These forums have been archived and are now read-only.

The new forums are live and can be found at https://forums.eveonline.com/

EVE General Discussion

 
  • Topic is locked indefinitely.
12Next page
 

The EveRadio malware warning - here it is again.
Author
Previous Topic Next Topic
Cattegirn
Imperial Guardians
Tactical Narcotics Team
#1 - 2011-12-18 10:55:43 UTC
Eve Radio has posted Malware/Adware on their site. A warning was posted and then the thread was locked after only 8 posts.

No forum rule was cited for locking the thread.

The thread was locked by the same CCP rep who posted the News item in the Eve login panel which lead to the EveRadio site.

When you clicked on the "Flash" option to play Eve Radio, a plugin install popup for an FLVPlayerSetup.exe was needed.

The source for this program was a company called Foxtab, of foxtab.com

I still have the file on my computer and the download record, if there are any doubts.

The name of the browser hijack was Babylon.

The author of the site has since changed the link.

I intend to continue posting about this as long as the threads are locked without justification.

If there is indeed a forum rule violation, CCP Navigator, please state it explicitly before locking the thread and I will stop.

In the event that the threads continue to be locked without justification I will be sending a letter with all the details to Whitewolf's board of directors.


It is CCP's responsibility that links posted from the News section of the login page are safe.

Leave the thread unlocked and allow others to comment on what happened.

If you visited the EveRadio site and installed the FLVPlayerSetup.exe you have malware on your computer. Your password may be at risk.

I will follow up with details on how to clean the malware from your computer.

I am not accusing EveRadio of deliberately installing malware/adware on our machines, but it should at least be acknowledged that there was a problem so that all the people who clicked the News item at the login screen can BE AWARE and can take steps to clean the infection.

Locking threads on this only makes it look like you don't want anyone to know. That would be very, very irresponsible.
Kha'Vorn
Aliastra
Gallente Federation
#2 - 2011-12-18 11:15:54 UTC
Yawn.
DarkAegix
Center for Advanced Studies
Gallente Federation
#3 - 2011-12-18 11:33:58 UTC
Kha'Vorn wrote:
Yawn.


Roll
Cattegirn
Imperial Guardians
Tactical Narcotics Team
#4 - 2011-12-18 11:52:47 UTC  |  Edited by: Cattegirn
Kha'Vorn wrote:
Yawn.



Well Kha'Vorn I agree, this is not entertaining for anyone.

Especially those of us who spent the morning cleaning malware from our computer.

I have work but intend to come back tonight or tomorrow morning and post how I cleaned it up for those of you who were infected yesterday.

The short version is that you need a program called 'Hijackthis' and you need to do some registry editing. It's not a big deal but it's not intuitive for people who are casual users.

Uninstalling the software can be done from the Add/Remove programs function but it will still leave files on your machine. Specific things need to be deleted.

Sorry I don't have time this morning to post detailed instructions but they're coming!
Schnoo
The Schnoo
#5 - 2011-12-18 12:05:46 UTC
Are you sure it isn't just you not having flash and thus your browser suggesting you download FLVPlayer.exe (the flash player)?
TR4D3R4LT
Pator Tech School
Minmatar Republic
#6 - 2011-12-18 15:19:45 UTC
Let me help you help yourself.

http://wiki.eveonline.com/en/wiki/W/index.php

5.
23.

In addition I recommend you check a bit around the net of this so called babylon "hijack" of yours. Most likely cause? You installed bundle for flash from your browser recommended site that was not http://get.adobe.com/flashplayer/ After that you managed not to read what the installer asked from you and forgot to untick "add search toolbar." Then you come on eve-o-fora ranting how you were "hijacked" and had to do registry editing.
Mirima Thurander
#7 - 2011-12-18 15:31:14 UTC
u mad bro?

I would be willing to fix all your problems.


All you have to do is click this link, and all your problems will go away.

All automated intel should be removed from the game including Instant local/jumps/kills/cynos for all systems/regions.Eve should report nothing like this to the client/3rd party software.Intel should not be force fed to players. Player skill and iniative should be the sources of intel.
Morganta
The Greater Goon
#8 - 2011-12-18 15:34:19 UTC
TR4D3R4LT wrote:
Let me help you help yourself.

http://wiki.eveonline.com/en/wiki/W/index.php

5.
23.

