Jump to content

  • Curse Sites
Help
Rate Article   - - - - -

Unfortunately AJ was brought down earlier today by a malicious user.

Don't worry your information is safe and the site has once again been reverted to a recent back up. When it rains it pours.


This user posted a link to a malicious applet earlier today in the Interface/AddOn section (http://www.arenajunk...ead.php?t=23814). If you clicked on this link earlier PLEASE run a virus scan and make sure your computer is clear of any threats. However, it would seem that this site was the target of his attacks.

We can not say it enough - Please use the report button to report ANYTHING you may even remotely suspect as being suspicious.


Rest assured everything has been secured. The necessary precautions have been taken to safe guard us even further.
Posted in: News
Promoted from AJ Hacked

Comments

#1 Bio

Bio
  • Members
  • Posts: 299

Posted 26 May 2008 - 02:50 AM

He prob sucks at arena :(
Priest Retired from lawlcraft.

#2 Conradical

Conradical
  • Junkies
  • Posts: 1586

Posted 26 May 2008 - 02:50 AM

wow fuk

p.s. second FUCK

#3 Rollyat

Rollyat
  • Members
  • Posts: 238

Posted 26 May 2008 - 02:57 AM

It was definitely some very large guy in his mid thirties who has become too large to leave his mother's basement so he's resorted to watching the classic 90's movie "Hackers" and dwelling on his insane internet dominance.
Where have all the cowboys gone?

#4 Rapture

Rapture
  • Administrators
  • Curse Premium
  • Posts: 6710

Posted 26 May 2008 - 03:02 AM

An update as to our best guess to the virus in question.

It would seem it was a variant of the i-worm/stration virus. To quote AVG's virus encyclopedia.

AVG said:

Payload:

Various modifications of the worm try to download (via http) one or more files from the Internet. Server and file names are variable.

The Worm blocks some security software, for example various firewalls, antivirus programs and so on. It stops services belonging to that software, or redirects servers.

In the case of AVG (but also for many other antivirus applications), the worm disables the download of update files by modifying theHostsfile. It redirects the update server addresses in this file. (Explanation: The TCP/IP stack uses this file as its first choice when performing translation of IP addresses from the server's name. When the name is found in the file, the IP stack does not query the DNS servers).

Latest news is that new versions of the worm are using process injecting. This technology allows the worm to hide itself from firewalls. Usual victims are mainly Internet Explorer and other browsers.

Some versions of the worm can cause a crash of Explorer, or can disable the save command in notepad, or can disable usage ofRegeditor can download other malware from the Internet.

Update-KB.exe, upon running, will sometimes display a message about successful installation.
http://www.grisoft.c...base.idv-288751

#5 Kags

Kags
  • Members
  • Posts: 804

Posted 26 May 2008 - 03:04 AM

i heard it was ziss
Retmage gladiator club!
Xfire:kagunster  but i don't stream often

#6 Neokrebs

Neokrebs
  • Members
  • Posts: 691

Posted 26 May 2008 - 03:31 AM

fucking neokrebs

#7 Duckers

Duckers
  • Moderators
  • Curse Premium
  • Posts: 11162

Posted 26 May 2008 - 03:59 AM

IT WAS MEMPHIS AND DOCHOLIDAY< OMG.

#8

Posted 26 May 2008 - 04:44 AM

It was the entire <Y U DODGIN> guild from Hydraxis-Emberstorm after their inferiority complex caught up with them, led by their fearless leader Missjazz.

#9 etherimp

etherimp
  • Members
  • Posts: 664

Posted 26 May 2008 - 04:47 AM

Did a lot of threads/posts get lost with the crash?

#10 Rapture

Rapture
  • Administrators
  • Curse Premium
  • Posts: 6710

Posted 26 May 2008 - 04:49 AM

etherimp said:

Did a lot of threads/posts get lost with the crash?

Unfortunately everything that happened since our last backup (Around 6AM this morning) was lost. :(

#11 str4t

str4t
  • Members
  • Posts: 4

Posted 26 May 2008 - 05:00 AM

Rapture said:

Unfortunately everything that happened since our last backup (Around 6AM this morning) was lost. :(

OMG I made a huge long double mage guide for 2v2's. /cry

#12 Kisaa

Kisaa
  • Members
  • Posts: 17

Posted 26 May 2008 - 05:07 AM

Wow, I read that post earlier and thought to myself that it was way too suspicious and I didn't click it. Should have reported it, I feel dumb right now.

#13 dredhed

dredhed
  • Junkies
  • Posts: 571

Posted 26 May 2008 - 06:40 AM

Kisaa said:

Wow, I read that post earlier and thought to myself that it was way too suspicious and I didn't click it. Should have reported it, I feel dumb right now.

I Think its safe you say, this was all your fault.

#14 Slilent

Slilent
  • Members
  • Posts: 751

Posted 26 May 2008 - 08:03 AM

Kisaa said:

Wow, I read that post earlier and thought to myself that it was way too suspicious and I didn't click it. Should have reported it, I feel dumb right now.

Reported you in-game.

#15 Frostydude

Frostydude
  • Members
  • Posts: 10

Posted 26 May 2008 - 10:20 AM

Quantity said:

It was the entire <Y U DODGIN> guild from Hydraxis-Emberstorm after their inferiority complex caught up with them, led by their fearless leader Missjazz.

Did I ever hurt your feelings in arena?

#16 Dulu

Dulu
  • Members
  • Posts: 377

Posted 26 May 2008 - 11:15 AM

I bet it was Tyveris.

(>'.')>
Posted Image

#17 Disparity

Disparity
  • Members
  • Posts: 1037

Posted 26 May 2008 - 12:54 PM

Quantity said:

It was the entire <Y U DODGIN> guild from Hydraxis-Emberstorm after their inferiority complex caught up with them, led by their fearless leader Missjazz.

NO U

#18 Grombringal

Grombringal
  • Junkies
  • Posts: 2825

Posted 26 May 2008 - 03:14 PM

Thanks god I'm using Firefox and NoScript, would've got owned :o

#19 Ralppi

Ralppi
  • Junkies
  • Posts: 404

Posted 26 May 2008 - 03:19 PM

:o

#20 nawty

nawty
  • Junkies
  • Posts: 1999

Posted 26 May 2008 - 03:32 PM

clicked it and it just refused to open anything, computer > me clearly.

<