik for progress update.


Title: Re: Is there a site problem?
Post by: Possett on June 18, 2018, 09:28:04 am
Norton blocks me on Google Chrome but not on Window's Edge is there any reason for this


Title: Re: Is there a site problem?
Post by: Anthony Legg on June 19, 2018, 11:28:03 am
This is strange, Nortons is still blocking Firefox from accessing this site, but, for me, Google Chrome works.....


Title: Re: Is there a site problem?
Post by: Fergal Clohessy on June 19, 2018, 12:00:57 pm
This is dragging on way too long. since the 5th of June and in the meantime users are at risk...


Title: Re: Is there a site problem?
Post by: Pilot Frans on June 19, 2018, 01:35:50 pm
The message of Java 8 to be downloaded showed up again.
I useing Google CHrome Version 67.0.3396.87 and windows 7


Title: Re: Is there a site problem?
Post by: davidships on June 19, 2018, 11:47:05 pm
Your reports in the forum are helpful and I am ensuring that Henrik sees them.
He advises this evening:

- "The site is safe, but the old problem can, combined with new (soon to come) security recommendtions, lead to conclusions that we are a bad site. It is mainly solving this puzzle I am working on."

- "I am working on whether we are blacklisted or if the softwares remembers - and if so how to clear this."

The complexity would seem to be illustrated by the wide variey of the members' reports posted here - often contradictory.  We will post here as frequently as possible.  For those who cannot get as far as this forum, or are uncomfortable to do so, I will communicate by external email as soon as we have something definitive to say. 

DAvid


Title: Re: Is there a site problem?
Post by: Clyde Dickens on June 20, 2018, 12:25:16 am
Pier Master has posted this message on Facebook

Just got this from my Norton AV...

Dangerous Web Page BlockedYou attempted to access:http://www.shipspotting.com/This is a known dangerous web page. It is highly recommended that you do NOT visit this page.

Visit Norton to learn more about phishing and internet security.
Continue to the site


Title: Re: Is there a site problem?
Post by: Tony Martin on June 20, 2018, 06:46:58 am
Interesting Clyde, I had geeks2u check this out on my pc and mac. could not resolve and advised me not to unlock malywarebytes and  open shipspotting on these devices . My only access is via iPhone. This means I cannot post any Photos. Frustrating situation.


Title: Re: Is there a site problem?
Post by: Bjørn Knudsen on June 20, 2018, 08:10:26 am
Hi
Malwarebytes (Premium)
I have made changes to 1: Settings - 2: Exclusion
Under exception and exception type
1: www.shipspotting.com/
2: forum.shipspotting.com/
I am using Windows 10 + I.E. 11 and Edge. Then everything works
as normal.


Title: Re: Is there a site problem?
Post by: Tony Martin on June 20, 2018, 08:27:15 am
Bjorn, by doing this  I think you may be putting your computer risk. unfortunatly  shipspotting is  deemed as high risk site.


Title: Re: Is there a site problem?
Post by: Bjørn Knudsen on June 20, 2018, 12:44:43 pm
Hi
I have used this setting for 4 days now without ploblemer so far.
Malware does its job too. I'm using Windows Defender as well.
 


Title: Re: Is there a site problem?
Post by: Patrick Hill on June 20, 2018, 06:21:16 pm
Not showing any issues here - I am using AdBlock Plus so maybe the issue is manifesting through an ad?

McAfee gives the site a clean bill of health.

Patrick


Title: Re: Is there a site problem?
Post by: lappino on June 20, 2018, 07:24:09 pm
Norton says not safe.

https://safeweb.norton.com/report/show?url=http%3A%2F%2Fwww.shipspotting.com%2Fgallery%2Fadd_photo.php


