Be a Supporter!

Did NG's server get hacked somehow?

  • 2,510 Views
  • 74 Replies
New Topic Respond to this Topic
Head-Full-Of-Acid
Head-Full-Of-Acid
  • Member since: Aug. 26, 2006
  • Online!
Forum Stats
Supporter
Level 20
Musician
Response to Did NG's server get hacked somehow? Feb. 12th, 2011 @ 04:26 AM Reply

this was happening to me as well for about an hour..

i ended up blocking every page i got redirected to.

it's weird how it was only redirecting through this site.


Request a review ]                                                                            sea otters hold hands in their sleep so they don't drift away from each other

BBS Signature
The-Great-One
The-Great-One
  • Member since: Sep. 2, 2006
  • Offline.
Forum Stats
Member
Level 30
Writer
Response to Did NG's server get hacked somehow? Feb. 12th, 2011 @ 04:27 AM Reply

Yep, that was happening with me. I think it's Internet Explorer, because today is the day I finally decided to say FUCK IT and download Google Chrome.

So much faster.

| The Interviewer | Review Terms 3.0 | [This Space For Rent ] | Club Stoic |

BBS Signature
dreadryu
dreadryu
  • Member since: Jun. 9, 2009
  • Offline.
Forum Stats
Member
Level 02
Blank Slate
Response to Did NG's server get hacked somehow? Feb. 12th, 2011 @ 07:22 AM Reply

did some tests and it is NG some how everytime i enter this site i keep getting redirected to a site called safeboy or something it one of those fake anti virus spamware i hope tom and the others know about it and do some looking into it but seeing as how its not affecting some ppl it may be the browser still its worth a look

Banziafy
Banziafy
  • Member since: Mar. 28, 2010
  • Offline.
Forum Stats
Member
Level 11
Gamer
Response to Did NG's server get hacked somehow? Feb. 12th, 2011 @ 07:27 AM Reply

At 2/12/11 12:44 AM, Yert wrote: >Internet Explorer

WELP, found your problem.

hahah, google chrome gets no shit :)


BBS Signature
Hyptosis
Hyptosis
  • Member since: Mar. 19, 2009
  • Offline.
Forum Stats
Member
Level 19
Artist
Response to Did NG's server get hacked somehow? Feb. 12th, 2011 @ 07:36 AM Reply

Yeah I got this popup this morning, I have four pcs and only use IE on one of them, then I went and checked with the other machines on IE and same thing. All four of my computers do it, only on NG, and only in shitty IE. Firefox and chrome gimme nothing, all machines look clean. I'm pretty good about keeping them clean/fighting virus.

I feel a little better seeing other people report it as well.

futrchamp
futrchamp
  • Member since: Jun. 3, 2008
  • Offline.
Forum Stats
Member
Level 06
Blank Slate
Response to Did NG's server get hacked somehow? Feb. 12th, 2011 @ 08:46 AM Reply

It pops up the ad for me too. Kinda unrelated, but lol at "Hard Disk Drivers". If it is something with the security settings, it should be relatively easy to find, albeit take a while. Going into custom settings and manually enabling things from lowest settings should find the problem. Trying it right now.

futrchamp
futrchamp
  • Member since: Jun. 3, 2008
  • Offline.
Forum Stats
Member
Level 06
Blank Slate
Response to Did NG's server get hacked somehow? Feb. 12th, 2011 @ 08:49 AM Reply

Everyone try to disable XAML applications and see if that blocks the attack. Worked for me.

Supasang
Supasang
  • Member since: May. 31, 2008
  • Offline.
Forum Stats
Member
Level 07
Blank Slate
Response to Did NG's server get hacked somehow? Feb. 12th, 2011 @ 08:51 AM Reply

HEy guys click this link! Here


"If music be the food of love, play on.'~Spongebob

BBS Signature
Hyptosis
Hyptosis
  • Member since: Mar. 19, 2009
  • Offline.
Forum Stats
Member
Level 19
Artist
Response to Did NG's server get hacked somehow? Feb. 12th, 2011 @ 08:55 AM Reply

Stopping it isn't really the issue. It's finding the source of it, if it IS NG homepage then it needs to be fixed before in infects more computer illiterate visitors.

Hyptosis
Hyptosis
  • Member since: Mar. 19, 2009
  • Offline.
Forum Stats
Member
Level 19
Artist
Response to Did NG's server get hacked somehow? Feb. 12th, 2011 @ 08:57 AM Reply

Stopping it locally I mean. It's easy to not get the virus, but the danger it shouldn't be left on the site.

Arthuria99
Arthuria99
  • Member since: Jul. 18, 2008
  • Offline.
Forum Stats
Member
Level 37
Game Developer
Response to Did NG's server get hacked somehow? Feb. 12th, 2011 @ 09:02 AM Reply

At 2/12/11 12:39 AM, blackattackbitch wrote: I thought I had managed to get a malware infection from the millions of porn sites I visit each day.

