Just Adventure News : Press Release: stillalive studios detail how the final build of Son Of Nor will play out in brand new video Press Release: Skyward Collapse Now Available For PC/Mac Press Release: Divines of the East Class Spotlight: Eidolon Press Release: The Mighty Quest For Epic Loot Brings Out The Archer Addon: Legacy of Romulus Expansion to Star Trek Online Launches Game: Warner Bros. Interactive Entertainment wishes gamers Good Night, Good Luck in Dying Light Beta: Second Phase of Eldevin Closed Beta Begins News: Video Games: The Movie Press Release: Indie Narrative / Strategy Game 7 Grand Steps Will Release June 7 for PC and Mac Gold: The Incredible Adventures of Van Helsing
Home - Forum Home
Welcome Guest, please Login or Register!
If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register or login before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Topic: Malware on JA?

    Page 2 of 3 : « »

All Forums : [General] : JA+ Forum News > Malware on JA?
13 FEB 2009 at 10:34pm
Deleted UserI have Trend Micro on all my PC's and up to now haven't seen any anomalies at all.  I noticed that Traveler is right about the PM’s in my savebox. They’re either gone or have been corrupted.



13 FEB 2009 at 11:47pm
Deleted UserHEY !!!
I hadn't looked till now since I hardly ever send or receive PMS.
But they all seem to be blocked --- both incoming & outgoing.

So the "anomaly" that I have seen (and posted) up to now is more malignent than I saw (& reported) and IS caussing troubles --- I have a feeling that it's rendering PMs impossible to use for many members.
This hardly worries me personally, but may upset others --- and possibly seriously.

Thanks Traveler for mentioning it or I wouldn't have known since as I said above, I hardly ever access !!

14 FEB 2009 at 12:03am

Agent Brea

Private Detective
Private Detective



Posts : 705
Joined: 17 OCT 2006
Location: 0

Status : Online
The problem with the PMs is not related to the other problem. So don't worry about it. It should be fixed soon.
Your last waking moments are marked by wretched pain as you provide dinner for a group of ill-mannered dinner guests that just wouldn't leave.

Profile Search
14 FEB 2009 at 12:17am
Deleted UserThanks !!!!

14 FEB 2009 at 12:26am

Agent Brea

Private Detective
Private Detective



Posts : 705
Joined: 17 OCT 2006
Location: 0

Status : Online
All posts regarding this issue have been moved from the different forum areas they were posted and merged into one topic
Your last waking moments are marked by wretched pain as you provide dinner for a group of ill-mannered dinner guests that just wouldn't leave.

Profile Search
14 FEB 2009 at 4:21pm

colpet

Schattenjger
Schattenjger



Posts : 1630
Joined: 12 APR 2003

Status : Offline
I have been infected, and both my computers had to be reformatted. I got the virus at work on Fri. Feb 6 and not realising it was my forums, got my home computer infected that same night. It was so frustrating,, because I'm very careful about what I download, and I mainly use the internet for keeping up with my forums. I had AVG, but it was useless.
I just got them back yesterday.

Occasionally visiting  Uru Live (KI 0063722

.&&


Profile Search
15 FEB 2009 at 10:19am

Aya

Grand Inquisitor
Grand Inquisitor



Posts : 7277
Joined: 16 OCT 2002

Status : Offline
I have not had an infection on my laptop, even though I visit the forum and the site. I had a small infection on my PC, but I did visit a "shady site" during that time, so I can't know where it came from. Regardless, you don't have to format when your PC gets infected. Always (infected or not) use SuperAntispyware and Malware Bytes Antimalware. Both have free versions which do not offer live protection, but do offer complete scanning and cleaning and are 2 of the most efficient anti-spy/malware progs around - make sure you always update the definitions. Also, when the going gets tough, bring on the big guns, ie HijackThis. This does some serious low lever cleaning, but it doesn't do it automatically and can also be dangerous if you don't know what you're doing. But there are forums that offer support where you can post results and be told if there's smth malicious there.

You have gotten the attention of the mysterious lady. She turns to face you. Her face is devoid of any flesh. You are frozen with horror as she begins ripping your body into a bloody mess.


