Author Topic: So What Is This? (Read 73452 times)

Higgs · « **Reply #50 on:** Oct 01, 2012, 06:29 »

All good here!

Thanks!

Justin

Marlin · « **Reply #51 on:** Oct 01, 2012, 06:37 »

No more problems here.

HydroDave63 · « **Reply #52 on:** Oct 01, 2012, 08:23 »

Looks like lots of member photo galleries were nuked! But at least the bug is gone

I tried to upload, but got a no permission error

OldHP · « **Reply #53 on:** Oct 01, 2012, 08:28 »

The only thing I can see is whatever changes were made also changed the server clock. It is ~ 2030 EDT and the site is showing that it is 10/02/12!

Rennhack · « **Reply #54 on:** Oct 01, 2012, 08:53 »

Quote from: OldHP on Oct 01, 2012, 08:28

The only thing I can see is whatever changes were made also changed the server clock. It is ~ 2030 EDT and the site is showing that it is 10/02/12!

The server time hasen't changed.

Check your profile's time offset:

http://www.nukeworker.com/forum/index.php?action=profile;sa=theme

OldHP · « **Reply #55 on:** Oct 01, 2012, 09:20 »

It is showing correct at local time. Your post shows up as (today - 10-02-12, 0053)

Rennhack · « **Reply #56 on:** Oct 02, 2012, 12:32 »

Weird.

HydroDave63 · « **Reply #57 on:** Nov 06, 2012, 08:40 »

Iframer alert tonight. Looks like allfashion and his bot buddies are back

Rennhack · « **Reply #58 on:** Nov 07, 2012, 05:32 »

Marlin alerted me to this yesterday as well. I'm out of town workign an outage for the next three weeks. I don't have any of my tools with me. I may not be able to fix this untill I get back home.

Rennhack · « **Reply #59 on:** Nov 11, 2012, 08:30 »

I got a day off. I downloaded an ftp program. (free, and its better than the one I have at home that I paid big bucks -- I have a new preferred ftp program! Filezilla)

I think I found and fixed some issues. So let me know if its resolved.

HydroDave63 · « **Reply #60 on:** Nov 11, 2012, 09:47 »

Quote from: Rennhack on Nov 11, 2012, 08:30

I think I found and fixed some issues. So let me know if its resolved.

Big K still gives me the Red warning and blocks me from the front page.

Rennhack · « **Reply #61 on:** Nov 11, 2012, 10:56 »

Quote from: HydroDave63 on Nov 11, 2012, 09:47

Big K still gives me the Red warning and blocks me from the front page.

Thanks for the feedback.

Higgs · « **Reply #62 on:** Nov 11, 2012, 10:59 »

On my main machine, my Avast is blocking the site again.

On my laptop, Microsoft security essentials gives no warning of anything.

Justin

Marlin · « **Reply #63 on:** Nov 11, 2012, 01:40 »

I have access again. Thanx.

Rennhack · « **Reply #64 on:** Nov 11, 2012, 02:09 »

I made one more change. Hopefully that fixes it.

Rennhack · « **Reply #65 on:** Nov 14, 2012, 09:41 »

Did that last change fix it?

Marlin · « **Reply #66 on:** Nov 14, 2012, 10:44 »

No problems here.

HydroDave63 · « **Reply #67 on:** Nov 14, 2012, 08:53 »

Quote from: Rennhack on Nov 14, 2012, 09:41

Did that last change fix it?

Kaspersky + Firefox = Red threat window

Kaspersky + Chrome = Just fine

This tells me that the threat is aimed at Firefox and IE code, since Kaspersky is the common input but differing results. But IMHO, the Iframer problem is still resident.

My "fix" was to renew my Gold for another year and download Chrome

Rennhack · « **Reply #68 on:** Nov 14, 2012, 09:40 »

Quote from: HydroDave63 on Nov 14, 2012, 08:53

Kaspersky + Firefox = Red threat window

Kaspersky + Chrome = Just fine

This tells me that the threat is aimed at Firefox and IE code, since Kaspersky is the common input but differing results. But IMHO, the Iframer problem is still resident.

My "fix" was to renew my Gold for another year and download Chrome

Thanks for the update. I'll look into it again Sunday (my day off).

Higgs · « **Reply #69 on:** Nov 14, 2012, 11:09 »

Blocked by avast + firefox.

Blocked at work.

OK with firefox + microsoft security essentials.

Fermi2 · « **Reply #70 on:** Nov 15, 2012, 11:23 »

Just started getting blocked at home with avasts and firefox

Higgs · « **Reply #71 on:** Nov 15, 2012, 05:21 »

Quote from: Higgs on Nov 14, 2012, 11:09

Blocked by avast + firefox.

Blocked at work.

OK with firefox + microsoft security essentials.

Update from work...,

It's blocked by my work's firewall when using firefox,

but when I use IE, it isn't blocked and works just fine.

I agree with HD..., something is targeting FF. Here is what my work's firewall says;

Request Blocked by Proactive Scanning
Your request to URL "http://www.nukeworker.com/forum//" has been Blocked by McAfee Web Gateway Proactive Scanning. The program could potentially perform operations, which is not allowed by your administrator at this time.

Malware Name:    McAfeeGW: Heuristic.BehavesLike.JS.Infe cted.A
URL:    http://www.nukeworker.com/forum/
File:    http://www.nukeworker.com/forum//
File Type:    -
Reputation Level:    Neutral

Hope it helps.

Justin

Rennhack · « **Reply #72 on:** Nov 15, 2012, 07:41 »

The files I 'fixed' have been reinfected.... This one is gonna suck. My outage ends on the 24th. Until then, I'll try to keep up with it. Fixing the files each night they are infecting.

They have some of the forum files, and now some of the adserver files laced with crap.

Rennhack · « **Reply #73 on:** Nov 15, 2012, 07:58 »

So... I replaced the adserver files and the forum files (that were altered), and I locked the forum files. I hope this helps.

Keeps the updates coming in.

Rennhack · « **Reply #74 on:** Nov 15, 2012, 08:01 »

Quote from: Rennhack on Nov 11, 2012, 08:30

I downloaded an ftp program. (free, and its better than the one I have at home that I paid big bucks for -- I have a new preferred ftp program! Filezilla)

http://filezilla-project.org/

That file zilla is a great tool in our fight against these people.

Author Topic: So What Is This? (Read 73452 times)

Fermi2