Register | Login
Views: 19364387
Main | Memberlist | Active users | ACS | Commons | Calendar | Online users
Ranks | FAQ | Color Chart | Photo album | IRC Chat
11-02-05 12:59 PM
2 users currently in General Chat: Ailure, Dark Vampriel | 1 guest
Acmlm's Board - I2 Archive - General Chat - NeverEverNoSanity | |
Pages: 1 2 3 4Add to favorites | "RSS" Feed | Next newer thread | Next older thread
User Post
Private Adamant

Hardhat Beetle
Moderator
It's teh fun!!!
Level: 37

Posts: 373/551
EXP: 316129
For next: 22124

Since: 03-15-04
From: Halden, Norway

Since last post: 22 hours
Last activity: 14 hours
Posted on 12-21-04 03:46 AM Link | Quote
Okay, what's going on NOW?

A timed worm seems to be deleting websites all over the internet, and oddly enough, there is absolutely NO information anywhere.

Anyone?
NSNick
Laidback Admin
Level: 85

Posts: 1496/3875
EXP: 5895841
For next: 2699

Since: 03-15-04
From: North Side
School: OSU


Since last post: 9 hours
Last activity: 1 hour
Posted on 12-21-04 03:48 AM Link | Quote
Haven't heard anything about it, but sounds very not good.
Karadur

Fire Snake



Level: 48

Posts: 367/1192
EXP: 786444
For next: 37099

Since: 11-02-04
From: Chatham, Ontario, Canada

Since last post: 1 day
Last activity: 15 hours
Posted on 12-21-04 03:52 AM Link | Quote
I haven't heard anything about it either. It sounds quite nasty though

Let's hope it doesn't hit this place.
Kitten Yiffer

Purple wand
Furry moderator
Vivent l'exp����¯�¿�½������©rience de signalisation d'amusement, ou bien !
Level: 135

Posts: 6774/11162
EXP: 28824106
For next: 510899

Since: 03-15-04
From: Sweden

Since last post: 3 hours
Last activity: 4 min.
Posted on 12-21-04 04:06 AM Link | Quote
...and which sites have been affected by this worm may I ask?

If this really is another worm going around, good timing with christmas and all.

Geez, is this affecting Linux servers? Win NT? FreeBSD? Xserve?(probably not...)

It's not on Slashdot which picks up things like this very quickly.
Private Adamant

Hardhat Beetle
Moderator
It's teh fun!!!
Level: 37

Posts: 374/551
EXP: 316129
For next: 22124

Since: 03-15-04
From: Halden, Norway

Since last post: 22 hours
Last activity: 14 hours
Posted on 12-21-04 04:24 AM Link | Quote
Originally posted by Kitten Yiffer
...and which sites have been affected by this worm may I ask?



Planet Megaman has been affected, at least. Most of that site is down.
Karadur

Fire Snake



Level: 48

Posts: 369/1192
EXP: 786444
For next: 37099

Since: 11-02-04
From: Chatham, Ontario, Canada

Since last post: 1 day
Last activity: 15 hours
Posted on 12-21-04 04:44 AM Link | Quote
Originally posted by Kitten Yiffer
It's not on Slashdot which picks up things like this very quickly.


I've never been one to check that site regularly, if at all, but still I find it odd that it's not been reported more widely I'd sort of expect this thing to show up in the Latest Headlines live bookmark in Firefox, but it's not.

Where exactly did you read about this, Adamant?
alte Hexe

Star Mario
I dreamed I saw Joe Hill last night
Alive as you and me
"But Joe you're ten years dead!"
"I never died" said he
"I never died!" said he
Level: 99

Posts: 2051/5458
EXP: 9854489
For next: 145511

Since: 03-15-04
From: ...

Since last post: 2 hours
Last activity: 2 hours
Posted on 12-21-04 04:46 AM Link | Quote
I've been scanning some interesting boards, and people are blaming mods for deleting important threads.
Kario

In Possession of a Stolen Shovel

Level: 65

Posts: 929/2082
EXP: 2321379
For next: 14249

Since: 03-15-04
From: Texas... Yeehaw!

