|
|
Nebdar
Promising
Supreme Hero
Generation N
|
posted October 20, 2008 04:22 PM |
|
Edited by Nebdar at 16:24, 20 Oct 2008.
|
Quote:
Most hacking attacks start with something small like this redirection.
ModdersWorkshop => The Modding Wiki the link doesn't work
Message:
Parse error: syntax error, unexpected '<' in /home/aoheroes/public_html/heroes5/modding_wiki/inc/html.php on line 1246
everybody that have had this problem scan your computer
____________
|
|
TheDeath
Responsible
Undefeatable Hero
with serious business
|
|
posted October 20, 2008 04:28 PM |
|
|
ModdersWorkshop => The Modding Wiki the link doesn't work
Quote:
Message:
Parse error: syntax error, unexpected '<' in /home/aoheroes/public_html/heroes5/modding_wiki/inc/html.php on line 1246
OMG no really that's a very bad sign. If it says "syntax error" it means if you figure out and guess the code, you can modify it easily. If not it has been ALREADY modified 
It's an open hole for crackers 
|
|
Keksimaton
Promising
Supreme Hero
Talk to the hand
|
|
posted October 20, 2008 04:33 PM |
|
|
Something made "Adobe Reader" open up and say that: "The file is not PDF" or something  . Then my firewall gives me a message that something was blocked from invading/tresspassing (what ever it is in english).
Nasty.
____________
Noone shall pass, but no one besides him shall pass.
|
|
OmegaDestroyer
Hero of Order
Fox or Chicken?
|
|
posted October 20, 2008 04:35 PM |
|
|
I'm getting the same thing on internet explorer.
____________
The giant has awakened
You drink my blood and drown
Wrath and raving I will not stop
You'll never take me down
|
|
mvassilev
Responsible
Undefeatable Hero
|
|
posted October 20, 2008 04:41 PM |
|
|
Happened to me as well. Opens Acrobat Reader. Did anyone get a virus from this? I hope I didn't. Should Norton Firewall block it? It blocked a cookie from Prevedvsem earlier.
And I installed NoScript and it doesn't open Acrobat Reader any more, so should I be all right?
____________
Eccentric Opinion
|
|
TheDeath
Responsible
Undefeatable Hero
with serious business
|
|
posted October 20, 2008 04:42 PM |
|
|
Quote:
And I installed NoScript and it doesn't open Acrobat Reader any more, so should I be all right?
Not really, if it opened once and it wasn't blocked it means your system is infected already...
|
|
radar
Responsible
Legendary Hero
Castle/Haven player
|
|
posted October 20, 2008 04:45 PM |
|
Edited by radar at 16:48, 20 Oct 2008.
|
For me Windows Defender had asked for a restart and that's it. The full scan haven't found anything dangerous anymore, neither did antivirus.
NoScript protects you from infecting again after you have removed the threat already.
____________
|
|
OmegaDestroyer
Hero of Order
Fox or Chicken?
|
|
posted October 20, 2008 04:46 PM |
|
|
I'm running McAfee and so far everything is normal. I have gotten something to ask me to fill out a review but I'm not sure if it's related.
____________
The giant has awakened
You drink my blood and drown
Wrath and raving I will not stop
You'll never take me down
|
|
mvassilev
Responsible
Undefeatable Hero
|
|
posted October 20, 2008 04:47 PM |
|
|
But I had Norton Firewall activated. And it blocked a cookie. Does that still mean that I'm infected? 
____________
Eccentric Opinion
|
|
Darkshadow
Legendary Hero
Cerise Princess
|
|
posted October 20, 2008 04:47 PM |
|
|
Bah, ill risk it and see what the hell is this document
____________
|
|
Asheera
Honorable
Undefeatable Hero
Elite Assassin
|
|
posted October 20, 2008 04:48 PM |
|
|
I didn't get any Acrobat Reader opened. I think NoScript blocks this thing - you all should install it ASAP
____________
|
|
mvassilev
Responsible
Undefeatable Hero
|
|
posted October 20, 2008 04:50 PM |
|
|
If I'm infected, it hasn't done anything yet. But I'm running Kaspersky just in case.
____________
Eccentric Opinion
|
|
radar
Responsible
Legendary Hero
Castle/Haven player
|
|
posted October 20, 2008 04:54 PM |
|
|
I know from personal experience, running two antivirus programs at the same time isn't the best choice.
____________
|
|
mvassilev
Responsible
Undefeatable Hero
|
|
posted October 20, 2008 04:56 PM |
|
|
I'm not running two anti-virus programs. Just Kaspersky. I'm running Norton Firewall, not Norton Anti-Virus.
____________
Eccentric Opinion
|
|
emilsn
Legendary Hero
|
|
posted October 20, 2008 04:58 PM |
|
|
Same problem - What's the solution
____________
Don't walk behind me; I may not
lead. Don't walk in front of me;
I may not follow. Just walk
beside me and be my friend.
|
|
radar
Responsible
Legendary Hero
Castle/Haven player
|
|
posted October 20, 2008 05:06 PM |
|
Edited by radar at 17:09, 20 Oct 2008.
|
1. Install NoScript
2. block heroescommunity.com (and eventually heroesofmightandmagic.com)
3. Scan your comp for viruses
edit:
aww, I wish I had had standard firefox, not beta. The beta doesn't support the extension which would have normally asked me if I want to open or save the pdf.
____________
|
|
TheDeath
Responsible
Undefeatable Hero
with serious business
|
|
posted October 20, 2008 05:07 PM |
|
|
Quote:
Bah, ill risk it and see what the hell is this document
If you are serious with this then I'll have to tell you you're a fool for that. This document probably isn't even meaningful, it will display as a "invalid file format" because it isn't supposed to be a document, it's supposed to exploit some flaws in the format or Acrobat Reader flaws. This is most likely of course I could be wrong and a kiddo cracker be there and making a stupid document with "HAAAA U R PWNED!!!" but I somehow doubt that.
Quote:
Same problem - What's the solution
Block scripts (JavaScript), I use NoScript as well in Firefox.
|
|
Doomforge
Admirable
Undefeatable Hero
Retired Hero
|
|
posted October 20, 2008 05:10 PM |
|
|
noscript fortunately owns all such stupid things although I noticed that page too.. weird..
____________
We reached to the stars and everything is now ours
|
|
radar
Responsible
Legendary Hero
Castle/Haven player
|
|
posted October 20, 2008 05:20 PM |
|
Edited by radar at 17:22, 20 Oct 2008.
|
Guys, it is "Win32 Haxdoor"
I have turned on UAC so I'm immune to backdoors now, I guess...
____________
|
|
Shadowcaster
Honorable
Supreme Hero
Shaded Scribe
|
|
posted October 20, 2008 06:48 PM |
|
|
For those running anti-spyware programs, go to their site and make sure they search for something called rootkits. Apparently, this virus embeds drivers in your system that will reset registry values and restore the files that might be deleted by security programs if they are not removed. Of course, there's nothing to worry about if you didn't open the document, but this thing sure is a nasty little booger.
____________
>_>
|
|
|
|
This thread is pages long: 
