Still having problems--pt3

Any news on this yet Red? Why would this be in someone's sig file to make a
new user added to their pc with a new password and all. I am very concerned about this and I am very worried as to why I was being told(countless of times) that it was all MY system's fault, and not the fault of this site.

kooky


I made a new thread since ANON put the offending code in the last thread.

kooky

I dont know the story completly, but it is your fault and not the sites fault. I have no virus protection on my computer of any sort, and this website has never given me any trouble.

im not sure if this is relivent to this problem but i was reading that there is a security issue with htlm code in signatures. found on another forum http://www.civgaming.net/forums/archive/index.php/t-1670.html

At thefranchise:

I dont know the story completly, but it is your fault and not the sites fault

Click to expand...

Saying this is like saying "it's your fault you died, you shouldve been wearing a bulletproof vest when that maniac unexpectedly shot you" - sili.

There is no reason for this type of code to be on the site. None at all. The reason you've never had any problems may well be that you don't have an AV - so you don't know if you've been attacked or not. If you have all the latest patches, and don't use IE then you're probably safe, but just because you don't know about it, doesn't mean it hasn't happened.

At belowav:

It's kind of relevant, but not quite. HTML (more specifically JavaScript within that HTML) allows for all sorts of attacks to take place, including copying cookies of other users. If authentication credentials are stored in these cookies (I'm pretty sure vBulletin's aren't), then identities can be taken over.

In this case, commands are being run on victim PCs. These commands can range from harmless ("hello world" appearing on your screen) to extremely harmful (wiping the contents of your "C:\" drive). Either way, as I said before, there is NO reason for this sort of code to be here.

My advice would be for DLD to update his AV...

Thefranchise--
"I dont know the story completly, but it is your fault and not the sites fault. I have no virus protection on my computer of any sort, and this website has never given me any trouble."

Maybe you SHOULD know the whole story completely before you chime in and start placing fault with people. But since you seem to be so convinced, please explain to me HOW it is my fault and what I may do to correct it.

Kooky

PLEASE LISTEN Now that Red knows whats going on and has a handle on the problem he will get it fixed so just relax ,let it rest awhile, shut down show sigs and wait it out like Red asked. He will let everyone know what's going on like he said he would. Besides I dont think there is anything to be worried about. I shut down all protection on my computer, went to MOS and have found no sign of any additional users or anything relating to the script with a search on my computer
I truly don't think DLD even knew or had any malicious intent with this script.

thefranchise said:

I dont know the story completly, but it is your fault and not the sites fault. I have no virus protection on my computer of any sort, and this website has never given me any trouble.

Click to expand...

1:If you did know the story you would not have made such a irresponsible comment.

2:If you have no virus protection like you say how would you know if you got a virus???

3:The script is not a virus anyway it is a intrusion attempt you would need some kind of internet security protection to see it. It will not show up in antivirus at least not in my Norton AV.

say nothing and be thought a fool or speak out and prove it.

Thanks Wreck.

I had only started this new thread because I could no longer access the other since the code is in that one as well. I am sure the problem will be worked out in it's own due time and everyone will be well-informed to what is going on.

kooky

Hi koooky,just to say ive been having the same problems as you,started a few thread myself about it but couldn't read the replys,PM one of the other members a couple of days ago who let me no what was happening.

ahem tell me something I dont already know guys.
I have been talking about this for a few days now in the mod section, and yes their is code in DLDs sig that is bad, here is a COPY PASTE of my ORIGINAL thread form the mod room...read.

----

Okay after looking into the reports from members on the issues they keep getting in here I have now FOUND the issue which keeps fucking up their systems.
It lies indeed in DLDs signiture, but I also think it could be in other signitures around these forums.
Its script that attacks Windows machines which aint patched against it.
What it does is create a User I on the victim's machine with admin privileges.
It is a local system exploit which can be tweaked to exploit systems remotely....pretty dangerous.
The hacker can upload this script to any free Webserver and then can trick it's victim to visit this link.
Once the victim visits this malicious link, an user named "SYS_ADMIN" with password "pwd007" will be created on the victim's system...the hackers identity on the victims computer.
The cracker/hacker can than gain access into the machine from his.
Here is the code from DLDs signiture......

click here for over 200 penis enlargement videos

The password and username code are in bold.
This isnt new, the code has been around for donkeys and is a exploit of windows machines....hence why not all of us have been affected by it, we must be patched and upto date.
Nortons firewall/AV is very jumpy anyway and with it being on a system without the patch to this exploit it only made it worse and thats why the members computers froze.
I think that this code has gotten into DLDs signiture by something he himself might have clicked on say for example in the ���� section.
Its than targetted his signiture and changed it.
It can easily be resolved, just EDIT the signiture and put back whatever was their before...simple.
And all the guys whom were moaning well, get UPDATED ASAP because your open for more things.
I will when I get time search the entire DB here for other members with this code, I think their will be others because IMHO it has found its way from a bad link from somewhere like the ���� paradise section.
I will keep this in here for now, but when your ready I will post it into the main public forums....better to discuss it here first.
regards.

Click to expand...

Also you can SEE the code in this attachment link, its in a text file and wont harm your pc because it isnt in a link format, just simple text so LOOK at whats been fucking you. http://www.mattersofsize.com/forum/attachment.php?attachmentid=9576

Now the solution, DLD get his sig ERASED and sorted out, I will also check EVERYSINGLE sig of every member here now for this code, I reckon their is more infected with this code because its the type I've seen before from infected ���� site hackers whom lure people in to see ���� and than the link which they click has this code which places it anywhere the hacker wants it.
Also I will be wanting tighter security on code in this forum from now on, just wait and see what happens.
For now dont panic, just always keep updated with your systems its always best and dont EVER download or click anything you dont know about.

Now Kooky to answer your questions as to WHY you have been told that your browsers and Norton were complete shit and causing the issues and not the actual signiture, which I exposed DAYS AGO in the mod section but no one has took a grain of notice so I thought sod it and posted it into here, looks like Anon figured it out also albeit via a site.
Anyhow, the answers are that we didnt know....I have never spoke to the 'tech-guy' nor do I know him.
I WORK very hard so I dont get much time in here, I aint paid to sort out computer problems although I do have expertise in that area...hence I knew the problem once I looked into the sig.
Now the reasons I said your browser was that 9/10 times these days its that which is causing fault, no BS you look into the main security sites and you'll find vulnerabilities for IE popping up all the time, also Mozilla firefox has a few.
Usually such errors can be pinned to the browser having problems.
Than you mention Norton going ape, the ONLY people whom had issues were NORTON people, so yeah that came into the scope...Norton doesnt have a great rep anyways and has very sensitive software which can be disabled anyways by some good hacks about, I could even link you one if you want? PM for details.
With me being busiy at work I aint been onto this like I would have.
If I was here more than this would have been sorted and dusted ages ago, PROMISE but I aint been here.
When you said that once you stopped the signitures and it was fine than I was WELL THAN it must be, and yeah it was.
I have also explained how that code can get into such places, it isnt anything to worry about and have a panic attack about.
No one has been hiding info from you and no one has planted that code to make accounts on members systems.
How many times have I said in the ���� section about infected links!!!
Read the sticky for reminders sake in the ���� section 'warning....' its titled and I warn about such links, well looks like someone has been took to sea on this > DLD and whoever else I can find.
May it be a lesson not to go clicking around on alkinds of shit....it can lead to such confusion and frustration.

Hope this clears things up

Thanks Red....

Look man. I wasn't trying to be a dick or accusing you or DLD or anyone on this site as trying to hack someone's system. It just got really frustrating to me that all the things you told me to do to correct it..diffrent browser etc...didn't work AND I had stated early on that I thought it was something in DLD's sig or avatar. It was frustrating because I don't use IE or Firefox. And It was frustrating because all my system files are currently up to date but yet, I was still being told it was my fault and was even told that by another user in this thread.

As far as Norton's being shit, I am sure you and a lot of other people have the expertise to be critical of Norton's all you like, but in the end it was Norton's that alerted me and the other people to begin with that there was a problem in DLD sig file.

I don't know about you or anyone else being the tech guy for this site. I don't know if you or any MOD here gets paid for the work they do for this site. And, I don't really care nor is it any of my business. ANd. believe me I understand about people being very busy at work. I am about to be the b usiest I have ever been so I can understand that. It was/is just very frustrating to be constantly told, "It your fault", "your computer is shit", "you need to get a spyware rmover" etc... when I had pointed out almost from the beginning that I thought it was DLD's sig or avatar that was the culprit to begin with. I don't believe it was ever your intention to try and make me feel like an idiot or to try and make me look foolish to others, but as you can imagine, that is how I started to feel after a while after constantly being told those things.

But in the end, as long as you or anyone else is able to get this cleaned up to protect our users here, all is good.

kooky

Well as I stated, I aint the tech guy here nor do I get a single penny from being a mod or anything else here.
In the computer world you must go through a process of elimination before you find the culprit, its alright saying you think it was the avater or sig but like I said the ones with Norton had the issues, and one mod has mentioned today in the mod room that he hasnt received any issues from Norton while browsing this site, including DLDs sig.
The problem is now found, DLD will have to fix it in his sig when he can.

Note: Moved this along with the others into this 'Deep Thoughts' section.
Please keep things in the correct sections please, it isnt a penis related topic so it belongs in the deep thoughts as its Computer related bugs.
I understand why it was posted in the main section, to get more views but please keep to the policy of posting on correct sections where appropiate.
I mention this now because I've noticed the place getting scruffy again, with threads in sections that dont belong and threads also getting hijacked by topics which have nothing to do with it.

RED,
Koooky isnt the only one who this has been happening to, ever since a couple months ago,(havent really posted since then), Every thread I entered that had a post by you Red, made my computer fuck right up and I couldnt get back to MOS, and then about a month ago, every post that had DLDs posts in it did the same thing,

Which is why I never responded to any of these "Virus Problem" threads, because when i entered them IE would get right fucked up....

YES, I am using Nortons, but nowhere else on the internet I go (and I root in some greasy places :D) does Norton catch any viruses.....

It seems, that whatever was going on with you, Red, has been fixed cuz I am responding right now, but any Thread with DLD in it still fucks me up.....

I know you guys arent trying to hack us, and I dont know the backstory to the Problem thread Trilogy, but DLD is still sending me viruses....

ADIOS

PM him, I cant do anything else.
The problem has been found, just when DLD finds the time to edit his sig it'll get sorted.
My sig awhile back had some trojan hijacker link in it, which I traced back to the ���� section, hence I belive it has spread that code to DLD.