ShipSpotting.com
Login: Lost Password? SIGN UP
Ship Photo Search
Advanced Search
Pages: 1 2 [3] 4 5 6
  Print  
Author Topic: Coinhive threat warning  (Read 24128 times)
0 Members and 1 Guest are viewing this topic.
Hannes van Rijn
Top Poster
*****
Offline Offline

Posts: 12,557



View Profile WWW
« Reply #30 on: October 15, 2017, 03:00:13 pm »

I recive this warning ,of this site: This website has been reported as harmful.
We recommend not visiting this website.

http://tizermedias.com/odessa/?54vFcZ&se_referrer=http://forum.shipspotting.com/index.php?action=post;topic=15939.0;num_replies=29&default_keyword=My%20Uploaded%20Photos%20-%20ShipSpotting.com%20-%20Ship%20Photos%20and%20Ship%20Tracker&r=7308

Is there a virus in this site Huh?
Report to moderator   Logged
Peter Lenderink

Offline Offline

Posts: 1


View Profile
« Reply #31 on: October 15, 2017, 09:08:59 pm »

I have noticed slowing of the site as well, plus when this site is opened, some other programs are also slowing down.
Report to moderator   Logged
lappino
Home away from home
****
Offline Offline

Posts: 236


View Profile
« Reply #32 on: October 16, 2017, 02:05:05 am »

Simple check: processor usage jumps to 100% as soon as the site opens.

This is theft, you know. Smiley

I am outta here until they sort it out.
Report to moderator   Logged
davidships
Webmaster
Top Poster
*****
Offline Offline

Posts: 1,793



View Profile
« Reply #33 on: October 16, 2017, 02:34:38 am »

A reminder - I think that it is mentioned somewhere below that the problem is only related to www.shipspotting.com addresses and not to the different domain that runs this Forum.

We do not recommend that members ignore the 99% CPU usage caused by this if your anti-virus or other security software doen't fix it, at least temporarily.  I suggest members, especially those who have no temporary fix for the main site and wish to withdraw from general activity for the moment, keep in touch with progress via this forum and access it directly by bookmarking http://forum.shipspotting.com/index.php

We are in the hands of Henrik at the moment and I am sure that he will post an update here as soon as possible.

best wishes to all

David



Report to moderator   Logged
ChasB46
Top Poster
*****
Offline Offline

Posts: 825


View Profile
« Reply #34 on: October 16, 2017, 10:11:14 am »

To see if you have Coin-hive aboard give Zemana a try. https://www.zemana.com/download .If you do not want to load the programme into your system there is a portable version available. Its free for 14 days and does remove any nasties it finds without you having to pay in that time span (some "free for 30 days etc" ones scan but ask for cash before removing). I've been a regular user of Malwarebytes and SuperAntispyware but trialling Zemana found extra nasties and removed them. In reviews it does zap coin-hive so if you suspect your infected give it a try. To prevent reinfection initiate a good adblocker.
As Shipspotting is reliant on ads, once the site has been cleared of the coin-hive intrusion, you can support the site by allowing its ads etc.  
NOTE ... Zemana will do an initial scan of most likely areas of infection but not the whole drive . To search whole drive drag and drop your 'C' drive etc. into the box on its start-up page.
« Last Edit: October 16, 2017, 10:14:43 am by ChasB46 » Report to moderator   Logged
Patrick Hill
Top Poster
*****
Offline Offline

Posts: 527



View Profile WWW
« Reply #35 on: October 16, 2017, 07:23:05 pm »

Just a quick point, I have run AdBlock plus for quite some time but still suffered with this trojan - however all scans with McAfee and Malwarebytes found no issues on my system.
Report to moderator   Logged
ChasB46
Top Poster
*****
Offline Offline

Posts: 825


View Profile
« Reply #36 on: October 16, 2017, 08:24:02 pm »

How do you know that its coin-hive (Manero) causing your problem if its not been detected? Malwarebytes is blocking 5 million "attacks" a day.
Report to moderator   Logged
Patrick Hill
Top Poster
*****
Offline Offline

Posts: 527



View Profile WWW
« Reply #37 on: October 16, 2017, 08:44:49 pm »

How do you know that its coin-hive (Manero) causing your problem if its not been detected? Malwarebytes is blocking 5 million "attacks" a day.

