!!

Welcome Guest!

Welcome to Carpe Noctem, the biggest forum dedicated to Vampire Counts in the world! Please take a moment of your time to register if you haven't already done so and get access to member only content. It will also get rid of this annoying banner! If you have already registered please login.

See you around the forum.

Disciple of Nagash
Carpe Noctem Owner and Administrator



Thread Closed 
Important Virus Warning!! Please Read
Author Message
Disciple of Nagash
The Perverted One
Admininstrators
Offline
Trade Count: (0)

Posts: 12,952
Joined: Feb 2008
Reputation: 27
Facebook
Zombies: 14,826.310
       
 

Post: #1
Important Virus Warning!! Please Read

As some of you know Carpe Noctem was subject to a malicious attack by hackers.

They injected various codes and malware into the site. Upon talking elsewhere this seems to be a number of attacks against various forums, we were not alone in this.

Our files have now been cleaned, security upgraded etc, however I am very upset and angry to find out that the code also had a side effect - it is also possible it infected users computers.

Therefore all users should do the following immediately:

Go Computer > (whichever is your operating system hard drive, normally c: ) > Users > (the user you have been logged in under) > AppData* > Local > and then delete any of the following files:

Lgodapupikepe.dmg
IconCache.cmd
Gjegifukinemero.dat

or similar, like it may say IronCache.dat.

*AppData is only visible if you have the Hidden Folder options ticked to show hidden folders. This can be done in the Control Panel.

Once you have deleted those folders I highly recommend you run a deep scan you with antivirus and antimalware. For reference I have Kapersky installed as my AV, the following antispyware programs are also very good and I recommend having them both installed as between them they pick up most of the malwares:

http://downloads.cnet.co.uk/view/securit...-39282203/
http://downloads.cnet.co.uk/view/securit...-39187157/

You should then be ok.

Please be reassured that CN is now clean and safe to browse, though of course if anything else is noted please please tell me asap.

Finally, even though it was not CN at fault as many forums were attacked, I would like to sincerely apologise to all my members for this. I do not like thinking people were infected by visiting this site and I assure you all measures will be taken to ensure this does not happen again.

If anyone needs any help with this, any queries please post them here and I will do my best to help.

Cheers

Disciple of Nagash


P.S: At least the smilies are working again wink

Disciple of Nagash, the perverted master,
The more you struggle, the more he goes faster.
Give him breast, and give him bust,
The more you give the more he thrusts.
And as you all shall soon see, there is nothing that he will not conceive
Whether dark or whether weird, its guaranteed to make you real
But in the end we all see, he is the forum master and perverted seed.
Written by Mr Nightwere
(This post was last modified: 08-17-2010 11:36 PM by Disciple of Nagash.)
08-17-2010 11:36 PM
Find all posts by this user
Mioum
Black Knight
Offline
Trade Count: (0)

Posts: 188
Joined: Jul 2010
Reputation: 3
Zombies: 256.070



Post: #2
RE: Important Virus Warning!! Please Read

Thanks for the warning.

I've looked around and I haven't found any of those file, the AppData folder only contain folder but none of them are named "local", and none of the other have those files so I hope it's good.

But I will run AVG, Ad-Aware and Spybot, and I might try those you linked.


****

Just as I was looking again during my post, I've found that Local Setting (hidden folder after User) is where it is for me.

So for me it's : User > Local setting (hidden folder) > App data > here is a IronCache file.

Weird as it said created in 2008, modified in 2009, and accessed today.

There's two ".dat" files there too but not of the name you give:

GDIFONTCACHEV1.dat
prvlcl.dat

I have no idea if those are good or not though.

My army log!
Tale of painters log (Tomb Kings)
08-18-2010 12:58 AM
Find all posts by this user
Bravo_10
Vau: The Masque of Death
Global Mod
Offline
Trade Count: (0)

Posts: 1,089
Joined: Jul 2010
Reputation: 8
Zombies: 1,437.230

 

Post: #3
RE: Important Virus Warning!! Please Read

Is this problematic for Macs too?

It's a bit trickier to see Hidden Folders on MacOS, so I'm going to have to trust my virus software for now.

