Emails from the "forum"

by Xenthos

Back to Common Grounds.

Xenthos2006-05-08 20:30:27
There's apparently a series of emails being sent out touting a "new forum product," with a .exe attached, ostensibly from the Lusternia forum. *DO NOT OPEN IT*. It's not going to make your life any easier. wink.gif

Edit: And yes, I realize this is the wrong forum for this... but it's not very likely to be seen in the Real World section by a number of the people receiving this email, and it is somewhat important.
Daganev2006-05-08 20:41:20
Oi... thats not good.

Estarra? Whats going on?
Tzara2006-05-08 20:44:40
The file that was mentioned in the email that I heard about was loadadv711.exe... a trojan horse/backdoor program. Let me emphasize not to open it if you receive a weird message like that.

Information upon the virus- http://research.sunbelt-software.com/threa...&threatid=43801
Estarra2006-05-08 20:58:11
Ack! Sorry about that, folks! It looks like the forums were hacked. If it wasn't for the nimble fingers of Lisaera, more damage would have been done.

Believe me, if I catch the censor.gif censor.gif who did this, he would be: roast.gif
Athana2006-05-08 21:02:53
Ahh, so that's why the school's antivirus program is going crazy...bad bad bad..
Hazar2006-05-08 21:20:04
Three cheers for Lisaera!

cheer.gif cheer.gif cheer.gif
Unknown2006-05-08 21:39:21
Huh, I don't even remember being pat of these forums, but surely gotten that. Glad I checked before I opened it. Thanks for the quick response, just recently gotten.
Acrune2006-05-08 21:51:22
Thought something seemed fishy about that. Came here first before I clicked. happy.gif

Edit: Well, more specifically I came here before I deleted, who knows, it may have been legit tongue.gif
Unknown2006-05-08 22:34:59
Hm. This explains what was happening to me.

I came onto the forums, and java was going nuts, trying to open something that I didn't have the plugins for and locking up FireFox.

I noticed this weird tiny little box at the top of the forum, and I checked the source for it and:

CODE


is what came up.

I'm guessing you might want to get rid of that bit of code that was added in by whoever hacked the forum. I had to disable j a v a s c r i p t and Java just to be able to view the forums without my computer spazzing.
Richter2006-05-08 22:48:07
Yeah, I got it too. Might have actually clicked it too, but I guess we'll never know...
Shamarah2006-05-08 23:13:44
QUOTE(Fallen @ May 8 2006, 06:34 PM) 286336

Hm. This explains what was happening to me.

I came onto the forums, and java was going nuts, trying to open something that I didn't have the plugins for and locking up FireFox.

I noticed this weird tiny little box at the top of the forum, and I checked the source for it and:

CODE


is what came up.

I'm guessing you might want to get rid of that bit of code that was added in by whoever hacked the forum. I had to disable j a v a s c r i p t and Java just to be able to view the forums without my computer spazzing.


Ah, so it wasn't just me. Yeah, Norton was going berserk on me. Annoying.

BTW, it seems to open on its own. I don't think it matters if you click it.
Unknown2006-05-08 23:20:34
<3 Avast. laugh.gif
Razenth2006-05-08 23:21:07
Bloody froze IE. Should set Security and Privacy levels to max.
Daganev2006-05-08 23:21:10
yes a php script runs when its opened, clicked on or not.
Morik2006-05-08 23:34:33
QUOTE(daganev @ May 9 2006, 07:21 AM) 286354

yes a php script runs when its opened, clicked on or not.


nothing wrong with php scripts that run; its what HTML script can trick your web browser into running. wink.gif
Acrune2006-05-08 23:35:16
I've had no trouble so far. Did you people click the email thing, or what? Maybe firefox is protecting from it or something...
Daganev2006-05-08 23:39:34
Lisarea fixed the problem before most people could encounter it.

The email was just another side affect of the hack.
Shamarah2006-05-08 23:44:13
The script is still there.
Acrune2006-05-08 23:45:44
Gotcha