Re: Net-Integration hacked just one moment ago! in Security http://www.dslreports.com/forum/r14145784 en Sat, 05 Dec 2009 06:26:50 EDT Sat, 05 Dec 2009 06:26:50 EDT Re: Net-Integration http://www.dslreports.com/forum/remark,14157746 JonPaulNline : If an email address in not in my address book , it is immediately routed to Spam filter.
And its important to use several different email names.

o Keep an email name for business/financial
o email address for family and friends
o email address for forums
o email address for internet (misc)
o an email address to Never Never open.(give this to those you never want to be in contact)

Regards,
Jon Paul]]> http://www.dslreports.com/forum/remark,14157746 Wed, 17 Aug 2005 19:41:25 EDT Re: Net-Integration hacked just one moment ago! http://www.dslreports.com/forum/remark,14156130 mrchris : I got one of these in my Yahoo bulk folder, I'm like wtf Net-Intergration wouldn't link us to EXEs :o]]> http://www.dslreports.com/forum/remark,14156130 Wed, 17 Aug 2005 16:18:23 EDT Re: Net-Integration hacked just one moment ago! http://www.dslreports.com/forum/remark,14155712 bpm3k : As of right now, here are the results from virustotal and jotti for the avp.exe file that was sent out. I do think it is odd when jotti and virustotal give different results. Notice Avast. I assume it has to do with differences in the linux vs. windows implementation. I am surprised AVG still does not have this.

AntiVir 6.31.1.0 08.17.2005 TR/PSW.LdPinch.DA.2
Avast 4.6.695.0 08.17.2005 Win32:Trojano-265
AVG 718 08.17.2005 no virus found
Avira 6.31.1.0 08.17.2005 TR/PSW.LdPinch.DA.2
BitDefender 7.0 08.17.2005 Dropped:Trojan.Small.AL
CAT-QuickHeal 7.03 08.17.2005 TrojanPSW.LdPinch.gen
ClamAV devel-20050725 08.17.2005 Trojan.LdPinch-34
DrWeb 4.32b 08.17.2005 Trojan.PWS.LDPinch.400
eTrust-Iris 7.1.194.0 08.17.2005 no virus found
eTrust-Vet 11.9.1.0 08.17.2005 no virus found
Fortinet 2.41.0.0 08.17.2005 W32/LdPinch.B-pws
F-Prot 3.16c 08.17.2005 security risk named W32/Ldpinch.RQ
Ikarus 0.2.59.0 08.17.2005 Trojan.Win32.Small.AL
Kaspersky 4.0.2.24 08.17.2005 Trojan-PSW.Win32.LdPinch.gen
McAfee 4561 08.17.2005 PWS-LDPinch.gen.b
NOD32v2 1.1196 08.17.2005 Win32/PSW.LdPinch
Norman 5.70.10 08.17.2005 no virus found
Panda 8.02.00 08.17.2005 Trj/Ldpinch.gen
Sophos 3.96.0 08.17.2005 Troj/LdPnch-Fam
Sybari 7.5.1314 08.17.2005 Troj/LdPnch-Fam
Symantec 8.0 08.17.2005 PWSteal.Ldpinch
TheHacker 5.8.2.090 08.17.2005 no virus found
VBA32 3.10.4 08.17.2005 Trojan-PSW.Win32.LdPinch.gen

AntiVir Found TR/PSW.LdPinch.DA.2
ArcaVir Found Trojan.Psw.Ldpinch.Gen.11424.MX
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found Dropped:Trojan.Small.AL
ClamAV Found Trojan.LdPinch-34
Dr.Web Found Trojan.PWS.LDPinch.400
F-Prot Antivirus Found W32/Ldpinch.RQ
Fortinet Found W32/LdPinch.B-pws
Kaspersky Anti-Virus Found Trojan-PSW.Win32.LdPinch.gen
NOD32 Found Win32/PSW.LdPinch
Norman Virus Control Found nothing
UNA Found nothing
VBA32 Found Trojan-PSW.Win32.LdPinch.gen ]]> http://www.dslreports.com/forum/remark,14155712 Wed, 17 Aug 2005 15:20:57 EDT Re: Net-Integration hacked just one moment ago! http://www.dslreports.com/forum/remark,14154274 erwin_mi :
said by mViOkPe:

Don't you feel just slightly abused? I do. Is it just me?

