Malware on ARRSE ?

Discussion in 'ARRSE: Site Issues' started by _Chimurenga_, May 7, 2013.

Welcome to the Army Rumour Service, ARRSE

The UK's largest and busiest UNofficial military website.

The heart of the site is the forum area, including:

  1. _Chimurenga_

    _Chimurenga_ LE Gallery Guru

    Got this alert a couple of minutes ago when I tried to click on "LAST 50" tab.

  2. Maliciousness on ARRSE? Absurd!
  3. Just got a malware warning, refreshed and I could get on the site as normal. Must be one of the ads.
  4. Yesterday I periodically got a warning message that the site 'certificate' had expired and was asked to accept or refuse. I always refused & the page loaded correctly so I assumed it was something to do with one of the ads.
  5. It can sometimes happen with img code links.
  6. Good CO

    Good CO LE Admin

    Thanks for the heads up. I found mention of this on two other forums this morning, but I can't find eqads in google's control panel where we can choose which networks can use us. I'm therefore a bit stumped. I will spend some time on the site this morning and try to get the same thing.
  7. Good CO

    Good CO LE Admin

    That sounds like an SSL certificate warning - the padlock that you get at the top of the page when you use online banking, email and so on. We have never used SSL connections, and you can't connect at all to the site on an https:// URL. So I'm really surprised to hear about that error. Can you take a screenshot the next time it happens? Or at least a note of the URL?
  8. OK, so far it hasn't happened today.
  9. Brotherton Lad

    Brotherton Lad LE Reviewer

    Just had the malware warning on the self-taken photo page. egad again
  10. I have scriptsafe running on chrome to prevent scripts automatically running on a page. Currently on this page (and all others i've been to on arrse today) its blocking hundreds of scripts being served by this is not normal behavior ! is some sort of live chat engine that seems to be trying to execute xml scripts. something is wrong with this. after 1 minute on a page i'm blocking 1000 scripts

  11. Could this be a function of the new chat with 130+ people logged onto it, according to the new button at the bottom of the page?

  12. Yes i've just seen the new chat feature mentioned on another thread. it seems to be whats generating the scripts.
    i get a bit ******* paranoid when stuff like this happens
    • Like Like x 1
  13. Good CO

    Good CO LE Admin

    They are AJAX requests from the chat package - at an educated guess it's updating how many people are online. AJAX - asynchronous javascript and XML is how modern websites get desktop-like behaviour. It allows your browser to communicate with a server without you refreshing a page, by sending small bits of information back and forth. It's use is widespread and perfectly normal. Normally my sympathy for this sort of paranoia is limited - plugins that cripple your browser for no obvious reason are not something that I have a great deal of time for.

    This does however sound quite extreme and thanks for flagging it up. For most people, most of the time, a chat package is not wanted. Having a constant data flow without even using it just seems wrong. I will therefore do some digging - I won't modify anything yet as I don't know if it's staying, but will look in to it.
  14. screenshot.JPG