Chess.com SPYWARE infestation!

Sort:
EscherehcsE
DjentDjent00000 wrote:

I gave Win 10 a decent shot for a couple months before finally giving up and reinstalling Win 7. I have Ubuntu as well under a dual-boot, but I prefer Windows as I haven't found any Linux software that I like better than my current music and video production software apps.

I don't use much specialized software in Linux, so for the most part, Linux works for me. However, the one app that causes me to boot into Win 7 the most is Rufus, believe it or not. Rufus is just so convenient for burning bootable ISOs to thumb drives. There are Linux apps that I can use to do the job (even dd if forced to), but none of them are as convenient and work as consistently as Rufus. I wish Rufus supported Linux.

chesschesskid

https://www.chess.com/clubs/forum/view/spyware

EscherehcsE

Thanks for nothing - You just caused me to join the Help & Support club. :-)

(I was curious to see your posts, haha.)

chesschesskid

oops sorry

chesschesskid

just wanted to show you there was nothing to worry about vp said

EscherehcsE
NubbyCheeseking wrote:

Mate people legit ran test, disproving you

It. Is. A. Problem. With. Your. System.

Actually, I *could* run yet another test using Win 10 and the Chrome browser, but it would be a lot of work for me to set it up.

A while ago, I bought an old desktop PC real cheap that had Win 7 on it. (My plans were to eventually use it as either another Linux PC or as a homemade router using pfSense.) Before putting the PC in long-term storage, I made the free upgrade to Win 10 so that I'd be able to run Win 10 on it if I ever needed to do that.

I *could* drag that PC out of storage, set it up, let Win 10 make the mega-updates that I'm sure it would want to do, then install the Chrome browser with the three needed extensions. But it's just not worth the hassle to me for just one more test. :-)

EscherehcsE
chesschesskid wrote:

oops sorry

No problem, I don't really mind joining another club. :-)

EscherehcsE
1InYourFace wrote:

Try it with win 10  x64.    Scanned for malware, couldn't find it.  It only happens when I log in to chess.com  Must be some inter system virus or system scan that is activated when logging in.  It must be some crooked a s s stuff because Cloudflare is involved.  Google Cloudflare scams and abuse, you will see hundreds and hundreds of blog with complaints. Chess.com is in bed w Cloudflare.  There is no end to the corruption.

 

Also Post #89 -Also, when I clear my cache, and login, the browser is "read" by chess.com and cloudflare.  After a few logins, the browser confirmation scan won't appear.  But clear the cache and login fresh and you get hit with it again.

In the back of my mind, I guess I knew that I'd eventually make one more test. :-)

I pulled the Win 10 machine out of storage (Windows 10 Pro 64-bit), updated Windows, updated the Chrome browser, cleared all browser cache, installed the three extensions into Chrome (Adblocker Plus, NoScript, and uBlock Origin), and enabled the two required NoScript scripts.

I logged into Chess.com, and I never got the scan of the browser. I went right into Live Chess, and it allowed me to play rated games. Other than the one-time browser popup asking if I wanted to save the password and the one-time Chess.com popup asking if I wanted to accept notifications, I never received another popup; and of course, no ads due to the adblockers.

I don't know what else to say; I couldn't reproduce any of the problems you're experiencing. At this point, I think you should assume that you picked up malware from somewhere. If you can't find and get rid of the malware, I'd suggest a reformat of the HD and a fresh install of Windows. Good luck with your problem.

EscherehcsE
1InYourFace wrote:

You really worked it.   The 'scan the  browser' is not  a constant.  I would get it one time out of 5 or 6 logins.   When I clear my cache I would get it, but sometimes not.  It's coming from chess.com for sure. It's always and only after a login.  If you login everyday, you will eventually get it.  I can't be the only one.   After that, I added the 3 programs to the browser, and could not play live games.  Time will tell if other's write in as well.

If you really wanted to get to the bottom of this, you could do some testing yourself.

1) A Linux Live bootable flash drive. That would at least tell you if it was coming from within the site. (I doubt it, but who knows.)