Since last post: 2 days
Last activity: 17 hours
Posted on 12-21-04 04:52 AM Link | Quote
Odd, even parts of yahoo are down. At first I was going to say it was people not paying bills, but its everywhere.
Colleen
Administrator
Level: 136

Posts: 5693/11302
EXP: 29369328
For next: 727587

Since: 03-15-04
From: LaSalle, Quebec, Canada

Since last post: 3 hours
Last activity: 1 hour
Posted on 12-21-04 05:07 AM Link | Quote
This is the only new worm that I could find on a Google search. So I don't know how accurate those reports are.

Kario: I've always come across random 404's on Yahoo, the pages are usually being updated.
Private Adamant

Hardhat Beetle
Moderator
It's teh fun!!!
Level: 37

Posts: 375/551
EXP: 316129
For next: 22124

Since: 03-15-04
From: Halden, Norway

Since last post: 22 hours
Last activity: 14 hours
Posted on 12-21-04 05:22 AM Link | Quote
Originally posted by Karadur

Where exactly did you read about this, Adamant?


I didn't read about it, I simply found multiple sites with the exact same message all over.

Here, Pokemopolis has been affected as well.

It seems to be a rather recent outbreak, so I guess Slashdot and the other sites simply haven't gotten around to reporting it yet.
Colleen
Administrator
Level: 136

Posts: 5701/11302
EXP: 29369328
For next: 727587

Since: 03-15-04
From: LaSalle, Quebec, Canada

Since last post: 3 hours
Last activity: 1 hour
Posted on 12-21-04 05:26 AM Link | Quote
You sure it deletes the site? It could just be a simple worm that just blocks access to the site with that message (which is STILL serious but not as bad as a total deletion, mind you).
Xkeeper
The required libraries have not been defined.
Level: NAN

Posts: -2914/-863
EXP: NAN
For next: 0

Since: 03-15-04

Since last post: 2 hours
Last activity: -753366 sec.
Posted on 12-21-04 05:32 AM Link | Quote
Originally posted by Colleen
You sure it deletes the site? It could just be a simple worm that just blocks access to the site with that message (which is STILL serious but not as bad as a total deletion, mind you).
If you're going to program a worm to take out a site, it's an awful lot of work for such a small payload.

If I was the person who did this, I would definitely set it to delete everything.

Which is why I will not be making a backup of my site today.
Colleen
Administrator
Level: 136

Posts: 5705/11302
EXP: 29369328
For next: 727587

Since: 03-15-04
From: LaSalle, Quebec, Canada

Since last post: 3 hours
Last activity: 1 hour
Posted on 12-21-04 05:37 AM Link | Quote
It's still an inconvenience, especially if it takes a little while for a fix to come out. If anything, a worm that's only set to do that would probably spread faster than one which performs multiple functions.
Kitten Yiffer

Purple wand
Furry moderator
Vivent l'exp����¯�¿�½������©rience de signalisation d'amusement, ou bien !
Level: 135

Posts: 6778/11162
EXP: 28824106
For next: 510899

Since: 03-15-04
From: Sweden

Since last post: 3 hours
Last activity: 4 min.
Posted on 12-21-04 05:42 AM Link | Quote
Originally posted by Colleen
You sure it deletes the site? It could just be a simple worm that just blocks access to the site with that message (which is STILL serious but not as bad as a total deletion, mind you).
Well, but making it deleting all files is quite simple.

Now, I do wonder what type of server that get's affected. I really hope it's not Apache/Linux... since that's what we run the board on.

Keep in mind, unless you do it through command. Deletion is fast. It just changes a byte in the file header after all...

I just hope it's a known security issue that most servers have fixed...


(edited by Kitten Yiffer on 12-20-04 08:43 PM)
(edited by Kitten Yiffer on 12-20-04 08:44 PM)
Emptyeye
I am a real American!
Real American
Level: 67

Posts: 1145/2273
EXP: 2488421
For next: 104451

Since: 05-24-04
From: I DUNNOOOOOOOO!!

