Important Virus Warning!! Please Read

[Maelstrom]

Mines Decided to play up again, especially on Firefox one minute the site worked the next it won't having to use the poor AOL browser at the minute, did screen cap the message Firefox is saying for whatgood it does:

its basically thinking for a moment then flashing up that message.

Now i've just tried it again and its working on firefox, strange :S i've cleared the history etc too so i dont no what its playing at

 

[Disciple of Nagash]

hmm, neither do I.

I am currently in the middle of doing some further checks. I will see what they bring back and we can go from there. Unless anyone else has any ideas?

Just finished my scan - my computers fine.

 

[Grish]

I think whatever the server guys did, it updated the IP address of the site. MasterSpark had issues connecting, and while helping him determined it was a DNS issue. Basically, the site's IP address changed, and his DNS didn't get the new IP address until later.

Just give it time to propagate and you should be fine.

 

[Disciple of Nagash]

Cheers Grish, was hoping it would be something like that

 

[Malochai]

I seem to have a bit of an issue with symbols on the most pages. It's OK when I first open it, but then when I go back to it, it has different symbols, instead of the drop of blood :

and

instead of

Some of them work properly, but others don't :S

[excuse me if the second pic is what it's supposed to be; I wasn't sure, so I put it in]

 

[doobinator]

If you think you are still infected, here's a littel rpocedure that should work and get rid of any malware processes.

Reboot your PC into safe mode with metworking if your not sure how to do this just tap the F8 key a few times as soon as you start seeing something on the screen after a reboot.

Once rebooted check your home page settings in your browser.

Use this link and down load this little app called rkill.

rkill

Would pay to copy that to a notepad file before rebooting.

Run that program, the give your PC a scan, I would advise downloading malwarebytes anti malware.

run the scan a few times if it finds anything.

 

[ChaosJedi666]

So that all its is, as me and James have had problems connecting. He couldn't get online about an hour ago, and I couldn't last night.
On another note, does anyone know if this virus attack thing has accessed our email address (stored on the site)? Haven't had an issue yet, but has it happened on other sites? ie, distributing virus, etc, through email found on here? (know a tiny bit about computers, so is this possible?)

 

[Malochai]

I don't see that it should have affected my comp overly because I'm using Mac?? But I'm wondering whether it's my comp or as a result of the virus

 

[doobinator]

There's very little chance it would affect macs, they have totally different file systems to a Windows PC. Software written for Windows can't run on Macs.

If you are having DNS issues, try using the open DNS servers instead of your ISP's DNS servers.

Open DNS
208.67.222.222
208.67.220.220

 

[Disciple of Nagash]

I suppose I should make it clear - our host was sold to another company, hence there is some disruption as things change over. As Grish and Doobinator have said, this is due to the new information not reaching everyone yet.

This will be sorted out this weekend

 

[Malochai]

Oh, OK. Sorry

 

[ChaosJedi666]

Alright,so the GDIPFONTCACHEV1 file is alright, its a Microsoft file, if you look at the date created (like mine) it should have been created about the same time you first booted up you're computer. However, does anyone know what FusionCache.dat is? I found it in the same file as IronCache, and the above file.

 

[Skaramak von Carstein]

I also have fusioncache an the gd... file, and also had the iconcache. I have deleted Iconcache, but would appreciate any info on the fusion

Thanks for the heads-up, DoN

 

[Nikos]

Have just tried to come back to the forum and avg blocked me saying the site was a known threat again.

 

[Kirgan]

My AVG is all time stoping me to enter in this site my PC is clean

 

[Santawraith]

Norton just blocked a attack from the sight. Just thought id let ya know my pc is also clean

 

[Count Darvaleth]

It was even harder to load CN today... I even searched on google "Carpe Noctem" and it only had the site "Carpe NoctemBanner1". I had to search vrey specifically to find it.

 

[Disciple of Nagash]

I found some code hiding away and it has been removed. This is getting very tiresome but I am still working at it

 

[Disciple of Nagash]

Ok, as far as I am aware I have located all the malicious code. I have just done a full check on all the files and they are coming up clean. If anyone notices any other security warnings please let me know asap.

In regards to accessing the site - this is NOT a virus issue. This is a DNS issue with our host that is being looked into. In the event the page does not load, just click refresh a few times (I had to click 4 this morning) and the site should come up. The address is not the problem.

 

[ChaosJedi666]

Wow, you are the ultimate admin. Granted, we're still unsure if the site is completely back to a state of perverted wonders, but hats off to DoN. Just noticed there's a Reputation button next to the "Email, PM, Find" ones. When was this updated? (Thinking maybe when the site had last update is might have been accidentally uploaded then by host... any chancee this could be the case DoN, or am I just trying to find a reason for why this happened?

 

[Disciple of Nagash]

Yes as part of the fix I update the site to the latest software. This was going to be done this weekend, but it was done ahead of time as the files were "clean".

This means that I am still working on changing our themes, buttons etc to work with the update.

 

[ChaosJedi666]

Oh, wow, I am liking it! The new Quick Reply, very nice. So, everything is all good now?

 

[Disciple of Nagash]

Virus wise - as far as I know.

Style wise needs work. For example this new reply will be changing back to black very soon.....

 

[ChaosJedi666]

Well then, fingers crossed, and here's hoping its gone. Just, for any wannabe virus-people-things, stay away from Carpe Noctem! Grrr. Looking forward to is, just make sure you get some sleep at some stage Again, very well handled DoN, especially like that you kept us informed about it.

 

[Count Darvaleth]

Umm, DoN, every time I use the website I get the Ironcache again. And if I can't use the site without getting a virus EVERY time, I'm going to have to say cya.