ForumsSupport ForumMalicious applet?

13 2528
helloworld
offline
helloworld
6 posts
Nomad

Visiting your site, a Java applet from webtraffic-analysis.com demands full access to my computer. Have you got somehow infected?

http://w*btraffic-analysis.com/app/wcqTZpERmHk13pAm/192/280/660/833/72/5/
http://w*btraffic-analysis.com/app/wcqTZpERmHk13pAm/192/280/660/833/72/
http://w*btraffic-analysis.com/app/wcqTZpERmHk13pAm/192/280/660/833/72/5/682/
http://w*btraffic-analysis.com/app/wcqTZpERmHk13pAm/192/280/660/833/72/5/682/255/
http://w*btraffic-analysis.com/app/wcqTZpERmHk13pAm/192/280/660/833/
http://w*btraffic-analysis.com/app/wcqTZpERmHk13pAm/192/280/660/
http://w*btraffic-analysis.com/app/wcqTZpERmHk13pAm/192/280/
http://w*btraffic-analysis.com/app/wcqTZpERmHk13pAm/192/
http://w*btraffic-analysis.com/gx/wcqTZpERmHk13pAm/

  • 13 Replies
Owen135731
offline
Owen135731
2,123 posts
Peasant

No I have not. Also, this is one of those times people should copy/paste links.

Graham
offline
Graham
8,047 posts
Nomad

i wouldn't consider it malicious, i accepted and seemed to me to be only a recorder of some type to get how many people use this site.

helloworld
offline
helloworld
6 posts
Nomad

Actually, that domain has been obtained from a Polish registrar, and the related files seem to be hosted at ovh.be.

I think the applet was served through one of the advertisement spaces - definitely, not something a game developer would do.

Any official replies from ArmorGames?

Graham
offline
Graham
8,047 posts
Nomad

i've been too long w/ site to not trust AG :]

Any official replies from ArmorGames?


you could email them, they don't usually respond to forums

john@armorgames.com

contact page
helloworld
offline
helloworld
6 posts
Nomad

That's not something Armor Games developed.

It is being injected by a third party using the advertisements.

Graham
offline
Graham
8,047 posts
Nomad

AG is the one putting in ads

helloworld
offline
helloworld
6 posts
Nomad

They come from various circuits, like Doubleclick.

AG has no direct control over the content passed.

Graham
offline
Graham
8,047 posts
Nomad

well who do you plan on telling?

Freakenstein
offline
Freakenstein
9,503 posts
Jester

Just so you know, Armorgames put those ads there, but they are 100% clean. Those "malicious applets" may be being put up on the advertisements because of you. So, just make sure you don't have anything, like a sort of virus, that is putting these sort of ads besides the site itself, and this problem will be solved.

helloworld
offline
helloworld
6 posts
Nomad

Sent a couple of mails to AG staff and ovh for good measure.

No viruses here -- Mac user. :P

ulimitedpower
offline
ulimitedpower
1,736 posts
Nomad

Java applet


As far as I have ever found, only one game is a Java applet: Runescape, and that isn't even on the site here.

Applets are pretty risky, so unless you trust the applet owner, don't use it.

webtraffic-analysis.com


The name sounds like what Graham said. Except, I don't see any need to launch an applet to do it: Why do they want unlimited access to your computer? That's what applets ask for.

It is being injected by a third party using the advertisements.


Although AG has a bit of control over advertising, it may have slipped through, but will probably go away.
Zophia
offline
Zophia
9,424 posts
Scribe

No viruses here -- Mac user. :P
We can get viruses too, y'know, it's just less common because there's a greater amount of PC users out there.

BUt if you've mailed and asked the actual staff, they'll probably take the case from there on.
helloworld
offline
helloworld
6 posts
Nomad

Just FYI, ovh.be appears to have pulled the plug on that website.

People who granted the applet full access to their computer should run a virus scan and check if any bad processes are running on their machine.

No official statement from the ArmorGames staff - not even an Email - kind of disappointing.

Showing 1-13 of 13