![]() |
| ||||||||
| Forum Suggestions, Feedback, and Bug Reports Please use this forum to post feedback and suggestions related to the Forums. Find a bug? Post it here. |
![]() |
| | LinkBack | Thread Tools | Display Modes |
![]() | ![]() |
| | Level: 20 | HP: 39 / 482 |
| EXP: 31% |
| ![]() | #1 | ||||||||
| Homicidal Psycho Jungle Cat Join Date: Sep 2006 Location: NC, soon to be Alabama. Someone rescue me? xD
|
Apparently a number of other TFF'ers are having issues accessing the site. Avast comes up as saying that there is a virus here and it automatically aborts the connection. I'm using a beta version of kaspersky, so nothing's come up for me, but that might just be that my AV is failz. Anyword on whether there's a certified problem or not? Additional Information from Sheena Apparently it picked up a "gzip" file at hXXp://www.thefinalfantasy.com/\gzip (T's are replaced with x's for safety reasons), and the script name is HTML: Script-inf So...yeah, any info would be much appreciated!
__________________ ![]() ![]() “I don't want harmony. From love for humanity I don't want it. I would rather be left with the unavenged suffering. I would rather remain with my unavenged suffering and unsatisfied indignation, even if I were wrong. Besides, too high a price is asked for harmony; it's beyond our means to pay so much to enter on it” - Dostoevsky (TFF Family): | ||||||||||||||
| | | ||||||||||||||
![]() | ![]() |
![]() | ![]() |
| | Level: 36 | HP: 458 / 878 |
| EXP: 14% |
| ![]() | #2 | ||||||
| 2 sons, AWESOME! Join Date: Nov 2007 Location: Broken Arrow, OK
|
__________________ Above Sig pic credits go out to Andro SPOILER!!: Stuffing kitties in boxes since 2007 | ||||||||||||
| | | ||||||||||||
![]() | ![]() |
![]() | ![]() |
| | Level: 14 | HP: 112 / 334 |
| EXP: 36% |
| ![]() | #3 | ||
| ~♥Life is but a passing dream..♥~ | This may be too late to say anything,but.Everytime I log on my computer blocks a virus.Lucky I have a virus blocker,has anyone else experienced this?
__________________ Code: [/-------My Super Gamer Family-------- My "Awesome Older Sister"-------->*Yesha* My "Wise & InspirationaL Brother"-------> Benjisan My "Anime Crazed Sistah"-------------> Athna LoveiL My "Psycho RPG Obsessed Hobbit Sister"----> Lunasa My "AwesomeLy Cute Cousin"------------------->Ven My "Schizophrenic Brother"------------->Ruin-TumuLt My "Crazy FF fan brother"------------->Outdoor2497 My "Adventurous gamer brother" -------->BLackberry Jam My "Lovable and fun-Loving game addict sister"---->Ekimeninna My "Random Funny slightly retarded wierd oLder sister"--->Midnight My "Nerd Otaku Neice"-------------->Dagachan My "Crazy Gamer UncLe"------------>bobbo087 My "Adventourous and destructive older brother"---->NeXtadi | ||||||||
| | | ||||||||
![]() | ![]() |
![]() | ![]() |
| | Level: 62 | HP: 1007 / 1531 |
| EXP: 24% |
| ![]() | #4 | ||||||
| Succubus Queen Join Date: Aug 2002 Location: My Throne of Lust
| Meier, this is a completely different thing. So no it has not been solved. This isn't a trojan. This is a virus/worm.
__________________ ![]() Gemma the Unknown Entity is my love. Every fiber of her being makes me tingle with happiness and lust. I love you, darling. ♥♥ SPOILER!!: | ||||||||||||
| | | ||||||||||||
![]() | ![]() |
![]() | ![]() |
| | Level: 14 | HP: 121 / 343 |
| EXP: 72% |
| ![]() | #5 | ||||||
| more pwez? Gone at school Join Date: Jul 2009 Location: On the PS2 with a red controller in my hand, playing legend of dragoon while posting on TFF.com, also talking to Ryu, and also sending Vm's to unknown just because she's awsome...
| I havent gotten this but, i have been getting dogpile, and trojan's. ood thing i have Norton 360 ^^
__________________ AWSOME BANNER MADE BY: Andromeda ^^ "You havent been through hell, intell you've had to fight off a horde of flesh eatting zombies" Favorite Taylor Swift song =D: You belong with me My twitter: TaylorSfollower =) | ||||||||||||
| | | ||||||||||||
![]() | ![]() |
![]() | ![]() |
| | Level: 31 | HP: 314 / 762 |
| EXP: 51% |
| ![]() | #6 | ||||||
| I'm not for sale. Join Date: Feb 2008 Location: Depends on what my mood is today!
| I have Norton 360 too, and I'm not getting any problems. So... I'm sure thats not the issue. =S
__________________ ![]() Filling my heart with a burning desire, making my insides explode with happiness... I love you, my Mistress Sheena. Click Me: | ||||||||||||
| | | ||||||||||||
![]() | ![]() |
![]() | ![]() |
| | Level: 36 | HP: 458 / 878 |
| EXP: 14% |
| ![]() | #7 | ||||||
| 2 sons, AWESOME! Join Date: Nov 2007 Location: Broken Arrow, OK
| Bloodhound.Exploit.156 | Symantec This is what both of my anti-virus programs are picking up on. It is not limited to the main forum anymore, I have managed to pick up virus alerts all over the forum. I am using McAfee Premium and also have Norton Corporate edition at work. Both have picked this up multiple times. I think as long as your software is up to date you will be fine. It is easily contained and elminated but it is getting annoying having to see the damn pop ups all of the time.
