Jump to content

Photo

Warning: Plugin Message


33 replies to this topic

#1 Albert OFFLINE  

Albert

    Greetings, Avatar!

  • 30,336 posts
  • Location:Sosaria

Posted Tue Mar 1, 2005 5:00 AM

For a brief time earlier this evening, you may have seen the following message when visiting the AtariAge Forums:

Due to the recent large volume of traffic we've been recieving, we have re-built our site to use a new framework which will speed things up significantly. This new system requires that you download a plugin in order to be able to access our site. Don't worry, this plugin won't harm your computer in any way, it will only enable your browser to communicate with our server more efficiently. You cannot view our site until you've installed this plugin.  

Make sure you chose 'run' when asked what you want to do with this file.  

Click here to install (147 KB)


If you saw this message and downloaded the associated file, do not install it! A redirect was inserted into the header of the forum, sending you to another site where the message was displayed. You may see this message on other phpBB boards as well and the same warning applies.

The file it attempts to install is Worm/VB.CT, a trojan downloader. I have fixed our forum to remove the redirect and patched the exploit (the patch was only announced yesterday). Needless to say, exploits like this will light a fire under our ass to get away from this forum software.

..Al

#2 godsey1 OFFLINE  

godsey1

    Dragonstomper

  • 653 posts
  • Location:TENNESSEE

Posted Tue Mar 1, 2005 7:02 AM

Digital Press is also going through this also. I just tried to look at the forms, and was redirected to the other site. :x

#3 Thomas Jentzsch OFFLINE  

Thomas Jentzsch

    Thrust, Jammed, SWOOPS!, Boulder Dash

  • 18,911 posts
  • Always left from right here!
  • Location:Düsseldorf, Germany

Posted Tue Mar 1, 2005 7:16 AM

At least we now know which forum has the better admins. ;)

#4 Jasoco OFFLINE  

Jasoco

    River Patroller

  • 4,779 posts
  • Dragon Warrior
  • Location:Doylestown, PA

Posted Tue Mar 1, 2005 7:18 AM

LOL. Yeah. I hope Joe wakes up (If he's asleep) soon. Glad to know it's not just one forum.

#5 Jasoco OFFLINE  

Jasoco

    River Patroller

  • 4,779 posts
  • Dragon Warrior
  • Location:Doylestown, PA

Posted Tue Mar 1, 2005 7:21 AM

By the way, how exactly is this virus put in the site in the first place? I guess I better keep an eye on my own forum...

#6 YOK-dfa OFFLINE  

YOK-dfa

    Stargunner

  • 1,449 posts
  • level 5 Kancho Assassin
  • Location:Below sea level

Posted Tue Mar 1, 2005 7:27 AM

By the way, how exactly is this virus put in the site in the first place? I guess I better keep an eye on my own forum...


Read all the other topics about this if you want more info...

#7 Jasoco OFFLINE  

Jasoco

    River Patroller

  • 4,779 posts
  • Dragon Warrior
  • Location:Doylestown, PA

Posted Tue Mar 1, 2005 7:34 AM

What other topics? :?

#8 YOK-dfa OFFLINE  

YOK-dfa

    Stargunner

  • 1,449 posts
  • level 5 Kancho Assassin
  • Location:Below sea level

Posted Tue Mar 1, 2005 7:37 AM

This one for example:

http://www.atariage....pic.php?t=65556

#9 Phosphor Dot Fossils OFFLINE  

Phosphor Dot Fossils

    Stargunner

  • 1,249 posts
  • in your base, producing your documentary DVDs
  • Location:Arkansas

Posted Tue Mar 1, 2005 10:59 AM

At least we now know which forum has the better admins. ;)

Let's not even go there - it's a matter of which forum happened to have awake admins at the time. I appreciate the info you guys had available over here.

#10 Thomas Jentzsch OFFLINE  

Thomas Jentzsch

    Thrust, Jammed, SWOOPS!, Boulder Dash

  • 18,911 posts
  • Always left from right here!
  • Location:Düsseldorf, Germany

Posted Tue Mar 1, 2005 11:14 AM

At least we now know which forum has the better admins. ;)

Let's not even go there - it's a matter of which forum happened to have awake admins at the time.

Right, and because Al never sleeps, AA is better. ;)

Anyway, I had also informed DP when it happened.

#11 Albert OFFLINE  

Albert

    Greetings, Avatar!

  • Topic Starter
  • 30,336 posts
  • Location:Sosaria

Posted Tue Mar 1, 2005 11:29 AM

At least we now know which forum has the better admins. ;)

Let's not even go there - it's a matter of which forum happened to have awake admins at the time.

Right, and because Al never sleeps, AA is better. ;)

Anyway, I had also informed DP when it happened.


Fortunately in this case I am usually up quite late, so I was able to respond quickly when the attack occurred. I was close to going to sleep, though, so our forums could have been down for several hours as well the attacker(s) had waited just a bit longer. If you're going to try and take out a bunch of forums, taking them down at 2:00am is a good time to do so.

..Al

#12 Thomas Jentzsch OFFLINE  

Thomas Jentzsch

    Thrust, Jammed, SWOOPS!, Boulder Dash

  • 18,911 posts
  • Always left from right here!
  • Location:Düsseldorf, Germany

Posted Tue Mar 1, 2005 11:38 AM

If you're going to try and take out a bunch of forums, taking them down at 2:00am is a good time to do so.

