XWidgetSoft Forum

XWidget & XLaunchpad , Desktop customization
It is currently 2017年 Dec 15日 13:24

All times are UTC - 8 hours




Post new topic Reply to topic  [ 29 posts ] 
Author Message
PostPosted: 2015年 Mar 4日 01:31 
Online
User avatar

Joined: 2013年 Jul 29日 09:13
Posts: 572
1 - Xwidget engine setup executable is clean of malware - CONFIRMED.
2 - Xwidget engine is clean of malware - CONFIRMED.

This is good news. Sources around the web are still flagging Xwidgets as being or containing malware. For example, clicking on links to this forum can be blocked by Chrome, that is a browser potentially used by 40% of the world's users! Several antimalware tools flag Xwidgets in their databases as containing malware.

Now that the adware/malware has been cleaned (hope it has by now) we can start to register the new version with those sources as being FREE from malware. This means being proactive and actually getting out there registering the malware reports as being false positives and submitting new results.

So, everyone who is benefitting from Xwidgets, developers, users, that have an interest in keeping Xwidgets alive, please select a location on the web where Xwidgets is being defined as malware and list it here.

We need assistance on this task. This is an IMPORTANT task if you wish Xwidgets to survive. Do NOT ignore this post.

Please take one of those sources from the list and attempt to re-register Xwidgets as being CLEAN. List what you have done here on this post to avoid repetition.


Top
 Profile  
 
PostPosted: 2015年 Jun 9日 17:19 
Offline
User avatar

Joined: 2014年 Apr 6日 05:20
Posts: 24
firefox started flaging the forums as dangerous too. that needs fixing


Top
 Profile  
 
PostPosted: 2015年 Jun 10日 04:38 
Offline
User avatar

Joined: 2013年 Mar 8日 22:27
Posts: 357
And I'm posting this from latest firefox ... no warnings ?"

_________________
Life is a myriad game... Just play it!


Top
 Profile  
 
PostPosted: 2015年 Jun 10日 06:21 
Online
User avatar

Joined: 2012年 Dec 5日 17:52
Posts: 4568
Dr_Xadium wrote:
firefox started flaging the forums as dangerous too. that needs fixing

It's not true.. Zero warnings on firefox

_________________
Image
...and remember: don't take life too seriously...
My profile on Deviantart: http://jimking.deviantart.com/


Top
 Profile  
 
PostPosted: 2015年 Jun 21日 21:52 
Offline
User avatar

Joined: 2015年 Apr 3日 15:30
Posts: 119
well it's still flagged with Chrome but you do need to have the setting ON so I take it you guys do not have that similar setting ON on your versions of FF.
And I agree 100% that this needs to be fixed to save the integrity of this software.
It is NOT a good look and the average person who is not techy like us will just read the WARNING and avoid the website.

Is this what you want?

If you can't find what the issue is don't just say its a Firefox/Chrome issue.
Get another opinion for some other people to look over this website.
I have already posted on this thread below and went to the trouble of asking at a Google forum. They were nice enough to reply and show some suspect code but nothing has even been done on this forum to show any genuine concern or a reply.
Not good enough.
Here is that thread..
viewtopic.php?f=16&t=5671
and what the Google tech found...
His words...
..............................................................
"Hi djpete,

The Google safebrowsing tool still reports found issues for this site.

You might want to check for any suspicious scripts linked in the source.
Sometimes you might find them injected into the source code of the page near the end,
which is where I saw this one on your home page.

< div style=" display: none ">
< sc<200b>ript src=hxxp://s25.cnzz.com/stat.php?id=4O33716&web_id=4O33716" language="Javasc<200b>ript"> < /sc<200b>ript>
< /div>

Hope that helps,
Tim"

......................................................

I had a virus a few weeks back and haven't been back here just in case it came from this website.
And I build websites for a living!
So if it's scared me just imagine what it is doing to the average user...
You need to FIX this if you want this forum and the product to grow. It's as simple as that.