Because malwarebytes blocks the outgoing connection to coin-hive sites....
Report to moderator   Logged
Oldkayaker
Supporter
Home away from home
****
Offline Offline

Posts: 361


View Profile WWW
« Reply #38 on: October 17, 2017, 04:40:44 pm »

Hi
FYI...about the site...my malware protection keeps giving me a warning about one of the sponsors or addresses that shows up on the Shipspotting home page.
Report to moderator   Logged
Oldkayaker
Supporter
Home away from home
****
Offline Offline

Posts: 361


View Profile WWW
« Reply #39 on: October 17, 2017, 04:42:50 pm »

Yes, getting the same malware warning about coinhive.com
Report to moderator   Logged
Cody Williams
Webmaster
Top Poster
*****
Offline Offline

Posts: 1,115


View Profile WWW
« Reply #40 on: October 18, 2017, 01:31:22 am »

How to Block Coin-Hive

Hi Everyone,

I think I may have found a solution. You can add the extension, No Coin for your browser:

No Coin for:
Chrome
Firefox
Opera

Alternatively you can block Coin-Hive within Ad-Block itself. Here’s how you can do that:

1. Click on the Ad-block icon in your browser and select Options.
2. Click on the Customise tab at the top of the page.
3. Click block an ad by its URL.
4. In the text field that appears, enter the URL from the code box below.

Code:
https://coinhive.com/lib/coinhive.min.js

And that should hopefully block it.

Best Wishes
Cody

EDIT: Corrected link
« Last Edit: October 18, 2017, 08:27:49 am by Cody Williams » Report to moderator   Logged

I can be contacted at cody@shipspotting.com
pieter melissen
Photo Corrections
Home away from home
*****
Offline Offline

Posts: 233


View Profile WWW
« Reply #41 on: October 18, 2017, 06:01:48 am »

Thanks Cody, I can get as far as clicking on the icon, (Adblock ultimate 2.28) but nowhere the "options" button appears. Where do I go wrong?
Report to moderator   Logged
Cody Williams
Webmaster
Top Poster
*****
Offline Offline

Posts: 1,115


View Profile WWW
« Reply #42 on: October 18, 2017, 06:15:17 am »

Sorry Pieter, I meant this AdBlock extension.



Report to moderator   Logged

I can be contacted at cody@shipspotting.com
pieter melissen
Photo Corrections
Home away from home
*****
Offline Offline

Posts: 233


View Profile WWW
« Reply #43 on: October 18, 2017, 06:38:25 am »

OK, I did that, but I had to retyp the link in Domain, not in the URL box, because when I did that the "flash" extension that was there reappered after typing the URL (Copy-paste did not work there).
The results are that I do not get a message from AVG anymore that the connection with coinhave was discontinued, so I hopefully can assume that it was established. In other words cody, your suggestion works. Thanks a lot.
Report to moderator   Logged
sisko111
Top Poster
*****
Offline Offline

Posts: 1,616



View Profile
« Reply #44 on: October 18, 2017, 08:22:21 am »

Hi all ,
I am using Chrome and AdBlock too
In my case correct code is : https://coinhive.com/lib/coinhive.min.js
and the problem is solved !
Brgds Siniša
Report to moderator   Logged
Pages: 1 2 [3] 4 5 6
  Print  
 
Jump to:  


Powered by SMF 1.1.11 | SMF © 2006-2009, Simple Machines LLC
Page created in 0.052 seconds with 19 queries.
Copyright © 2010 All rights reserved