Do you know when it started? I suppose I wasn't the first to contact you.

#13 Albert OFFLINE  

Albert

    Greetings, Avatar!

  • Topic Starter
  • 30,336 posts
  • Location:Sosaria

Posted Tue Mar 1, 2005 11:44 AM

If you're going to try and take out a bunch of forums, taking them down at 2:00am is a good time to do so.

Do you know when it started? I suppose I wasn't the first to contact you.


It was a bit after 1:00am CST, but I can get the exact time from the server logs. Fortunately I was web surfing at the time, so I noticed it within a few minutes of it happening, before I started receiving emails about it. I was already hammering away at it by that point.. :)

..Al

#14 ApolloBoy OFFLINE  

ApolloBoy

    Quadrunner

  • 5,338 posts
  • Location:San Jose, CA

Posted Wed Mar 2, 2005 3:31 PM

At least we now know which forum has the better admins. ;)

Let's not even go there - it's a matter of which forum happened to have awake admins at the time. I appreciate the info you guys had available over here.


Yeah, let's not start another damn AA vs. DP war...

Anyway, I never caught the message on either forum, since I was asleep at the time...

#15 NE146 OFFLINE  

NE146

    Dumbass Atari Fan

  • 13,408 posts
  • Location:Seattle, WA

Posted Wed Mar 2, 2005 3:33 PM

I saw both as they happened :D

#16 MattG/Snyper2099 OFFLINE  

MattG/Snyper2099

    Stargunner

  • 1,472 posts
  • Location:Ohio

Posted Wed Mar 2, 2005 4:16 PM

I saw both an thought it was spyware on my own system. Glad the problem was resolved quickly. Thanks!

#17 deathtrappomegranate OFFLINE  

deathtrappomegranate

    River Patroller

  • 4,389 posts
  • Lipstick on my cigarette

Posted Wed Mar 2, 2005 9:12 PM

The number of phpBB/php vulnerabilities is worrying.

Anyone tried Googling "NeverEverNoSanity" recently?

Zoiks!

#18 vb_master OFFLINE  

vb_master

    Stargunner

  • 1,770 posts
  • Location:At my computer, where else?

Posted Wed Mar 2, 2005 10:24 PM

Strike 2 for phpBB.

#19 KaineMaxwell OFFLINE  

KaineMaxwell

    Dragonstomper

  • 889 posts
  • Location:NJ, USA

Posted Fri Mar 4, 2005 12:43 PM

Least it got solved on both ends and that's what counts.

#20 Thomas Jentzsch OFFLINE  

Thomas Jentzsch

    Thrust, Jammed, SWOOPS!, Boulder Dash

  • 18,911 posts
  • Always left from right here!
  • Location:Düsseldorf, Germany

Posted Fri Mar 4, 2005 1:59 PM

Least it got solved on both ends and that's what counts.

Yup.

#21 legeek OFFLINE  

legeek

    Stargunner

  • 1,031 posts
  • Rampart!
  • Location:Atlanta, GA

Posted Fri Mar 4, 2005 2:16 PM

At least we now know which forum has the better admins. ;)

Let's not even go there - it's a matter of which forum happened to have awake admins at the time.

Right, and because Al never sleeps, AA is better. ;)

Anyway, I had also informed DP when it happened.


Two comments are a little in bad taste Thomas, joking or no...

Ben

#22 Thomas Jentzsch OFFLINE  

Thomas Jentzsch

    Thrust, Jammed, SWOOPS!, Boulder Dash

  • 18,911 posts
  • Always left from right here!
  • Location:Düsseldorf, Germany

Posted Fri Mar 4, 2005 2:24 PM

Two comments are a little in bad taste Thomas, joking or no...

Only if you take them seriously.

Why does it seem impossible to make a joke, without people starting to inteprete them to be meant as a real attack?

Something is really wrong.

#23 shep OFFLINE  

shep

    Taters

  • 6,573 posts
  • Location:Illinois

Posted Fri Mar 4, 2005 3:40 PM

How could you possibly take those as harsh remarks...seriously people. :roll:

#24 KaineMaxwell OFFLINE  

KaineMaxwell

    Dragonstomper

  • 889 posts
  • Location:NJ, USA

Posted Fri Mar 4, 2005 3:46 PM

Don't get Thomas started... :roll:

#25 legeek OFFLINE  

legeek

    Stargunner

  • 1,031 posts
  • Rampart!
  • Location:Atlanta, GA

Posted Fri Mar 4, 2005 3:53 PM

I dunno chalk it up to language barriers, typing vs. speaking, etc. Also, the fact that some people got hit pretty bad with the virus on the DP board and it was mostly luck and the time difference between New Jersey and Texas, that AA wasn't as badly hit.

Then Add in the unfortunate "bad blood" between AA and DP. As someone who enjoys both communities, I wish both could get along better. Add all this up and it looks like kind of a bad joke to me.

That being said Thomas, I enjoy your homebrews and hacks quite a bit, and I enjoy reading your posts 99.9% of the time...

Cheers,
Ben




0 user(s) are browsing this forum

0 members, 0 guests, 0 anonymous users