BMW M3 Forum
BMW M3 Forum BMW M3 Gallery BMW M3 Reviews BMW M3 Social Groups BMW M3 Chat M3Forum Sponsors >>
Loading


Mobile M3forum
Go Back   BMW M3 Forum.com (E30 M3 | E36 M3 | E46 M3 | E92 M3 | F80/X) > Website Notes and Issues > Member Notes and Requests to Admin/Mods
Tire Rack Buy Winter Tires Now!
Not a member? Register Now!
Register Gallery All Albums Garage Search Today's Posts Mark Forums Read Calendar FAQ

Member Notes and Requests to Admin/Mods Having issues with the site? Just want to make suggestions. Want to discuss other stuff with the website admin? This is the forum.


Reply
 
Thread Tools Display Modes
Old Fri, Dec-08-2017, 02:43:12 PM   #1
kmfurdm
Oceania
 
kmfurdm's Avatar
 
Join Date: Apr 2008
Posts: 5,980
In the garage:
Reputation: 0 kmfurdm is on a distinguished road
Location: Wayne, PA

England




Default Maybe a naughty script in one of the banner ads...

Getting a notification from my AV client that a script seems to be trying to load from one of the ads.

This one in particular. pua.sj coinminer.

Might be worth a look.
__________________
evolve-R -- AFe Stage 1 -- Turner pulleys -- SuperSprint V2s -- Euro Section 1 -- Dinan muffler -- TC Kline D/A 500F/500R + TCK Camber Plates -- autosolutions 20% SSK -- Volk RE30 Hyper Bronze
Jump to top kmfurdm is offline   Reply With Quote
Sponsored Links
Register now and remove these ads
Old Fri, Dec-08-2017, 04:31:06 PM   #2
LALaw
Brah
 
LALaw's Avatar
 
Join Date: Mar 2005
Posts: 42,151
In the garage:
Reputation: 0 LALaw has disabled reputation
Location: you know what it is

Canada




Default Re: Maybe a naughty script in one of the banner ads...

I'm getting a persistent malware notice as well.
__________________
Jump to top LALaw is offline   Reply With Quote
Old Fri, Dec-08-2017, 04:53:56 PM   #3
bimmerdriver
Registered User
 
Join Date: Jul 2013
Posts: 3,337
In the garage:
Reputation: 0 bimmerdriver is on a distinguished road
Location: Metro Vancouver

Canada




Default Re: Maybe a naughty script in one of the banner ads...

Getting this also. Is it an ad or is the site trying to make money off the users?
__________________
2002 (12/2001) M3 6MT Coupe Carbon Black on Black - ZCP/CSL Wheels, 245/35/19 Mich PS2 & 285/30/19 Conti ExtremeContact DW, H&R 15 mm Front Spacers, CSL F/R Brakes, EBC Redstuff, TMS SS F/R Brake Lines, PSS9, TMS F/R Sway Bars, TMS Rear Control Arms, TMS Underdrive Pulleys, TMS/Carbonio Intake, Eisenmann Exhaust, AutoSolutions 30% SSK, BMW Illuminated Shift Knob, BMW Performance Pedals, BMW Performance 4.10 R&P, CDV Delete, Flossmann GTR Carbon Fiber Hood/Trunk, Carbon Fiber Rear Diffuser, Euro Front Signal Lights, Euro Rear Tail Lights, Angel Eyes, Homelink

1997 328is 5MT Coupe Madeira Violet on Black - Staggered M Forged Double Spoke Wheels, Bilstein Sport, H&R Sport, M Tech Rear Spoiler (Sold)
Jump to top bimmerdriver is offline   Reply With Quote
Old Fri, Dec-08-2017, 05:38:09 PM   #4
AndresC
Registered User
 
AndresC's Avatar
 
Join Date: Nov 2013
Posts: 56
Reputation: 0 AndresC is on a distinguished road
Location: Bellevue, WA

United States




Default Re: Maybe a naughty script in one of the banner ads...

This needs to be removed immediately before the sites reputation and legitimacy go downhill.

I'm also get notifications and successfully blocking coinhive. I don't believe it's an ad as I get the notification on any page I hit. This leads me to believe that either a site admin or a nefarious actor has added it.

Domain: coinhive.com
IP Address 94.130.102.124
Port: 56482

Coinhive is a cryptocurrency miner that is ran though javascript via your browser. Basically someone is mining from your browser session which is messed up. This can cause additional load on your CPU. The load is minimal on purpose so the user doesn't notice it. But if you have 50,000 site visits as an example and each person is mining for you it's a noticeable profit for someone. Some variants of these js miners even continue to mine after you close your browser. It should be considered as malware.
__________________
2003.5 E46M 6MT

Last edited by AndresC; Fri, Dec-08-2017 at 05:44:16 PM.
Jump to top AndresC is offline   Reply With Quote
Old Fri, Dec-08-2017, 05:54:11 PM   #5
Da Jemster
Institutionalized User
 
Da Jemster's Avatar
 
Join Date: Jan 2007
Posts: 2,588
Reputation: 0 Da Jemster is a jewel in the rough
Location: Simi Valley

Philippines




Default Re: Maybe a naughty script in one of the banner ads...

