Data Realms Fan Forums
http://forums.datarealms.com/

DataRealms Website Malware Warning
http://forums.datarealms.com/viewtopic.php?f=48&t=31195		 Page 3 of 3
Author:  Daman [ Wed Jun 27, 2012 11:06 am ]
Post subject:  Re: DataRealms Website Malware Warning
Did you actually find the breach? Did you grep -ri "base64_decode" . ? Check to see if it was done via SQL injection by grep -i the logs for "OUTFILE" / "DUMPFILE", alternatively "EXEC", alternatively http://code.google.com/p/apache-scalp/ , alternatively take the professional route and install an intrusion detection system
Author:  scancode [ Wed Jun 27, 2012 4:58 pm ]
Post subject:  Re: DataRealms Website Malware Warning
It was way less exciting than that.
FTP password was compromised. All relevant passwords were changed and computers are being scanned for malware.

I did check the rest of the site for base64'd content, iframes, and external scripts. Everything seems to be clean.

I guess I *could* install an IPS, but that's up to the serverguys.
Author:  Data [ Thu Jun 28, 2012 9:46 am ]
Post subject:  Re: DataRealms Website Malware Warning
yet again, scannie saves the day! thanks dude
Author:  Azakan [ Thu Jun 28, 2012 7:12 pm ]
Post subject:  Re: DataRealms Website Malware Warning
Scancode is indeed worthy of a imaginary statue for his heroic deeds.

Also I guess the extreme slowness of the forums are gone now?
Author:  Harzipan [ Thu Jun 28, 2012 7:24 pm ]
Post subject:  Re: DataRealms Website Malware Warning
It's been gone for awhile. At least for me.
Author:  Natti [ Thu Jun 28, 2012 8:23 pm ]
Post subject:  Re: DataRealms Website Malware Warning
Harzipan wrote:
It's been gone for awhile. At least for me.
Author:  Azakan [ Thu Jun 28, 2012 9:10 pm ]
Post subject:  Re: DataRealms Website Malware Warning
I meant like, FOREVER! But yeah, I havent notised it either but it used to come and go.
Page 3 of 3 All times are UTC [ DST ]
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
http://www.phpbb.com/