Re-direct to Lycos?

[drfsupercenter]

Glad the mods knew what it was, not like "wtf is this thing" LOL

[blutach]

It may not be over yet guys. I thought I had it under control last night when I went to bed but now this kerfuffle erupts over cynthia and uufta's sig.

We'll keep on top of it though.

Regards

[drfsupercenter]

I wonder what admin has to say... and what his solution is.

[photo_angel2004]

I had my Norton fire wall turned off last night, hell thought I was safe on this site. I have had it turned on today and so far no problems.

[photo_angel2004]

Lets hope he dosnt

[drfsupercenter]

Ultimately that can happen for anything. But, if they require email confirmations (don't remember if I had to activate my username) then that eliminates some problems, though people can easily use Yahoo to get free emails.

There is no surefire way to ban any given person, if they are determined, they can get around stuff.

[admin]

I've been travelling, didn't notice this thread until cynthia just reported it. Still not quite sure how user's sigs are being changed, but it might also be a good idea to change your passwords just in case for those that have been "affected".

Because I don't know what an infected link looks like, I don't know how to search for it. If it contains the keyword "cookie", then I did a search, and there are no more users with this sig.

There is actually a file on cybermare's website that logs all the activities, and all the users that were "logged" - all the details there comes from the cookie files that vBulletin sets for forum logins, and the information there might be used to login into user's accounts, so hence the password change.

As for preventing it from happening, I still need to learn more about it to find out how it happens, but as a pre-caution, you should upgrade/patch your browser to the latest version and also check your "privacy" settings in IE ("Advanced" options about accepting third part cookies). No one should be able to read your cookies (most login cookies contain information that can be used to "fake" your login) unless you let them.

[blutach]

The script is in the thread in mods forum admin.

Regards

[admin]

Ok, I've seen the thread in the mods forum and I think I know how the content of each user's forum login cookie gets logged. Again, change your passwords so that the logged information is no longer valid.

[photo_angel2004]

is this what you want all users to do for the loggin passowrds or just those that were affected by this. ? Thanks

[blutach]

Certainly the affected ones - jack L, myself, chewy, cynthia and uufta.

Regards

[admin]

Yes, mainly the people that had their sigs changed, but if you want to be sure, you should change your password as well. In fact, change your password every few months is a good idea.

These users have been logged (although not all of them had their sigs changed) from the log file found on cybermare's website - it's not a complete list:

drfsupercenter
Chewy
cynthia
Jack Lurker
uufta
Derree
moonrocks
Miss Marple
FallenAngel
fritzi93
trimik
Fl_Gulfer

[photo_angel2004]

WOW I wonder If mine will be on that list. I am changing my password.

[Gary D]

FYI

http://forum.digital-digest.com/showthread.php?postid=376614#post376614

Any connection??

[blutach]

Doubtful. We know the problem was a malicious script by cybermare in his signature.

Regards