Have we really gotten so used to being subjected to negligence that we don't even notice or care anymore?
I started a topic about the consideration of changing passwords for users of the net integration forum on »forums.net-integration.net/index···ic=32740 . As a user, it seems to me changing your password is all you can do to avoid more damage. The replies of the admins were somewhat vague and evasive...]]> http://www.dslreports.com/forum/remark,14154274 Wed, 17 Aug 2005 12:28:36 EDT Re: Net-Integration hacked just one moment ago! http://www.dslreports.com/forum/remark,14154215 cacroll :
said by mViOkPe:

Don't you feel just slightly abused? I do. Is it just me?


It is a free website. I'm sure you can find other sites that will make you feel better.

Or not.
--
Cheers,
Chuck
MS-MVP [Windows - Networking]
PChuck's Network]]> http://www.dslreports.com/forum/remark,14154215 Wed, 17 Aug 2005 12:19:52 EDT Re: Net-Integration hacked just one moment ago! http://www.dslreports.com/forum/remark,14153580 boblandy :
said by mViOkPe:

Don't you feel just slightly abused? I do. Is it just me?... Have we really gotten so used to being subjected to negligence that we don't even notice or care anymore?
i don't feel slightly abused. where is the great harm and i do have other things besides this to focus on
--
look out kid they keep it all hid]]> http://www.dslreports.com/forum/remark,14153580 Wed, 17 Aug 2005 11:00:36 EDT Re: Net-Integration hacked just one moment ago! http://www.dslreports.com/forum/remark,14152958 anon : Hey John, why would you put words in my mouth for?

I didn't say I knew how it was hacked. I only know for a fact that it was hacked.

I also know for a fact that he refuses to upgrade/patch his wares while there are KNOWN vulnerabilities, including one that would allow just this sort of attack.

Please try not to twist my words. I try very hard to say just what I mean and nothing more.]]> http://www.dslreports.com/forum/remark,14152958 Wed, 17 Aug 2005 09:28:15 EDT Re: Net-Integration hacked just one moment ago! http://www.dslreports.com/forum/remark,14152824 Name Game : Hi Mikey,

I think it is just you at this point..wish you would wait until the experts look at it more closely before you do the judge and jury thingie..:D

It is not a bad idea these days for a forum to have at least..HP VERSION: 4.3.4 (apache2handler), SQL: (MYSQL) 4.0.18 IPB Version v2.0.4.

But that does not mean any of those would be at fault. It was important to get the information out there ASAP so members of that forum could understand what was happening..but for you to start ranting about you know just how it DID happen at this point is not really what Security Community is joined together for in my opinion..kind of like when people blogged Giant as a crappy little Antispyware newcommer..:D

Have another cup of coffee my friend..

Regards,
John
--
Gladiator Security Forum »www.gladiator-antivirus.com/
Missing Kids
»www.missingkids.com/]]> http://www.dslreports.com/forum/remark,14152824 Wed, 17 Aug 2005 09:00:27 EDT Re: Net-Integration hacked just one moment ago! http://www.dslreports.com/forum/remark,14152709 anon : Hmm, seems like quite a few members here are also members at NI. Are none of you just the least bit curious as to why the NI admin doesn't upgrade/patch his board wares?

Don't you feel just slightly abused? I do. Is it just me?

»forums.net-integration.net/index···ic=32718

Have we really gotten so used to being subjected to negligence that we don't even notice or care anymore?]]> http://www.dslreports.com/forum/remark,14152709 Wed, 17 Aug 2005 08:30:42 EDT Re: Net-Integration hacked just one moment ago! http://www.dslreports.com/forum/remark,14152372 Kiwifan : Got the famous 3 emails this morning and let Mailwasher Pro deal with them.

Thanks to the folks at Mailwasher and all of the Team here who keep us, er less technical members safe. :)

Rusty.]]> http://www.dslreports.com/forum/remark,14152372 Wed, 17 Aug 2005 06:25:20 EDT Re: Net-Integration hacked just one moment ago! http://www.dslreports.com/forum/remark,14152216 Tsume : Mike: bpm's post indicates that yes, Avast! detects this now:

"Avast 4.6.695.0 08.16.2005 Win32:Trojano-265"]]> http://www.dslreports.com/forum/remark,14152216 Wed, 17 Aug 2005 04:36:33 EDT Re: Net-Integration hacked just one moment ago! http://www.dslreports.com/forum/remark,14152086 John2g : From Kevin.