In addition I recommend you check a bit around the net of this so called babylon "hijack" of yours. Most likely cause? You installed bundle for flash from your browser recommended site that was not http://get.adobe.com/flashplayer/ After that you managed not to read what the installer asked from you and forgot to untick "add search toolbar." Then you come on eve-o-fora ranting how you were "hijacked" and had to do registry editing.


this is indeed the most likely scenario

and to the OP, for god's sake don't install DivX player either, they bundle it with a toolbar too

damned user install options....
DJ Bigcountry
The Scope
Gallente Federation
#9 - 2011-12-18 16:10:42 UTC  |  Edited by: DJ Bigcountry
This is nothing but a situation where a google ad was up and it was for some 3rd party player... Eve Radio website has built in players.... you only need the plugins that it will autodownload when you join... Sorry to anyone who clicked an ad but theres no real control of that :(
Morganta
The Greater Goon
#10 - 2011-12-18 16:15:21 UTC
DJ Bigcountry wrote:
This is nothing but a situation where a google ad was up and it was for some 3rd party player... Eve Radio website has built in players.... you only need the plugins that it will autodownload when you join... Sorry to anyone who clicked an ad but theres no real control of that :(



sure there is don't carry questionable ads
of course it is much easier to just shirk responsibility for your part in this.
Ranger 1
Ranger Corp
Vae. Victis.
#11 - 2011-12-18 16:23:48 UTC  |  Edited by: Ranger 1
Morganta wrote:
DJ Bigcountry wrote:
This is nothing but a situation where a google ad was up and it was for some 3rd party player... Eve Radio website has built in players.... you only need the plugins that it will autodownload when you join... Sorry to anyone who clicked an ad but theres no real control of that :(



sure there is don't carry questionable ads
of course it is much easier to just shirk responsibility for your part in this.




I'm really not sure they have much control over the ad's Google puts up there since they react differently to each user.

OP, if you'll remember a rep from EVE Radio immediately asked for details so that he could check this out and rectify any malware situation that might have happened.

This was immediately followed by a CCP rep who checked your story of being forced to install anything and was unable to verify it, closing your thread as a result.

I did find the Foxtab player offered under their Radio/Player section available for download if you manually download it. The big green download button is followed by a description of the player followed by this:

Quote:
This product is totally free and offers the user additional bundle products that may include advertisement.


This is pretty standard on most "free" software, and has been since the last century.

Next time take some personal responsibility to actually pay attention to what you are installing before you go on some crusade against the man. Your histrionics are completely unnecessary. A simple email with your concern would have been the appropriate response.

Now if you deselected to have those other options installed and it did so anyway you have a gripe with the company that made it, and I'm sure if that is found to be the case EVE Radio will take steps to have it pulled down.

View the latest EVE Online developments and other game related news and gameplay by visiting Ranger 1 Presents: Virtual Realms.
Darek Castigatus
Immortalis Inc.
Shadow Cartel
#12 - 2011-12-18 16:28:06 UTC
Ranger 1 wrote:
Morganta wrote:
DJ Bigcountry wrote:
This is nothing but a situation where a google ad was up and it was for some 3rd party player... Eve Radio website has built in players.... you only need the plugins that it will autodownload when you join... Sorry to anyone who clicked an ad but theres no real control of that :(



sure there is don't carry questionable ads
of course it is much easier to just shirk responsibility for your part in this.




I'm really not sure they have much control over the ad's Google puts up there since they react differently to each user.



Quoting for truth, of course it is much easier to just throw baseless accusations around since this is the internet we're dealing with here.

Pirates - The Invisible Fist of Darwin

you're welcome
Morganta
The Greater Goon
#13 - 2011-12-18 16:34:32 UTC  |  Edited by: Morganta
Darek Castigatus wrote:
Ranger 1 wrote:
Morganta wrote:
DJ Bigcountry wrote:
This is nothing but a situation where a google ad was up and it was for some 3rd party player... Eve Radio website has built in players.... you only need the plugins that it will autodownload when you join... Sorry to anyone who clicked an ad but theres no real control of that :(



sure there is don't carry questionable ads
of course it is much easier to just shirk responsibility for your part in this.




I'm really not sure they have much control over the ad's Google puts up there since they react differently to each user.



Quoting for truth, of course it is much easier to just throw baseless accusations around since this is the internet we're dealing with here.


yeah, because the host has no control, google just waltzes in and plasters random websites with unwanted ads.

sorry, if you can't afford to run a site in a way that's safe for your users and must resort to inviting uncontrollable content to your pages to do it, then you are a scrub in every sense of the word.