Since last post: 9 hours
Last activity: 4 hours
Posted on 12-21-04 05:46 AM Link | Quote
Given the last line of that message, it almost sounds like there's some website out there generating random worms. O.o
Karadur

Fire Snake



Level: 48

Posts: 371/1192
EXP: 786444
For next: 37099

Since: 11-02-04
From: Chatham, Ontario, Canada

Since last post: 1 day
Last activity: 15 hours
Posted on 12-21-04 05:52 AM Link | Quote
Originally posted by Emptyeye
Given the last line of that message, it almost sounds like there's some website out there generating random worms. O.o


I thought it was talking about there being different builds of the worm You may be right though.

I tried a google search for "neverevernosanity" which didn't return anything at all I looked for stuff on 11th generation webworms after that, but they just returned some biological stuff
Kitten Yiffer

Purple wand
Furry moderator
Vivent l'exp����¯�¿�½������©rience de signalisation d'amusement, ou bien !
Level: 135

Posts: 6784/11162
EXP: 28824106
For next: 510899

Since: 03-15-04
From: Sweden

Since last post: 3 hours
Last activity: 4 min.
Posted on 12-21-04 05:55 AM Link | Quote
That's becuse google hadn't indexed any sites which was hacked. If youre lucky a few sites could have been indexed tomorrow.

I hope a fix is out soon for this problem, unless there already is. The worm could be using lazy admins, who never installs thoose hotfixs.
Emptyeye
I am a real American!
Real American
Level: 67

Posts: 1146/2273
EXP: 2488421
For next: 104451

Since: 05-24-04
From: I DUNNOOOOOOOO!!

Since last post: 9 hours
Last activity: 4 hours
Posted on 12-21-04 05:55 AM Link | Quote
Yeah, I tried to Google for neverevernosanity and came up empty as well.

I doubt there's actually a worm generator out there--though it'd be scary if there were--but that's what someone looking at that message could think. My guess is it comes from some foreign country where the perpetrators don't speak English as their first language.
Kario

In Possession of a Stolen Shovel

Level: 65

Posts: 930/2082
EXP: 2321379
For next: 14249

Since: 03-15-04
From: Texas... Yeehaw!

Since last post: 2 days
Last activity: 17 hours
Posted on 12-21-04 06:21 AM Link | Quote
Its googlebots. They are infected with it.

EDIT: Did a search for it, found somethings.

http://www.terinu.net/
http://www.menshealth.de/home/
http://www.lwwoc.net/
http://home.twcny.rr.com/dwlsbrown/


(edited by Kario on 12-20-04 09:36 PM)
Karadur

Fire Snake



Level: 48

Posts: 372/1192
EXP: 786444
For next: 37099

Since: 11-02-04
From: Chatham, Ontario, Canada

Since last post: 1 day
Last activity: 15 hours
Posted on 12-21-04 06:47 AM Link | Quote
Hmm. I looked at the last one first, and now I'm left wondering who / what 'LoSt' is Out of curiosity, I looked in the source code for that page, and this bit was in comment tags:

"NoN ImPOrtA QuANto SIa buONa uNA PErsOnA, oGNi taNTo tI fErirA'. E peR quESTo bISoGneRa' cHE tU La PErDonI. Ci VOgLiOnO aNNi x CoSTRuIRE lA fIDuCIa e sOLo poKI sECoNdI x dISTruGGerla..."

I thought that was in Spanish, but I tried running it through altavista's translator, to no avail Anyone have any idea what it is in English?
Pages: 1 2 3 4Add to favorites | "RSS" Feed | Next newer thread | Next older thread
Acmlm's Board - I2 Archive - General Chat - NeverEverNoSanity | |


ABII


AcmlmBoard vl.ol (11-01-05)
© 2000-2005 Acmlm, Emuz, et al



Page rendered in 0.007 seconds.