Author Topic: Virus on the TD site  (Read 2408 times)

Corey Cooper

  • Administrator
  • Hero Member
  • *****
  • Posts: 6216
    • View Profile
Virus on the TD site
« on: August 27, 2007, 09:49:56 PM »
Earlier today a courteous user informed me that the TD site had been infected with a virus of some type (thanks Jarmy).  I confirmed that 2 pages, the site's main page and the forum main page, had been updated by someone other than myself.  Script code had been appended to these two pages that ultimately attempts to redirect your browser to a page that is full of known exploits in IE, Firefox, Windows Media Player, etc.

I am not an expert on this type of thing, so I really have no idea if these exploits are old, new, were patched long ago, etc.  I do know that I use Firefox (2.0.0.6) and my browser was not redirected, much less compromised.

According to the dates on the modified files, it would seem that the infection occurred today, at around 6:45pm central US time, and I removed it at around 8:10pm, although I cannot be certain of the times.  So hopefully the window of opportunity for this thing was small.

Anyway, I'm sorry this happened, but anyone who visited the site around this time should take precaution.  If you don't have a virus scanner, here are two free scanners:

ClamWin: http://www.clamwin.com/
avast!: http://www.avast.com/

I've notified the hosting service and am awaiting their answer as to how this occurred.  I'll keep everyone updated.