Suspicious activity stopped, code Yellow/Blackwatch Plaid

Lucretius · Post by **Lucretius** » Fri Aug 26, 2005 4:56 pm

Unstickied as that everything appears nominal.

*o* · Post by ***o*** » Fri Aug 26, 2005 4:58 pm

yay! no stickies left!

Post by **bicostp** » Fri Aug 26, 2005 5:04 pm

So all the suspicious code has been eradicated?

Post by **SpongeBuell** » Fri Aug 26, 2005 5:45 pm

it seems like it, I've not heard a virus alert in weeks.

G-force · Post by **G-force** » Fri Aug 26, 2005 8:38 pm

This is probably unrelated, but in the case that it isn't... Norton just found 6 viruses on my PC (and they have been causing me a lot of trouble, the little bastards.) I don't know if they came from here or not. It's possible lime wire did it, but I don't know for sure...
You can probably just ignore this, but I figured it couldn't hurt to tell.

Lucretius · Post by **Lucretius** » Fri Aug 26, 2005 9:51 pm

Actually, it DID hurt to tell! My eye's, oh my EYES! THE BLOOD! GAAAAAAAAA!!!

*o* · Post by ***o*** » Fri Aug 26, 2005 9:55 pm

hey luc, put your hands on your drugs,open a window and throw....

Unidentified Assilant · Sat Aug 27, 2005 3:46 am

I went to Benheck.com all the time and nothing happened!

daguuy · Post by **daguuy** » Mon Aug 29, 2005 1:48 pm

uh oh, it's acting virusy again

Warning: Cannot modify header information - headers already sent by (output started at /home/benheckc/public_html/phpBB/config.php:19) in /home/benheckc/public_html/phpBB/includes/sessions.php on line 206

Warning: Cannot modify header information - headers already sent by (output started at /home/benheckc/public_html/phpBB/config.php:19) in /home/benheckc/public_html/phpBB/includes/sessions.php on line 207

Warning: Cannot modify header information - headers already sent by (output started at /home/benheckc/public_html/phpBB/config.php:19) in /home/benheckc/public_html/phpBB/viewtopic.php on line 561

Warning: Cannot modify header information - headers already sent by (output started at /home/benheckc/public_html/phpBB/config.php:19) in /home/benheckc/public_html/phpBB/includes/page_header.php on line 475

Warning: Cannot modify header information - headers already sent by (output started at /home/benheckc/public_html/phpBB/config.php:19) in /home/benheckc/public_html/phpBB/includes/page_header.php on line 477

Warning: Cannot modify header information - headers already sent by (output started at /home/benheckc/public_html/phpBB/config.php:19) in /home/benheckc/public_html/phpBB/includes/page_header.php on line 478

EDIT: oh htere's already a thread about this; i didn't see it without the orange things

jtaylor0913 · Post by **jtaylor0913** » Mon Aug 29, 2005 1:58 pm

change this to orange or middle

Post by **Gamelver** » Mon Aug 29, 2005 4:26 pm

and announcematize it, too, I guess

Lucretius · Post by **Lucretius** » Mon Aug 29, 2005 7:07 pm

I personally have NOT recieved any virus warnings from Norton.

G-force · Post by **G-force** » Mon Aug 29, 2005 7:26 pm

Same here. But there was no virus at first last time this happened. It came later. So there is still threat of a virus attack. Put on your Norton's and/or Symantec's everyone.

A.J. Franzman · Post by **A.J. Franzman** » Mon Aug 29, 2005 8:45 pm

Each forum page is currently attempting to install dozens of copies of 2 different trojans on my system:
JS/Exploit-MhtRedir.gen (same as previous attack), and
Exploit-ByteVerify

As before, my McAfee VirusScan VShield is catching them.

For those with the knowhow, blocking the domain www.noxdeco.com (such as by adding a line, "127.0.0.1 www.noxdeco.com" to your windows hosts file) will block these attempts. Last time was a different domain, and I expect the next one will be different again, so this is just a temporary quick fix to get around having to click past all the warning messages.

G-Prime · Post by **G-Prime** » Mon Aug 29, 2005 9:23 pm

A.J. Franzman wrote:Each forum page is currently attempting to install dozens of copies of 2 different trojans on my system:
JS/Exploit-MhtRedir.gen (same as previous attack), and
Exploit-ByteVerify

As before, my McAfee VirusScan VShield is catching them.

For those with the knowhow, blocking the domain www.noxdeco.com (such as by adding a line, "127.0.0.1 www.noxdeco.com" to your windows hosts file) will block these attempts. Last time was a different domain, and I expect the next one will be different again, so this is just a temporary quick fix to get around having to click past all the warning messages.

If this is true then we better move the warning level all the way up to "the cover of Rush's Moving Pictures"