Warning please read!!!

[Administrator]

DodgeBoard May Have Been Compromised

There has been some new discoveries concerning the recent crashes to our site.

Our site is hosted by HostGator, a professional hosting company.

It has been discovered that HostGator and several other hosts were compromised by some hackers. The hackers installed some malicious code in many of the servers that HostGator uses to host their customers sites. This malware targets IE ONLY. If you have Mozilla FireFox or another browser, you need not worry.

For those of you that run Internet Explorer:

We have been advised that the code that was compromised was in the PHP layer that serves our type of board. This code uses a redirect to direct the user to another site, where additional malware is then installed on the visitors PC. It is possible that the code could be installed on one or more of our members PC in IE while visiting the site when it was infected.

Most likely, if you did not get redirected to the following page (don't click)

http://198.86.87.24/~monkey (altered slightly to prevent accidental clicks)

Then you are most likely not infected.

eBay and Paypal were also affected by this exploit. This has turned into a HUGE internet wide attack and is being discussed on many other boards as well. Microsoft will be rolling out a patch to repair/prevent the exploit. MacAfee is working on a detection and removal definition. Trend Micro is the only one that will currently detect it.

Anyone who suspects they may have this exploit/trojan/virus on their system should use Trend Micro HERE to check and clean online. We advise everyone with MSIE to do this, especially if you visited eBay or Paypal in the past couple of days.

eBay, MacAfee and Microsoft are all working in a joint effort to provide fixes and prevention updates.

You can read a little about this HERE

But don't click on the link in post 13!!

We are sorry if this has affected any of you. This was a group of hackers that targeted several hosts internet wide, including ours.

We feel that we have a responsibility to advise our members immediately of any threats that may have been passed on by our host to you. We want you to feel like you are in a safe place. Please heed my warning and scan your computer using the Trend Micro link provided above.

Please share the results of your scan so we can determine if any of our users were affected.

[Highwayman]

When I went to the Trend Micro site and clicked the scan button it went to a page that appeared to not load. Site overload maybe?

I did not get redirected to any other site that I saw. My browser just froze and I got an error box. When I clicked the error box my browser just closed.

[Administrator]

Keep trying the site. Since Trend Micro is the only one with the fix, they may be getting hit pretty hard. I went to the link and it worked fine for me. I am currently scanning. This is a UK link. I was given this link by the host. Maybe someone can find the US link.

[Administrator]

News article HERE

There is also an unofficial MSIE patch HERE

[TexKan]

I can't compute my way outta a wet paper bag but wooweee I'm scannin!! Worked for me as well - next I'll try that MSIE thingie...... thanks admin!

[Highwayman]

Admin,

I still can’t open a scan over there. Here’s what Norton shows in the log. Does this look like it’s rejecting the site itself or just an ad?

There is a url there but it doesn't show in the post for some reason.

Content Blocked:
Date Time: 9/22/2006 11:47:06 PM
User: Supervisor
Action: Blocked
Type: Ad
URL: http://eu-housecall.trendmicro-europ...background.gif

Data: /banner/

[Tee]

I just read a news article that said Microsoft is waiting until October 10th to rollout the fix even though the exploit is becoming wide spread. You suck Microsoft! I also installed FireFox. I like it.

Lots of news on this:
http://news.google.com/nwshp?hl=en&tab=wn&q=zero%20day

I just scanned my computer using the link admin gave us. I am majorly infected with this trojan:

Troj_Dloader.AIO

I was clean up to the other day so this is a new infection.

[TexKan]

I willl wait then for the patch fix or whatever -
I had to install activeX to run the Trend thing. - when my "blocker" blocks I gotta do the "control" thing. It's almost done so far I only have 3 viruses that are "gray"........

[TexKan]

I knew it was goin too smooth to be true - I ran the trend thing till it stopped or got stuck - now every time I try to re enter the Trend site - my IE crashes...... geesh......... I shulda known better. Now it'll probabaaly be never when this thing gets to the puter doctor! We'll see how it runs - if it's as bad as it's been for the past few days - it'll have to go to the puter vet for neutering....... gee I'll be in rehab if it takes too long!

[Highwayman]

Originally Posted by TexKan

- it'll have to go to the puter vet for neutering.......

Please don't talk like that in front of Lurker!