hacker? |
  |
 Feb 21 2005, 02:31 PM
Post
#76
|
|
 Senior Member  Group: Member Posts: 291 Joined: Jan 2005 Member No: 89,092  |
QUOTE(coyote @ Feb 21 2005, 2:28 PM) It'll still spread. Worms don't work that way. As far as spreading is concerned. Please help the community. Add this to your Headers: This prevents others from infected. Not you. For the time being you should visit sites not logged in or with javascript disabled to prevent infection.  does this script really work?? |
|
|
|
|
Feb 21 2005, 02:32 PM
Post
#77
|
|
 Wannabe Senior Member Group: Member Posts: 39 Joined: Sep 2004 Member No: 51,999 |
QUOTE(coyote @ Feb 21 2005, 2:28 PM) It'll still spread. Worms don't work that way. As far as spreading is concerned. Please help the community. Add this to your Headers: This prevents others from infected. Not you. For the time being you should visit sites not logged in or with javascript disabled to prevent infection. i meant through the 1st persons xanga site...if that makes any sence |
|
|
|
|
Feb 21 2005, 02:33 PM
Post
#78
|
|
|
Wannabe Senior Member Group: Member Posts: 39 Joined: Sep 2004 Member No: 51,999 |
repling to arson...... i hope so!
|
|
|
|
|
Feb 21 2005, 02:34 PM
Post
#79
|
|
|
Senior Member Group: Member Posts: 92 Joined: Feb 2004 Member No: 3,709 |
hopefully it works.
well, i really wish I had the access to xanga's source code to implement something OR they can do something right now to prevent further damage. I'm surprised xanga didn't shut down xanga systems to prevent further damage because the damages caused can't be done with a single click from the xanga servers. |
|
|
|
|
Feb 21 2005, 02:36 PM
Post
#80
|
|
 Senior Member Group: Member Posts: 34 Joined: Nov 2004 Member No: 67,550 |
QUOTE(XxArsonFreakxX @ Feb 21 2005, 2:23 PM) lol i dont see how that will help they will just skip to 4 umm... d'oh well, it could be slightly annoying to the hacker... |
|
|
|
|
Feb 21 2005, 02:36 PM
Post
#81
|
|
|
Wannabe Senior Member Group: Member Posts: 39 Joined: Sep 2004 Member No: 51,999 |
alot of people no how to get rid of it from THEIR sites so i think its a waster to shut down the server
|
|
|
|
|
Feb 21 2005, 02:37 PM
Post
#82
|
|
 What? Group: Member Posts: 709 Joined: Jan 2005 Member No: 92,823 |
hmm.. I think the xanga staff is off today, because it is presidents day here in USA. So if they are based in the USA they might be off.... idk.
|
|
|
|
|
Feb 21 2005, 02:44 PM
Post
#83
|
|
|
Member Group: Member Posts: 12 Joined: Jan 2005 Member No: 92,375 |
So you keep deleting entries until you see something familiar right? In safe mode, do the entries look normal because I think I deleted some..help please!
|
|
|
|
|
Feb 21 2005, 02:45 PM
Post
#84
|
|
|
Member Group: Member Posts: 12 Joined: Jan 2005 Member No: 92,375 |
I think I've deleted atleast 30 enetries already
|
|
|
|
|
Feb 21 2005, 02:47 PM
Post
#85
|
|
|
Senior Member Group: Member Posts: 92 Joined: Feb 2004 Member No: 3,709 |
Decrypted the code:
Found the a-hole's site... Check this shit out. Caution: Don't download the exe file and run it. I'm still investigating. http://whois.sc/www.dkcommunity.com hmmm... |
|
|
|
|
Feb 21 2005, 02:47 PM
Post
#86
|
|
|
Group: Posts: 0 Joined: -- Member No: 0 |
haha i went online, the first thing my friend did was IMed me and told me there was a xanga virus, and i asked her if i was infected and she said no. then i told her to give me some xangas that are infected while i was checking up on createblog.com, i ended up clicking on one of the xangas given by my friend, then it was installing some shit, so then i rebooted my computer ASAP, phew, close call.
|
|
|
|
|
Feb 21 2005, 02:47 PM
Post
#87
|
|
|
Senior Member Group: Member Posts: 92 Joined: Feb 2004 Member No: 3,709 |
crap, double post... ack
just ignore my post on the "preventing other's from being infected" |
|
|
|
|
Feb 21 2005, 02:52 PM
Post
#88
|
|
|
Senior Member Group: Member Posts: 92 Joined: Feb 2004 Member No: 3,709 |
the exe file is an activeX program...
