Splices Hacking Link - Important, Please Read

[kyleb]

In BBV and in this forum, a "Hacked" link to a page that had tons of pop-ups and exploits appeared in multiple posts. Many users clicked it, and some 2+2 accounts have been compromised (soko's account for sure).

For those who do not know, I am/was previously 'ColdCaller' for a variety of reasons, and wrote the FAQ about Internet security in the sticky in this forum. I will be reviewing the source code of the exploit and researching the methods of protection and removal you can use in the near future to rid yourself of any problems that may continue to occur and suggest a course of action.

However, I strongly advise anyone who clicked the link to do the following:

1a) Close all running programs, especially web browsers. Ensure that you terminate the processes using the Task Manager (CTRL-ALT-DEL and kill IEXPLORE and Firefox.exe).
1) Run a spyware/adware scan immediately after updating your database.
2) Run a full virus scan after updating your database.
3) Clear your cookies and temporary files.
4) Reboot your computer into safe mode.
5) Change all the passwords on any site you care about (TwoPlusTwo, NETeller, Internet banking, web portals for poker sites).

I will report back with my findings.

[primetime32]

i clicked on one of those links and didnt get any pop-ups. I ran 2 spyware searches and ran an antivirus scan and found nothing unusual on my computer.

By the way, are you saying we should change our passwords in safe mode?thanks

[kyleb]

Yes, in safe mode.

[Dan BRIGHT]

That sounds risky. Why would you change your password on the comp that might be f'd up? Why not go to a friend's secure computer and change all the passwords there?

[kyleb]

That sounds risky. Why would you change your password on the comp that might be f'd up? Why not go to a friend's secure computer and change all the passwords there?

This is a better option if possible, of course.

[StellarWind]

>>> That sounds risky. Why would you change your password on the comp that might be f'd up? Why not go to a friend's secure computer and change all the passwords there?<<<

Remember that if you log onto a poker site from a friend's computer your accounts may be linked forever. Plus you may be linked to the accounts of anyone else who already has or someday will borrow your friend's computer.

[kyleb]

http://www.elitetoplist.com/

This is the group responsible for at least one of the redirects. More information as I find it.

[sublime]

how do we know you are who you say you are? maybe this is part of the ploy?

coldcaller rarely goes three posts beign this nice.

[Phil153]

Change all the passwords on any site you care about (TwoPlusTwo, NETeller, Internet banking, web portals for poker sites).

If a keylogger has been installed, this is the last thing you want to do. If neteller, internet banking etc passwords are NOT saved (and they're usually not), best option is simply not to log on.

[kyleb]

blahblah.digs.it are redirects. Here are the latest 20:

http://www.kickme.to/latest20.php

Some of them include:

» edmiller.has.it 2006-05-29 08:38:36
» splices.knows.it 2006-05-29 08:23:35