Warning - Invader
smif
[RO]
Pentru cei care folosesc Mozilla Firefox (indiferent de versiune se pare) exista o problema cu accesarea http://wiki.erepublik.com
Am auzit problema asta de la cativa cetateni inclusiv americani si finlandezi (Hi Publius and Erwin S) pe canalul comunitatii romanesti de pe irc, rizon network, #eRO
Am incercat sa refac pasii enuntati de cei cu probleme, si am observat ca odata cu accesarea wiki, de pe un browser Firefox, se downloadeaza si sa incearca sa se ruleze un fisier a.exe in C😕
windows\system32\ si pe care Kaspersky il recunoaste ca un invader, si din cauza caruia firefox ia crash pe sisteme dotate cu norton anti virus sau nod32.
Atentie la neatentie, e posibil sa fie vreo infectie facuta de cineva dinauntrul jocului, de aceea va recomand sa va uitati cu atentie la tranzactiile facute de contul dumneavoastra, daca observati ceva ciudat, schimbati parola si dati report imediat la administratori.
Ziua buna,
smif
Your average joe
[EN]
For the ones using Mozilla Firefox web browser (no matter the version installed) there seems to be a problem accesing http://wiki.erepublik.com
I heard of this problem while I was on #eRO, the romanian community irc channel based on rizon network, with citizens like Publius and Erwin S complaining about this problem.
I did the same steps as they told me that they have already done, and it seems that while on a Firefox browser , when you reach wiki.erepublik.com an a.exe file is being downloaded on c😕
windows\system32\ and is being loaded. The Kaspersky is reading this thread as an invader, thus you should be very carefull and if you visited wiki.erepublik you should pay close attention to your transaction and if you find anything suspicious, exchange your account password immediately and report it to the administrators.
Also a full computer scan is in need.
Kindly regards,
smif
Your average joe
Comments
Baga si in engleza!
Votat - Important de stiut.
Ok sa vedem despre ce este vorba
dupa ani si ani cum spunea cineva...
este vorba de JQS.exe
http://www.processlibrary.com/directory/files/jqs/" target="_blank">http://www.processlibrary.com/directory/[..]jqs/
Pentru ca baietii de la eRepublik folosesc un anume fisier de la SUN.com FF da crash...🙂
So no worry there....🙂
Voted.
vaesir, este vorba de a.exe nu jqs.exe
mi s-a intamplat si mie! este un program "a.exe"
din fericire programul antispy l-a detectat si i-am dat kill process.
Mie ieri mi-a disparut run-ul. (si nici acm nu a revenit)
La un moment dat inca era prezent dar cand am dat sa-l deschid mi-a zis ca nu am autoritatea necesara pt acea comanda 🙂
Si in plus, din senin a aparut o fereastra din aia neagra cu text in ea si s-a rulat rapid un script... si pe urma s-a inchis. Mi-a cam dat fiori...
Au legatura?
adiemus, un scan la calculator urgent, YOU HAVE BEEN INFECTED!
Si cu tot respectul pentru Pan Hallipa cred ca ai bitdefender 😁
de aia nu vede nimic.
lol, ce bine ca nu intru pe wiki😁
am facut si un trace back la IP-ul de unde se incarca "64.202.102.97" si mi-a aparut asta http://whois.domaintools.com/64.202.102.97" target="_blank">http://whois.domaintools.com/64.202.102.[..]2.97
adimeus,actioneaza rapid pana nu strica tot calcu ,poate ai salinity si e rau
cat despre acel "a.exe" see info here: http://www.processlibrary.com/directory/files/a/" target="_blank">http://www.processlibrary.com/directory/[..]s/a/
este un worm ce se transmite mai mult prin e-mail
Hi smif. 🙂
bugrepublik becomes wormrepublik. 🙁
Foloseste in continuare Avast 🙂
Ca si Adiemus foloseste 😁
Si uite unde a ajuns 😛
In schimb Kaspersky imi arata CLAR fisierul a.exe, si mai sunt cateva antivirusuri care merg, altele decat Avast.
Sorry for breaking your perfect world but your AV sucks.
It's Fired Fox then.
Cand folosesc IE nu pot modifica salariile sua concedia angajatii. Practic imi dispar cele doua butoana "Update" si "Fire"
Cu Mozilla merge
Thanks for information. VOTED
i use google chrome and i got a major problem after i access the wiki to check some info, can not open wiki or something else, so i just uninstall google chrome and go back to IE something was wrong today
thanks for the heads up
I also got into it... 🙁
bine de stiut
smif - folosesc Avast si am deaschis wiki cu Opera 9.2,IE 7 si FF 3.5.2
La nici unul nu mi-a aparut asa ceva.
in taskrun nu am nici un executabil "a"
Opera imi da o singura eroare, la fel ca si FF la Shockwave.
ce bine ca nu intru pe wiki 😁
(nici nu stiu daca am intrat de mai mult de 2-3 ori pe wiki de cand am intrat in joc) 😃
apai asa nush daca reusim sa mai aducem jucatori noi...cand afla ca se aleg cu un worm daca vor sa stie ceva despre joc 😃
Eu am NOD,si nu am nici o problema,oricum VOT!