2) If you have an extra hard drive, pull your existing hard drive, install the spare HD, and make a new install of Windows. (You'd need a Win 10 installation flash drive at the ready.) After the testing, just swap out the hard drives and you're back to the beginning.

EscherehcsE
1InYourFace wrote:

I already know what I know.  I know there is spyware in chess.com and they are monitoring players.  It's obvious.   It's just a matter of time before more players come forward with the same issue.

Okay, well I'm done here. Good luck!

NubbyCheeseking

See, you have a mentality that essentislly is:

"I'm smarter than anybody so I can't be wrong"

OP, schere ran tests, and nothing happend. But then "it only happens sometimes"

Yea right

You just can't admit you're clicking shady links 

EscherehcsE
NubbyCheeseking wrote:

See, you have a mentality that essentislly is:

"I'm smarter than anybody so I can't be wrong"

OP, schere ran tests, and nothing happend. But then "it only happens sometimes"

Yea right

You just can't admit you're clicking shady links 

My Windows 10 PC is still set up. I *could* log in once a day for the next several weeks. But if I come back with "still nothing happened", I'm wondering what excuse he'll come up with next. History is littered with examples of people who absolutely knew they were right - The sun revolving around the Earth, the Earth is flat, etc.

It's much more difficult for me to try to duplicate his setup and do his testing for him. It would be much simpler and faster if he would only do a little testing on his own. But, he can't be bothered; He *knows* he's right. (Plus, it appears that he enjoys complaining and tilting at windmills.)

I've already mentioned numerous times that I don't like the 3rd-party ad server setup, which has the capability of putting malware on people's computers. However, I don't think it's right to make accusations against the site without doing your own testing to prove your position.

EscherehcsE
NubbyCheeseking wrote:

See, you have a mentality that essentislly is:

"I'm smarter than anybody so I can't be wrong"

OP, schere ran tests, and nothing happend. But then "it only happens sometimes"

Yea right

You just can't admit you're clicking shady links 

You can pick up malware from anywhere these days, not just from shady links. Even reputable sites get hacked these days.

EscherehcsE

On an unrelated note, setting up my Windows 10 PC gave me an opportunity to try out a neat registry hack that sets verbose mode during booting. (It's near the end of the article.)

https://www.bleepingcomputer.com/news/microsoft/useful-registry-hacks-to-optimize-your-windows-10-experience/

CounterproductiveHam
1InYourFace wrote:

I've never clicked a link ever in chess.com  I'm not a moron.  I never said I was the smartest in the room, but I have half a brain and can easily tell what is going on.  Next time I come to this spyware chess site, I'll make a screen cap of the "checking your browser" page FROM chess.com and their new buddies in crime: Cloudflare.    These new generation programmers don't use conventional spyware and don't set up patterns for noobs to figure out.  Their methods are subtle and not easily detected.   I need a real tech pro to discover what is really going on here. 

So you have half a brain? 

Makes sense.

Ads can be REALLY malicious.

It could be something you picked up elsewhere, a Trojan horse

CounterproductiveHam

lol

NubbyCheeseking
1InYourFace wrote:

I've never clicked a link ever in chess.com  I'm not a moron.  I never said I was the smartest in the room, but I have half a brain and can easily tell what is going on.  Next time I come to this spyware chess site, I'll make a screen cap of the "checking your browser" page FROM chess.com and their new buddies in crime: Cloudflare.    These new generation programmers don't use conventional spyware and don't set up patterns for noobs to figure out.  Their methods are subtle and not easily detected.   I need a real tech pro to discover what is really going on here. 

Ooo

Schere, what is your experience in tech 

and op

Wha is your experience 

NubbyCheeseking

Saying schere ran many tests and nothing showed up 

You're probably wrong 

EscherehcsE

@1InYourFace - I tried to help out as best I could, but you seem unwilling to meet me halfway. That's OK, it's your choice, but I'll bow out now. It's now your problem alone to either deal with or live with. It doesn't matter to me. Good luck. Unfollowing.

NubbyCheeseking

"DDoS protection"

Also it never happend to me