PromoTheRobot Posted May 13, 2006 Report Share Posted May 13, 2006 Somebody must have hacked The Stadium Wall ad put a nasty virus in a pop-up attatched to the site. I'm sure Scott is on the case, but stay away for now. PTR *fixed* - SDS Link to comment Share on other sites More sharing options...
Chilly Posted May 13, 2006 Report Share Posted May 13, 2006 Seems like someone registered today at 11:28AM on StadiumWall as the name "admin" and was placed into the group "Administrators". I'm assuming the board had an exploit that this user took advantage of. Shortly afterwards, TSW kept contacting outside domain names anytime you went there, and then it was trying to use a common exploit to install a trojan on your computer with a file called xpl.wmf If it also happens on this board, DON'T OPEN OR DOWNLOAD THAT FILE! Suggestion to everyone using AdBlock Plus with Firefox, block the following domain names to stop the crap on your own browser: traffdollars.biz traff5all.biz artolib.com picsjournal.com 1-extreme.biz After I blocked all of these domain names in AdBlock Plus, it stopped trying to get me to open the file on my pc. Link to comment Share on other sites More sharing options...
Chilly Posted May 13, 2006 Report Share Posted May 13, 2006 Somebody must have hacked The Stadium Wall ad put a nasty virus in a pop-up attatched to the site. I'm sure Scott is on the case, but stay away for now. PTR *grin* we posted almost at the same time. Link to comment Share on other sites More sharing options...
inkman Posted May 13, 2006 Report Share Posted May 13, 2006 Seems like someone registered today at 11:28AM on StadiumWall as the name "admin" and was placed into the group "Administrators". I'm assuming the board had an exploit that this user took advantage of. Shortly afterwards, TSW kept contacting outside domain names anytime you went there, and then it was trying to use a common exploit to install a trojan on your computer with a file called xpl.wmf If it also happens on this board, DON'T OPEN OR DOWNLOAD THAT FILE! Suggestion to everyone using AdBlock Plus with Firefox, block the following domain names to stop the crap on your own browser: traffdollars.biz traff5all.biz artolib.com picsjournal.com 1-extreme.biz After I blocked all of these domain names in AdBlock Plus, it stopped trying to get me to open the file on my pc. Thanks. I ran into that a little while ago at TBD but luckily I've got the wits not to open or download #%^$#! I don't know. Thanks for the info. :) Link to comment Share on other sites More sharing options...
RayFinkle Posted May 13, 2006 Report Share Posted May 13, 2006 Luckly my anti virus caught it but I had to reboot. I thought it nuked by PC there for a minute. Link to comment Share on other sites More sharing options...
SDS Posted May 13, 2006 Report Share Posted May 13, 2006 I think it is fixed... Link to comment Share on other sites More sharing options...
inkman Posted May 13, 2006 Report Share Posted May 13, 2006 I think it is fixed. Are you fixed? Because you look kinda broken... :unsure: Link to comment Share on other sites More sharing options...
All Along The Watchtower Posted May 13, 2006 Report Share Posted May 13, 2006 OK, I'm not so handy here...went to TBD...how can tell if I got the virus? Link to comment Share on other sites More sharing options...
inkman Posted May 13, 2006 Report Share Posted May 13, 2006 OK, I'm not so handy here...went to TBD...how can tell if I got the virus? Itchy eyes, runny nose? Link to comment Share on other sites More sharing options...
SDS Posted May 13, 2006 Report Share Posted May 13, 2006 OK, I'm not so handy here...went to TBD...how can tell if I got the virus? Does it burn when you pee? ;) we are working on what exactly it was. Unfortunately, I just deleted the lines of code without noting what they were. Link to comment Share on other sites More sharing options...
Chilly Posted May 13, 2006 Report Share Posted May 13, 2006 OK, I'm not so handy here...went to TBD...how can tell if I got the virus? It was an exploit in WMF files. If you opened the WMF file that it tried to download, then you got it. Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.