we need to know the source... In order for this fuckhead to infect us... he has to create a xanga and go to a site like createblog and post "CHECK OUT MY XANGA" To disable javascript in IE: Click Tools -> Internet Options -> Security -> Custom Level under "Scripting", disable Active Scripting. I guess after all this is over, you can enable it again. |
|
|
|
|
Feb 21 2005, 02:55 PM
Post
#89
|
|
|
Senior Member Group: Member Posts: 291 Joined: Jan 2005 Member No: 89,092 |
QUOTE(mirage @ Feb 21 2005, 12:46 PM) Yeah, i reported them to free.hostultra as abuse site... i think they did SOMETHING after all. =D why doesnt everyone just complain maybe they will get tired of this and shut down whatever they are doing |
|
|
|
|
Feb 21 2005, 02:55 PM
Post
#90
|
|
|
Member Group: Member Posts: 12 Joined: Jan 2005 Member No: 92,375 |
So how can you delete it yourself again? because it's not working for me.
I can be contacted at ArtsyToni678 in AIM.....urmm help! |
|
|
|
|
Feb 21 2005, 02:57 PM
Post
#91
|
|
|
Senior Member Group: Member Posts: 92 Joined: Feb 2004 Member No: 3,709 |
QUOTE(XxArsonFreakxX @ Feb 21 2005, 2:55 PM) why doesnt everyone just complain maybe they will get tired of this and shut down whatever they are doing Think about it. If you are the hacker and you have this intention since the beginning. The first thing you want is people whining and crying. It means they've succeeded and they want more of this whining. |
|
|
|
|
Feb 21 2005, 02:59 PM
Post
#92
|
|
|
Senior Member Group: Member Posts: 291 Joined: Jan 2005 Member No: 89,092 |
thats true but idk what else to think of
|
|
|
|
|
Feb 21 2005, 03:00 PM
Post
#93
|
|
|
Senior Member Group: Member Posts: 92 Joined: Feb 2004 Member No: 3,709 |
http://www.dkcommunity.com/decay/
interesting. this f**k sure has a lot of time on his hand. those may be trojans in that folder. some sort of activex remote connection service. So yah, if you are infected. Your computer might be at risk. Most of you who have windows xp service pack 2 should be fine. hopefully. |
|
|
|
|
Feb 21 2005, 03:02 PM
Post
#94
|
|
|
Senior Member Group: Member Posts: 291 Joined: Jan 2005 Member No: 89,092 |
is there anyway of tracking where this got started from
|
|
|
|
|
Feb 21 2005, 03:02 PM
Post
#95
|
|
 Smile Like a Retard =D Group: Member Posts: 1,350 Joined: Nov 2004 Member No: 63,186 |
could you track who's the host of that site?
|
|
|
|
|
Feb 21 2005, 03:03 PM
Post
#96
|
|
|
Member Group: Member Posts: 12 Joined: Jan 2005 Member No: 92,375 |
OK I fixed my site. Advice...just keep deleting even after maybe 100 entries.
|
|
|
|
|
Feb 21 2005, 03:03 PM
Post
#97
|
|
|
Senior Member Group: Member Posts: 291 Joined: Jan 2005 Member No: 89,092 |
not the host of the site but where the virus first started like the first xanga that got infected by this
|
|
|
|
|
Feb 21 2005, 03:06 PM
Post
#98
|
|
|
Smile Like a Retard =D Group: Member Posts: 1,350 Joined: Nov 2004 Member No: 63,186 |
QUOTE not the host of the site but where the virus first started like the first xanga that got infected by this i don't think it matters where it started anymore since you can get it from anyone who has the virus, not the first one that has it. also, if we could find the host of the site, we could maybe tell the host to delete his entire site.... but he probably have like a zillion copies of the files anyways.... |
|
|
|
|
Feb 21 2005, 03:07 PM
Post
#99
|
|
|
Senior Member Group: Member Posts: 291 Joined: Jan 2005 Member No: 89,092 |
is there anyway you can track the creator of the virus sort of like an IP adress
|
|
|
|
|
Feb 21 2005, 03:08 PM
Post
#100
|
|
|
Senior Member Group: Member Posts: 92 Joined: Feb 2004 Member No: 3,709 |
QUOTE(mirage @ Feb 21 2005, 3:06 PM) i don't think it matters where it started anymore since you can get it from anyone who has the virus, not the first one that has it. also, if we could find the host of the site, we could maybe tell the host to delete his entire site.... but he probably have like a zillion copies of the files anyways.... exactly. but forget about any files he has. that's another story. the decay.exe is most likely some sort of remote-connection hack that doesnt' have to do with xanga. though you should be cautioned. The worm is composed of javascript and his php hosted site. |
|
|
|
|
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members: