German (?) message at the bottom of each page.

[qbek]

Did anybody notice 3 strange links in German(?) at the bottom of many pages (like "Project Stats", or "Main page")? Looks like some type of 'spam' to me.
Has the server been 'pwned'?

[Frodo42]

Hmm no I have not noticed them until you posted about this now ... it sure does look like the server has been compromised somehow.

Some of the text is in German ... but it doesn't make much sense to me.
I don't want to try and follow the links ... fools that make this kind of stuff should not get the traffic they probably are after.

[wirthi]

The first and the last (third) message is "somehow" german, the middle one is probably french (I don't speak french but it sounds like)

"Treiber" is driver (so you can probably download free drivers there, and lots of viruses and trojans :-) )

"Danksagung in abschlusszeitung" could be translated with "acknowledgement in final newspaper". I guess "final newspaper" describes the "newspaper" a school-class publishes when it is near its final exam. There is a typo in it though (abschlusszeitung would have to start with a capital A).

I guess following the links will make you download lots of viruses and trojans. Better not try it.

[KWSN_Dagger]

I wouldn't touch them with a 100ft pole. Looking at the page source gives you these sites:
85.93.7.101/Treiber+k7s5a+freedownload
abugu.com/Femmes+obeses+130kg
aaxi.de/Danksagung+in+abschlusszeitung

Makes ya wanna update your antivirus.

[qbek]

So, it seems my suspicions have been confirmed.
Could someone alert the admins? (I do not know how). I think it is potentially a serious hit for the project. It's been nearly 12 hours and the links are still there. The longer the server is compromised the larger the risk.
I just hope that the server where the database (residues, factors, etc.) is stored has not been compromised. Perhaps it's also a good opportunity to verify everything was properly backed-up.

[Frodo42]

I just send Alien88 and Louie a short mail about this

[Alien88]

It hasn't been compromised; louie added the links. I'm removing them for the time being.. thanks for alerting us, however.

[qbek]

The links are indeed gone. Thanks!

Why would Louie himself add those suspicious links, however, is beyond me. I think some additional explanation is in place.

[Joh14vers6]

The first and the last (third) message is "somehow" german, the middle one is probably french (I don't speak french but it sounds like)

Corect the middle one was French. The others were German.

[ShoeLace]

The links are indeed gone. Thanks!

Why would Louie himself add those suspicious links, however, is beyond me. I think some additional explanation is in place.
advertising?