Don't get me wrong, I approve of eve radio's service, even if I don't like the free reign CCP gives em, and I know it costs money to stream audio, but if you can't do it with a modicum of assurance for your clients you stop being a valuable service


know what? just ignore me, I just hate the ad sponsored nightmare the web has become in general, so my comments are fairly biased in that direction
Ranger 1
Ranger Corp
Vae. Victis.
#14 - 2011-12-18 16:38:24 UTC
Morganta wrote:
Darek Castigatus wrote:
Ranger 1 wrote:
Morganta wrote:
DJ Bigcountry wrote:
This is nothing but a situation where a google ad was up and it was for some 3rd party player... Eve Radio website has built in players.... you only need the plugins that it will autodownload when you join... Sorry to anyone who clicked an ad but theres no real control of that :(



sure there is don't carry questionable ads
of course it is much easier to just shirk responsibility for your part in this.




I'm really not sure they have much control over the ad's Google puts up there since they react differently to each user.



Quoting for truth, of course it is much easier to just throw baseless accusations around since this is the internet we're dealing with here.


yeah, because the host has no control, google just waltzes in and plasters random websites with unwanted ads.

sorry, if you can't afford to run a site in a way that's safe for your users and must resort to inviting uncontrollable content to your pages to do it, then you are a scrub in every sense of the word.

Don't get me wrong, I approve of eve radio's service, even if I don't like the free reign CCP gives em, and I know it costs money to stream audio, but if you can't do it with a modicum of assurance for your clients you stop being a valuable service


know what? just ignore me, I just hate the ad sponsored nightmare the web has become in general, so my comments are fairly biased in that direction



Sorry, as I was typing up above I was checking something and added to my post. There is a link to voluntarily download that player with a disclaimer. Explained above. (I was a slow typer). Oops

View the latest EVE Online developments and other game related news and gameplay by visiting Ranger 1 Presents: Virtual Realms.
QGazQ
#15 - 2011-12-18 16:44:35 UTC  |  Edited by: QGazQ
Right first we need to establish what happened here.
Was it that one of the required site plugins (flash or the MS WMP plugins) which somehow caused the problem, probably by a browser sending them to the wrong place.
Or if it was indeed an advert.

Given how the OP described it I was assuming it was the first case which is why I asked in the previous thread for details of the OS and browser to try and reproduce the issue. These haven't been given yet, if they are I will try and check it out to confirm.

However its looking like it maybe due to a rogue ad.
OP: was it an ad like the one in the bottom left of this image which you clicked?
http://bigcountry.eve-radio.com/download%20ad.jpg

If so then that is indeed an ad and not something that is required for our site.

As has been discussed in this thread the ads are provided by google and therefore we expect them to be reasonably reputable, but if this is a dodgy one then it needs reporting or removing.
I have tried refreshing the page many times myself and have not yet seen this ad, but again as mentioned they are targeted by google so I may never see it.
If you can get the url it points to then we can add it to our block list as we do with ISK ads so it won't be shown again, but you can also click the triangle with the i in it on the top right of the ad which will take you to a google page where at the bottom you can report an issue with the ad.

Regards
QGazQ
Ranger 1
Ranger Corp
Vae. Victis.
#16 - 2011-12-18 17:06:58 UTC  |  Edited by: Ranger 1
By the way, you can download this program from CNET.

Here is what they have to say about it in the header to their favorable review.
Quote:

FLV Player includes optional bundled software that may trigger alerts from security software. FLV Player has been tested for malware by the CNET Download.com team and meets our security requirements.



The review.

Quote:
Most people don't need anything more than a Web browser and a Macromedia plug-in to watch Flash videos. However, if you want a hair's breadth more control over your viewing, this open-source freeware program will do the trick.

FLV Player's exceedingly simple controls allow you to navigate backward and forward through videos and play them in a loop. You can also adjust the volume, mute it, and adjust the size of the player. The Settings menu provides some basic control over program behavior, such as opening a new player window when double-clicking on an FLV file and remembering previous settings. And that's about it.

Our only major complaint is that the display window doesn't automatically resize to the size of your movie frame. We hope this problem will be remedied in future versions. FLV Player isn't a must-have by any stretch, but it's a decent tool for penny-pinching Flash developers.

