Trojan on FFXIDATS.com

[Destinye]

No idea..I was on it as well..but I have all of the blocks in place..so nothing got downloaded that I'm aware of..

[Seidell]

Join the club. Half my add-ons from FF2 don't work anymore so I've got a list of stuff that just sits broken.

OT: Any word what the name of this file is? I want to run a quick scan for the virus name to make sure I don't have it since I was on FFXIdats a few weeks ago.

TBH i didnt get the name. about a month ago i was hacked a i pretty much flipped out, closed firefox and ran a scan....needless to say, ff blocked it and my scan came up empty

[Zosi]

so wait firefox 3 isnt safe? >_>;

FF3 is safe, and in fact, will be safer than FF2 in a few days. They're stopping FF2 security updates soon, so it's "use at your own risk".

FF3 actually does use less memory than FF2. I know it's trendy to say it doesn't and point at some blog post with numbers from Task Manager to prove it, but people with actual testing methodologies have proved that wrong long ago. Most significantly, most of the people testing don't know the difference between reserved memory and private memory. The latter is "memory used", the former is "memory we might use, keep it warm for us". One is a legitimate performance concern, the other is not.

As for addons, yeah, upgrades do that sometimes, and point releases nearly always do. Get over it, if your addons aren't being promptly updated for the new version, you can disable version checking pretty easily until they are. On the other hand, if your addons have gone this many months without even the slightest bit of attention from the author to do a one-line version number fix, maybe it's time to find a replacement that's being actively updated.

Lastly, disable the phishing protection in FF3 and delete urlclassifier3.sqlite from your profiles folder. There's a known bug where the URL database grows to about 50-60mb, and it gets checked every time you load a URL with phishing protection on. If you have a really shitty hard disk or are running from a flash drive, this CAN cause performance issues. Then again, I forgot to turn it off on my most recent install and I've had zero issues, so it doesn't affect everyone.

[Rowe]

I have a MacBook Pro, I do all my surfing on the Mac. I also built a new PC recently but just for games, I don't surf the web with it, just go to website account sites. I could only download Firefox 3 when I set up the new PC, but I did load no script. I can't imagine people use IE. That's like playing Russian roulette with 4 live rounds and 2 empty cylinders.

[dejet]

i use FF3 and the 3 main add-ons are the only ones that i care about. i also have FF2 still loaded. IE7 is not "bad" but still wtf people be safe firefox is almost 100% safe. and if its not safe it is because your doing it wrong.

also ya if anyone got the name it be great to post it i do not go to ffxidats anymore i stay mostly on this, ffxiwiki(ya ya....) KI.

also just using a mac dont mean you can go to all the porn forums in the world and be safe....
macs are getting big you should try and be smart about where you go even with them now. the more people that get macs makes them a bigger target for people to make trojans and crap

[Ashira]

For those really wanting to go back to FF2, use filehippo.com and click on Firefox's latest updates. You can choose older versions on the page.

http://filehippo.com/download_firefox/

There, since most people are too lazy to figure out how to click 2-3 times.

filehippo.com and updatestar.com = super yay

[Shuemue]

Firefox 3 is the safest, most stable browser money can buy, and you don't even need to pay.

[Shuemue]

Just to clarify, because this is such an advanced subject, I'm only referring to Windows based browsers.

[Corrderio]

Phew, thanks for the heads up. I was about to repost all my work on there today.

[Kuuhalee]

This appears to be a reoccurring problem on FFXIDats.com as it was first reported on their forums the 22nd of August. The trojan has most likely been on and off their site over the period of eleven days starting on the 22nd through today.

1ive.net/images/banner.jpg (not an image; renamed JavaScript file) and 1ive.net/images/ver.swf appear to be the offending files. However, I cannot absolutely confirm this as by the time I reached the site, the trojan had been taken down.

[Corrderio]

Thanks for the update abotit being down, Kuuhalee. However I think I'm going to stay away from FFXI DATs for awhile. Until these trojan attacks are a thing of the past.

[Gulkeeva]

Sneaky webhacks to insert trojans will never be a thing of the past, any and every site in the world and any PC can be affected (hell even homeland security website got hacked once and the pentagon)

Best thing is awareness... and having stuff installed on IE/firefox to disable/protect you from it all

Although I'd say almost 50% the hacks are done through advertisements... I mean who wouldn't attack a cheap server thats only purpose is to spew out images... which has easy backdoor access onto thousands of sites to 'display an ad" ?

[Ivelios]

Sadly this is probably what got me a couple weeks back. :3 It had been the first time I had gone to FFXIDATS... few days later I got hacked... gogo being lazy and complacent...

[Nattack]

http://safebrowsing.clients.google.c...ges/banner.jpg


"The last time Google visited this site was on 08/15/2008, and suspicious content was never found on this site within the past 90 days."

"Has this site hosted malware?

Yes, this site has hosted malicious software over the past 90 days. It infected 3 domain(s), including ffxiweb.com, somepage.com, ffonline.com."

neat.

[DAKPluto]

The correct answer on browser will be answered today in just a couple of hours.

[Gulkeeva]

http://safebrowsing.clients.google.c...ges/banner.jpg


"The last time Google visited this site was on 08/15/2008, and suspicious content was never found on this site within the past 90 days."

"Has this site hosted malware?

Yes, this site has hosted malicious software over the past 90 days. It infected 3 domain(s), including ffxiweb.com, somepage.com, ffonline.com."

neat.

never knew google had a tool like that, it says nothings been shown on my site for 90 days, but it hasn't visited it either... O_o

[Aselin]

never knew google had a tool like that, it says nothings been shown on my site for 90 days, but it hasn't visited it either... O_o

Google's had this feature for quite a while.

Apparently their search crawlers, aka bots, go to each website and apparently determine if there is malicious content on there. It's like they use themselves as bait instead of an unsuspecting visitor to the site. They then block the website from being accessed from Google's search results.

This is not to say you can't visit the site anymore. If you find the website outside Google's search results, you can still access it and possibly fall victim to whatever malicious content is on the website.

I don't believe MSN and Yahoo search or any other search engine offers the same capability as Google does. So, be careful what search engine you use.

There is a toolbar that might come in handy, but it only comes with AVG Free Anti-virus. It's called the AVG Safe Search toolbar. It scans all links entered in the address bar before you visit a website, and scans links in search results for Yahoo, Google, and MSN search engines. It'll warn you if there is malicious content on that website.

It's not to say it's perfect, but it works.

Avast Home Editition anti-virus program offers a similar function called Web Shield. The trade-off is slightly slower web traffic as the program has to do this on your computer. However, for the times I've used it, it works very well. It'll also scan incoming P2P traffic and Usenet traffic.

[Khamsin]

Sneaky webhacks to insert trojans will never be a thing of the past, any and every site in the world and any PC can be affected (hell even homeland security website got hacked once and the pentagon)

What browser were the people at the pentagon using?

One thing I've wondered was, in those cases where some high-security facility (whether government or non) gets hacked, was it someone purposefully targetting that facility, or was it some guy on IE who hasn't been keeping their flash player updated?

I can imagine some pentagon employee checking somepage on his break, getting a virus, and then Fox News the next day reports that the pentagon was hacked.

[Gulkeeva]

What browser were the people at the pentagon using?

One thing I've wondered was, in those cases where some high-security facility (whether government or non) gets hacked, was it someone purposefully targetting that facility, or was it some guy on IE who hasn't been keeping their flash player updated?

I can imagine some pentagon employee checking somepage on his break, getting a virus, and then Fox News the next day reports that the pentagon was hacked.

Dunno, technically they don't have a website ... but
http://www.theregister.co.uk/2007/06..._email_hacked/
old story, but its happened so...

Nothings really is safe, no browser no addons... its inevitable to be hacked at one point... its just a matter of time, depending on how safe you play it you delay it at least

[Khamsin]

One other thing I never understood is why movies always completely butcher how a computer looks and works. Maybe back in the days of silent black and white movies, it'd help to make it simpler for grandpa to understand, but these days, there's more people thinking "Uh... that's not how it works" than "Oooh, pretty animations!".