Old 8th January 2011, 22:30   #1
Norwood
Member
 
Norwood's Avatar
 
Join Date: May 2010
Posts: 51
This website is infected/cracked

Every page I visit under the winamp.com domain is compromised.

An javascript object coming from http://war-arron.com is attempting to auto-download.

Avast is stopping it from downloading onto my computer but I suggest the admins take a look around...something is up.
Norwood is offline  
Old 9th January 2011, 05:19   #2
Too-DAMN-Much
The Big Bad Boots
(Forum King)
 
Too-DAMN-Much's Avatar
 
Join Date: Dec 2003
Location: 420 Big Buds Way
Posts: 3,965
Send a message via Yahoo to Too-DAMN-Much
your computer is infested, not the forums you half brained twit.

I hate everyone, so you don't have to.
Too-DAMN-Much is offline  
Old 9th January 2011, 06:56   #3
rockouthippie
Banned
 
rockouthippie's Avatar
 
Join Date: Jun 2004
Location: Oregon
Posts: 11,008
Yeah, I don't see anything suspicious. You may have an ad hijacker or something.
rockouthippie is offline  
Old 9th January 2011, 08:59   #4
MSG
Major Dude
 
Join Date: Oct 2006
Posts: 1,892
No need to call him a dimwit, he's actually quite correct. Although it doesn't automatically pop up for me every time, we in the #nsis channel have noticed this infection as well. For Pawel it tried to open war-arron.com. For me it tried to open hxxp://ciriso9********/multi/askzbramasxsgsa6.asx .

It gets even more interesting: winamp admins are deleting threads about this infection. Google for war-arron.com and a thread on here is the first (real) hit. Google reports the last reply to be eight hours before the time of writing this. The same result pops up if you google for ciriso9********. That thread isn't accessible anymore, however!
MSG is offline  
Old 9th January 2011, 09:28   #5
rockouthippie
Banned
 
rockouthippie's Avatar
 
Join Date: Jun 2004
Location: Oregon
Posts: 11,008
Quote:
winamp admins are deleting threads about this infection
That wouldn't be an uncommon practice anywhere. Web sites you think are safe get hacked a lot more often than you'd think.
rockouthippie is offline  
Old 9th January 2011, 11:13   #6
MSG
Major Dude
 
Join Date: Oct 2006
Posts: 1,892
I guess that's what happens when you sell out to the big guys. >_>
MSG is offline  
Old 9th January 2011, 13:16   #7
k_rock923
\m/
(Forum King)
 
k_rock923's Avatar
 
Join Date: Jul 2003
Location: /bin/bash
Posts: 7,852
Send a message via AIM to k_rock923
Quote:
Originally Posted by Too-DAMN-Much View Post
your computer is infested, not the forums you half brained twit.
Actually, he is correct.

Never underestimate the bandwidth of a station wagon full of tapes hurtling down the highway.
k_rock923 is offline  
Old 9th January 2011, 14:19   #8
cooky560
Major Dude
 
cooky560's Avatar
 
Join Date: Dec 2002
Location: Around
Posts: 1,181
Send a message via MSN to cooky560 Send a message via Yahoo to cooky560 Send a message via Skype™ to cooky560
MY A/V app is also blocking connections to war-arron.com from this site, but only this site, and I have no infections anywhere

Cooky560 - Making Pointless Posts since 8/12/ 2002

WWW.
Victory Requires no explanation, defeat allows none.
All that Evil needs to triumph is for good men to do nothing
cooky560 is offline  
Old 9th January 2011, 15:26   #9
MSG
Major Dude
 
Join Date: Oct 2006
Posts: 1,892
Quote:
Originally Posted by k_rock923 View Post
Actually, he is correct.
Is that your opinion, or do you base that statement on any actual fact? Because it doesn't sound like the latter.
MSG is offline  
Old 9th January 2011, 16:14   #10
howisya
Junior Member
 
Join Date: Jan 2011
Posts: 13
i'm getting the same alert for a war-arron.com toolkit. i've only been on this web site, and it's my first time ever hearing of war-arron.com. these forums are infected.

EDIT: now it's coming from an IP address but still only from using this web site.
howisya is offline  
Old 9th January 2011, 16:58   #11
Too-DAMN-Much
The Big Bad Boots
(Forum King)
 
Too-DAMN-Much's Avatar
 
Join Date: Dec 2003
Location: 420 Big Buds Way
Posts: 3,965
Send a message via Yahoo to Too-DAMN-Much
the only sane conclusion here is obvious - the number of half brained twits is quite larger than originally thought.

I hate everyone, so you don't have to.
Too-DAMN-Much is offline  
Old 9th January 2011, 17:05   #12
Mr Jones
Nothing to say...
 
Mr Jones's Avatar
 
Join Date: Sep 2000
Location: UK
Posts: 23,048
There is a problem as identified, it's being 'dealt with', powers that be are aware.

Keep your AV scanners up to date, keep your script blockers up to date etc

End of discussion.
Mr Jones is offline  
Closed Thread
Go Back   Winamp & SHOUTcast Forums > Community Center > General Discussions

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump