Possible Virus/Trojan?

[Finn 0]

Yup, this thing hit my pc too, although in my blind panic I also deleted part of the operating system. As it was Friday night, I missed the sim and have had to spend a week tracking down my OS to reload it. A week of internet withdrawal was not pleasant.

[Marius 0]

lol, poor Finn. Hope you got your computer going again.

[Finn 0]

Yeah, thanks. It seems to be working ok now. Although give it time. It's only been working for an hour.

[Guest STSF Muon]

Well, just so you know the GMs aren't invincible (but shhhh, don't tell anyone) I was hit by this thing too. I now have a good anti virus/spyware program so hopefully I won't lose my puter again. :lol:

[Atragon9 0]

We were attacked for a third time early this morning.

 

The offending code has been removed, so we are safe once again.

 

In order to stop this from happeneing again, Webbie will be updating the Boards before the end of the day today. The Boards will not "look right" to start with (the background colors and the mastheads, etc. will not be correct right away), but this upgrade must happen right away. You may also encounter some file errors, at times, as he takes pieces offline to update them.

 

Thanks and THANKS WEBBIE!

 

[Atragon9 0]

We were attacked for a third time early this morning.

 

The offending code has been removed, so we are safe once again.

 

In order to stop this from happeneing again, Webbie will be updating the Boards before the end of the day today. The Boards will not "look right" to start with (the background colors and the mastheads, etc. will not be correct right away), but this upgrade must happen right away. You may also encounter some file errors, at times, as he takes pieces offline to update them.

 

Thanks and THANKS WEBBIE!

 

 

 

Wow, he's fast, huh? Thanks Webbie (and uggh, my violet DOES look pink on a white beackground, huh?

 

 

[Guest STSF_Amnor]

Wow, he's fast, huh? Thanks Webbie (and uggh, my violet DOES look pink on a white beackground, huh?

 

You know, A9, it takes a very secure man to post in pink. :lol:

[Xantara 0]

You know, A9, it takes a very secure man to post in pink. :D

 

Amen to that but REAL men can wear any color they choose ::smiles::

[will_marx 0]

A very secure man, Amnor-chan.

 

I'll bet he even reads Martha Stewart's Living without batting an eye.

[Dumbass 0]

I'll bet he even reads Martha Stewart's Living without batting an eye.

 

Now that Kenneth Lay (Chairman and CEO of Enron) is dead we miss out on two things:

 

1) We miss seeing him go to jail. I am not so much concerned about seeing Lay in jail but he was going to be the barrometer to see if other corporate bad boys would serve time as well

 

2) We miss seeing his reaction when he gets to his cell and sees that someone carved in "Martha was here". :D

[Arthur (Rackle) Dragoon 0]

It happened again!

Tonight

[STSF Seiben 0]

It happened again!

Tonight

 

 

Yes, we know. So far, it only seems to affect computers using Internet Explorer. Firefox and other browsers seem to be unaffected. All I can recommend is to get yourself the Firefox browzer ( http://www.getfirefox.com ), an Anti Virus program such as Norton, McAffee, or AVG Free as well as a good anti-spyware program.

[LoAmi 0]

Yes, we know. So far, it only seems to affect computers using Internet Explorer. Firefox and other browsers seem to be unaffected. All I can recommend is to get yourself the Firefox browzer ( http://www.getfirefox.com ), an Anti Virus program such as Norton, McAffee, or AVG Free as well as a good anti-spyware program.

... or a Mac... or Linux... or BSD... :-)

[Atragon9 0]

 

 

Yes, we know. So far, it only seems to affect computers using Internet Explorer. Firefox and other browsers seem to be unaffected. All I can recommend is to get yourself the Firefox browzer ( http://www.getfirefox.com ), an Anti Virus program such as Norton, McAffee, or AVG Free as well as a good anti-spyware program.

 

 

I have not gotten ahold of Webbie yet tonight, but he may be ahead of me on this. I have tried the site with Firefox, IE and Netscape and I did not see any pop-ups, warnings, alerts or blue meanies. I'll keep monitoring it.

[Kansas_Jones 0]

Okay, I am one of those poor targets that use IE :P . Earlier tonight when I came onto the boards my McAfee went wonkers with an "Exploit" Trojan alert. The McAfee pop up claimed the virus had been cleaned, and I did a PC virus scan just in case. Everything came out clean. I came onto the boards just now (well, duh, considering I'm posting this), and no pop ups or warnings this time.

[LoAmi 0]

Even if we're not being attacked now, the bad guy might be able to come back and put an different exploit back on the server until the exploited security hole is fixed.

 

I haven't a clue why anyone would choose to use IE when better alternatives are available.

[STSF Seiben 0]

I have not gotten ahold of Webbie yet tonight, but he may be ahead of me on this. I have tried the site with Firefox, IE and Netscape and I did not see any pop-ups, warnings, alerts or blue meanies. I'll keep monitoring it.

 

Odd. When I tried to log in using IE earlier today, I immediately had a two warnings from NAV of trojan attacks to my computer, but I don't get anything from Firefox. Maybe Webbie fixed again after I used it.. ::shrugs::

[LoAmi 0]

You won't get anything from Firefox. I tried it during one of the attacks. I'm not familiar with the technical details of the exploit, but it seems to only be able to work on IE.

[Marius 0]

is the virus gone now? i just tried today, and it's not going crazy on me... i'm trying to make sure my anti-virus didn't just miss it or whatever...

[Atragon9 0]

is the virus gone now? i just tried today, and it's not going crazy on me... i'm trying to make sure my anti-virus didn't just miss it or whatever...

 

 

 

There are no problems with the Boards now, thanks.

[Atragon9 0]

There are no problems with the Boards now, thanks.

 

I spoke with Webbie last night and his exact words were:

 

"The upgrade was successful, but there was an "extra" file left behind that was not caught as part of the upgrade. I ran a diff on the folders there to grab a list of files that WERE there versus what files SHOULD be there. I deleted files that were not part of the current version.

 

(In a nutshell, if this would have been a clean install, everything would have been fine. The UPGRADE essentially just replaces the existing files with new ones. However since an "extra" file was there, it was not caught and overwritten. So it had to be manually audited and fixed.)"