Triggering my Symantec AV as well.
__________________
....

2008 E93 - AW - DCT - Stock...for now

2004 E46///CB-BLK///SMG II///D/A tuned///AFE Stg 2///SS Stepped///SS Metallic Cats///Eisenmann SS X-pipe///SS Race///4.10 diff///ACS CF Front Lip///6000K Xenons & Fogs///CF Grills & Gills///Angel Eyes///Clear Corners w/Solaris///Painted Reflectors///Black'd Sides & Tails///TEIN S
Jump to top Da Jemster is offline   Reply With Quote
Old Fri, Dec-08-2017, 07:28:04 PM   #6
LALaw
Brah
 
LALaw's Avatar
 
Join Date: Mar 2005
Posts: 42,151
In the garage:
Reputation: 0 LALaw has disabled reputation
Location: you know what it is

Canada




Default Re: Maybe a naughty script in one of the banner ads...

Andres, s in essence, each user here is acting like a free miner for someone else's cryptocurrency?

If this doesn't spur the Admins and Mods to action, I'm not sure what will
__________________
Jump to top LALaw is offline   Reply With Quote
Old Fri, Dec-08-2017, 09:49:14 PM   #7
Karter16
Registered User
 
Join Date: Dec 2015
Posts: 224
In the garage:
Reputation: 0 Karter16 is on a distinguished road
Location: Auckland

New Zealand




Default Re: Maybe a naughty script in one of the banner ads...

Yep I'm seeing significant CPU load when visiting the site now...
__________________
2005 ///M3 SMG Coupe Silbergrau Metallic/Black Leather
Build Thread: http://www.m3forum.net/m3forum/showthread.php?t=564562
Jump to top Karter16 is offline   Reply With Quote
Old Fri, Dec-08-2017, 09:50:15 PM   #8
Karter16
Registered User
 
Join Date: Dec 2015
Posts: 224
In the garage:
Reputation: 0 Karter16 is on a distinguished road
Location: Auckland

New Zealand




Default Re: Maybe a naughty script in one of the banner ads...

Further to the above, scrolling to the bottom of the page and setting the theme to:

-- Default Vb Style - Don't use. Testing only.

Restores CPU usage to normal, so appears that this is theme specific.
__________________
2005 ///M3 SMG Coupe Silbergrau Metallic/Black Leather
Build Thread: http://www.m3forum.net/m3forum/showthread.php?t=564562
Jump to top Karter16 is offline   Reply With Quote
Old Sat, Dec-09-2017, 03:06:35 PM   #9
MartynT
Registered User
 
MartynT's Avatar
 
Join Date: Aug 2012
Posts: 570
In the garage:
Reputation: 0 MartynT is on a distinguished road

United Kingdom




Default Re: Maybe a naughty script in one of the banner ads...

http://www.m3forum.net/m3forum/showt...p?p=1067757988
Jump to top MartynT is offline   Reply With Quote
Old Mon, Dec-11-2017, 04:17:09 AM   #10
Sirius
How many licks..
 
Sirius's Avatar
 
Join Date: Mar 2004
Posts: 46,473
In the garage:
Reputation: 45 Sirius has disabled reputation

United States




Default Re: Maybe a naughty script in one of the banner ads...

Looks like some code was injected into the footer of all the pages. Pretty sure I got it. Let me know if you have any other issues with it.
__________________
♪♫♪♪♫♪ Trevor ♪♫♪♪♫♪

97' M3. '10 R6.
Jump to top Sirius is offline   Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump



All times are GMT. The time now is 06:48:34 AM.


Powered by vBulletin® Version 3.8.6
Copyright ©2000 - 2018, Jelsoft Enterprises Ltd.
M3Forum.com and M3forum.net is in no way sponsored, endorsed or affiliated by or with BMW NA / BMW AG or any of it's subsidiaries or vendors.
BMW and M3 (E90 M3 | E92 M3 | E93 M3 | E46 M3 | E36 M3 | E30 M3) are registered trademarks of BMW AG.
M3Forum Terms of Service
Copyright 1999-2017 M3Forum.com
Discussing Maybe a naughty script in one of the banner ads... in the Member Notes and Requests to Admin/Mods Forum - Having issues with the site? Just want to make suggestions. Want to discuss other stuff with the website admin? This is the forum. at BMW M3 Forum.com (E30 M3 | E36 M3 | E46 M3 | E92 M3 | F80/X)