Previous Thread
Next Thread
Print Thread
Hop To
#262129 01/28/2019 6:41 AM
Joined: Jun 2006
Posts: 987
Likes: 24
Old Hand
Old Hand
Joined: Jun 2006
Posts: 987
Likes: 24
Hi

One of our forum members say following in a message

Quote
.swf ....shows up when i update (refresh) active threads .
Its not really a problem , site works fine otherwise ,
I thought you'd want to know

Any ideas what this could be?
I have not seen that file before..
thanks
Attachments
Screenshot_20190127-180542_Samsung Internet.jpg


Morgan Johansson
BritBike Forum
https://www.britbike.com/forums/ubbthreads.php
Morgan #262130 01/28/2019 6:52 AM
Joined: Apr 2004
Posts: 1,945
Likes: 145
UBB.threads Developer
UBB.threads Developer
Joined: Apr 2004
Posts: 1,945
Likes: 145
Adobe Flash from last decade
https://en.m.wikipedia.org/wiki/SWF

It's probably displaying for 1 of 2 reasons:

1/ a rogue ad that you are displaying.
or
2/ a program/malware the user has installed on his computer.

Have your user Google their problem. This has nothing to do with UBB.threads. It is not a file or file format that ships with the forum software.


Current developer of UBB.threads PHP Forum Software
Current Release: UBBT 7.7.5 // Preview: UBBT 8.0.0
isaac @ id242.com // my forum @ CelicaHobby.com
Morgan #262131 01/28/2019 6:58 AM
Joined: Apr 2004
Posts: 1,945
Likes: 145
UBB.threads Developer
UBB.threads Developer
Joined: Apr 2004
Posts: 1,945
Likes: 145
3/ from your screenshot, it looks like the user is on a mobile device. One of your ads is probly animated with Adobe Flash (swf). Since the users mobile browser has no clue what the file is, it's trying to download it for him, rather than run it.


Current developer of UBB.threads PHP Forum Software
Current Release: UBBT 7.7.5 // Preview: UBBT 8.0.0
isaac @ id242.com // my forum @ CelicaHobby.com
Morgan #262132 01/28/2019 7:03 AM
Joined: Jun 2006
Posts: 987
Likes: 24
Old Hand
Old Hand
Joined: Jun 2006
Posts: 987
Likes: 24
"Isaac

all ad banners are in .gif format there are a table with 10 static gifs and one called by a banner script that I used for many years with only .gif format
at the bottom there is a ebay ad displayed.

maybe its his as the image shows on his side he had several windows open


Morgan Johansson
BritBike Forum
https://www.britbike.com/forums/ubbthreads.php
Morgan #262133 01/28/2019 7:05 AM
Joined: Apr 2004
Posts: 1,945
Likes: 145
UBB.threads Developer
UBB.threads Developer
Joined: Apr 2004
Posts: 1,945
Likes: 145
I'm happy to hear that you got it figured out so quickly. thumbsup


Current developer of UBB.threads PHP Forum Software
Current Release: UBBT 7.7.5 // Preview: UBBT 8.0.0
isaac @ id242.com // my forum @ CelicaHobby.com
Morgan #262134 01/28/2019 7:08 AM
Joined: Jun 2006
Posts: 987
Likes: 24
Old Hand
Old Hand
Joined: Jun 2006
Posts: 987
Likes: 24
well I didn't figure out anything but its prolly not related to UBB.
No one else reported this so lets leave it here, if I find something I'll report it.
thanks


Morgan Johansson
BritBike Forum
https://www.britbike.com/forums/ubbthreads.php
Morgan #262135 01/28/2019 10:53 AM
Joined: Jun 2006
Posts: 956
Old Hand
Old Hand
Joined: Jun 2006
Posts: 956
just take a look at your site and see some strage urls blocked by my adblocker. Are you sure to use only static gilf files for advertisment?
If I enter your site my adblock tells me connections to:
britbike.com
adzerk.net
ajax.googleapis.com
bufferapp.com
cloudflare.com
d1zoyh6qfvajy7.cloudfront.net
dsms0mj1bbhn4.cloudfront.net

ebay.com
facebook.com
fancy.com
fbcdn.net
fonts.googleapis.com
google-analytics.com
gstatic.com
napaliprop.com
ok.ru
pinterest.com
ravenjs.com
reddit.com
shareaholic.com
tumblr.com
viglink.com
vk.com
yummly.com

The reported .swf (flash file) can be a malware. Check your server for modified .htaccess files. The name of the file looks like dynamic generated. The browser don't support Flash anymore and display the unknown extentions for donwload. This is releated to the browser of the client. But you have to find out where it comes from: your server, your ad's or a malware injection on client side.

In PC browsing with Firefox no .swf shows up on my side. It can be a injection to mobile browsers only. This can be detected by scripts.

Regards
Zarzal


my board: http://www.dragonclan-forum.de
my hobby: http://www.biker-reise.de
Ich kann bei Fragen zu UBBthreads in Deutsch weiterhelfen oder es zumindest versuchen
Morgan #262136 01/28/2019 11:04 AM
Joined: Jun 2006
Posts: 987
Likes: 24
Old Hand
Old Hand
Joined: Jun 2006
Posts: 987
Likes: 24

I have searched for anything starting with "Rzk" as in the .swf file on my server but nothing appeared.

