Originally posted by Bagpuss
View Post
Announcement
Collapse
No announcement yet.
Wraith Worshippers Anonymous - Introduction, Joining And Inactivity, Rules, OOC Chat
Collapse
This is a sticky topic.
X
X
-
Originally posted by Draygon View PostClearly I need to get my friend to be on here to sort out queries That or have him on reliable speed dial!
@ Bagpuss - you should be OK seeing as you didn't log in or post anything.Last edited by ciannwn; 05 September 2012, 06:09 AM.sigpic
Comment
-
I didn't find anything obvious,but I'm not a member.
I only read one google-cached thread as a lurker,then hopped it to the actual freeforums.org site to have a read of their tech stuff and blog.
( Nothing triggered an alert at either site for me if that helps.)The place to "Gate" to during Outages for updates and info:
Comment
-
@ Dray: I'm wondering where your friend got his info, now I've had time to look at the info on the site. I can't see anything that indicates a hack - but, better safe than sorry is a maxim I hold dear. Does he have any links to the relevant issues, and perhaps more data about what actually happened? Is it actually the host or the forums?sigpic
Comment
-
I'll post what he sent to me about it. He foudn out about it because he als ogot hit with it, more than once as did other members of his forum.
basicly, the site itself is changed so that when you press the post button,it also "agrees" to download the script
the script then installs itself on your machine, what it dose? basicly its a keyloger that reports to a TFTP server the output, it also tracks if you make a bank transfer, and will add a £4 charge to transaction, placeing that extra money in an acount in brazillits initialy called Toor.exe but once its installed, it could be anything for example it was on yours as a part of the java program, but it could be alot of other places toi do know AVG dosent catch it yet, but one person has said Avast dose so bear that in mindand i have, and they have so far done... nothing, its not just our page being hit, and most people havent been so on the ballIf found, is probably lost on the way to Azaroth or the Pegasus Galaxy
sigpic
Comment
-
@ Draygon. Thanks. Links etc. would be helpful.
It's just as well he reported it to the hosting site because I couldn't answer any questions about it.
PS: I've just downloaded Avast so I'll do a scan later on and see if it finds anything.Last edited by ciannwn; 05 September 2012, 07:18 AM.sigpic
Comment
-
I've done a full system scan with Avast and it didn't find anything. So, if it really does pick this virus up it means I'm not infected.
I've googled toor.exe virus but all I could find is that there's a program called tor.exe which some malware can use as camoflage. Am now very confused.Last edited by ciannwn; 05 September 2012, 09:13 AM.sigpic
Comment
-
Originally posted by ciannwn View PostI've done a full system scan with Avast and it didn't find anything. So, if it really does pick this virus up it means I'm not infected.
I've googled toor.exe virus but all I could find is that there's a program called tor.exe which some malware can use as camoflage. Am now very confused.If found, is probably lost on the way to Azaroth or the Pegasus Galaxy
sigpic
Comment
-
Thanks for all the good hints! This stuff is pretty creepy. Go figure, I went and installed an anti-virus program for the first time ever! If you can't even feel safe with a Mac anymore, how far has this world come down? Anyhoo, the scanner scanned for two hours and didn't find anything out of the ordinary with Java or anything else.
Whatever it is, I hope it gets resolved and purged from the internet very soon!
Comment
-
It seems that Java 7 has the security flaws - I had Java 6 because I never got round to updating it. Even so, I've uninstalled it and disabled it as a Chrome plugin.
Still can't find anything about the hosting site being hacked.
@ Dray - when will your friend have further information and/or useful links? At the moment there's no way of knowing if it's safe to go back.sigpic
Comment
-
Originally posted by ciannwn View PostIt seems that Java 7 has the security flaws - I had Java 6 because I never got round to updating it. Even so, I've uninstalled it and disabled it as a Chrome plugin.
Still can't find anything about the hosting site being hacked.
@ Dray - when will your friend have further information and/or useful links? At the moment there's no way of knowing if it's safe to go back.If found, is probably lost on the way to Azaroth or the Pegasus Galaxy
sigpic
Comment
Comment