Virus Alert/Watch (See page 3)

Sneez · **Posted:** Tue May 11, 2010 4:47 am

Just had it happen on the college PC .... oh joys :rabbid:

The Bastard Gamer · **Posted:** Tue May 11, 2010 6:33 am

Does anyone know the extent of the damage this worm/trojan can do?

Sneez · **Posted:** Tue May 11, 2010 6:35 am

Joel wrote:

Does anyone know the extent of the damage this worm/trojan can do?

Link wrote:

There is a chance we may have to wipe out the forums and start from scratch if we can't figure this out.

Link · **Posted:** Tue May 11, 2010 8:46 am

Apparently we aren't the only ones infected.

http://forum.largescaleplanes.com/index ... 9462&st=15

Looks like some bad nastiness happened over the weekend to a lot of forums. After we solve this I'm going to attempt to make an upgrade to our forums, which hopefully won't break any of our mods.

Legotoadeto · **Joined:** Fri Jul 10, 2009 3:10 am **Posts:** 1258

I work tech Support for a corporate company in Central Illinois. I'm talking to our Anti-Virus Team to see what they have to say. . . . Since it's not work related they put it on their low priority list.. but when they get back to me I'll let you know what they say.

Link · **Posted:** Tue May 11, 2010 10:24 am

Also looks like there's this fake googlesearch redirect thing going on too from what I've been told.

Link · **Posted:** Tue May 11, 2010 11:25 am

Okay. I ran the quick fix script and it removed all the bullshit code that was added. This was a WIDESPREAD attack and I have a feeling had absolutely nothing to do with our passwords being leaked or somebody intentionally going after our site. If you want to read more about it, check this page out:

http://blog.sucuri.net/2010/05/new-atta ... press.html

Sounds like a lot of MAJOR server hosts got hit by this. To avoid being infected, I STRONGLY suggest running Firefox with NoScript or some other plug-in that let's you pick and choose what scripts to run, that way you can allow the main site, but disallow any strange sites that may have cookie tracking software, redirects, or other nasty stuff.

PLEASE LET US KNOW IMMEDIATELY IF YOU ENCOUNTER ANYMORE OF THESE POP-UPS!

Sollah · **Posted:** Tue May 11, 2010 11:50 am

only script showing up according to NoScript is thegameheroes.com, so I assume it's all good on my end.

Koari · **Posted:** Tue May 11, 2010 2:09 pm

HALLELUJAH, AVG did not detect a threat.

walky · **Joined:** Sat Apr 03, 2010 9:13 pm **Posts:** 194

Oh, good, I can visit the forum again! Yay!

gasline09 · **Posted:** Tue May 11, 2010 8:03 pm

I must be lucky I never got any of it at all.

:-D

Link · **Posted:** Wed May 12, 2010 9:46 am

http://blog.sucuri.net/2010/05/lots-of- ... using.html

Looks like a bunch of sites got hit again. Be on your toes. I can't stress the importance of using No Script!

Sounds like it's a GoDaddy issue. Maybe it's time to think about switching hosts.

Ratix Farrence · **Posted:** Thu May 13, 2010 4:17 am

happened to me once a few days ago. firefox halted with the "reported attack site"
i'd like to point out that ABP for firefox works wonders and everyone should use it. usually blocks all the stupid ads on the interbutts

gasline09 · **Posted:** Thu May 13, 2010 7:35 am

Ratix Farrence wrote:

happened to me once a few days ago. firefox halted with the "reported attack site"
i'd like to point out that ABP for firefox works wonders and everyone should use it. usually blocks all the stupid ads on the interbutts

agreed

Link · **Posted:** Thu May 13, 2010 8:00 am

Ratix Farrence wrote:

happened to me once a few days ago. firefox halted with the "reported attack site"
i'd like to point out that ABP for firefox works wonders and everyone should use it. usually blocks all the stupid ads on the interbutts

AdBlocker wouldn't block this bad boy since it's a script that redirects you to a URL.

december · **Joined:** Wed Apr 28, 2010 5:03 pm **Posts:** 153

Link wrote:

There is a chance we may have to wipe out the forums and start from scratch if we can't figure this out.[/color]

Nuke the site from orbit. It's the only way to be sure.

Seriously though, GoDaddy is a very sadface option.

Xander756 · **Posted:** Thu May 13, 2010 8:41 pm

Yeah I never got this problem either coming here. On my Invision Free forum I run, AVG did try to block it saying it had been reported as malicious. Since it was my own forum though I just clicked ignore and nothing happened. Don't know if that is related or no. Meh.

Superman64 · **Posted:** Thu May 13, 2010 8:49 pm

Link...if you do "nuke" the messageboard. Just promise me...that you'll make a Fallout theme for the next board iteration.

The Fabled Ninja · **Joined:** Sat Jun 14, 2008 1:01 am **Posts:** 733

Superman64 wrote:

Link...if you do "nuke" the messageboard. Just promise me...that you'll make a Fallout theme for the next board iteration.

Agreed. Make it happen captain.

Xander756 · **Posted:** Tue May 18, 2010 11:39 pm

So is this solved now? I haven't been coming to the forums much out of fear of contracting this STD. I miss posting here

Virus Alert/Watch (See page 3)

Who is online