The Evil Angel web site (at the place for feeding frenzy 4 at least) will drop several byteverify trojans on your computer. I tested it with Norton Several times and it stoped it. A byte verify trojan will attempt to pick up your keystrokes to get passwords etc. Be warned. Here is the link if you care to test it yourself. http://www.evilangel.com/page.php?node=item&item_id=1188
Something from www.forced-action.com loads up, then an applet starts, the search panel opens up and then some dialer software pops up. The same as when you go to the above address. Norton caught that trojan though.
Hmmm, I haven't gone to look, but it sounds like somebody might have copied some of the real site's pages then hijacked the DNS entry to redirect you to their fake one, for obviously nefarious purposes.
Hmm... strange. Before i clicked on that link i made an image of my Harddrive. First i didn´t know how Mango got hold of that link in the first place but than i found out. Nothing fishy so far. When i clicked on it it took (imho) longer as a usual EA link (still, could be ok)
I managed to see a run. in the last line of my browser but i couldn´t read all of it then an applet was being started.
Nothing else happens on my Pc then. I have another antivirussoft as Mango. I contacted a friend and he veryfied Mangos statement. Here´s the log ...
The applet installs 2 jar archives named Counter.jar and loaderfox.jar. Inside those archives you can find the following files
Since i don´t think EA did this on purpose i can only hope they run a check of their files
I´ll reload my image now ... don´t know what else could have been altered. But this applet and scripting stuff can really make your day sometimes :( And if you disable it completely you may as well turn of the pc.
Patience is a virtue, but who wants to be virtuous? 4283 Posts 4/00
Posted - Mar 30 2004 : 3:29PM
I just talked to the internet department, and they were definitely aware of a lot of stuff going on. They are in the process of fixing everything right now.
Is it safe to visit evilangel web site if one doesn't have a virus checker installed?
"The lover knows much more about absolute good and universal beauty than any logician or theologian, unless the latter, too, be lovers in disguise." - George Santayana
"To do the useful thing, to say the courageous thing, to contemplate the beautiful thing: that is enough for one man's life.: - T.S. Eliot
ShiWarrior: Looks like Tricia already knows what problem is. But i wanna write this anyway... i don't know if you use Internet Explorer or not. But after using Firewalls and Virus scanners it's still possible get Spyware, if Internet Explorer has security holes. And if you have installed and use Freeware programs like KaZaA Media Desktop and/or some other Peer-to-Peer File Sharing -programs, those may have spyware/adware inside them. like this KaZaA has at least Cydoor and GAIN(gator) spyware/adware.
Not just P2P File Sharing -programs may have spyware/adware, any Freeware program may have.
So only using SpyBot and/or Ad-Aware you can be sure, that you don't have spyware on your PC.
Is the Evil Angel site safe to go to now? Has this problem been solved and removed from their site? Just wondering as I like to go there to check out future releases, box covers etc.
I went last night about 1:30am Central and the main site seemed to be OK but when I clicked on the gapingangels link under a Christoph Clark DVD listing Norton gave me this info...
Date: 4/5/2004, Time: 1:29:20, Ghengis on AOW The file C:\WINDOWS\reg33 .exe is infected with the Trojan.Noupdate.B virus. Unable to repair this file.
Date: 4/5/2004, Time: 1:29:20, Ghengis on AOW The file C:\WINDOWS\reg33 .exe is infected with the Trojan.Noupdate.B virus. Access to the file was denied.
Date: 4/5/2004, Time: 1:29:26, Ghengis on AOW The file C:\WINDOWS\dlm.html is infected with the Downloader.Trojan virus. Unable to repair this file.
Date: 4/5/2004, Time: 1:29:26, Ghengis on AOW The file C:\WINDOWS\dlm.html is infected with the Downloader.Trojan virus. Access to the file was denied.
The log says "Access to the file was denied.", but I still found them in those locations!?
I've tried to clean it out and make sure there isn't anything left, ran norton 2 times, ad aware once as well as search and destroy. All coming back clean.
Fuser, yeah, I've gotten that one, and the byteverify one twice now. I was going to go check out the new Hellcats boxcover on their site today, but I guess I won't until this problem is fixed.
DenverDon, I have no idea as to the validity of the 70% claim, but I wouldn't doubt it. MS is full of security holes. I mean a huge clue was when they started releasing their Windows versions back in the late 90's with over 60,000 DOCUMENTED bugs. I dont' have the link, I only remember all of the press from the time.
That said, there is no defense against anarchist buttfucks who write and distribute viruses. It's like suicide bombing. Impossible to defend against it 100%.
There are other browsers that are better than IE. I use Avant, which is just an IE add-on, so it doesn't make a difference for me. I do like the options much better.
Mozilla Firefox is not a bad one, though.
I've heard Opera is okay, but I have no experience with it so I can't vouche for it.
I have a firewall just no virus scanner. I use to have one (McAfee) but my system became unstable and I had to reinstall my Windows XP OS and all the apps TWICE! I'm not sure what really caused my system to become unstable, but now that I don't have any virus scanner installed, my system hasn't become unstable and require a full OS reinstall in several months.
Anyways, which virus scanner do you use and recommend?
--
"The lover knows much more about absolute good and universal beauty than any logician or theologian, unless the latter, too, be lovers in disguise." - George Santayana
"To do the useful thing, to say the courageous thing, to contemplate the beautiful thing: that is enough for one man's life." - T.S. Eliot
I had a problem on my old computer with Norton locking it up, but I got a faster computer, and it does fine.
AVG will provide you with some security, but it isn't the best. It is simply something you can do for free. There are also some okay firewalls on ZDnet. Many are free or have minor licensing fees. Firewall Downloads