That explains everything


Coming Soon :
Wave Warrior Sonic EXE 3: Garnet Version
DeviantArtPage --- Facebook ---My Youtube

BBS Signature
fleskjarke
fleskjarke
  • Member since: Feb. 12, 2011
  • Offline.
Forum Stats
Member
Level 02
Blank Slate
Response to Did NG's server get hacked somehow? Feb. 12th, 2011 @ 10:34 AM Reply

Well, Internet Explorer is SH!T. so why use it?

blackattackbitch
blackattackbitch
  • Member since: Oct. 24, 2008
  • Offline.
Forum Stats
Member
Level 04
Musician
Response to Did NG's server get hacked somehow? Feb. 12th, 2011 @ 10:44 AM Reply

Okay guys, so it's definitely NG.

The results of my findings:

fmsmedia.net, one of the sites that advertises on NG, is using a script to redirect users from NG to various sites, which then proceed to essentially lock you out of internet explorer until you manually close the program and start it up.

The script is initiated every time it's banner ad loads. By blocking fmsmedia.net in IE, I also disabled one of the possible ads that can appear on the site. It's not the fault of NG, but rather, it's advertisers. Since I now have definitive proof, I'll throw this theory by Wade and see what he says.

dreadryu
dreadryu
  • Member since: Jun. 9, 2009
  • Offline.
Forum Stats
Member
Level 02
Blank Slate
Response to Did NG's server get hacked somehow? Feb. 12th, 2011 @ 11:07 AM Reply

you may have found a bandaid fix i did the same and it disabled that banner ad but still this should be brought up even though we have a bandaid fix on it there are still others that can be afflicted so they need to remove the source of the redirects

PaintDrNet
PaintDrNet
  • Member since: Sep. 17, 2010
  • Offline.
Forum Stats
Member
Level 05
Blank Slate
Response to Did NG's server get hacked somehow? Feb. 12th, 2011 @ 11:18 AM Reply

At 2/12/11 12:47 AM, Leidolfr wrote: Don't use i.e for anything period, even if ie isnt the problem, still blows massively.

What's wrong with IE? I'm not going to be a fanboy and argue that one is better than the other. I'm just curious, what makes IE suck so much? I've never had any problems with it.


glossy sig asdf

BBS Signature
blackattackbitch
blackattackbitch
  • Member since: Oct. 24, 2008
  • Offline.
Forum Stats
Member
Level 04
Musician
Response to Did NG's server get hacked somehow? Feb. 12th, 2011 @ 11:23 AM Reply

The exact link of the ad that's causing the problems:
http://fmsmediaDOTnet/id4291/?ad=4267;p=
5;q=4261

It's this exact link, I've even tried opening this link in a separate tab on IE and got redirected to the malware site.

funny thing though: Opening the link in Firefox just sends you back to google.com

Hyptosis
Hyptosis
  • Member since: Mar. 19, 2009
  • Offline.
Forum Stats
Member
Level 19
Artist
Response to Did NG's server get hacked somehow? Feb. 12th, 2011 @ 11:42 AM Reply

I contacted Wade about it and pointed him to this thread, so if any of you guys who are getting the popup could post your OS and version of IE it might help him out if he comes to look.

blackattackbitch
blackattackbitch
  • Member since: Oct. 24, 2008
  • Offline.
Forum Stats
Member
Level 04
Musician
Response to Did NG's server get hacked somehow? Feb. 12th, 2011 @ 11:45 AM Reply

At 2/12/11 11:42 AM, Hyptosis wrote: I contacted Wade about it and pointed him to this thread, so if any of you guys who are getting the popup could post your OS and version of IE it might help him out if he comes to look.

Windows 7
IE8

ToddM
ToddM
  • Member since: Mar. 8, 2008
  • Offline.
Forum Stats
Member
Level 42
Movie Buff
Response to Did NG's server get hacked somehow? Feb. 12th, 2011 @ 11:46 AM Reply

I don't have the problem anymore because I blocked the site.


Well we were dumb enough to think it was gonna happen.

BBS Signature
Arthuria99
Arthuria99
  • Member since: Jul. 18, 2008
  • Offline.
Forum Stats
Member
Level 37
Game Developer
Response to Did NG's server get hacked somehow? Feb. 12th, 2011 @ 11:49 AM Reply

Why don't you try opening it on firefox or chrome, then?


Coming Soon :
Wave Warrior Sonic EXE 3: Garnet Version
DeviantArtPage --- Facebook ---My Youtube

BBS Signature
dreadryu
dreadryu
  • Member since: Jun. 9, 2009
  • Offline.
Forum Stats
Member
Level 02
Blank Slate
Response to Did NG's server get hacked somehow? Feb. 12th, 2011 @ 11:49 AM Reply

Vista
IE8

Yert
Yert
  • Member since: Nov. 10, 2006
  • Offline.
Forum Stats
Member
Level 26
Art Lover
Response to Did NG's server get hacked somehow? Feb. 12th, 2011 @ 11:51 AM Reply

At 2/12/11 11:18 AM, PaintDrNet wrote: What's wrong with IE? I'm not going to be a fanboy and argue that one is better than the other. I'm just curious, what makes IE suck so much? I've never had any problems with it.

