Go Back   Aquarium Advice - Aquarium Forum Community > Community Forum > Forum Admin & Announcements
Click Here to Login

Join Aquarium Advice Today
Reply
 
Thread Tools Search this Thread Display Modes
Please support our sponsors and let them know you heard about them on AquariumAdvice.com
 
Old 11-25-2007, 11:32 PM   #21
Aquarium Advice Addict
 
Join Date: Aug 2006
Location: not here anymore
Posts: 5,338
Quote:
Originally Posted by ellisz
My question is, is it really a virus, trojan etc. or just an annoyance? What are the effects other than slow down and or lock up?
To answer your question ellisz, it's a trojan at worst, and an annoyance at best. Currently the thing seems to be targeting MS Internet Explorer. But that doesn't mean it can't target Firefox either. It also seems to target Windows XP, but not Vista. I'm guessing Vista patched the bug it's trying to exploit.
__________________

__________________
Kurt_Nelson is offline   Reply With Quote
Old 11-25-2007, 11:46 PM   #22
Aquarium Advice Regular
 
Join Date: Jan 2007
Posts: 60
Quote:
Originally Posted by ellisz
I use firefox and keep my PC on all the time. It does get rebooted on occasion but not much. I have never had this issue at home. I never understood it.

My question is, is it really a virus, trojan etc. or just an annoyance? What are the effects other than slow down and or lock up?

There seem to be plenty of mods and it is being monitored. We mentors on the site as well.
__________________

__________________
lReef lKeeper is offline   Reply With Quote
Old 11-25-2007, 11:57 PM   #23
Aquarium Advice Addict
 
fijiwigi's Avatar
 
Join Date: Sep 2007
Location: Eastern Washington
Posts: 1,726
I have never experienced a single problem at all why is it everyone of you have and not me I don't understand.????
__________________

FijiWigi_Tank_photos
120G Oscar tank in progress
fijiwigi is offline   Reply With Quote
Old 11-26-2007, 03:14 AM   #24
AA Team Emeritus
 
An t-iasg's Avatar


 
Join Date: Aug 2003
Location: Criders Corners, PA
Posts: 9,891
My Windows Vista is affected, so I don't use the computer with that operating system to visit AA. My Windows XP-Firefox is not affected, and my Linux operating system is not affected either. I have no idea why my XP has not had the slightest problem while a lot of you have. I do make sure I do my updates regularly.
__________________







An t-iasg is offline   Reply With Quote
Old 11-26-2007, 06:48 AM   #25
Aquarium Advice Addict
 
Fishyfanatic's Avatar
 
Join Date: Dec 2004
Location: Illinois
Posts: 11,964
My computer is up to date with both IE and Windows and I still have the issue.

From what I have read, people with FF are also having problems so it's not just IE. And some people using IE are not having problems.
__________________
Vote for Aquarium Advice

29 Gallon Lake Malawi Fry
55 Gallon Community
150 Gallon Lake Malawi Cichlid
Fishyfanatic is offline   Reply With Quote
Old 11-26-2007, 08:40 AM   #26
AA Team Emeritus
 
reefrunner69's Avatar
 
Join Date: May 2002
Location: Cedar Key, FL
Posts: 1,663
Quote:
Originally Posted by Kurt_Nelson
Quote:
Originally Posted by ellisz
My question is, is it really a virus, trojan etc. or just an annoyance? What are the effects other than slow down and or lock up?
To answer your question ellisz, it's a trojan at worst, and an annoyance at best. Currently the thing seems to be targeting MS Internet Explorer. But that doesn't mean it can't target Firefox either. It also seems to target Windows XP, but not Vista. I'm guessing Vista patched the bug it's trying to exploit.
I would say it is a re-direct. Any malware/virus/trojans are not hosted on this site. We are continually looking for the source of this re-direct, to the point that we as admins are not participating in the forums. Getting rid of the bad script is our priority. We have employed outside help to try and locate the bad script, we are not ignoring the problem. At one point we thought we had located and eradicated the problem, but it cropped up again. We wish it were as easy as just dumping the software and starting with a fresh copy, unfortunately we would lose quite a bit of data. This software we are using is highly customized, if we were to simply dump it for a fresh out of the box copy we would lose MANY hours of work. Even so, this is not being ruled out, and may actually be what we have to do, we are just not ready to scrap all that yet. This issue will be gone, one way or the other, soon.

If anyone has any valid ideas as to where this script is located.....please feel free to PM me.