The "trojan" in question is "EMAILHARVEST2" as far as BOClean is concerned, and has been covered for more than a week now ...
--
Better to remain silent and be thought a fool, than to speak and remove all doubt. ]]> http://www.dslreports.com/forum/remark,14152086 Wed, 17 Aug 2005 03:23:38 EDT Re: Net-Integration hacked just one moment ago! http://www.dslreports.com/forum/remark,14152082 boblandy :
said by ReGen See Profile:

said by boblandy See Profile:

i just learned that BOClean has had this covered for more than a week now
Hmmm… On my PC BoClean only recognised the file after the second update yesterday
i quoted Kevin McAleavey when i said it has been covered for more than a week now
--
look out kid they keep it all hid]]> http://www.dslreports.com/forum/remark,14152082 Wed, 17 Aug 2005 03:22:45 EDT Re: Net-Integration hacked just one moment ago! http://www.dslreports.com/forum/remark,14152062 ReGen :
said by boblandy See Profile:

i just learned that BOClean has had this covered for more than a week now
Hmmm… On my PC BoClean only recognised the file after the second update yesterday.
TH also detected it yesterday, Ewido still doesn’t.]]> http://www.dslreports.com/forum/remark,14152062 Wed, 17 Aug 2005 03:13:26 EDT Re: Net-Integration hacked just one moment ago! http://www.dslreports.com/forum/remark,14149897 Corrine : N-I is back up: »forums.net-integration.net/index···ic=32730

said by "Eagle1":
Net-Integration is not sending any spam but only appears to be doing so. The net-integration domain account account was disabled for the majority of the day while the source of the spamming was sought. The ISP (»pisem.net) that is hosting malware was notified several hours ago and they have not done anything about it so far.

Logs are being reviewed to determine if source can be identified. Will keep posted.

--
Corrine, Administrator Freedomlist; Proud Charter Member ASAP Since 2004 (Alliance of Security Analysis Professionals)]]> http://www.dslreports.com/forum/remark,14149897 Tue, 16 Aug 2005 21:01:55 EDT Re: Net-Integration hacked just one moment ago! http://www.dslreports.com/forum/remark,14149648 Oleg : I have saved this trojan with KAV icon for my trojan collection :-)]]> http://www.dslreports.com/forum/remark,14149648 Tue, 16 Aug 2005 20:31:19 EDT Re: Net-Integration hacked just one moment ago! http://www.dslreports.com/forum/remark,14149428 boblandy : i just learned that BOClean has had this covered for more than a week now
--
look out kid they keep it all hid]]> http://www.dslreports.com/forum/remark,14149428 Tue, 16 Aug 2005 20:04:05 EDT Re: Net-Integration hacked just one moment ago! http://www.dslreports.com/forum/remark,14149048 Alwill : The three emails were also awaiting me when I went online an hour ago (8am Downunder) and after viewing them through Properties>Message Source, promptly deleted them ---- why would Net-Integration be sending me anything.
--
Tact is the art of making a point without making an enemy - Anonymous]]> http://www.dslreports.com/forum/remark,14149048 Tue, 16 Aug 2005 19:17:54 EDT Re: Net-Integration hacked just one moment ago! http://www.dslreports.com/forum/remark,14148770 the_w0p : I just checked my email and had 2 copies of the virus and immediately deleted them!!!
--
You better hit the ground runnin', 'cuz you wuz born dyin'!!!]]> http://www.dslreports.com/forum/remark,14148770 Tue, 16 Aug 2005 18:43:13 EDT Re: Net-Integration hacked just one moment ago! http://www.dslreports.com/forum/remark,14148751 MikeG :
said by Atribune See Profile:

CA (aka e-Trust) does not detect this yet nor do Avg and Symantec. The files have been submitted to all 3 of them.
wat about Avast? Does it detect it? Do they know about it?
--
~The heart of learning is the will to try~]]> http://www.dslreports.com/forum/remark,14148751 Tue, 16 Aug 2005 18:40:41 EDT Re: Net-Integration hacked just one moment ago! http://www.dslreports.com/forum/remark,14148229 Atribune : CA (aka e-Trust) does not detect this yet nor do Avg and Symantec. The files have been submitted to all 3 of them.

As for the ICQ question it adds the registry keys but as far as I have seen it doesnt add any software to go with them.

Perhaps someone who has the programs being added to the registry may be affected differently then i have been.

