RSC?

I know the site is down till monday but I was just curious as to what (I'd expect) major changes are happening?

"Mitch_A" <[email hidden]> wrote in news:6Ha_b.1341$[email hidden]: > I know the site is down till monday but I was just curious as to what > (I'd expect) major changes are happening? > > > I didn't hear anything about any changes, major or minor, just server maintenance by the hosting company. Somebody else know more? dave henrie

Quoted text (10 lines)

> > I know the site is down till monday but I was just curious as to what > > (I'd expect) major changes are happening? > > > > > > > > I didn't hear anything about any changes, major or minor, just server > maintenance by the hosting company. Somebody else know more? > > dave henrie

On friday the RSC main site was offering some kind of XXX toolbar, although blocked by my rather tight IE settings. I wonder if the advertising provider was cracked or something... -- MT

"Mika Takala" <[email hidden]> wrote:

Quoted text (10 lines)

| > > I know the site is down till monday but I was just curious as to what | > > (I'd expect) major changes are happening? | > | > I didn't hear anything about any changes, major or minor, just server | > maintenance by the hosting company. Somebody else know more? | | On friday the RSC main site was offering some kind of XXX toolbar, although | blocked by my rather tight IE settings. | | I wonder if the advertising provider was cracked or something...

Perhaps. When I was browsing on Friday, it was normal, then I refreshed a page and the displayed message was (something like) "Down for a few minutes due to spyware." A while later, the forums were gone entirely. It seems pretty serious, and the current message says Monday -- at the earliest. -Brent

This explains why on Firday, my machine equipped with Trojan Hunter Guard, found something (forgot what it called it...though) Just as Trojan hunter alerted me I needed to do a complete scan, Symantec System Protect warned, RS.exe, which was detected as Downloader Trojan was found. I was looking for info on NetKar... But I didn't make the connection to RSC and the problem... I still dont know for sure... but if I'm right, you better check your machines for Downloader.Trojan, at least. I will try and hunt down the log I forgot to save, about what Trojan Hunter found... Brent Burton wrote:

Quoted text (25 lines)

> "Mika Takala" > <[email hidden]> wrote: >>>> I know the site is down till monday but I was just curious as to >>>> what (I'd expect) major changes are happening? >>> >>> I didn't hear anything about any changes, major or minor, just >>> server maintenance by the hosting company. Somebody else know more? >> >> On friday the RSC main site was offering some kind of XXX toolbar, >> although blocked by my rather tight IE settings. >> >> I wonder if the advertising provider was cracked or something... > > Perhaps. > > When I was browsing on Friday, it was normal, then I > refreshed a page and the displayed message was (something like) > "Down for a few minutes due to spyware." > > A while later, the forums were gone entirely. > > It seems pretty serious, and the current message > says Monday -- at the earliest. > > -Brent

Some snippets of info I've seen... >http://www.vbportal.com/forums/showthread.php?s=&postid=63642#post63642A post by Tim Wheatley Well what they did on our site is injected code (for a p*rn dialler and toolbar) into an inline frame on our mainpage. A member of forum staff in Australia then called someone in Denmark, who called our sysadmin and he called our host who then shut the server off until I could find out what it was, so we've decided to keep it off until Monday when out sysadmin gets back from holiday and he can update (I think it better than users don't have a load of crap installed on their PC). Until then I know little more than I've said... Though I would expect vbulletin.com to be back sooner than that and to have more info... Anyway that's what happened with us... ------------------------------------------------------------------------------ >http://www.net-security.org/vuln.php?id=3257vBulletin PHP Forum Cross Site Scripting Vulnerability Posted on 16 February 2004 Software: vBulletin PHP Forum Version Vendor: Jelsoft Enterprises Ltd http://www.vbulletin.com Versions: 3.0.0 Release Candidate 4 Platforms: Unix/Windows Bug: Cross Site Scripting Vulnerabillity Risk: Low /* Guess it's not that low of a risk after all .... :) */ Exploitation: Remote with browser Date: 24 Jan 2004 Author: Rafel Ivgi, The-Insider e-mail: the_insider a mail.com web: http://theinsider.deep-ice.com ------------------------------------------------------------------------------ >irc://irc.boomtown.net/racesimcentral (2004-02-23 10:41 EET)10:41 < JGent> :) have the problems been fixed now O trollo O forum God :) 10:41 < Trollo> well im sick and they are working on it at work as we speak 10:42 < JGent> ah right, what was the problem if your allowed to tell me 10:42 < Trollo> JGent : i dont know at all all i heard is they are building a new server just for RSC. 10:42 < JGent> I think mathew Gold... something was looking for you trollo, he was a trackmaker for generally 10:43 < JGent> dunno if it was for anything important 10:43 < JGent> I bet the new server is UBER 10:43 < Trollo> okay JGent 10:43 < Trollo> it is uber ------------------------------------------------------------------------------ Hopefully they're back soon bigger and faster than ever :) Atleast Tim got few days of rest from all the admin stuff, sometimes it seems RSC is he's fullday job, and Kim's and Mikkel's and Phil's and all the other admin's and mod's :) And they do that without pay....... Pitty they only give creditcards in Finland only to people who wouldn't really need "credit"cards... no possiblity of paypalling them a donation... :(