Title: Re: Is there a site problem?
Post by: andrecas on June 21, 2018, 12:32:44 am
I tried again this evening June 20th, (8:45 pm-Eastern Canada) to log on site and malwarebytes still blocking access which suggests to me this site continues to be unsafe and not secure. Since this topic began more than 2 weeks ago there have been more than 5,000 “reads”  registered.  Of the vast membership roster approximately 50 have posted a reply expressing concern one way or another. I noticed some  members continue to upload freely, presumably ignoring warnings or simply managing exclusions circumventing those Norton/Malwarebytes warnings. Others, have chosen to refrain from uploading for  the time being. And still  others have chosen to remain silent altogether (in expressing their concern).
There is another topic in the forum dealing with site security which aired  awhile back (could not find after cursory search). Perhaps the two are not related? However, given the scope of current problem, there is, (to me anyway), something nefarious hiding somewhere in the Shipspotting site designed to cause harm and/or disruption.
For all of Henrik’s efforts and hard work put into rectifying this problem so far, there yet appears to be a fix shoring up any/all  “loose ends”.
In terms of providing a so called “secure” and “safe” site, what is it that MarineTraffic and the others are doing that Shipspotting isn’t.....?
I’m no techie but they’ve  evidently incorporated certain levels/layers of (security) software thus avoiding what this site is currently experiencing.
I believe with proper (security) enhancements Shipspotting can continue to be a premium site with quality features enjoyed by many shipping enthusiasts.
I like this site’s format, the interaction (comments) of/with other members. It’s design makes site easy to navigate etc.
I know the Webmasters, Admins, Henrik, etc., put in  long hours to keep site runnIng smoothly, providing  (to quote what is under the mast head).....“best ship information”.  Their efforts are very much appreciated.
With all the attention currently focused  on Henrik to get site back on track (for everyone), I’m sure it is glitch is  frustrating for all concerned.
I’m hoping the Shipspotting team will get through this sooner than later.
Looking forward to uploading again in the not  too distant future.
Best regards to all,
andre


Title: Re: Is there a site problem?
Post by: Paul Finnigan on June 21, 2018, 01:21:23 am
My understanding is that all http websites now show not secure in the ULR bar where passwords etc are used.This is intended for web site developers to update to https websites. 


Title: Re: Is there a site problem?
Post by: Jens Boldt on June 21, 2018, 01:27:23 am
I'm using Firefox 60.0.2 on Windows 10 built 18.03, Windows defender and Adblock Plus.
No obvious problems with the site with that configuration.

Windows defender shows all systems green...


Title: Re: Is there a site problem?
Post by: rarcand on June 21, 2018, 02:16:42 am
The site is still rated as insecure by Google Chrome and this does not seems to be related to the use of login and passwords. Some other sites I visited are also rated as such while other displayed the padlock icon.
Also, when in the last days navigation through the site was back to normal, today it is very slow and I had some trouble to display the full screen pictures at first but the situation improved at a later time.


Title: Re: Is there a site problem?
Post by: Paul Finnigan on June 21, 2018, 02:41:25 am
The site is still rated as insecure by Google Chrome and this does not seems to be related to the use of login and passwords. Some other sites I visited are also rated as such while other displayed the padlock icon.
Also, when in the last days navigation through the site was back to normal, today it is very slow and I had some trouble to display the full screen pictures at first but the situation improved at a later time.
Hello Rarcand,

Google Chrome shows all http websites as Not Secure.It doesn't really mean that the site is unsafe as we have been using this configuration in the past .Software companies want websites owners to upgrade to https that's why Not Secure is showing in the ULR bar.This is the way I understand it from what I have read. I should add I,m no expert so I could be wrong !       


Title: Re: Is there a site problem?
Post by: Tony Martin on June 21, 2018, 07:23:10 am
Re this problem with malwarebytes blocking  the site, issue seems to be adware ( malicious software which displays unwanted or corrupt advertising) maybe this is the issue and those using  adblocker are not experiencing the problem . In any case the site seems to have a problem.


Title: Re: Is there a site problem?
Post by: smithy166 on June 21, 2018, 02:18:10 pm
Running Ublock origin, and the attached popped up today...

Links to an EXE that seems to be identical to that which I mentioned previously (http://shipspotting.com/smf1/include/Install.exe). I'm now VERY doubtful this is merely restricted to the ad provider the site uses, but rather a larger issue with the site itself.
SMF doesn't ship with an EXE, no matter the version - Something I know as I run a number of sites running SMF software... So that installer should definitely NOT be there!

The popup links to a file that contains a Trojan, classified as "UDS:Trojan-spy.Win32.SpyEyes.a ". This particular Trojan contains, amoungst other things, a key-logger, a self-installing rootkit to hide it's presence, and the ability to download and install updates pushed from the attacker to the infected machine, without intervention by the end user.
It appears to be designed primarily to help steal login credentials of users, pushing them to the attacker.

Interestingly, the site attempted to download the file from "shipspotting.com/SMF1/include/install.exe" whilst I was editing this post, without a pop-up. Kaspersky total security intervened and prevented the download.


Title: Re: Is there a site problem?
Post by: seaweasel on June 21, 2018, 02:23:30 pm
Very shortly after accessing shipspotting.com the attached message showed up on the front page.