I will install the applications and see if I get any change in the behavior of the virus.]]> http://www.dslreports.com/forum/remark,14148229 Tue, 16 Aug 2005 17:27:21 EDT Re: Net-Integration hacked just one moment ago! http://www.dslreports.com/forum/remark,14148052 Kayrac : zonelabs doesn't detect it.....i believe they use CA's antivirus, have sent it over to them at CA, will see what they say]]> http://www.dslreports.com/forum/remark,14148052 Tue, 16 Aug 2005 17:02:40 EDT Re: Net-Integration hacked just one moment ago! http://www.dslreports.com/forum/remark,14147853 catseyenu : Is it adding an ICQ app.?
Total Uninstall Log:
+)(REG KEY) HKEY_CURRENT_USER\Software\Mirabilis
(+)(REG KEY) HKEY_CURRENT_USER\Software\Mirabilis\ICQ
(+)(REG KEY) HKEY_CURRENT_USER\Software\Mirabilis\ICQ\DefaultPrefs
(+)(REG KEY) HKEY_CURRENT_USER\Software\Mirabilis\ICQ\NewOwners
(+)(REG KEY) HKEY_CURRENT_USER\Software\RIT
(+)(REG KEY) HKEY_CURRENT_USER\Software\RIT\The Bat!
--
Need A Software Solution?... List of Lists]]> http://www.dslreports.com/forum/remark,14147853 Tue, 16 Aug 2005 16:35:09 EDT Re: Net-Integration hacked just one moment ago! http://www.dslreports.com/forum/remark,14147711 Atribune : peace.emfc.com is the server that Net-Integration is on. I have been updating and submitting the file to the major AV and antitrojan vendors.

Net Integration was taken down by Eagle1 after he recieved news of the emails, in an attempt to protect users who have as of yet not recieved these emails.

Eagle1 is at present working towards a solution for this.]]> http://www.dslreports.com/forum/remark,14147711 Tue, 16 Aug 2005 16:17:46 EDT Re: Net-Integration hacked just one moment ago! http://www.dslreports.com/forum/remark,14147601 boblandy : thanks for the heads up, ReGen See Profile
--
look out kid they keep it all hid]]> http://www.dslreports.com/forum/remark,14147601 Tue, 16 Aug 2005 16:00:51 EDT Re: Net-Integration hacked just one moment ago! http://www.dslreports.com/forum/remark,14147407 ReGen :
said by boblandy See Profile:

so does TH currently detect this trojan
It does with the latest update just released.]]> http://www.dslreports.com/forum/remark,14147407 Tue, 16 Aug 2005 15:33:16 EDT Re: Net-Integration hacked just one moment ago! http://www.dslreports.com/forum/remark,14147119 bpm3k : I tried to download the file and I couldn't. IE rocks. However, I was successful in downloading the file useing firefox.

Here are jotti and virustotal results:
AntiVir Found nothing
ArcaVir Found nothing
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found Dropped:Trojan.Small.AL
ClamAV Found Trojan.LdPinch-34
Dr.Web Found Trojan.PWS.LDPinch.400
F-Prot Antivirus Found unknown virus (probable variant)
Fortinet Found nothing
Kaspersky Anti-Virus Found Trojan-PSW.Win32.LdPinch.gen
NOD32 Found a variant of Win32/PSW.LdPinch
Norman Virus Control Found nothing
UNA Found nothing
VBA32 Found Trojan.LdPinch.27 (probable variant)

AntiVir 6.31.1.0 08.16.2005 no virus found
Avast 4.6.695.0 08.16.2005 Win32:Trojano-265
AVG 718 08.15.2005 no virus found
Avira 6.31.1.0 08.16.2005 no virus found
BitDefender 7.0 08.16.2005 Dropped:Trojan.Small.AL
CAT-QuickHeal 7.03 08.16.2005 (Suspicious) - DNAScan
ClamAV devel-20050725 08.15.2005 Trojan.LdPinch-34
DrWeb 4.32b 08.16.2005 Trojan.PWS.LDPinch.400
eTrust-Iris 7.1.194.0 08.16.2005 no virus found
eTrust-Vet 11.9.1.0 08.16.2005 no virus found
Fortinet 2.36.0.0 08.16.2005 suspicious
F-Prot 3.16c 08.16.2005 could be infected with an unknown virus
Ikarus 0.2.59.0 08.16.2005 Trojan.Win32.Small.AL
Kaspersky 4.0.2.24 08.16.2005 Trojan-PSW.Win32.LdPinch.gen
McAfee 4559 08.16.2005 PWS-LDPinch.gen.b
NOD32v2 1.1194 08.15.2005 a variant of Win32/PSW.LdPinch
Norman 5.70.10 08.16.2005 no virus found
Panda 8.02.00 08.15.2005 Trj/Ldpinch.gen
Sophos 3.96.0 08.16.2005 Troj/LdPnch-Fam
Sybari 7.5.1314 08.16.2005 Trojan-PSW.Win32.LdPinch.gen
Symantec 8.0 08.16.2005 no virus found
TheHacker 5.8.2.088 08.16.2005 no virus found
VBA32 3.10.4 08.16.2005 suspected of Trojan.LdPinch.27

