›

Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Sign In Register

Quick Links

MMORPG contains Troj/Animoo-L on mainpage

runedragonrunedragon Member UncommonPosts: 57
in The Pub at MMORPG.COM

Well, never thought i would see the day when I accessed my favourite site and got a warning from Sophos that you got a virus,

 

Its Troj/Animoo-L ........ sort it our please guys n gals....

Comments

  • csthaocsthao Member UncommonPosts: 1,122

    ya got the same virus...its supposedly a jpg file...i copied the file and did a search for it and deleted it...but couldnt delete it until i closed windows explorer...

    the file was...

    7517p[1].jpg

  • Teran1987Teran1987 Member UncommonPosts: 202
    pff all i got was a keystroke trojan :'(

    "Life is not judged by the breaths we take, but by the moments that take our breath away."

  • runedragonrunedragon Member UncommonPosts: 57

    If your the curios type you might wanna check out http://www.sophos.com/virusinfo/analyses/trojanimool.html for ore info

  • Teran1987Teran1987 Member UncommonPosts: 202
    nah, to lazy, but it was funny, was just like, la la la la, BOOm suddenly all me web page windows are gone and my anti virus is yellin, OMFG you just got a virus congrats, thank god im here for your sorry ass otherwise you'd be dead homeboy!

    "Life is not judged by the breaths we take, but by the moments that take our breath away."

  • GarrikGarrik Member UncommonPosts: 965

    Originally posted by Teran1987
    nah, to lazy, but it was funny, was just like, la la la la, BOOm suddenly all me web page windows are gone and my anti virus is yellin, OMFG you just got a virus congrats, thank god im here for your sorry ass otherwise you'd be dead homeboy!

    lol.

    ________________________________

    "once upon a midnight dreary, while i porn surfed, weak and weary, over many a strange and spurious site of 'hot xxx galore'. While i clicked my fav'rite bookmark, suddenly there came a warning, and my heart was filled with mourning, mourning for my dear amour, " 'Tis not possible!", i muttered, "give me back my free hardcore!"..... quoth the server, 404."

  • theraxtherax Member Posts: 29

    Also got Notified:

    7517p[1].jpg



    Threat: Bloodhound.Exploit.131

     

  • DrenethDreneth Member Posts: 697

    Ahhhh... the wonderful world of dynamic advertising.  Should have just stuck with a graphic and a link... but nooooo... let's have DYNAMIC ads so we can track people better.  Will hackers, crackers, and phishers exploit it?  Of course... but we'll make more money.

    - - - -
    Support Independent Game Developers

  • EggFteggEggFtegg Member Posts: 1,141
    Yep, I picked that up too. I thought it must have come from this site.

  • MX13MX13 Member Posts: 2,489

    HEY MMORPG!!!!

    THIS IS STILL HAPPENING!!!!

    1) REMOVE IT

    2) SAY SOMETHING

    I'll start my own SWG... with Black Jack... and Hookers!!!

    In fact, forget the SWG!!!!

    image
    image
    image

  • JelloB2000JelloB2000 Member CommonPosts: 1,848

    For what pages & ads have the exploit report in this thread:
    http://www.mmorpg.com/discussion2.cfm/thread/123437

  • AdminAdmin Administrator RarePosts: 5,623

    Hello,

    We are very sorry about this.  We are doing everything we can to keep this at bay but we are waiting on a patch from Microsoft that will plug a hole in the web server OS that is being used to alter the HTML of our pages to place this trojan loader.

    This has been happening since yesterday as you can see here: http://www.mmorpg.com/discussion2.cfm/thread/123437

    We fix it and a 5-30 mins later it is back.  Scanning for the trojan/worm server side shows nothing.

    Microsoft claims an update will be released today and we are hoping this is true.

    Just to be clear this has NOTHING to do with the ads, this exploit is acutually allowing them to alter the HTML files on our server.  They have attacked us at varioius points, but mostly they seem to be adding their script to a specific home page module, but yesterday they also got some .js files and other "globally" loaded files on our site.

    This is an ActiveX trojan, so running Firefox is a temporary workaround as well.

     

    - MMORPG.COM Staff -

    The dead know only one thing: it is better to be alive.

