Removed

[norfie]

[Maxwish]

thanks for this info. I have removed the main page at once!

I have no idea what's going on, yet

[Maxwish]

I'm comparing the website's code on the free.fr server to the local code on my PC, to find out if somehow something was changed/hacked.

I will also check the database to see if malicious code was injected somewhere.

[Maxwish]

yep, can confirm that the database of Club Total was hacked....
and some code injected that linked to a page that loaded a virus and porn pop-ups.

If you visited CT between between 6 (?) and 9 pm on 28 april 2004 (GMT+1) please check you PC for virusses.

[icfu]

You have just told your visitors that Club Total won't close and nevertheless it just needed one single cracker shithead to completely change your opinion?

Well, good luck to you, too bad that CT had to end like that, I will miss it.

Icfu

[Maxwish]

2 icfu
I have updated the message at Club Total.

I meant to say that CT will be closed until I find and fix the bug that allowed the hacker to get it. Otherwise he could keep repeat his actions and add more malicious content....

[icfu]

Ah, that thing with "can't guarantee that it won't happen again and therefore remains closed" sounded like some last words.

Much better now

Icfu

[ghisler(Author)]

2Maxwish
Be careful, the hacker(s) may now have your password, or may even have installed a root kit on the server, so better watch the site for a while. I also recommend that you compare the downloads with the originals.

[Sheepdog]

I also recommend that you compare the downloads with the originals.

Maybe you can add CRC Checksum for the files or perhaps a site with the checksums? Just a suggestion.

sheepdog

[IGL]

MD5 Checksums - TC supports them - you can automatically verify checksums from TC if you have them in a file.

[Cineatic]

i find out, that the Norton Antivirus can't delete that virus. It can find it and report that the virus is removed, but that's wrong. After a check with another AV, the virus stayed in the internetcache.
To remove it completely, you have to delete the cache...

[Clo]

2Cineatic

I find out that the Norton Antivirus can't delete that virus. …

Hello !
• Did you try to delete it with a secure "eraser" program ?
* I've one, and it can delete any virus. Available for free at:
http://landzone.free.fr/tcharg.htm >>> EraserHead
- Note : the double-click is disabled when you choose the file(s) to delete, hence you can't launch a virus by accident… In French, but usable I guess.
* Personally, I clear the cache automatically when closing my Web browser, but someones like to keep pages inside.
{ Off-topic : glad to see you here, because my German is very limited ! }

  Kind regards,
Claude
Clo

[Cineatic]

Hello!

ezTrust Antivirus has deleted this virus correctly. But i was surprised to see this warning-message about this virus again, 'cause NAV said "ok, virus is dead"

[Thany]

What kind of browser allows a virus to install itself from a web page onto the users PC

[Sheepdog]

What kind of browser allows a virus to install itself from a web page onto the users PC

a browser wich contains and executes ActiveX-applets and where always the beta version is sold to the enduser pretending it were a full developed software. In two words: Internet Explorer.

If you read all the Microsoft Securety Bulletins you would probably be astonished that not most of all PC in the world have many viruses installed.

sheepdog