These forums have been archived and are now read-only.

The new forums are live and can be found at https://forums.eveonline.com/

EVE General Discussion

Forum Index

EVE Forums » EVE Communication Center » EVE General Discussion » The EveRadio malware warning - here it is again.

Topic is locked indefinitely.

The EveRadio malware warning - here it is again.
Author

Previous Topic Next Topic

Ranger 1

Ranger Corp

Vae. Victis.

Likes received: 6,345

#21 - 2011-12-18 18:24:48 UTC | Edited by: Ranger 1

Cattegirn wrote:

Ranger 1 wrote:

Perhaps you should let CNET know they don't know what they are talking about.

The author of the file the site had me downloaded was foxtab.com

And I'm not the one running a website. You tell CNet, if you like.

Nor am I. I'm just one of the thousands of people that has not had a problem with the site or the player.

FLV player is what FoxTab installs... the FoxTab FLV player.

View the latest EVE Online developments and other game related news and gameplay by visiting Ranger 1 Presents: Virtual Realms.

Cattegirn

Imperial Guardians

Tactical Narcotics Team

Likes received: 8

#22 - 2011-12-18 18:36:55 UTC

How to remove:

First find and note the directories/locations of foxtab and babylon

Uninstall foxtab and babylon from your uninstall programs tool.

This will not completely remove the software.

Open the directories located above and make sure everything is deleted.

To remove it completely you need to download a program called "HijackThis" from Trend Micro.

Run it, and do a scan with a report. You'll get a list of registry entries that looks like this. All you gotta do from there is find any entry with the name "foxtab" or "babylon" and check the box next to them. Then at the bottom select "Fix checked" and Hijackthis will remove them.

You may have to manually remove the start menu items.

That did it for me. If you still have it try posting your logs on forums.techguy.org

I hope this helps.

QGazQ

Likes received: 11

#23 - 2011-12-18 18:40:10 UTC | Edited by: QGazQ

Cattegirn wrote:

QGazQ

No, it wasn't a google ad.

No, you couldn't uncheck an option to prevent having Babylon installed.

No it wasn't a banner ad.

You still haven't answered my main questions which OS, and which browser so I can confirm there isn't (or is) an issue.

RE the locking, that was CCPs choice, but you could still have replied to me directly if you wished, though I also don't have a problem with the discussion being in public.

Cattegirn wrote:

Schnoo,

Quote:

Are you sure it isn't just you not having flash and thus your browser suggesting you download FLVPlayer.exe (the flash player)?

I already had Adobe flash, but you are absolutely correct that the message came up as the browser saying FLVPlayerSetup.exe had to be installed to play Eve Radio.

Again the site doesn't require that in any way so I am most puzzled.
When you says "came up", in which way. Are you talking popup, the little advice bar which most browsers have now, as just text on the site or what?

Cattegirn wrote:

MrBlades,

Says, (while calling me a troll - merry christmas to you too), that the offending software link was removed. Great.

If you think it was a google ad, why was the foxtab player being offered under the Radio/Player section? You never heard of it before... right? ;)

FFS. Take some responsibility for yourselves.

What he has removed is the advert which was misleading.
The Radio/Player section just displays the same module as on the home page, I can't remember why that page exists now I think I set it up to help diagnose a problem with a conflict of modules on the home page and its just kind of stayed.
It does however have a google ad at the top of it (as do all the pages). So again are you sure it wasn't an advert you clicked?

Yes we do say we haven't heard of it before and the site doesn't require it.

Again any more light you can shed we can check out, but at the moment I'm assuming it was the banner ad.

Regards
QGazQ

Sakurako Kimino

School of Applied Knowledge

Caldari State

Likes received: 21

#24 - 2011-12-18 18:42:43 UTC

Cattegirn wrote:

If there is indeed a forum rule violation, CCP Navigator, please state it explicitly before locking the thread and I will stop.

Reopening a locked thread by creating a new one is not allowed.

Recreating or reopening a thread that has been closed by a moderator is prohibited. Threads that have been closed by a moderator have been closed for the benefit of the community. Reopening a locked thread will result in its removal.

thats how this one could be closed you should petition the 1st post it if you think it should have remained open.

what do you think the board of directors from whitewolf can do?

eve is about sin

Cattegirn

Imperial Guardians

Tactical Narcotics Team

Likes received: 8

#25 - 2011-12-18 18:47:49 UTC | Edited by: Cattegirn

QGazQ

Quote:

You still haven't answered my main questions which OS, and which browser so I can confirm there isn't (or is) an issue.

Windows 7, 64, Firefox v 8.01

Quote:

RE the locking, that was CCPs choice,

A pretty outrageous choice, given that it was a warning for their own customers who may have followed the link from their login page.

I was not at all taking issue with your posts in the thread. I was taking issue with CCP posting risky links on their login page and then squashing a warning about the risk.

"What he has removed is the advert which was misleading."

Fantastic. Good for you guys.

Quote:

The Radio/Player section just displays the same module as on the home page, I can't remember why that page exists now I think I set it up to help diagnose a problem with a conflict of modules on the home page and its just kind of stayed.

Well then I'll give you the benefit of the doubt and believe you when you say that you had a Radio/Player section with the foxtab adware link for some problem you were trying to diagnose and can't remember and it just kind of stayed.

Quote:

Yes we do say we haven't heard of it before and the site doesn't require it.

Well I'm glad I could bring it to your attention then.

Whatever you say is not an issue with me Gaz, the important thing is you got that crap off your site and acknowledged that it was there, albeit, without your awareness.

Thanks.

Ranger 1

Ranger Corp

Vae. Victis.

