33 replies to this topic

[Albert]

For a brief time earlier this evening, you may have seen the following message when visiting the AtariAge Forums:

Quote

Due to the recent large volume of traffic we've been recieving, we have re-built our site to use a new framework which will speed things up significantly. This new system requires that you download a plugin in order to be able to access our site. Don't worry, this plugin won't harm your computer in any way, it will only enable your browser to communicate with our server more efficiently. You cannot view our site until you've installed this plugin.  

Make sure you chose 'run' when asked what you want to do with this file.  

Click here to install (147 KB)

If you saw this message and downloaded the associated file, do not install it!  A redirect was inserted into the header of the forum, sending you to another site where the message was displayed.  You may see this message on other phpBB boards as well and the same warning applies.  

The file it attempts to install is Worm/VB.CT, a trojan downloader.  I have fixed our forum to remove the redirect and patched the exploit (the patch was only announced yesterday).  Needless to say, exploits like this will light a fire under our ass to get away from this forum software.

..Al

[godsey1]

Digital Press is also going through this also. I just tried to look at the forms, and was redirected to the other site.

[Thomas Jentzsch]

At least we now know which forum has the better admins.

[Jasoco]

LOL. Yeah. I hope Joe wakes up (If he's asleep) soon. Glad to know it's not just one forum.

[Jasoco]

By the way, how exactly is this virus put in the site in the first place? I guess I better keep an eye on my own forum...

[YOK-dfa]

Jasoco said:

By the way, how exactly is this virus put in the site in the first place? I guess I better keep an eye on my own forum...

Read all the other topics about this if you want more info...

[Jasoco]

What other topics?

[YOK-dfa]

This one for example:

http://www.atariage....pic.php?t=65556

[Phosphor Dot Fossils]

Thomas Jentzsch said:

At least we now know which forum has the better admins.

Let's not even go there - it's a matter of which forum happened to have awake admins at the time.  I appreciate the info you guys had available over here.

[Thomas Jentzsch]

Phosphor Dot Fossils said:

Thomas Jentzsch said:

At least we now know which forum has the better admins.

Let's not even go there - it's a matter of which forum happened to have awake admins at the time.

Right, and because Al never sleeps, AA is better.

Anyway, I had also informed DP when it happened.

[Albert]

Thomas Jentzsch said:

Phosphor Dot Fossils said:

Thomas Jentzsch said:

At least we now know which forum has the better admins.

Let's not even go there - it's a matter of which forum happened to have awake admins at the time.

Right, and because Al never sleeps, AA is better.

Anyway, I had also informed DP when it happened.

Fortunately in this case I am usually up quite late, so I was able to respond quickly when the attack occurred.  I was close to going to sleep, though, so our forums could have been down for several hours as well the attacker(s) had waited just a bit longer.  If you're going to try and take out a bunch of forums, taking them down at 2:00am is a good time to do so.

..Al

[Thomas Jentzsch]

Albert said:

If you're going to try and take out a bunch of forums, taking them down at 2:00am is a good time to do so.

Do you know when it started? I suppose I wasn't the first to contact you.

[Albert]

Thomas Jentzsch said:

Albert said:

If you're going to try and take out a bunch of forums, taking them down at 2:00am is a good time to do so.

Do you know when it started? I suppose I wasn't the first to contact you.

It was a bit after 1:00am CST, but I can get the exact time from the server logs.  Fortunately I was web surfing at the time, so I noticed it within a few minutes of it happening, before I started receiving emails about it.  I was already hammering away at it by that point..  

..Al

[ApolloBoy]

Phosphor Dot Fossils said:

Thomas Jentzsch said:

At least we now know which forum has the better admins.

Let's not even go there - it's a matter of which forum happened to have awake admins at the time.  I appreciate the info you guys had available over here.

Yeah, let's not start another damn AA vs. DP war...  

Anyway, I never caught the message on either forum, since I was asleep at the time...

[NE146]

I saw both as they happened

[MattG/Snyper2099]

I saw both an thought it was spyware on my own system.  Glad the problem was resolved quickly.  Thanks!

[deathtrappomegranate]

The number of phpBB/php vulnerabilities is worrying.

Anyone tried Googling "NeverEverNoSanity" recently?

Zoiks!

[vb_master]

Strike 2 for phpBB.

[KaineMaxwell]

Least it got solved on both ends and that's what counts.

[Thomas Jentzsch]

KaineMaxwell said:

Least it got solved on both ends and that's what counts.

Yup.

[legeek]

Thomas Jentzsch said:

Phosphor Dot Fossils said:

Thomas Jentzsch said:

At least we now know which forum has the better admins.

Let's not even go there - it's a matter of which forum happened to have awake admins at the time.

Right, and because Al never sleeps, AA is better.

Anyway, I had also informed DP when it happened.

Two comments are a little in bad taste Thomas, joking or no...

Ben

[Thomas Jentzsch]

legeek said:

Two comments are a little in bad taste Thomas, joking or no...

Only if you take them seriously.

Why does it seem impossible to make a joke, without people starting to inteprete them to be meant as a real attack?

Something is really wrong.

[shep]

How could you possibly take those as harsh remarks...seriously people.

[KaineMaxwell]

Don't get Thomas started...  

[legeek]

I dunno chalk it up to language barriers, typing vs. speaking, etc.  Also, the fact that some people got hit pretty bad with the virus on the DP board and it was mostly luck and the time difference between New Jersey and Texas, that AA wasn't as badly hit.

Then Add in the unfortunate "bad blood" between AA and DP.  As someone who enjoys both communities, I wish both could get along better.  Add all this up and it looks like kind of a bad joke to me.

That being said Thomas, I enjoy your homebrews and hacks quite a bit, and I enjoy reading your posts 99.9% of the time...

Cheers,
Ben