Site is bugged with Trojans!

Sort:
KairavJoshi

Avast and cyber is nice

caliche616
II Iiiiiiiinn!1111
caliche616

I haven´t problem.

taodell

Skaar, you are likely the victim of a personal attack. You are very high rated and must have beaten a lot of other high rated players. My guess is someone took it personally. If so, other high rated players may have been targeted. If you could find a few who had, you may be able to compare notes and possibly triangulate the identity of the perp.  It would be someone who has cheated their way to their grand master rating.

   All that being said, if your security is set properly they couldn't do it. First you need to get "Hijack This".  It is free at download dot com. The scan takes less than a minute and you send the log file it generates. This returns you a list of items to delete from within the main window. Problem will be solved.

TheGrobe

That's an absurd notion -- there's no way that someone can target you through chess.com unless you personally provide them with the information to do so.  It's likely a pre-existing condition.

kohai

If you hadn't noticed, this thread was started "over a year" ago.

Also

Rest assured there is no virus code on Chess.com! Chess.com is the largest chess site on the internet and a trustworthy organization. Our codebase is frequently checked by several top programmers for quality and safety. Additionally, every file submitted by users passes through strict anti-virus detection. We also use 3rd-party security audits to make sure there are no viruses or vulnerabilities on Chess.com. Finally, we use high-security SSL to encrypt all important data on Chess.com.

 

That said, we know that at times some anti-virus programs falsely detect virus code in our JavaScript. The reason for this is that Chess.com uses extremely complicated JavaScript for the rules of chess and piece movement. We also obfuscate that JavaScript for security. But some anti-virus programs use matching heuristics that occassionally generate false-positives. In plain English that means that the anti-virus is sometimes guessing and what might be potentially dangerous and sometimes says things are viruses when they are not.

fgm351

if you think its the adds, then get ad-block plus addon in firefox, if you dont already use firefox, get it! it blocks all ads on all sites free

fgm351

firefox automatically scans downloads. SWITCH and if you think that it is the ads, get firefox and download the ad-block plus addon (I have it , it works)

Dietmar
deadpoetic wrote:

whats wrong with norton? Ive been using it with out a problem for years and my dad has been using it without a problem for even longer... Throw in a free anti spyware into the mix and you got yourself a protected computer.

Plus with 360 you get a back up plus PC tune up. Though I am going to be switching over to 2009 antivirus to save some ram cuz i desperatly need some on this computer.


Lots of things are wrong with Norton. It is a resource hog for starters that impacts the performance of the machine. At my company it turned out that Symantec Endpoint caused memory leaks triggering lost connections to the network server on 32bit system. It took me a bit of research to get to the bottom of that strange issue but I finally narrowed down to Symantec. Now that we reduced Symantec to plain antivirus protection the issue has gone away. Kaspersky AV appears to be best AV software out there according to PC magazines and user feedback.

cobwebkol
Skaar wrote:

Everytime I login, my computer gets hit with attacks, trojans, etc. This has been happening since the last site upgrade.


 me to and even though its coming from this site i cant prove it. its happenend on three different computers that i used that had never been attacked before 

Woodwright

Stop watching porn on your computer and you'll be alright

SavageLotus

I've never had a problem - I run Norton and am on here daily.

TheGrobe

AVG here -- no issues and no alerts about anything from chess.com.

I suspect those that complain about this are either experiencing false positives due to the signature of the javascript on this site looking like a virus to oversensitive detection programs, or were infected elsewhere and are mis-allocating the blame.

erik

so..... the other day at about 4am in the morning i woke up because one of my kids squawked loudly (if you have kids you know what this means). anyway, it kinda startled me so i rolled over and grabbed my iphone and checked email. we had a few more reports about people getting viruses from chess.com. doh! no WAY, i told myself. so at 4am in the morning i groggily drag myself out of bed and log into the site in IE and started browsing the site as a basic member.

a few minutes later i get a popup that my windows firewall had been disabled. "what??" i re-enabled it. 30 seconds later, same thing! 

oh NO! i IMMEDIATELY unplugged my computer from the internet and did massive spyware/trojan/antivirus sweeps and cleans and found that i had, indeed, been infected by an ad!! so then i installed some extra mega-strict firewall and spyware blockers on my machine and went back at it, surfing the site in basic member mode and about 5 minutes into it - KABAM! again! but i wasn't able to catch the HTML in time because of the blocker. so i kept going until a few minutes later i suddenly caught it. i used firebug to sniff the offending website URL. that URL didn't tell me anything about the ad network involved, but i found the ad-code that had served it. that domain didn't resolve either. but the name servers for the domain were "mygeek.com". so i surf to that site and lo-and-behold, it redirects to "adOnNetwork.com" - an ad network we added about 7 days ago!! i IMMEDIATELY shut off that network, sent them a blunt email, and that was that. 

my most sincere apologies to anyone who got hit with this. that ad network was recommended to me personally by someone big in the ad world who i trust completely. it was surely just something that slipped between the cracks, no malice intentionally done by the referring friend or the adnetwork (other than carelessness). 