Dap NOD never failed me also.
folosesc linux 😁))))))
crap
Kaspersky for the win.
Io folosesc Avira + AVG.
Sper ca am reusit sa scap de problema...
yepp, usef irewall and scanners at least... 😃
Risk Assessment😕ow/2(0-5)
"This worm spreads via AOL Instant Messenger and (MS03-040) unpatched Internet Explorer browsers."
lool 😁
ER is a free web browser game ..not free of worms it seems
multzam de informatie... bine ca am ramas cu IE8, ca nu pot tolera schimbarea de browser 😁
@smif ok ti-am urmat sfatul si am cumparat Kars...surpriza nu am nimic infectat....🙂
Iar daca vrei sa stii my perfect world este ca pana acum 5 luni nu foloseam nimic. Si acum Avastul il deschid numai cand imi aduc aminte.
Nu imi este niciodata frica de un worm sau trojan si mai ales nu dau click ca "vita" pe orice link imi apare pe web.
o singura data in viata mea am luat un virus urat si atunci a fost din cauza ne-atentiei.
Cat despre ce antivirus este bun....in acest domeniu nu poti sa faci o comparatie.Toate sunt bune la un moment dat si apoi cad.
De exemplu cel mai bun pana acum este Norton. De care anul trecut toata lumea fugea de parca era frate cu draku..🙂
yeah long story short.
you have the "a.exe" in the Taskrun List?
Do what this guys tell you to do:
http://www.symantec.com/security_response/writeup.jsp?docid=2003-051914-5016-99&tabid=3" target="_blank">http://www.symantec.com/security_respons[..]bid=3
@Cornny: parerea mea e ca e plin de buguri jocul, uneori dai work si iti mai arata apoi ca trebuie sa muncesti...si altele.btw, mie in IE mi se inchide pagina cand accesez jocul.
La mine BitDefenderul nu l-a vazut. Noroc ca imi ruleaza si SpyBot (program gratuit...) care l-a detectat imediat + crash pe firefox.
ok smith, am da-t 😁)))))
Symantec agrees: http://safeweb.norton.com/report/show?url=erepublik.com" target="_blank">http://safeweb.norton.com/report/show?ur[..]k.com
folositi opera si nu aveti probleme
VOTAT! bravo smif, AGAIN!
FOLOSITI CU INCREDERE MOZILLA ZOLIfox...cel mai bun browser...TRADUCE BINE DIN ROMANA/ENGLEZA, in UNGURESTE🙂 da invers nu, ca are bug-uri😁
ZOLI comenteaza la ai tai acolo 😁 aia "hun"...sau ce sunteti voi de fel😁
poate comentezi ZZZOOOLLLIII😁 te votez presedinte peste buda -pesta😁 ca atat va mai fi ungaria in ceva vreme😁 din tot pEACE-ul😁
thx voted and subscribed
I noticed somthing was worng when my firewall started going nuts...
Oh and voted.
Seems that the trojan it uploads is a.exe. msa.exe has also been reported but it could be another trojan that a.exe uploads. Couldn't find anything on my computer so I assume the browser crashing was a safety measure that stopped the virus from infecting the system.
Haven't gotten any problems on Opera.
Am FF 3.5.2 si nu mi se intampla nimic si chiar eram curios... de unde pot face si eu rost de acest a.exe ?
Voi ce versiuni de firefox aveti de sunteti afectati ?
Just got a message from an amigo at eRep.
All users need to clear their cookie + cache.
From the admins:
"This issue was solved, all the sites from that server were cleaned and moved to another server. But all Wiki users still report problems with the Wiki mostly (because their cache still keeps the malicious code). "
I want to personally thank all of the wiki editors that reported this issue. I didn't know my "baby" was so sick!!!! (I hope it wasn't swine flu).
sunt fericit! lucrez pe macintosh!
http://www.erepublik.com/en/newspaper/ad[..]37/1" target="_blank">http://www.erepublik.com/en/newspaper/ad[..]37/1
Ziarul Oficial al Ambasadei eMoldovei in Romania.
Subscribe, vote &comment.🙂
9/11 – TERROR – TERRORISM – FALSE FLAG OPERATIONS
http://www.erepublik.com/en/article/9-11-terror-terrorism-false-flag-operations-935454/1/2" target="_blank">http://www.erepublik.com/en/article/9-11[..]4/1/2