Main page may have a virus

[Vakachehk]

I went on http://planeshift.it/ and I have a Trojan thrown my way. Google Chrome/virus protector asked me twice if I wanted to enter, then my virus protector blocked all the info into my PC and I could happily carry on.

I would not use the website unless you are sure your virus protector will handle it.

[Geoni]

Oh crap! You're right! Seriously, don't enter http://planeshift.it/

[verden]

Confirmed. There is some rogue Javascript appended to the end of the main page. Probably the others on the site as well.

Yeah... its a Php hack. You have to be very careful with Php scripts outside of a protected directory.

[Earowo]

thats why websites should allow advertisments
if you let advertisments advertise on your website, thats just asking for somthing bad.
i checked the site to check, and its true a thing poped saying there is a java script, and in the lower corner the virus protection said virus was removed.



SUE THE ADVERTISERS WE NEED THIS BREAK

[Earowo]

srry for double post, also a thing popped talking about an adobe licensing agreement

[verden]

This isn't from the advertising. Most likely either a module of the forum software has not been updated, or a script installed outside of the cgi directory has been compromised.

[Earowo]

how long till its fixed?
becuase a virused website is a drawback from getting new players...

[LigH]

At the moment I don't see any warnings. Probably fixed for now. Troublemakers never die.

[Minks]

Yes, there was a trojan on planeshift.it, but it's fixed already.  

[10:58]   <Talad>   but there was a javascript on the main page added
[10:58]   <Talad>   I think they hacked the ISP
[10:58]   <Talad>   the code it removed now and so it's safe to navigate, but you can wait google banner to go away if you want

Edit: It's common knowledge by now that I can't type. Thanks, LigH. 

[allad]

Not sure if anyone else had this problem, but if you are using Firefox with "Block reported attack sites" checked in the security tab.  It pops up a lovely thing saying it's insecure.  You can try to ignore it, but it still makes the site look weird.  I would only assume this has to do with these popping up suddenly on the site.

[LigH]

@ Minks: You missed an important "f" in your URL.

[Vakachehk]

Just so everyone knows it was fixed