anyway, thank you to all who reported! it was a crazy 4am expedition, but i sherlocked my way to the cause. 

victory to the good guys!

kco

oh you poor bugger, getting up because of a squawked in 4am in the morning (got two kids of my own) but I said to myself "what squawk ? " never had one those thing but then is a good thing to be deaf ! Tongue out

dsmeaton

top work eric... i've always said that sites should be much more careful about ensuring ad companies are only feeding safe ads. the ethics of advertising online is horrific.

having said that, it's good to see that chess.com is on top of it.

personally, i use linux and mac, which are much safer platforms for computers. not infallible, just safer. windows is targeted because it's got a huge market share and users are (generally) low tech savvy. 

and the concept of anti-virus, which you buy because your OS isn't safe, is as big a scam as the spyware itself. you pay more for anti-virus (over the years) than you do for the actual operating system. even microsoft makes anti-virus, to protect you from their incompetence!!!

NBA_KING

haha

Dietmar
davidsmeaton wrote:

top work eric... i've always said that sites should be much more careful about ensuring ad companies are only feeding safe ads. the ethics of advertising online is horrific.

having said that, it's good to see that chess.com is on top of it.

personally, i use linux and mac, which are much safer platforms for computers. not infallible, just safer. windows is targeted because it's got a huge market share and users are (generally) low tech savvy. 

and the concept of anti-virus, which you buy because your OS isn't safe, is as big a scam as the spyware itself. you pay more for anti-virus (over the years) than you do for the actual operating system. even microsoft makes anti-virus, to protect you from their incompetence!!!


Sorry, David, but your cheap shot at Microsoft requires a reply. Most folks don't get viruses because of security settings in Windows but because they hang out on file-sharing sites or feel compelled to click on every scam email that comes their way.  It is a delicate act for every company or organization to provide software that both is functional and secure. Typically a gain in one area is offset by a loss in another. This is not just a problem for Microsoft. I see regular update notices to address security concerns by Firefox or  Adobe just to name two. It is easy to fire at Microsoft because they are the top dog. I rather think that they should be complimented that so many applications and devices work with Windows rather smoothly. I can tell you first hand that the design software that I am using at work is magnitudes more faster and productive on the windows platform compared to the AIX platform. Not to mention, it costs less than a third in terms of hardware. Sure, unix is great as only a select group knows how to operate it. After all, it really impressed the crowd once you typed in ps -ef | grep catia and kill -9 19134. Now since we almost completely switched to Windows those glory days are over. Our former support companies hardly any longer offer support services - because there is no demand any longer. Now even Joe Blow can copy a file without needing assistance and some basic precautions in terms of firewalls and anti-virus takes care of the rest. 

dsmeaton
Dietmar wrote:

Sorry, David, but your cheap shot at Microsoft requires a reply. Most folks don't get viruses because of security settings in Windows but because they hang out on file-sharing sites or feel compelled to click on every scam email that comes their way.  It is a delicate act for every company or organization to provide software that both is functional and secure. Typically a gain in one area is offset by a loss in another. This is not just a problem for Microsoft. I see regular update notices to address security concerns by Firefox or  Adobe just to name two. It is easy to fire at Microsoft because they are the top dog. 


hey mate,

well, i'm going to have to disagree. you start with two rampant generalisations that "most people" hang out on 'file sharing sites' and 'clicking scam emails' ... i don't think you can back that up. maybe quite a few people use file sharing, but not everyone, and file sharing doesn't guarantee virii.

do some research on phishing/spam/scam emails. they work on a success rate of approximately 1 click through per million. that means 1 idiot in a million emails sent. i don't call that most people either.

chess.com is talking about virii spread through advertising and websites. while you may be right to say that this is the browser's fault, having a secure OS will protect the browser. i'd be horrified if you said it should be the other way around. these virii are delivered through insecurities in the browser and are designed to penetrate insecurities in the OS. were the OS secure (like linux), then the virii would be useless.

as for a cheap shot at microsoft, i think my criticism is justified. they use archaic coding and even windows 7 is not a revolution or a re-code. that's why there are so many updates, because microsoft need to patch and repatch their code.

like i said, you're welcome to your view (as am i), but i think you're wrong about your view that file sharing and spam mail are the cause for the majority of virii on personal computers.

and, in defense of my original statement, bill gates is worth $50 billion. if linux can write an OS that is virtually virus free (and open source), then why can't the richest man in the world? the onus shouldn't be on users to protect themselves, the onus is on companies to deliver "real" quality products, not just bells and whistles.

TheGrobe

It's important to recognize that Microsoft is also targetted more often because Windows is so ubiquitous.  A Linux virus that spread through an insecurity in Linux, and they do exist, simply wouldn't be as effective because there's not nearly as many potential hosts.  I'm by no means making excuses for the inherent insecurities in either OS, and Linux certainly is the better of the two due largely to the fact that it's open source, but I do think a more holistic perspective on the problem is important in order to stay objective.