Read more: FLV Player - Free software downloads and software reviews - CNET Download.com http://download.cnet.com/FLV-Player/3000-13632_4-10467081.html?tag=mncol;1#editorsreview#ixzz1guHxrsK7

View the latest EVE Online developments and other game related news and gameplay by visiting Ranger 1 Presents: Virtual Realms.
MrBlades
Eve Radio Corporation
#17 - 2011-12-18 17:27:31 UTC
Found a google ad which the OP is probably referring to and checked it out on a fresh box. No problems as reported so probably still a troll (yeah, we get those!) but have blocked the offending domain regardless as the ad was ugly and offended my eyes.

Beyond that, take it up with google. I'm sure they will be sympathetic. Merry Christmas.
Cattegirn
Imperial Guardians
Tactical Narcotics Team
#18 - 2011-12-18 18:15:07 UTC  |  Edited by: Cattegirn
No I'm not just out to get Eve Radio, fresh out of nowhere deciding all of a sudden that I'll start an elaborate rumour and troll the forums Roll

QGazQ

No, it wasn't a google ad.

No, you couldn't uncheck an option to prevent having Babylon installed.

No it wasn't a banner ad.

"u mad bro?"

Yes I was mad. CCP Navigator posted a link in news that lead to a site unaffiliated with CCP containing malware. Then a thread warning of the malware was locked 8 posts in by the same individual who posted the news.

And QgazQ of EveRadio was trying to be helpful and get some questions answered so he could correct the problem. Kinda hard to help him with that when the thread is locked.

It seems the only person who wanted it locked was CCP Navigator.

Schnoo,

Quote:
Are you sure it isn't just you not having flash and thus your browser suggesting you download FLVPlayer.exe (the flash player)?


I already had Adobe flash, but you are absolutely correct that the message came up as the browser saying FLVPlayerSetup.exe had to be installed to play Eve Radio.

MrBlades,

Says, (while calling me a troll - merry christmas to you too), that the offending software link was removed. Great.

If you think it was a google ad, why was the foxtab player being offered under the Radio/Player section? You never heard of it before... right? ;)

FFS. Take some responsibility for yourselves.

CCP, don't post links to unaffiliated websites on your login page, using your trademark, that therein contain malware.

As a bonus, you won't have to go locking threads afterward!
Ranger 1
Ranger Corp
Vae. Victis.
#19 - 2011-12-18 18:19:21 UTC
Cattegirn wrote:
No I'm not just out to get Eve Radio, fresh out of nowhere deciding all of a sudden that I'll start an elaborate rumour and troll the forums Roll

QGazQ

No, it wasn't a google ad.

No, you couldn't uncheck an option to prevent having Babylon installed.

No it wasn't a banner ad.

"u mad bro?"

Yes I was mad. CCP Navigator posted a link in news that lead to a site unaffiliated with CCP containing malware. Then a thread warning of the malware was locked 8 posts in by the same individual who posted the news.

And QgazQ of EveRadio was trying to be helpful and get some questions answered so he could correct the problem. Kinda hard to help him with that when the thread is locked.

It seems the only person who wanted it locked was CCP Navigator.

Schnoo,

Quote:
Are you sure it isn't just you not having flash and thus your browser suggesting you download FLVPlayer.exe (the flash player)?


I already had Adobe flash, but you are absolutely correct that the message came up as the browser saying FLVPlayer.exe had to be installed.

MrBlades says, (while calling me a troll - merry christmas to you too), that the offending software link was removed. Great.

If you think it was a google ad, why was the foxtab player being offered under the Radio/Player section? You never heard of it before... right? ;)

FFS. Take some responsibility for yourselves.



Quote:
By the way, you can download this program from CNET.

Here is what they have to say about it in the header to their favorable review.
Quote:

FLV Player includes optional bundled software that may trigger alerts from security software. FLV Player has been tested for malware by the CNET Download.com team and meets our security requirements.


Perhaps you should let CNET know they don't know what they are talking about.

View the latest EVE Online developments and other game related news and gameplay by visiting Ranger 1 Presents: Virtual Realms.
Cattegirn
Imperial Guardians
Tactical Narcotics Team
#20 - 2011-12-18 18:22:48 UTC
Ranger 1 wrote:

Perhaps you should let CNET know they don't know what they are talking about.




The author of the file the site had me downloaded was foxtab.com

And I'm not the one running a website. You tell CNet, if you like.
12Next page