Quote:
And change the photo contest pictures....
Be happy to, just as soon as we have some submissions to have a new contest. It has been like pulling teeth to get members to submit photos for the contest, ever since we started having them, I have been through begging for submissions for some time.
__________________
Kevin

Visit Nature Coast Photography
reefrunner69 is offline   Reply With Quote
Old 11-26-2007, 08:47 AM   #27
AA Team Emeritus
 
reefrunner69's Avatar
 
Join Date: May 2002
Location: Cedar Key, FL
Posts: 1,663
Quote:
From what I have read, people with FF are also having problems so it's not just IE. And some people using IE are not having problems.
I think whether you experience the issue and how badly it manifests are going to be determined by a couple of things. What OS your running, what anti-virus/anti-malware program your running in addition to what browser your running as well as any conflicts you might have between those programs.

I run windows XP sp2, firefox and Nod32 and rarely have an issue. I agree with Kurt, it seems to only run once per IP, so if you have a static IP, you might experience the issue once and be done with it, if your IP only renews every 24 hours you might experience a lock up once per day etc... If your on dial up and get a new IP each time you sign on and sometimes even have your IP switched on you during your session...you might experience the issue everytime you visit the site.
__________________
Kevin

Visit Nature Coast Photography
reefrunner69 is offline   Reply With Quote
Old 11-26-2007, 04:25 PM   #28
Aquarium Advice Addict
 
Join Date: Aug 2006
Location: not here anymore
Posts: 5,338
Quote:
Originally Posted by reefrunner69
If anyone has any valid ideas as to where this script is located.....please feel free to PM me.
Maybe the admins should talk to each other. Talk to fishfreek... I emailed him multiple screenshots I took when using Firebug to track the script months ago.

Agree that the trojan isn't being hosted on AA... but the redirect is. And without any websites pointing browsers to a script page, a trojan is pretty much useless by itself.

This thing just "appears" to go away because the domain the "googlerank.info" redirects to changes from time to time. The googlerank domain isn't where the trojan is. The googlerank domain is just a secondary script that then redirects yet again to the site the trojan/buffer overrun script lives. And that secondary site changes it's domain from time to time. It's actually pretty smart, if you think about it. The bad guys just have to inject the googlerank.info/counter call in your website, and then can change where that redirects to whenever they want.

Get rid of the googlerank.info/counter call and you rid yourself of it. Most likely, one of your php scripts that runs the board has been hacked and that script is putting the call into the AA pages. That's how it appears to be working on other boards.

But talk to fishfreek - I emailed all this stuff to him long ago.
__________________
Kurt_Nelson is offline   Reply With Quote
Old 11-27-2007, 01:10 AM   #29
Aquarium Advice Addict
 
Join Date: Aug 2006
Location: not here anymore
Posts: 5,338
Quote:
Originally Posted by reefrunner69

If anyone has any valid ideas as to where this script is located.....please feel free to PM me.
OK... fine. How's this for specifics:

Look at lines 215 through 221 of your code in your mw3.js javascript file, in your templates subdirectory. Look specifically at line 220. I think you'll find after the "String.fromCharCode" command, all that stuff in the parenthesis is the unicode translation of the iframe call to the googlerank.info domain.

Oh... and I think you should get your money back from that "outside help" to rid yourself of it. I'm not an IT guy and found it pretty quick once I got ticked off enough to really start sniffing around.

Oh... and PM sent also, but if you're not frequenting the site, not sure when you'll ever see it.
__________________
Kurt_Nelson is offline   Reply With Quote
Old 11-27-2007, 01:34 AM   #30
Moderator Emeritus
 
Join Date: Sep 2003
Location: Indiana USA
Posts: 2,694
If you PM him, he should get an e-mail. I do. I have had no issues with XP and now Vista.
__________________

__________________
*180 gal Display, 100 gal basement sump, 33 gal refugium, 3x250 MH, 2x160 VHO actinics, zoos, some softies, LPS & lots of acros and other SPS.
*100 gal prop tank plumbed into main system w/ 2x96 PC lights and 1x150 MH,
ellisz is offline   Reply With Quote
Reply

Please support our sponsors and let them know you heard about them on AquariumAdvice.com

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
First Day bbecher Saltwater & Reef - Getting Started 14 08-11-2009 06:05 PM
not something you see every day rubysoho Aquaria Off-Topic 9 02-28-2005 10:21 AM
Another day... mitche8359 Freshwater & Brackish - General Discussion 5 09-24-2004 11:25 PM
Feed them once a day?, or Once every other day? JamesMJ2 Freshwater & Brackish - General Discussion 8 09-02-2003 12:20 AM
day by day 7 dead guppies jackie Freshwater & Brackish - Unhealthy Fish 5 06-06-2003 06:11 AM







» Photo Contest Winners








Copyright 2002- Social Knowledge, LLC All Rights Reserved.

All times are GMT -4. The time now is 01:33 PM.


Powered by vBulletin® Version 3.8.8 Beta 1
Copyright ©2000 - 2017, vBulletin Solutions, Inc.