Niether Ewido or A-squared detect the file when I scan it with them on demand.
Click for full size
]]> http://www.dslreports.com/forum/remark,14147119 Tue, 16 Aug 2005 14:55:33 EDT Re: Net-Integration hacked just one moment ago! http://www.dslreports.com/forum/remark,14147025 boblandy : so does TH currently detect this trojan
--
look out kid they keep it all hid]]> http://www.dslreports.com/forum/remark,14147025 Tue, 16 Aug 2005 14:44:19 EDT Re: Net-Integration hacked just one moment ago! http://www.dslreports.com/forum/remark,14146703 DSL_Steve : I just found three emails from *them* in my SBC-Yahoo junk email folder and promptly deleted them.]]> http://www.dslreports.com/forum/remark,14146703 Tue, 16 Aug 2005 14:04:13 EDT Re: Net-Integration hacked just one moment ago! http://www.dslreports.com/forum/remark,14146334 antiserious :
... I've been waiting 4 days for a reply from them on a login problem - I wonder how long this has been going on, and if it's related ...

--
... "Do You Know Where Your Towel Is ?" ...]]> http://www.dslreports.com/forum/remark,14146334 Tue, 16 Aug 2005 13:17:58 EDT Re: Net-Integration hacked just one moment ago! http://www.dslreports.com/forum/remark,14146100 TeMerc : I got 3 of em this morning, in my MailWasherPro box, and I just deleted them. It seemed odd they would send me anything via email. But I didn't think to go to the site.

Hope they get things fixed up quickly.]]> http://www.dslreports.com/forum/remark,14146100 Tue, 16 Aug 2005 12:49:20 EDT Re: Net-Integration hacked just one moment ago! http://www.dslreports.com/forum/remark,14146001 suzi : The forum was apparently hacked before the email was sent. Someone hacked in and got to the admin panel to send the emails. The site was shut down shortly afterward for security reasons. Several people at CastleCops.com have confirmed the file in the link contains a virus.
--
aka Suzi, Spyware Warrior
Microsoft MVP Windows Security 2005
Sunbelt Software Consultant]]> http://www.dslreports.com/forum/remark,14146001 Tue, 16 Aug 2005 12:36:44 EDT Re: Net-Integration hacked just one moment ago! http://www.dslreports.com/forum/remark,14145980 MagnusM : I did open the file ;) (*)

When run, this trojan copies itself to C:\Windows\csrss.exe and also drops the file C:\Windows\dll.dll. The actual trojan is a password stealer that will attempt to grab your ICQ, email account, dialup and other passwords. Any found passwords are mailed to two russian email addresses.

If an Internet connection is available, the trojan will attempt to download and execute further files from a Hungarian web site. Unfortunately these files are no longer available and so could not be analyzed.

(*) On a lab machine. Do not attempt at home.
--
Mischel Internet Security
http://www.misec.net]]> http://www.dslreports.com/forum/remark,14145980 Tue, 16 Aug 2005 12:33:11 EDT Re: Net-Integration hacked just one moment ago! http://www.dslreports.com/forum/remark,14145828 cacroll : I got 3 of those emails. Yahoo email shot them straight into my Bulk folder. I might have been tempted to open them, excepting for reading your advisory, so Thank You. :o
--
Cheers,
Chuck
MS-MVP [Windows - Networking]
PChuck's Network]]> http://www.dslreports.com/forum/remark,14145828 Tue, 16 Aug 2005 12:07:40 EDT Re: Net-Integration hacked just one moment ago! http://www.dslreports.com/forum/remark,14145784 boblandy : i received four such emails all sent within the span of 30 minutes, saying...

"Protect Your PC !!!