This message tells me to install a flash player update and it pretends that I use a certain obsolete version - actually flash player is not installed at all. When right-clicking on the message it still asks to start a download from some dubious site (as shown on attachment).

I use Firefox 60.0.2 with uBlock Origin 1.16.10 and NoScript Version 10.1.8.2.

I hope this information will be helpful in further analyzing the problem.

Best regards Hans


Title: Re: Is there a site problem?
Post by: Pilot Frans on June 21, 2018, 02:53:31 pm
I had both message pumping up of Seawessel and Smithy 166
yesterday.
I start dowloading start away. I stopped downloading process and deleted interruped file


Title: Re: Is there a site problem?
Post by: dirk septer on June 21, 2018, 03:23:17 pm
Shipspotting blocked/marked as unsafe site; again I'm getting this phony JAVA update prompt again;


Title: Re: Is there a site problem?
Post by: Oldkayaker on June 21, 2018, 04:43:10 pm
Agree with many of the comments that the problem seems to come from ads.  What is confusing for a former Supporter is that we were supposed to be ad free if we provided support!!!??????


Title: Re: Is there a site problem?
Post by: csaba on June 21, 2018, 06:48:34 pm
All fine if I log on from work, using Chrome. But logging on from home I am getting messages that it is a dangerous site and must download Microsoft update etc. using Firefox at home.


Title: Re: Is there a site problem?
Post by: pieter melissen on June 22, 2018, 03:25:07 pm
Just got a new pop-up, which immediately disappeared and was replaced by a statement from my computer that I was about to download an exe programme. As the extensions said .ru I refused, went back to shipspotting and the pop-ups have disappeared. It could have caught me (or you) unaware, so not everything is safe around here.


Title: Re: Is there a site problem?
Post by: Robert J Smith on June 22, 2018, 04:06:05 pm
The address bar at the top when logged into SS says "Not secure" click on this and I get "Your connection to this site is not secure"

I get the secure "padlock" on all other sites.

Chrome on Windows 7


Title: Re: Is there a site problem?
Post by: john white on June 22, 2018, 06:08:55 pm
I have same problem no green padlock showing site not safe


Title: Re: Is there a site problem?
Post by: itsfoto on June 22, 2018, 06:36:08 pm
The problem is certainly not gone away at all. It comes in a new flavour (now it's something about Windows font pack). This is Denmark, I use Firefox. Firefox leaves me in no doubt about the risk. It's not pleasant.
Maybe it's time to close the site for a while and give it a thorough scrub out, make it a safe site (https). Maybe even a cosmetic make-over while you are at it. It's beginning to show its age.
just my thoughts.
I wish you good luck with it.
Uwe


Title: Re: Is there a site problem?
Post by: ChasB46 on June 22, 2018, 06:51:41 pm
I do not get any warnings as "infiltrations" are blocked. However looking at UBlock Origin history it shows two curious entries blocked / in bold .. first of a javascript trying to run and in the other a reference to missingkids.com/. Maybe of help to admin.

9:43:50            css   http://forum.shipspotting.com/Themes/default/print.css?fin11
19:43:49      ||googlesyndication.com^   --   script   http://pagead2.googlesyndication.com/pagead/show_ads.js
19:43:49      ||addthis.com^$important,third-party,domain=~missingkids.com|~missingkids.org   --   script   http://s7.addthis.com/js/addthis_widget.php?v=12

19:43:49            css   http://forum.shipspotting.com/Themes/shipspotting/css/style-main.css
19:43:49            css   http://forum.shipspotting.com/Themes/shipspotting/style.css?fin11
19:43:49            inline-script   http://forum.shipspotting.com/index.php?PHPSESSID=85lp395bi892849dnvjm7re9n1&/topic,16204.msg85933.html#new
19:43:49            doc   http://forum.shipspotting.com/index.php?PHPSESSID=85lp395bi892849dnvjm7re9n1&/topic,16204.msg85933.html#new


Title: Re: Is there a site problem?
Post by: Pieter Inpyn on June 22, 2018, 07:04:59 pm
Many members still report problems with the site. But why do we not hear any status report about solving the problems from the technical team?

Why has the site owner not intervened by now with technical support and / or money to solve the problems?

I am using Norton that gives me the "not safe"-warning, but I can access the site after the warning without any further problems. Does that mean that Norton has flagged the website internally for ever as "not safe"?

Questions, questions, questions, now the answers please?