[Image: CN_banner2.jpg]

Vau: The Masque of Death

New to CN? Have no fear, for Bravo_10 is here! smile Useful links:
- Glossary of Terms
- Armylist Posting Rules
- WFO Rules
08-18-2010 01:07 AM
Find all posts by this user
Bishop
VAU:Lorenzo_Moreitto
Admininstrators
Offline
Trade Count: (0)

Posts: 2,633
Joined: Feb 2009
Reputation: 12
Zombies: 7,121.980



Post: #4
RE: Important Virus Warning!! Please Read

Thankfully, I didn't find anything.

DON - Do you have an actual security/threat report/link (like from a AV/security type site)? - for those of us that are more technical grin

Also, I would like to recommend the following:

Avast (Anti-virus software)
Ad-Aware (anti-malware software)

and PSI Secunia is a REALLY handy utility (it reports known software/security issues and in many cases simplifies the "fix"ing process)

Fantasy: Vampire Counts - 5k, Bretonnians - 3k, Dark Elves - 2k, Beastmen - 2k
40k: Eldar - 6k+, Chaos (Emperor's Children) - 3k, Dark Eldar - 2.5k, Sisters of Battle - 2.5k,

My Biel-Tan Eldar (2k - Mixed list)


[Image: CN_banner2.jpg]

Useful links:
CN's general forum rules | CN's army list posting rules | CN's WFO rules | CN's F.E.A.R. (FAQ)
(This post was last modified: 08-18-2010 01:42 AM by Bishop.)
08-18-2010 01:37 AM
Find all posts by this user
Gnorg
Holder of the Doom Ghulf
Offline
Trade Count: (0)

Posts: 46
Joined: Jul 2010
Reputation: 0
Zombies: 16.620



Post: #5
RE: Important Virus Warning!! Please Read

Hmm, wonderd why my AVG popped when enterd erlier. Well, i'ma uppdate and scan asap, some might gotten throu.

"....Wut? I still get my armor save though, right?"
"No silly. Your tank just turned into a microwave. You're done."
- Onikaigo about Steamtanks
08-18-2010 01:40 AM
Find all posts by this user
uglybug
Banshee
Offline
Trade Count: (0)

Posts: 220
Joined: Aug 2010
Reputation: 1
Zombies: 219.950



Post: #6
RE: Important Virus Warning!! Please Read

Thanks I found 2 of the files that you warned us about.
08-18-2010 02:16 AM
Find all posts by this user
Coyote
Wraith
Offline
Trade Count: (0)

Posts: 321
Joined: Aug 2009
Reputation: 3
Zombies: 452.720



Post: #7
RE: Important Virus Warning!! Please Read

Another Mac/Android user here. Is this a multi-platform threat?

"If the Truth can be Told, so as to be Understood, it WILL be Believed..." - T. McKenna
08-18-2010 03:35 AM
Find all posts by this user
Yanda
Hot Uncensored Panda Sex Below
Offline
Trade Count: (1)

Posts: 341
Joined: Mar 2010
Reputation: 2
Zombies: 505.200



Post: #8
RE: Important Virus Warning!! Please Read

AVG antivirus was popping me for me earlier while I was viewing the site, I just assumed it was from one of the 20 torrents ive downloaded in the last day or two because my favorite steaming website got taken down sad

Current:
- Dming DnD 3.5 Eberron Campaign
- Magic the Gathering
08-18-2010 03:58 AM
Find all posts by this user
The Wife
Ghoul
Offline
Trade Count: (0)

Posts: 39
Joined: Aug 2010
Reputation: 0
Zombies: 13.100



Post: #9
RE: Important Virus Warning!! Please Read

I can so sympathise....when James and I were running the poet's library, he got hacked and had the same thing happen. Talk about a disaster.
Both our computers are clean, though. Thank goodness!

If you love something, let it go.
If it loves you, it will come back for revenge.