_________________
Cheers, Pete


Top
 Profile  
 
PostPosted: 2015年 Jul 22日 22:14 
Offline
User avatar

Joined: 2013年 Mar 8日 22:27
Posts: 357
And so also I build websites for a living.

I went through the served html of random pages of the forum but could not find any references to the script.

Did they list any page where it was located?

Can you give a link to the Google post?

_________________
Life is a myriad game... Just play it!


Top
 Profile  
 
PostPosted: 2015年 Jul 23日 07:13 
Offline

Joined: 2015年 Mar 25日 11:55
Posts: 82
Firefox on PC doesn't generate any errors, but the Firefox on Android generates a similar message as does Chrome, both for the forums and for the main Android XWidgets page.
Attachment:
Screenshot_2015-07-23-11-11-18[1].png
Screenshot_2015-07-23-11-11-18[1].png [ 170.65 KiB | Viewed 5153 times ]


Top
 Profile  
 
PostPosted: 2015年 Aug 21日 01:17 
Online
User avatar

Joined: 2013年 Jul 29日 09:13
Posts: 572
It was an incredibly BAD idea of Tony's to allow that malware to be included into the original installation executable. I reckon that it will be very difficult to ever get rid of the bad reputation that Xwidget now has.

There will be copies of the malware-affected installation knocking about for years. They need to be expunged and we need to be absolutely sure there are none hanging about here.

Frankly the Xwidget engine needs a new home, away from the current location. There need to be massive disclaimers on the site in very large fonts about it being utterly clean.

I warned Tony from the very beginning that this malware would kill Xwidgets stone dead and it took a year for him to finally sit up and take notice. Now he has abandoned Xwidgets and the browsers will kill all traffic to the site.

How utterly foolish... We need the source code, we need to rebuild Xwidgets under a different name and we need to build a new site. Xwidgets reputation is tarnished forever.


Top
 Profile  
 
PostPosted: 2015年 Aug 22日 02:08 
Offline
User avatar

Joined: 2014年 Apr 6日 05:20
Posts: 24
jimking wrote:
Dr_Xadium wrote:
firefox started flaging the forums as dangerous too. that needs fixing

It's not true.. Zero warnings on firefox


Hey I love Xwidget I'm not going to lie about that.

Attachment:
File comment: This is what firefox shows me
xwid.jpg
xwid.jpg [ 200.14 KiB | Viewed 5044 times ]



Perhaps you don't have "block reported attack sites" checked off in Settings > Security? (I had to turn that off just to be able to get here without clicking through 2 levels of "get me out of here" nonsense.

I am running Firefox Dev. Edition 42.0a2


Top
 Profile  
 
PostPosted: 2015年 Aug 25日 11:38 
Online
User avatar

Joined: 2013年 Jul 29日 09:13
Posts: 572
Don't be so silly. We don't need to know how to stop the warning being displayed on our own PCs. We need to stop the warning being displayed FULL STOP.

The Webdev needs to do his homework.


Top
 Profile  
 
PostPosted: 2015年 Aug 29日 06:04 
Offline
User avatar

Joined: 2014年 Apr 6日 05:20
Posts: 24
I'm with you on that. I wasn't suggesting people just put their head in the sand-- I was explaining what I had to do *just to get here*. The webdev needs to reach out to Mozilla and inform them this warning is in error-- but since that warning uses a crowdsourced list, the overall reputaton of Xwidget needs to be repaired.


Top
 Profile  
 
PostPosted: 2015年 Aug 30日 06:40 
Offline
User avatar

Joined: 2012年 May 12日 20:32
Posts: 576
May be we need change a new software name and new domain name ? ....

_________________
XWidget Software Developer
[XWidget for Android] [Lastest version of XWidget] [Lastest patch of XWidget]
[XDesktop for Android/Windows]


Top
 Profile  
 
PostPosted: 2015年 Sep 2日 11:28 
Offline
User avatar

Joined: 2014年 Apr 6日 05:20
Posts: 24
Tony wrote:
May be we need change a new software name and new domain name ? ....


