[RJARRRPCGP]

Someone over at ocforums.com reported getting a virus after logging on to an
Invision Power Board-based message board.

http://www.ocforums....ad.php?t=486916

This post has been edited by RJARRRPCGP: 18 November 2006 - 12:07 PM

[Martin L]

please dont make me laugh here...

Quote

Powered by Invision Power Board(U) v1.3 Final © 2003 IPS, Inc.

you really think we still have such an old build running here on msfn...? IPB is nearly finished developing version 2.2 and we are running 2.1.x here on msfn...

And another thing is... that site is using a lot of hacks... and those hacks might have exploits...

So the statement that all the IPB boards are "providing" a virus to its users only applies to that site.

[RJARRRPCGP]

Martin L, on Nov 18 2006, 07:09 AM, said:

please dont make me laugh here...

Quote

Powered by Invision Power Board(U) v1.3 Final © 2003 IPS, Inc.

you really think we still have such an old build running here on msfn...? IPB is nearly finished developing version 2.2 and we are running 2.1.x here on msfn...

And another thing is... that site is using a lot of hacks... and those hacks might have exploits...

So the statement that all the IPB boards are "providing" a virus to its users only applies to that site.

No. I believe that a virus writer found an exploit in IPB and managed to inject virus code into the server.
But it appears to only effect Java. (not JavaScript)

Also, I didn't see anything saying if this was an old virus or not. Sounded like a new virus.

The poster over at ocforums.com said that the Java tray icon appears and that it started downloading some data then closed.

I posted this thread, because I have been worried about a virus spree. Because there's a newly discovered exploit that's likely being acted on by a new virus, probably the Workstation service in Windows 2000 SP4 and Windows XP 2002 SP2. (Windows XP 2002 actually is what regular Windows XP non-server is )

I have proof. Look on the box of plain ol Windows XP, it will say 2002. (not the copyright year!)

Apparently 2003 was supposed to be an updated Windows XP, but decided to make a server version only!

This post has been edited by RJARRRPCGP: 18 November 2006 - 12:16 PM

[Aegis]

Quote

Apparently 2003 was supposed to be an updated Windows XP, but decided to make a server version only!

http://www.x86-secre...u/p46xx/x64.png

This post has been edited by Aegis: 18 November 2006 - 12:40 PM

[RJARRRPCGP]

Aegis, on Nov 18 2006, 12:39 PM, said:

Quote

Apparently 2003 was supposed to be an updated Windows XP, but decided to make a server version only!

http://www.x86-secre...u/p46xx/x64.png

I forgot to say with the exception of Windows XP 64-bit Edition. I wished that Microsoft made a 32-bit version of it.

[WBHoenig]

Martin L, on Nov 18 2006, 08:09 AM, said:

please dont make me laugh here...

Quote

Powered by Invision Power Board(U) v1.3 Final © 2003 IPS, Inc.

you really think we still have such an old build running here on msfn...? IPB is nearly finished developing version 2.2 and we are running 2.1.x here on msfn...

And another thing is... that site is using a lot of hacks... and those hacks might have exploits...

So the statement that all the IPB boards are "providing" a virus to its users only applies to that site.

I hate when they do that... using 1.3 is really taking your life into your own hands, especially on a big board.

This post has been edited by WBHoenig: 18 November 2006 - 07:38 PM

[LLXX]

Martin L, on Nov 18 2006, 08:09 AM, said:

please dont make me laugh here...

Quote

Powered by Invision Power Board(U) v1.3 Final © 2003 IPS, Inc.

you really think we still have such an old build running here on msfn...? IPB is nearly finished developing version 2.2 and we are running 2.1.x here on msfn...

And another thing is... that site is using a lot of hacks... and those hacks might have exploits...

So the statement that all the IPB boards are "providing" a virus to its users only applies to that site.

Your server on the other hand isn't that updated...

Server: Apache/1.3.37 (Unix) PHP/5.1.4 mod_auth_passthrough/1.8 mod_log_bytes/1.2 mod_bwlimited/1.4 FrontPage/5.0.2.2635.SR1.2 mod_ssl/2.8.28 OpenSSL/0.9.7a
X-Powered-By: PHP/5.1.4

[#rootworm]

x

This post has been edited by #rootworm: 19 April 2007 - 12:08 AM

[Nuno Brito]

Don't forget that IPB 2.1.7 also has an integrated antivirus tool:
http://forums.invisi...howtopic=223110

[gamehead200]

LLXX, on Nov 19 2006, 09:07 AM, said:

Your server on the other hand isn't that updated...

Server: Apache/1.3.37 (Unix) PHP/5.1.4 mod_auth_passthrough/1.8 mod_log_bytes/1.2 mod_bwlimited/1.4 FrontPage/5.0.2.2635.SR1.2 mod_ssl/2.8.28 OpenSSL/0.9.7a
X-Powered-By: PHP/5.1.4

Apache is the latest 1.x.x.x version on the server. Yes, PHP should be updated. Maybe xper could take a look at that...

Also, may I point out the current version number for Apache: 1.3.3.7

[Tarun]

I like how the first link doesn't even point to anything but a dead thread. The fact that it's a vBulletin forum also makes me believe the original link was changed.