Profile Search
15 FEB 2009 at 1:47pm

colpet

Schattenjger
Schattenjger



Posts : 1630
Joined: 12 APR 2003

Status : Offline
Originally Posted By Aya_Brea (15 FEB 2009 10:18am)
I have not had an infection on my laptop, even though I visit the forum and the site. I had a small infection on my PC, but I did visit a "shady site" during that time, so I can't know where it came from. Regardless, you don't have to format when your PC gets infected. Always (infected or not) use SuperAntispyware and Malware Bytes Antimalware. Both have free versions which do not offer live protection, but do offer complete scanning and cleaning and are 2 of the most efficient anti-spy/malware progs around - make sure you always update the definitions. Also, when the going gets tough, bring on the big guns, ie HijackThis. This does some serious low lever cleaning, but it doesn't do it automatically and can also be dangerous if you don't know what you're doing. But there are forums that offer support where you can post results and be told if there's smth malicious there.

Believe me, I tried.
The problem with the malware I got was that it redirected my search engines, so I was unable to get to any antiviral site. Jenny 100 E-mailed me a malware antivirus program, and the virus would't let it install. I had no choice but to get professional help, and reformatting was all they could do.

Occasionally visiting  Uru Live (KI 0063722

.&&


Profile Search
15 FEB 2009 at 5:49pm

Shany

Guild Master
Guild Master



Posts : 3313
Joined: 19 JUN 2003

Status : Online
The forums seem malware free now. Thanks!

Profile Search
15 FEB 2009 at 6:28pm

SirDave

Guild Master
Guild Master



Posts : 4941
Joined: 17 OCT 2002
Location: US

Status : Offline
I've mentioned this many times in the past, but will again: The most efficient and effective way to protect your computer is by periodically backing up your C-Drive to an image file using a program such as Acronis True Image (now at version 11). I can't understand why people put themselves through this sort of agony that occurs when their computers get 'infected'.

Once the program is installed (which takes, oh, about 3 minutes), all you have to do is periodically do a full backup which takes about 10-15 minutes. I'm not suggesting that you do this instead of using your antivirus programs (although that's what I do), but if the latter fail, you will be back up & running in about 15 minutes after restoring from the C-drive image and you will have saved yourself an awful lot of time that is spent trying to fix everything and reload programs that were lost by having to do things like reformat. It's really as simple as that.

BTW Aya- when will the PMs be working again??

The future ain't what it used to be!


Profile Search
15 FEB 2009 at 9:04pm
Deleted UserOh, well, I am still getting that blocking message that Len described in his original post; at every single thread I access.


This one:
Network shield: Blocked access to malicious site ---  **www**.tuovideo.it/flvideo/  .g/index.php




15 FEB 2009 at 9:45pm

Aya

Grand Inquisitor
Grand Inquisitor



Posts : 7277
Joined: 16 OCT 2002

Status : Offline
Originally Posted By colpet (15 FEB 2009 1:47pm)
Believe me, I tried.
The problem with the malware I got was that it redirected my search engines, so I was unable to get to any antiviral site. Jenny 100 E-mailed me a malware antivirus program, and the virus would't let it install. I had no choice but to get professional help, and reformatting was all they could do.

Ah, I believe I came across that one, or one very similar, about a year ago. It was called Vundo and it was a b**ch to remove. What did the trick was HijackThis, then safe mode booting and SuperAntispyware.

What SirDave said is also essential, not just for malware, but for anything that may happen to your c: drive. Acronis is sublime, and backing up regularly (always keep a couple of backups too) can save you from a lot of trouble.

About the PMs, the PM problem occured during a server update and the server ppl have been notified and said they're working on it. It is actually not a prob related to the forum. The PMs are just stumbling upon it, so to speak.

You have gotten the attention of the mysterious lady. She turns to face you. Her face is devoid of any flesh. You are frozen with horror as she begins ripping your body into a bloody mess.


Profile Search
16 FEB 2009 at 2:52pm

Aya

Grand Inquisitor
Grand Inquisitor



Posts : 7277
Joined: 16 OCT 2002

Status : Offline
The malware problem has now been resolved, both here and the main site. I suggest to everyone, to be on the safe side, to run scans using Nod32, Avast or Kaspersky for viruses and SuperAntispyware and Malware Bytes for spyware.

You have gotten the attention of the mysterious lady. She turns to face you. Her face is devoid of any flesh. You are frozen with horror as she begins ripping your body into a bloody mess.


Profile Search
17 FEB 2009 at 5:43am

TC

Private Detective
Private Detective



Posts : 688
Joined: 14 NOV 2005

Status : Online
Is Dr.Web a fitting alternative to those programmes, Aya?

Profile Search
17 FEB 2009 at 12:35pm

justsoyouknow

Intergalactic Janitor
Intergalactic Janitor



Posts : 1
Joined: 17 FEB 2009

Status : Online
Hello,

I just wanted to give you a bit of information on this. My site was hacked by these guys.

