Trojan on FFXIDATS.com

[Seidell]

Just a heads up, just went to ffxidats.com about 5min ago and my avg stopped a trojan downloader. might wanna be careful

[vagus]

what kind of trojan? more information please.

[LinktheDeme]

normally when either ffxidats, ffxiatlas, or ffxi somepage get virused the rest of the above listed are all most likely virused as well as they do not have good security or perhaps the same security. In any case they normally seem to maintain their web page at the same pace so they are the most vulnerable assume if ones taken the rest are, there's probably a few more to add to this list.

[Wenslydale]

This would make sense. Over the last week my linkshell has lost 4 members do to hacking, afaik, they all used FFXIDATS.com.

[DAKPluto]

I just checked it, looked like a Flash from 1ive.net (Yes, they do trojans.)

When I checked it again though it was gone.

Once again people, no script/flash block/ABP Learn it, love it.

[Tradition]

Jeez, I'm gonna have to start taking fucking everything off my whitelist.

[Zosi]

Jeez, I'm gonna have to start taking fucking everything off my whitelist.

The sites hosting the actual exploits shouldn't have been on your whitelist to begin with.

[Pikarya]

IE7 Pro would of easily stopped this, or Firefox with shitty add-ons. So if someone gets infected by anything through Flash its their fault for not going to preventive route.

[Shuemue]

Firefox with shitty add-ons

lol @ this description, Firefox is how computing is meant to be.

[Therin]

IE7 Pro would of easily stopped this,

lol @ this phrase.

[Thistle]

IE7 Pro would of easily stopped this, or Firefox with shitty add-ons.

.... Wow. Just wow.

[Xyle]

Screencap of Trojan get. I did a quick whois of the domain to see where it came from, check spoiler tags if interested and are intelligent enough not to visit the site.

Firefox + No Script with applied restrictions to trusted sites + Ad-block blocked the Trojan.

Xyle

Ninja edit: First time poster, long time lurker. Nice to be here BG. ^^

Spoiler: show

The SWF came from www.1ive.com. This is what the Whois brought up.

Registrant:
Jose Manuel Augusto
Tv Alves Cardoso
Odivelas, Odivelas 2675
Portugal

Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)
Domain Name: 1IVE.COM
Created on: 01-Nov-05
Expires on: 01-Nov-08
Last Updated on: 13-Oct-07

Administrative Contact:
Augusto, Jose Manuel [email protected]
Tv Alves Cardoso
Odivelas, Odivelas 2675
Portugal
351919906397

Technical Contact:
Augusto, Jose Manuel [email protected]
Tv Alves Cardoso
Odivelas, Odivelas 2675
Portugal
351919906397

Domain servers in listed order:
NS1.SEDOPARKING.COM
NS2.SEDOPARKING.COM


Registry Status: clientDeleteProhibited
Registry Status: clientRenewProhibited
Registry Status: clientTransferProhibited
Registry Status: clientUpdateProhibited

[Pikarya]

lol @ this description, Firefox is how computing is meant to be.

Firefox 3 is pretty shitty. I'll stick with IE/Opera.

[Auspice]

Firefox 3 is pretty shitty. I'll stick with IE/Opera.

Wait, wait. People use Firefox 3?

[Destinye]

Who in their right mind uses FF3?

[Jkun]

I DO WANNA FIGHT ABOUT IT? /FISTS

[Aurara]

so wait firefox 3 isnt safe? >_>;

[TacoTaru]

It's a resource hog. I've wanted to go back, but I can't find a download of the last version of 2.0 so I've been stuck on 3.

[Aurara]

i just assumed ff3 was better so i DL'd it man i feel dumb.

[TacoTaru]

Join the club. Half my add-ons from FF2 don't work anymore so I've got a list of stuff that just sits broken.

OT: Any word what the name of this file is? I want to run a quick scan for the virus name to make sure I don't have it since I was on FFXIdats a few weeks ago.