PDA

View Full Version : Has Expat.Ru Been Hacked?



koba65
29-12-2004, 02:45
While updating my profile I noticed that a URL was automatically being put into the "URL" space. It was a link to a very disgusting child porn site (I will not post the link here). No matter how many times I tried to get rid of it, it would continue to appear in the URL field. I was finally able to get it to stop appearing by typing in another (bogus) URL.

Has anyone else had the same problem?

Moderators - are you aware of any problems like this?

CaveMan
29-12-2004, 03:07
just tested mine, and no problems..

Make sure you clean your cache, cookies and offline files under your IE settings

Also I advise you to use something like AdAware to clean up

koba65
29-12-2004, 03:14
Thanks - I've already done that. Needless to say, it wasn't a pleasant experience.

CaveMan
29-12-2004, 03:19
I can imagine...:agree: :agree:

ghost 6-3
29-12-2004, 09:07
Is there a legal authority that site should be reported to?

Halyavshik
29-12-2004, 09:55
I'm not expert, and I don't play one on TV either.

Is it possible you might have a virus on your local machine ? Is it possible that someone else you know may know your password and therefore have access to your login profile ?

Send a PM to Teutonic Deity to let him know.

85StoneWhiteFurball
29-12-2004, 09:58
Use Adaware and WinPatrol to get rid of this crap; it has indeed come up before. Winpatrol is www.winpatrol.com - adaware is http://www.lavasoftusa.com/software/adaware/

Both are free; Winpatrol stays in your memory and scans for this crap constantly in the background whenever your machine is on.

moscowmail
29-12-2004, 11:30
You have some sort of virus or spythingy, it happened to me but not with the site here, just my browser, *%s is right, I use the lavasoft thingy and it helps a lot.

It is not put on through this site and no the site has not been hacked.

Len

koba65
29-12-2004, 11:39
Originally posted by moscowmail
You have some sort of virus or spythingy, it happened to me but not with the site here, just my browser, *%s is right, I use the lavasoft thingy and it helps a lot.

It is not put on through this site and no the site has not been hacked.

Len

Thanks for the answers (and Polar Bear as well). I just noticed that some links were blasted into my favorites folder as well - 5 of them and they're all "spyware blockers" or "popup blocker links" - time for a thorough cleaning!

Halyavshik
29-12-2004, 11:43
Originally posted by koba65
Thanks for the answers (and Polar Bear as well). I just noticed that some links were blasted into my favorites folder as well - 5 of them and they're all "spyware blockers" or "popup blocker links" - time for a thorough cleaning!

Kobster,

I had a spyware problem a couple of weeks ago myself and others recommended 'winpatrol'. I found that while it's good at detecting the programs, it's not quite as helpful in removing some of them (sometimes the same .exe program would attempt to open every time I booted up despite the fact that I had asked winpatrol to remove it).

I just took the names of the programs that winpatrol was blocking (but not successfully removing), removed them from the windows registry via regedit and google searched them to find out other removal tips.

I'm spyware free now, but there may be more efficient programs in actually *removing* the offending spyware stuff than Winpatrol.

Good luck,
Hal

am4rw
29-12-2004, 18:52
Originally posted by koba65
Thanks for the answers (and Polar Bear as well). I just noticed that some links were blasted into my favorites folder as well - 5 of them and they're all "spyware blockers" or "popup blocker links" - time for a thorough cleaning!

There was a virus going around that cleaned out spyware but then inserted its own crap. I got it briefly in spite of Norton, a firewall, and an adware blocker. Update your virus definitions. It is a messy cleanup.

zombee
29-12-2004, 18:54
Probably spyware you got while watching an ActiveX movie (this happened to my co-worker.) I just got done deleting an awful 'worm' last week. I had accidentally downloaded it while looking for free 'Trillian Pro 3.0' software. Doh!

zcyka
30-12-2004, 00:22
I've used Spybot - Search & Destroy to good advantage.... actually, I use it in tandem with the AdAware software. Both are free downloads and each catches things that the other doesn't. Mind you, between the two of them, they don't catch EVERYTHING, but they get a bunch of it.

Another free download is CWShredder, which specifically targets the doomawhackey that hi-jacks your browser and directs it to a "Cool Web Search" site. My browser was nabbed prior to downloading this clever software and I had to dig in to remove the thing because it kept coming back every time I would reboot. (That means I've not actually had reason to try the CWShredder yet, but I'll sure give it a go if that happens again!)

koba65
30-12-2004, 00:31
Originally posted by zcyka
I've used Spybot - Search & Destroy to good advantage.... actually, I use it in tandem with the AdAware software. Both are free downloads and each catches things that the other doesn't. Mind you, between the two of them, they don't catch EVERYTHING, but they get a bunch of it.

Another free download is CWShredder, which specifically targets the doomawhackey that hi-jacks your browser and directs it to a "Cool Web Search" site. My browser was nabbed prior to downloading this clever software and I had to dig in to remove the thing because it kept coming back every time I would reboot. (That means I've not actually had reason to try the CWShredder yet, but I'll sure give it a go if that happens again!)

I downloaded all the suggested freeware and I'm fairly certain I'm "clean" now - I was riddled with the "Cool Web Search" bs and with "Naupoint".

Thanks again for everyone's assistance!

Happy New Year!

zcyka
30-12-2004, 16:19
Originally posted by Halyavshik
....'winpatrol'..... I found that while it's good at detecting the programs, it's not quite as helpful in removing some of them (sometimes the same .exe program would attempt to open every time I booted up despite the fact that I had asked winpatrol to remove it).

I just took the names of the programs that winpatrol was blocking (but not successfully removing), removed them from the windows registry via regedit and google searched them to find out other removal tips.


I had the same problem with a spy item trying to start up after Spybot had tried to remove it. I had to go to the originator's web site, re-install it and then remove the program through Windows' add / remove programs function.

Glad you're back in action, Koba. Never fun to have those nefarious things infesting your machine!

Dreamcatcher
04-01-2005, 22:51
Originally posted by koba65
While updating my profile I noticed that a URL was automatically being put into the "URL" space. It was a link to a very disgusting child porn site (I will not post the link here). No matter how many times I tried to get rid of it, it would continue to appear in the URL field. I was finally able to get it to stop appearing by typing in another (bogus) URL.

Has anyone else had the same problem?

Moderators - are you aware of any problems like this?

I have a couple of links, where you REALLY can find out who owns a web-site, and if you know IP address you can find out where is this web-site, hosting, etc. Then you can complaint. It worked for me when I got lots of SPAM before.

If you are interested in it, let me know through PM.

Crazyeelboy
05-01-2005, 15:02
I had a persistent spyware problem for several months - I finally took care of it with McAfee VirsuScan and Firewall, which seem to have dealt with the matter pretty well.