Unfortunately, I think that's the best best. A rebranding exercise, basically. It might be a good way to debut 2.0.


Top
 Profile  
 
PostPosted: 2015年 Sep 3日 18:37 
Offline
User avatar

Joined: 2015年 Apr 3日 15:30
Posts: 119
Tony I offered to go through the website for free quite a while back.
I have been building and hosting websites for over 17 yrs. In that time I have seen quite a few virus infected websites.
All I need is access to the server preferably via cPanel or FTP.

At least you will then have a qualified second opinion.
You have nothing to lose and this should have been done a LONG time ago.

It would take me only an hour to go through the website and give an opinion and or remove any suspicious files.
It ain't hard to do.

My personal opinion is there are still suspicious files on the website being flagged.
I don't think it is an old bad reputation..

You know where I am

_________________
Cheers, Pete


Top
 Profile  
 
PostPosted: 2015年 Sep 9日 02:23 
Online
User avatar

Joined: 2013年 Jul 29日 09:13
Posts: 572
DJpete, you and I are webdevs of similar experience. I have suggested to Tony that he hands over FTP access to the site to others so it can be checked, then a refresh and some additional information on the landing page (news, clean download &c) possibly a CMS to replace what Tony has.

If he hands over FTP access then I will get in touch with you and digigamer.

All major browsers will need to be informed as will any A/V engines that are flagging the site as being unreliable with regard to malware.


Top
 Profile  
 
PostPosted: 2015年 Sep 10日 15:27 
Offline
User avatar

Joined: 2015年 Apr 3日 15:30
Posts: 119
Agreed yereverluvinuncleber. It's a great free opportunity for Tony. He should take it up

_________________
Cheers, Pete


Top
 Profile  
 
PostPosted: 2015年 Sep 11日 03:48 
Online
User avatar

Joined: 2013年 Jul 29日 09:13
Posts: 572
I have posted an open letter to this effect on the top of the site. If you could please add your response here: http://bbs.xwidget.com/viewtopic.php?f=3&t=5878

Your support might be useful in order to persuade Tony.


Top
 Profile  
 
PostPosted: 2015年 Sep 11日 15:45 
Online
User avatar

Joined: 2013年 Jul 29日 09:13
Posts: 572
This is a thread that was started when the Xwidget engine was found to be still hosting crap/malware:

It is worth a read.

http://yereverluvinuncleber.deviantart.com/journal/XWIDGET-ENGINE-REMOVES-BUNDLED-MALWARE-515469856


Top
 Profile  
 
PostPosted: 2015年 Sep 13日 16:30 
Offline
User avatar

Joined: 2012年 May 12日 20:32
Posts: 576
Thank your yereverluvinuncleber, you are right.
I had changed the domain from xwidget.com to kuyuapp.com

_________________
XWidget Software Developer
[XWidget for Android] [Lastest version of XWidget] [Lastest patch of XWidget]
[XDesktop for Android/Windows]


Top
 Profile  
 
PostPosted: 2015年 Sep 14日 00:10 
Online
User avatar

Joined: 2013年 Jul 29日 09:13
Posts: 572
I'm not sure that is the correct approach...

We need to convince the browsers that Xwidget engine is clean, changing the domain will NOT do that.

It is a temporary measure at best.

It does not help with any of the a/v engines that are flagging the executable as malware too.

You need to open the code for analysis so that anyone can check it. Once that is done then all will know that it is free of malware.
Then you need to rejig the website giving everyone reassurance that the installation exe is clean. You need to ensure that all downloads on all downloading sites are clean.

Then you must send false positive reports to all the a/v tools and the same for all the browsers.

Changing the domain is NOT a solution.