These are known on britbike.com
britbike.com
ebay.com
facebook.com
pinterest.com
shareaholic.com
google-analytics.com
---------------
Have just installed -
cloudflare.com
---------------------
Have no clue what below is...-
adzerk.net
ajax.googleapis.com
bufferapp.com
d1zoyh6qfvajy7.cloudfront.net
dsms0mj1bbhn4.cloudfront.net
fancy.com
fbcdn.net
fonts.googleapis.com
gstatic.com
napaliprop.com
ok.ru
ravenjs.com
reddit.com
tumblr.com
viglink.com
vk.com
yummly.com

what shall I be looking for? in the .


Morgan Johansson
BritBike Forum
https://www.britbike.com/forums/ubbthreads.php
Zarzal #262137 01/28/2019 11:11 AM
Joined: Jun 2006
Posts: 16,292
Likes: 116
UBB.threads Developer
UBB.threads Developer
Joined: Jun 2006
Posts: 16,292
Likes: 116
d1zoyh6qfvajy7.cloudfront.net
dsms0mj1bbhn4.cloudfront.net


These are injected by a CDN to cache resources; in this case you can read the code to see that it is used by Shareaholic, so it is not the culprit.

As this is happening on your landing page, which doens't even look to be a UBB.threads page, I think its safe to say its not UBB.threads related.

The SWF is probably either a resource from malware on the users local device, or is being requested by 3rd party javascript as an advertisement.

If this is affecting only one user and no one can recreate the issue, chances are that it is an issue with the device in question.


I am a Web Development Contractor, I do not work for UBBCentral. I have provided free User to User Support since the beginning of these support forums.
Do you need Forum Install or Upgrade Services?
Forums: A Gardeners Forum, Scouters World
UBB.threads: UBBWiki, UBB Styles, UBB.Sitemaps
Longtime Supporter & Resident Post-A-Holic
VNC Web Services: Code Modifications, Upgrades, Styling, Coding Services, Disaster Recovery, and more!
Morgan #262138 01/28/2019 11:16 AM
Joined: Jun 2006
Posts: 987
Likes: 24
Old Hand
Old Hand
Joined: Jun 2006
Posts: 987
Likes: 24
I see strange examples like napaliprop.com and
ok.ru

I have nothing to do with any russian domains so I wonder what it could be

I am scanning the server right now


Morgan Johansson
BritBike Forum
https://www.britbike.com/forums/ubbthreads.php
Morgan #262139 01/28/2019 11:32 AM
Joined: Jun 2006
Posts: 987
Likes: 24
Old Hand
Old Hand
Joined: Jun 2006
Posts: 987
Likes: 24
Found this on the server I guess I should destroy these asap
see attached

tmp/awstats/awstats092016.britbike.com.txt Atomicorp.PHP.Malware.011017184916.30069.UNOFFICIAL
tmp/awstats/awstats022016.britbike.com.txt Atomicorp.PHP.Malware.011017184916.1811.UNOFFICIAL
tmp/awstats/awstats102017.britbike.com.txt Atomicorp.PHP.Malware.011017184916.30069.UNOFFICIAL
tmp/awstats/awstats032016.britbike.com.txt Atomicorp.PHP.Malware.011017184916.1811.UNOFFICIAL
tmp/awstats/awstats062016.britbike.com.txt Atomicorp.PHP.Malware.011017184916.30069.UNOFFICIAL
.spamassassin/bayes_seen Email.Phishing.VOF1-6314019-0
Attachments
Screen Shot 2019-01-28 at 16.28.04.jpg


Morgan Johansson
BritBike Forum
https://www.britbike.com/forums/ubbthreads.php
Morgan #262140 01/28/2019 12:34 PM
Joined: Jun 2006
Posts: 987
Likes: 24
Old Hand
Old Hand
Joined: Jun 2006
Posts: 987
Likes: 24
I destroyed the files


Morgan Johansson
BritBike Forum
https://www.britbike.com/forums/ubbthreads.php
Morgan #262147 01/29/2019 7:43 AM
Joined: Jun 2006
Posts: 987
Likes: 24
Old Hand
Old Hand
Joined: Jun 2006
Posts: 987
Likes: 24
Since this was a non bug post you can delete the thread if you like


Morgan Johansson
BritBike Forum
https://www.britbike.com/forums/ubbthreads.php

Link Copied to Clipboard
ShoutChat
Comment Guidelines: Do post respectful and insightful comments. Don't flame, hate, spam.
Recent Topics
spam issues
by ECNet - 03/19/2024 11:45 PM
Looking for a forum
by azr - 03/15/2024 11:26 PM
Editing Links in Post
by Outdoorking - 03/15/2024 9:31 AM
Question on barkrowler and the like
by Mors - 02/29/2024 6:51 PM
Member Permissions Help
by domspeak - 02/27/2024 6:31 PM
Who's Online Now
1 members (Ruben), 476 guests, and 111 robots.
Key: Admin, Global Mod, Mod
Random Gallery Image
Latest Gallery Images
Los Angeles
Los Angeles
by isaac, August 6
3D Creations
3D Creations
by JAISP, December 30
Artistic structures
Artistic structures
by isaac, August 29
Stones
Stones
by isaac, August 19
Powered by UBB.threads™ PHP Forum Software 8.0.0
(Preview build 20230217)