Various security problems, prone to crashing, slow.

Also, Google Chrome is absolute shit for a number of reasons. I shall list only a few:

First off, Google harvests every single bit of information they can about you.

Second, the add-ons/ extensions are shit. Chrome doesn't even have a functional ad-blocker yet (the current "adblocker" only hides the ad frame, as opposed to firefox's which completely stops the frame from loading).

Lastly, It's nowhere near as versatile as Firefox in almost all areas.

TomFulp
TomFulp
  • Member since: Dec. 15, 1999
  • Offline.
Forum Stats
Staff
Level 14
Game Developer
Response to Did NG's server get hacked somehow? Feb. 12th, 2011 @ 12:24 PM Reply

At 2/12/11 10:44 AM, blackattackbitch wrote: fmsmedia.net, one of the sites that advertises on NG, is using a script to redirect users from NG to various sites, which then proceed to essentially lock you out of internet explorer until you manually close the program and start it up.

Thanks for isolating fmsmedia.net - CPMStar couldn't find any trace of the URL that users were being directed to, but I just forwarded this one along to them and it sounds like it should show up in their system, at which point it will be removed. Fingers crossed!


This is the game JohnnyUtah and I have been working on.

BBS Signature
megakill
megakill
  • Member since: Jul. 28, 2005
  • Offline.
Forum Stats
Member
Level 09
Blank Slate
Response to Did NG's server get hacked somehow? Feb. 12th, 2011 @ 12:26 PM Reply

At 2/12/11 12:24 PM, TomFulp wrote:
Thanks for isolating fmsmedia.net - CPMStar couldn't find any trace of the URL that users were being directed to, but I just forwarded this one along to them and it sounds like it should show up in their system, at which point it will be removed. Fingers crossed!

His Fulpyness has spoken!

ToddM
ToddM
  • Member since: Mar. 8, 2008
  • Offline.
Forum Stats
Member
Level 42
Movie Buff
Response to Did NG's server get hacked somehow? Feb. 12th, 2011 @ 12:27 PM Reply

At 2/12/11 12:24 PM, TomFulp wrote:
Thanks for isolating fmsmedia.net - CPMStar couldn't find any trace of the URL that users were being directed to, but I just forwarded this one along to them and it sounds like it should show up in their system, at which point it will be removed. Fingers crossed!

I really hope so Tom because it took me almost all night to block it.


Well we were dumb enough to think it was gonna happen.

BBS Signature
dreadryu
dreadryu
  • Member since: Jun. 9, 2009
  • Offline.
Forum Stats
Member
Level 02
Blank Slate
Response to Did NG's server get hacked somehow? Feb. 12th, 2011 @ 01:21 PM Reply

i hope so tom i just came back to check on the post and my antivirus gave me a warning for this site (its never done this before) and said it was an infected site lets hope you get that redirection out

robotman5
robotman5
  • Member since: Jan. 15, 2009
  • Offline.
Forum Stats
Member
Level 09
Gamer
Response to Did NG's server get hacked somehow? Feb. 12th, 2011 @ 02:44 PM Reply

At 2/12/11 12:46 AM, blackattackbitch wrote:
At 2/12/11 12:44 AM, Cericon wrote: Get FireFox.
Using it right now.

Also, found an alternate name for the website:

safe-antivirsentinelDOTrrDOTnu

Got two names, time to do some research.

Use Adblock Plus for Firefox maybe?

TomFulp
TomFulp
  • Member since: Dec. 15, 1999
  • Offline.
Forum Stats
Staff
Level 14
Game Developer
Response to Did NG's server get hacked somehow? Feb. 12th, 2011 @ 03:10 PM Reply

fmsmedia is not showing up in their data either - so my only guess is if they are running a third party ad that is pulling it in. When you guys block it, which ad unit on the front page does it appear to be? The top 728x90 banner? Anyone have any additional info, URLs?


This is the game JohnnyUtah and I have been working on.

BBS Signature
Viktor
Viktor
  • Member since: Mar. 20, 2010
  • Offline.
Forum Stats
Member
Level 09
Melancholy
Response to Did NG's server get hacked somehow? Feb. 12th, 2011 @ 03:11 PM Reply

There is an ad that slipped through Tom or so I believe, that redirects you to a site that then gets in your computer.

dreadryu
dreadryu
  • Member since: Jun. 9, 2009
  • Offline.
Forum Stats
Member
Level 02
Blank Slate
Response to Did NG's server get hacked somehow? Feb. 12th, 2011 @ 03:42 PM Reply

At 2/12/11 03:10 PM, TomFulp wrote: fmsmedia is not showing up in their data either - so my only guess is if they are running a third party ad that is pulling it in. When you guys block it, which ad unit on the front page does it appear to be? The top 728x90 banner? Anyone have any additional info, URLs?

i have no additional information Tom but when i blocked fmsmedia the top banner wouldnt display sometimes so maybe that helps