Top
 Profile  
 
PostPosted: 2015年 Sep 14日 19:24 
Offline
User avatar

Joined: 2012年 May 12日 20:32
Posts: 576
yereverluvinuncleber wrote:
I'm not sure that is the correct approach...

We need to convince the browsers that Xwidget engine is clean, changing the domain will NOT do that.

It is a temporary measure at best.

It does not help with any of the a/v engines that are flagging the executable as malware too.

You need to open the code for analysis so that anyone can check it. Once that is done then all will know that it is free of malware.
Then you need to rejig the website giving everyone reassurance that the installation exe is clean. You need to ensure that all downloads on all downloading sites are clean.

Then you must send false positive reports to all the a/v tools and the same for all the browsers.

Changing the domain is NOT a solution.



Hi yereverluvinuncleber,
I had contacted almost all the anti-virus software vendors, and reported the false alarm problem, they had fixed the false positives, and this is the scan report: http://r.virscan.org/report/2aaa26d6cdf ... 0e318ca9d3


The Only one false alarm has been cleared by F-Port

Image





Tony

_________________
XWidget Software Developer
[XWidget for Android] [Lastest version of XWidget] [Lastest patch of XWidget]
[XDesktop for Android/Windows]


Top
 Profile  
 
PostPosted: 2015年 Sep 14日 23:13 
Offline

Joined: 2012年 Jun 18日 00:07
Posts: 269
Firefox still giving this warning for this site


Attachments:
warning.jpg
warning.jpg [ 47.25 KiB | Viewed 4642 times ]
Top
 Profile  
 
PostPosted: 2015年 Sep 15日 02:24 
Online
User avatar

Joined: 2013年 Jul 29日 09:13
Posts: 572
For me also.


Top
 Profile  
 
PostPosted: 2015年 Sep 15日 05:01 
Offline
User avatar

Joined: 2012年 May 12日 20:32
Posts: 576
meme wrote:
Firefox still giving this warning for this site



This is False positive, Can you help me to submit appeal or tell me how to submit appeal to Firefox ? thank you.

_________________
XWidget Software Developer
[XWidget for Android] [Lastest version of XWidget] [Lastest patch of XWidget]
[XDesktop for Android/Windows]


Top
 Profile  
 
PostPosted: 2015年 Sep 15日 05:49 
Online
User avatar

Joined: 2013年 Jul 29日 09:13
Posts: 572
I have requested that Firefox stops flagging xwidget.com as being a dangerous page, I sent in a request through their google safe browsing page:

https://www.google.com/safebrowsing/report_badware/

There appears to be no place to report a false positive or flag a site as now being repaired.


Top
 Profile  
 
PostPosted: 2015年 Sep 15日 05:51 
Online
User avatar

Joined: 2013年 Jul 29日 09:13
Posts: 572
https://www.stopbadware.org/clearinghou ... widget.com

shows xwidget.com as being OK


Top
 Profile  
 
PostPosted: 2015年 Sep 15日 05:52 
Online
User avatar

Joined: 2013年 Jul 29日 09:13
Posts: 572
If your own browser is flagging Xwidget as hosting malware then please take the trouble to report it as being a false positive. Please be active in this.


Top
 Profile  
 
PostPosted: 2015年 Sep 16日 05:35 
Offline
User avatar

Joined: 2012年 May 12日 20:32
Posts: 576
Thanks!
I had request a Review from Google/Firefox

_________________
XWidget Software Developer
[XWidget for Android] [Lastest version of XWidget] [Lastest patch of XWidget]
[XDesktop for Android/Windows]


Top
 Profile  
 
PostPosted: 2015年 Sep 17日 15:25 
Online
User avatar

Joined: 2013年 Jul 29日 09:13
Posts: 572
Looks as if Firefox is no longer flagging the site as hosting malware. Good news!


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 29 posts ] 

All times are UTC - 8 hours


Who is online

Users browsing this forum: Yahoo [Bot] and 7 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  

Powered by phpBB® Forum Software © phpBB Group