Likes received: 6,345

#26 - 2011-12-18 18:49:43 UTC | Edited by: Ranger 1

Quote:

Apparently it's a highly selective piece of malware, as I have the same browser and OS as you and when to their site the first time you posted (the link was still up for the player).

Nada.

View the latest EVE Online developments and other game related news and gameplay by visiting Ranger 1 Presents: Virtual Realms.


Cattegirn Imperial Guardians Tactical Narcotics Team Likes received: 8	#27 - 2011-12-18 18:51:57 UTC \| Edited by: Cattegirn Ranger 1 wrote: His reluctance to provide details of OS or browser or much of anything else makes this pretty dubious. Yeah that's it... If I give my OS/Browser info away, I'll sure to be revealed. Good grief man. He's acknowledged and fixed the issue. You continuing with the conspiracy theory is pretty ridiculous.

Nullbeard Rager

Doomheim

Likes received: 52

#28 - 2011-12-18 18:52:23 UTC

DJ Bigcountry wrote:

This is nothing but a situation where a google ad was up and it was for some 3rd party player... Eve Radio website has built in players.... you only need the plugins that it will autodownload when you join... Sorry to anyone who clicked an ad but theres no real control of that :(

Of course there is...don't...carry...questionable...ads.

Field of Trolls: "If you chum it, they will come."


Cattegirn Imperial Guardians Tactical Narcotics Team Likes received: 8	#29 - 2011-12-18 18:54:54 UTC CCP is really the one who porked up here for linking a site with such ads on their login page. "EveRadio" sure sounds official. CCP just needs to be more careful and take some responsibility instead of locking the damn thread.

Ranger 1

Ranger Corp

Vae. Victis.

Likes received: 6,345

#30 - 2011-12-18 18:55:53 UTC

Cattegirn wrote:

Ranger 1 wrote:

His reluctance to provide details of OS or browser or much of anything else makes this pretty dubious.

Yeah that's it... If I give my OS/Browser info away, I'll sure to be revealed. Roll

Good grief man.

He's acknowledged and fixed the issue. You continuing with the conspiracy theory is pretty ridiculous.

You (finally) posted your info at the same time I did, so I corrected that.

Still odd that nobody could reproduce the issue. Smile

View the latest EVE Online developments and other game related news and gameplay by visiting Ranger 1 Presents: Virtual Realms.

Ranger 1

Ranger Corp

Vae. Victis.

Likes received: 6,345

#31 - 2011-12-18 18:58:59 UTC | Edited by: Ranger 1

Quote:

He's acknowledged and fixed the issue.

Really? Looks like he blocked the ad to remove the link out of caution.

There has yet to be anyone that could replicate the issue, so "acknowledgement" is a bit of a stretch.

View the latest EVE Online developments and other game related news and gameplay by visiting Ranger 1 Presents: Virtual Realms.

QGazQ

Likes received: 11

#32 - 2011-12-18 19:00:42 UTC | Edited by: QGazQ

Cattegirn wrote:

Windows 7, 64, Firefox v 8.01

That's what I run on both of my machines here, therefore I know that they don't require or try to download anything other than expected.

Cattegirn wrote:

You are mixing two separate things here.
The page's presence is the due to diagnosis, however the page itself has no issue.
The issue is maybe that for you google selected an advert which linked you to a program which had undesired results.
We have certainly never explicitly put in links to foxtab or flvplayer on the site, whether for operational or diagnostic purposes.
If the random google ad was the case then yes it was misleading and it is a good thing you pointed it out and it has now been removed.

Regards
QGazQ

BigCountry

Sniggerdly

Pandemic Legion

Likes received: 19

#33 - 2011-12-18 19:55:08 UTC

Holy grilled cheesus Batman.... the tears in this channel are watering down my Jack Daniels... 1 person out of the several hundreds that visit this site daily does not prove malicious intent..... I have clicked the google ad in question and IT DOES take you to a foxtab site... but luckily Ive been around the internets enough to know what an ad looks like and what a legit link looks like , even more so that I know to double check before I download something that looks dodgey

Sebiestor Tribe Minmatar Republic 5,312
Solstice Project Sebiestor Tribe Minmatar Republic Likes received: 5,312	#34 - 2011-12-18 20:48:45 UTC 1 I'd rather listen to nectarine demoscene radio. 100% pure free demoscene music made by people, for people. ^^ http://www.scenemusic.net cough (SHAMELESS AD!)

DJ Dunewolf

Caldari Provisions

Caldari State

Likes received: 4

#35 - 2011-12-18 23:08:50 UTC | Edited by: DJ Dunewolf

I have been a DJ for Eve-radio for several years. In all my time here there has been many accusations against Eve-radio.
Everything under the sun has been blamed on either the site, a DJ, or something. (including global warming)
Normally its by those few who cannot separate reality from fantasy.
Like how a DJ says he doesnt like Fat women, or plays the song "I like big butts" suddenly becomes offensive.

As to the OP - its obvious you lack computer skill sufficient to operate on the internet. To blame not only CCP but Eve-radio for what is obviously your own mistaken clicking around the internet. You should seriously look at the PEBKAC error.

First thing I teach people is "beware what you download"
second thing I teach them is not to open "every attachment" in an email without double checking who sent it, and why.

Computer security starts with the USER, not with other people holding your hand across the internet.

I guess its easier to blame others for your problems. o.O

Oh not so shameless plug
Listen to Eve-radio.com
Good music, good DJs and awesome fun for all

Enjoy our Christmas giveaway event by tuning in and listen for the Klaxon. www.eve-radio.com
Oh and if your up late Tuesday night Eastern or early on Wednesday, feel free to tune in. 0300-0700 Wednesday GMT :)