Real Men wear pink
Vannahs Creations Facebook

[Image: zombie-advert.png]
08-18-2010 05:11 AM
Find all posts by this user
Malek
Zombie
Offline
Trade Count: (0)

Posts: 4
Joined: Aug 2010
Reputation: 0
Zombies: 7.660



Post: #10
RE: Important Virus Warning!! Please Read

dam it! i only just signed up last night!
thanks for the head up DON, have located and destroyed files

hows that for a first post :S
08-18-2010 06:30 AM
Find all posts by this user
Count Darvaleth
Beethoven Fanboy
Global Mod
Offline
Trade Count: (0)

Posts: 2,178
Joined: Apr 2010
Reputation: 8
Zombies: 1,260.750



Post: #11
RE: Important Virus Warning!! Please Read

(08-18-2010 12:58 AM)Mioum Wrote:  Thanks for the warning.

I've looked around and I haven't found any of those file, the AppData folder only contain folder but none of them are named "local", and none of the other have those files so I hope it's good.

They're still there! They're inside local! That's where I found them! Inside local, hidden! Naughty viruses!!!!

And DoN, I had the same problem trying to load CN again today... but I think it might just be stupid Google Chrome.

And yes... smileys! tonguecheesygrinGravestone.GIFThumbs UpVampire3Perv

[Image: CN_banner2.jpg]

Moderator of the Chronicles of Death Forum.

If you have queries/problems with any and all things background, come see us. There is also a forum for you to post your own fiction up (which we like...!) and even a roleplaying forum; see each for more details. Hope to see you there!
08-18-2010 07:40 AM
Find all posts by this user
Disciple of Nagash
The Perverted One
Admininstrators
Offline
Trade Count: (0)

Posts: 12,952
Joined: Feb 2008
Reputation: 27
Facebook
Zombies: 14,826.310
       
 

Post: #12
RE: Important Virus Warning!! Please Read

I also recommend all users clear their cache and saved files in their browers as well

Disciple of Nagash, the perverted master,
The more you struggle, the more he goes faster.
Give him breast, and give him bust,
The more you give the more he thrusts.
And as you all shall soon see, there is nothing that he will not conceive
Whether dark or whether weird, its guaranteed to make you real
But in the end we all see, he is the forum master and perverted seed.
Written by Mr Nightwere
08-18-2010 07:52 AM
Find all posts by this user
artisturn
Banshee
Offline
Trade Count: (0)

Posts: 228
Joined: Jun 2009
Reputation: 0
Zombies: 270.280



Post: #13
RE: Important Virus Warning!! Please Read

well that explains why Java kept trying to update when I visited the forum.

Ran AVG and it found and solved the problems.

Gravestone.GIF eighth edition scoreboard Gravestone.GIF
Orcs and Goblins: victories - 6 , losses - 3 , draws - 2
Vampire Counts: victories - 2 , losses - 12 , draws - 2
08-18-2010 07:53 AM
Find all posts by this user
MasterSpark
Infinite Nightmare
Global Mod
Offline
Trade Count: (0)

Posts: 3,756
Joined: Nov 2008
Reputation: 16
Zombies: 4,362.820
   
 

Post: #14
RE: Important Virus Warning!! Please Read

Have the appearance of CN changed for you guys as it has for me? I'm talking mostly about a few of the site's icons, they seem to have reverted back to their former un-stylized selves. I did remove a file named IconCache.db (too close for comfort), might this have brought about the change to CN on my part? Did I chuck out a database here? -_-

......[Image: MarisaGif3.gif]
Tomorrow will be special.
Yesterday was not.
------------------------
Forum Rules (please read)
(This post was last modified: 08-18-2010 08:25 AM by MasterSpark.)
08-18-2010 08:21 AM
Find all posts by this user
Count Darvaleth
Beethoven Fanboy
Global Mod
Offline
Trade Count: (0)

Posts: 2,178
Joined: Apr 2010
Reputation: 8
Zombies: 1,260.750



Post: #15
RE: Important Virus Warning!! Please Read

(08-18-2010 08:21 AM)MasterSpark Wrote:  Have the appearance of CN changed for you guys as it has for me? I'm talking mostly about a few of the site's icons, they seem to have reverted back to their former un-stylized selves. I did remove a file named IconCache.db (too close to what DoN described for comfort), might this have brought about the change to CN on my part?