__________________ Above Sig pic credits go out to Andro SPOILER!!: Stuffing kitties in boxes since 2007 | ||||||||||||
| | | ||||||||||||
![]() | ![]() |
![]() | ![]() |
| | Level: 62 | HP: 1007 / 1531 |
| EXP: 24% |
| ![]() | #8 | ||||||
| Succubus Queen Join Date: Aug 2002 Location: My Throne of Lust
| I don't get anything, and I use Avira Security Suite. I also use FireFox with adblock. So I guess for those who get it, uh.. start using Firefox with adblock? Because Fuzz just went through everything and he got nothing.
__________________ ![]() Gemma the Unknown Entity is my love. Every fiber of her being makes me tingle with happiness and lust. I love you, darling. ♥♥ SPOILER!!: | ||||||||||||
| | | ||||||||||||
![]() | ![]() |
![]() | ![]() |
| | Level: 14 | HP: 121 / 343 |
| EXP: 72% |
| ![]() | #9 | ||||||
| more pwez? Gone at school Join Date: Jul 2009 Location: On the PS2 with a red controller in my hand, playing legend of dragoon while posting on TFF.com, also talking to Ryu, and also sending Vm's to unknown just because she's awsome...
| Ok, ty Meier and Sheena ^^ and Unknown ^^ P.S. Unknown your awsome ^^
__________________ AWSOME BANNER MADE BY: Andromeda ^^ "You havent been through hell, intell you've had to fight off a horde of flesh eatting zombies" Favorite Taylor Swift song =D: You belong with me My twitter: TaylorSfollower =) | ||||||||||||
| | | ||||||||||||
![]() | ![]() |
![]() | ![]() |
| | Level: 33 | HP: 65 / 819 |
| EXP: 76% |
| ![]() | #10 | ||
| | Sorry to hear that some people are still getting this ghost virus. I'm not entirely sure what the deal is - as there are no infections on the server. As I mentioned earlier, I am migrating to another new machine within the next couple of days... I will take that opportunity to do a deep clense of the site. The new server has more updated software, scripts, and kernel on it, so we'll be moving into a fortress. In the interm, I'll keep you posted if I hear or find anything about this virus. Otherwise, this will for sure be resolved after the move. Thanks UPDATE: Ok, now that we're on the new box and my DNS has propogated, I am getting down and dirty on this bastard... along side doing some hardcore cleaning. UPDATE: I FOUND THE ****ER! ![]() UPDATE: It was a SQL injection in the 'forum' table... bah. Well, good news is that is from the old server and just came along with the DB backup I made. Now that we have all the latest PHP/MySQL versions, we shouldn't have any more of those. Thanks to all who helped report this. I hate malware! | ||||||||
| | | ||||||||
![]() | ![]() |
![]() | ![]() |
| | Level: 36 | HP: 458 / 878 |
| EXP: 14% |
| ![]() | #11 | ||||||
| 2 sons, AWESOME! Join Date: Nov 2007 Location: Broken Arrow, OK
| Live update as of now. I have scrolled through the forums multiple times and have yet to see notifications of a virus on either of my comps. I would have to say the issue has resolved it's self (if that is what we really want to call it). Fuzz (if you are reading this) I am curious, did you find something during the move? Or was it probably the security of the new server that rendered this exploit useless and dead?
__________________ Above Sig pic credits go out to Andro SPOILER!!: Stuffing kitties in boxes since 2007 | ||||||||||||
| | | ||||||||||||
![]() | ![]() |
![]() | ![]() |
| | Level: 33 | HP: 65 / 819 |
| EXP: 76% |
| ![]() | #12 | ||
| | Yeah, well, I guess what happened is the exploit was actually transferred over to the new server since it was in the database backup. However, after the DNS synced in and I visited the forums for the first time with the domain pointing to the new IP address; NOD32 barked at me with a few malicious warnings. Have the error actually in front of me helped me get the appropriate info to do a fulltext search on it in the database. I guess my AV only warns you once and then tucks the warning away? Oh well, doesn't make much since, but none-the-less it is fixed ![]() Apparently many other FF and WoW related sites have the exact same exploit... makes me wonder if it is the content relevant ads that injected the code. Well at least we all updated PHP, mySQL, and vBulletin packages now, so we are definitely back up to speed. thanks again for your help! | ||||||||
| | | ||||||||
![]() | ![]() |
![]() |
| Bookmarks |
| Currently Active Users Viewing This Thread: 1 (0 members and 1 guests) | |
| Thread Tools | |
| Display Modes | |
| |