They're going through permissions set somewhere on your site (something that is PHP based and you've CHMOD the permissions). They will continually come back until your permissions have been changed to where the file can't be written on again.  They're using iframes.

I hope you got the problem fixed.

We really need to find out who these guys are.

Profile Search
9 DEC 2009 at 1:11pm

Spiritogre

Intergalactic Janitor
Intergalactic Janitor



Posts : 81
Joined: 30 SEP 2008
Location: DE

Status : Offline
Is it possible that the main page or an ad there is infected again? When I started up the main page Microsoft Security Essentials popped up with an exploit Win32/Pdfjsc.BI warning.

Also another question. Why do I need to log in to the forum each time?

Profile Search
9 DEC 2009 at 4:39pm

LadyLinda

Intergalactic Janitor
Intergalactic Janitor



Posts : 91
Joined: 10 OCT 2002

Status : Offline
I'm getting a "trojan" alert when accessing the JA+ web site!!!!!

[smiley=wave.gif]
LadyLinda

Profile Search
9 DEC 2009 at 5:27pm
Deleted UserA little more detail would be very helpful.  If anyone runs across the same message, please note any file names or URLs reported so that we can track down a probable cause.  

9 DEC 2009 at 6:08pm

LadyLinda

Intergalactic Janitor
Intergalactic Janitor



Posts : 91
Joined: 10 OCT 2002

Status : Offline
Will do.   [smiley=thumbsup.gif]

It's not happening now.   [smiley=umbrella_grin.gif]
LadyLinda

Profile Search
9 DEC 2009 at 11:06pm

colpet

Schattenjger
Schattenjger



Posts : 1630
Joined: 12 APR 2003

Status : Offline
Happened to me too when I accesses a game review window. The regular forum was ok. Thankfully my AVG caught it (high risk trojan).

Occasionally visiting  Uru Live (KI 0063722

.&&


Profile Search
10 DEC 2009 at 1:13am

Ivinia

Guild Master
Guild Master



Posts : 4459
Joined: 7 JUN 2003
Location: US

Status : Offline
Don - It's one of the rotating ads. Go through your list.

It may also be one of the rotating ads on the site that the popup takes you to when you hit the home page.


Profile Search


10 DEC 2009 at 1:50am
Deleted User
Originally Posted By Spiritogre (9 DEC 2009 1:11pm)
Also another question. Why do I need to log in to the forum each time?


When you log in make sure it's Logged in for: Keeps

[img]http://i208.photobucket.com/albums/bb35/Camaroboy1968/JA04.jpg?t=1260409598[/img]


10 DEC 2009 at 3:59am

karla

Administrator
Administrator



Posts : 2592
Joined: 27 JUL 2003
Location: US, Close to the Edge

Status : Online
Colpet, did you get a Win32/Pdfjsc.BI warning or something else? Can you provide any other details?

See my portfolio of original artwork at http://home1.gte.net/res0b8zk/portfolio/resources/portfolio.htm

I put my heart and soul into my work, and have lost my mind in the process. - Vincent van Gogh


Profile Search
10 DEC 2009 at 4:49am

Andromus

Guild Master
Guild Master



Posts : 5538
Joined: 6 NOV 2002

Status : Offline
I got a warning from my antivirus program when I visited this page earlier:

http://www.justadventure.com/reviews/JumpStartAdvIsland/EscapeAdvIsland.shtm

And the following message in my log file:

12/9/2009 6:15:11 PM      HTTP filter      archive      http://videohat.masrawy.com/chimg/.s/pdf.php      PDF/Exploit.Pidief.OJS.Gen trojan      connection terminated      Andrew-PC\Andrew      Threat was detected upon access to web by the application: C:\Program Files\Mozilla Firefox\firefox.exe.


 


Profile Search
10 DEC 2009 at 9:12am

karla

Administrator
Administrator



Posts : 2592
Joined: 27 JUL 2003
Location: US, Close to the Edge

Status : Online
Thanks for providing so much info, Andromus. We're still trying to track things down.

See my portfolio of original artwork at http://home1.gte.net/res0b8zk/portfolio/resources/portfolio.htm

I put my heart and soul into my work, and have lost my mind in the process. - Vincent van Gogh


Profile Search
All Forums : [General] : JA+ Forum News > Malware on JA?

    Page 2 of 3 : « »

Jump to:
0 Members Subscribed To This Topic