  • GruntyGrunty Member EpicPosts: 8,657
    Originally posted by Admin


    Hello,
    We are very sorry about this.  We are doing everything we can to keep this at bay but we are waiting on a patch from Microsoft that will plug a hole in the web server OS that is being used to alter the HTML of our pages to place this trojan loader.
    This has been happening since yesterday as you can see here: http://www.mmorpg.com/discussion2.cfm/thread/123437
    We fix it and a 5-30 mins later it is back.  Scanning for the trojan/worm server side shows nothing.
    Microsoft claims an update will be released today and we are hoping this is true.
    Just to be clear this has NOTHING to do with the ads, this exploit is acutually allowing them to alter the HTML files on our server.  They have attacked us at varioius points, but mostly they seem to be adding their script to a specific home page module, but yesterday they also got some .js files and other "globally" loaded files on our site.
    This is an ActiveX trojan, so running Firefox is a temporary workaround as well.
     

    This is an ActiveX trojan, so running Firefox is a temporary workaround as well.
     
    "I used to think the worst thing in life was to be all alone.  It's not.  The worst thing in life is to end up with people who make you feel all alone."  Robin Williams
  • Jade6Jade6 Member Posts: 429
    Dude, right now the main concern for many of us is what exactly this thing does, since it's already in our system (or was, in the case of the slightly more fortunate few). Does it steal Windows login passwords? Does it allow remote access into our computers? Does it get any other info except Lineage 2 passwords? Can it  do any of this stuff between the short moment it was triggered on website and when antivirus detected the file that was installed and removed it? Can it do any harm when you re-start computer, as antivirus doesn't detect it until it starts running. These are the questions people's jobs are depending on right now, so I would like to be damn certain.
  • GreatnessGreatness Member UncommonPosts: 2,188
    Originally posted by Jade6

    Dude, right now the main concern for many of us is what exactly this thing does, since it's already in our system (or was, in the case of the slightly more fortunate few). Does it steal Windows login passwords? Does it allow remote access into our computers? Does it get any other info except Lineage 2 passwords? Can it  do any of this stuff between the short moment it was triggered on website and when antivirus detected the file that was installed and removed it? Can it do any harm when you re-start computer, as antivirus doesn't detect it until it starts running. These are the questions people's jobs are depending on right now, so I would like to be damn certain.
    Ya definitely because my antivirus did not detect anything either and plus usually since this is an ActiveX thing, firefox would bring up a notice saying it is ActiveX but it did not.

    ~Greatness~

    Currently Playing:
    Nothing

  • DrenethDreneth Member Posts: 697

    Maybe we should start posting warnings on other forums for people not to come here until the virus threat has been dealt with?  I know that I wouldn't have popped on the forums here had I known my WORK computer could be infected.

    I browsed this site from work due to a belief it was a safe place to visit.  If there is something more sinister to this whole virus issue, I could lose my friggin job.

    - - - -
    Support Independent Game Developers

  • TheodorykTheodoryk Member Posts: 1,453
    "This is an ActiveX trojan, so running Firefox is a temporary workaround as well."



    LOL I WIN

    "Speaking haygywaygy or some other gibberish with your mum doesn't make you foreign."
    -baff

  • DrenethDreneth Member Posts: 697

    Some of us work in a locked down environment, and cannot install software.  I have Firefox on my PC at home.  Here at work, guess what, we use IE.

    - - - -
    Support Independent Game Developers

  • RazperilRazperil Member Posts: 289
    I use IE and I have not had any issues regarding this virus/trojan. And for those of you that think you won't get a virus because you use firfox, you better guess again. I highly doubt the people that make firefox would ever claim that you are protected from viruses.  Firefox is virus accessable as much as IE is.
  • JowenJowen Member Posts: 326
    Originally posted by Razperil

    I use IE and I have not had any issues regarding this virus/trojan. And for those of you that think you won't get a virus because you use firfox, you better guess again. I highly doubt the people that make firefox would ever claim that you are protected from viruses.  Firefox is virus accessable as much as IE is.
    Except that the people who makes the vira targets IE primarely and not FireFox.
  • XzenXzen Member UncommonPosts: 2,607
    Just switched to Firefox from IE permanent like.

    My theme song.

    image
  • JoriJori Member Posts: 130
    I may not be safe from viruses by using Firefox (that's what my anti-virus software is for) but I believe I'm safe from the ActiveX trojan because of it.
Sign In or Register to comment.