Were there two other funny files next to it? They were bad as well. Check their time of modification (just press delete and read the are u sure? bit) and they all came onto your computer around the same time. Kill them all!

And yes, also changed appearances.

[Image: CN_banner2.jpg]

Moderator of the Chronicles of Death Forum.

If you have queries/problems with any and all things background, come see us. There is also a forum for you to post your own fiction up (which we like...!) and even a roleplaying forum; see each for more details. Hope to see you there!
08-18-2010 08:24 AM
Find all posts by this user
MasterSpark
Infinite Nightmare
Global Mod
Offline
Trade Count: (0)

Posts: 3,756
Joined: Nov 2008
Reputation: 16
Zombies: 4,362.820
   
 

Post: #16
RE: Important Virus Warning!! Please Read

I actually didn't catch the latest modification date on the file, but of all those that are still there, the most recent one dates back to August 4th.

Oh well, running my scanners and stuff all the same~

......[Image: MarisaGif3.gif]
Tomorrow will be special.
Yesterday was not.
------------------------
Forum Rules (please read)
08-18-2010 08:28 AM
Find all posts by this user
Count Darvaleth
Beethoven Fanboy
Global Mod
Offline
Trade Count: (0)

Posts: 2,178
Joined: Apr 2010
Reputation: 8
Zombies: 1,260.750



Post: #17
RE: Important Virus Warning!! Please Read

Oh ok, I had another couple of weird files right next to it, in the Local folder...

[Image: CN_banner2.jpg]

Moderator of the Chronicles of Death Forum.

If you have queries/problems with any and all things background, come see us. There is also a forum for you to post your own fiction up (which we like...!) and even a roleplaying forum; see each for more details. Hope to see you there!
08-18-2010 08:29 AM
Find all posts by this user
ChaosJedi666
Jedi
Offline
Trade Count: (1)

Posts: 345
Joined: Feb 2010
Reputation: 1
Zombies: 398.140



Post: #18
RE: Important Virus Warning!! Please Read

Well, I'm relieved a bit, checked and haven't found any of those folders. Running AVG now though, just to be safe. Don't know if it'll do much good, but have upped my Firewall security aswel. What do these codings do? Are they just there to unleash havoc on my system, or intended to get my online banking details etc?

Edit - Thanks for the warning DoN. To follow suit, Bullguard seems to be doing really well. I think it is 10x better than anything else I've used in the past. Has found things Norton didn't, and is very easy to use. Has anyone had any bad experiences with Bullguard?
Virus scan came up clear. Will recheck it over the next couple of days though, just to be sure. Better safe than sorry

[Image: CN_banner3.jpg]
(This post was last modified: 08-18-2010 11:18 AM by ChaosJedi666.)
08-18-2010 09:01 AM
Find all posts by this user
Danceman
The Devil in Pale Moonlight
True Bloods
Offline
Trade Count: (0)

Posts: 1,703
Joined: Aug 2007
Reputation: 5
Zombies: 1,968.910
   


Post: #19
RE: Important Virus Warning!! Please Read

I appear to be unaffected. None of the files mentioned above.

I also would like to give a plug to Avira Antivir. Served me well in the past and its scans are very thourough(ie, found and removed things that ad-ware couldn't).

Thanks for the heads up, DoN.

"The blade itself incites to acts of violence" - Homer.
08-18-2010 09:48 AM
Find all posts by this user
Maelstrom
Grave Guard
Offline
Trade Count: (0)

Posts: 77
Joined: Sep 2009
Reputation: 0
Zombies: 106.040



Post: #20
RE: Important Virus Warning!! Please Read

Cheers for the heads up DoN, Norton popped up with a intrusion blockage warning when I came on here the other day. Since then i haven't been able to get onto the Site in either Firefox or IE.

Today I managed to use the old AOL browser I've got to get on here and read this, wiped my browsing history out in firefox and now the site works fine on it smile

Think I've been lucky and Norton stopped it before the files were planted as i Can't find any trace of them

The Rising Sign - My blog
08-18-2010 10:20 AM
Find all posts by this user
Thread Closed 



Forum Jump:


User(s) browsing this thread: 1 Guest(s)