Please download antivirus protection" (with link)

i definitely did not open the link
--
look out kid they keep it all hid]]> http://www.dslreports.com/forum/remark,14145784 Tue, 16 Aug 2005 12:00:02 EDT Re: Net-Integration hacked just one moment ago! http://www.dslreports.com/forum/remark,14145720 John2g : I had three of these emails. Needless to say, I didn't follow the link.]]> http://www.dslreports.com/forum/remark,14145720 Tue, 16 Aug 2005 11:51:29 EDT Re: Net-Integration hacked just one moment ago! http://www.dslreports.com/forum/remark,14145709 Sysadmin : I received two emails from them as well. They looked suspicious so I deleted them. ]]> http://www.dslreports.com/forum/remark,14145709 Tue, 16 Aug 2005 11:49:53 EDT Re: Net-Integration page -11:20 AM EDT http://www.dslreports.com/forum/remark,14145631 EGeezer : Yes, I saw it. My post is for information only and to document the result of going to the site at the time in case the result changes.

Per whois, efmc.com domain is owned by net-integration.

ht tp://efmc.com goes to a sales recruiting page for an undisclosed antispyware product. The fax number in the ad is very close to the number listed in WHOIS registration. With these things in mind, I'd surmise that it's a legitimate redirection.

Pisem.net traces to Russia, as far as Moscow - also appears to have an open mail relay.

--
Every
Good
Electrical
Engineer
Zeroes
Each
Register]]> http://www.dslreports.com/forum/remark,14145631 Tue, 16 Aug 2005 11:40:39 EDT Re: Net-Integration hacked just one moment ago! http://www.dslreports.com/forum/remark,14145569 sybille : Confirmation from me.

I received the same mail. Since I'm running Linux, I decided to download the avp.exe file in order to scan it at jotti's. (I wouldn't have done this from within Windows, of course.) Several scanners there identified the file as a trojan downloader (with heuristics, it seemed, so this may be a new variant).

So, I went to net-integration and posted. While I was pasting in the scanner results, another thread was started. I went to edit my thread in order to include a link to the new thread, and at that point got the error message from peace.emfc.com.

In any case, no one needs to rescan the file at jotti's, etc. I will submit have submitted it to the list of AV companies in the FAQ, as well.]]> http://www.dslreports.com/forum/remark,14145569 Tue, 16 Aug 2005 11:31:14 EDT Re: Net-Integration page -11:20 AM EDT http://www.dslreports.com/forum/remark,14145558 erwin_mi :
said by EGeezer See Profile:

The link to the forum ( »forums.net-integration.net/ ) yielded this at 11:20 AM EDT - offline for security purposes
Didn't you see the address field? The forum is redirected to »peace.emfc.com . I hope this redirection was done by a real admin to avoid more damage...]]> http://www.dslreports.com/forum/remark,14145558 Tue, 16 Aug 2005 11:29:17 EDT Net-Integration page -11:20 AM EDT http://www.dslreports.com/forum/remark,14145493 EGeezer : The link to the forum ( »forums.net-integration.net/ ) yielded this at 11:20 AM EDT - offline for security purposes
--
Every
Good
Electrical
Engineer
Zeroes
Each
Register
Click for full size
]]> http://www.dslreports.com/forum/remark,14145493 Tue, 16 Aug 2005 11:20:36 EDT Re: Net-Integration hacked just one moment ago! http://www.dslreports.com/forum/remark,14145441 Fredra : That is interesting....
I got three (3) emails...but didn't open any of them, as I thought...why would "net-integration" be sending me anything....so I deleted them all.
Now this is strange indeed.
Thanks for letting us know.
Cheers :)
--
The Endless]]> http://www.dslreports.com/forum/remark,14145441 Tue, 16 Aug 2005 11:13:23 EDT Net-Integration hacked just one moment ago! http://www.dslreports.com/forum/remark,14145402 erwin_mi : Several members of net-integration forums ( »forums.net-integration.net ) received multiple identical e-mails with a link to a trojan. Just a moment after I reported this issue, the forum got hacked. Source code of the received e-mail (with the link disabled):

X-Message-Status: n
X-SID-PRA: eagle1@peace.emfc.com
X-SID-Result: TempError
X-Message-Info: P6ocH0G7nHBlfQzc98R2MJBOUZKh6KE6Xa0aHYSFpzc=
Received: from peace.emfc.com ([67.43.1.57]) by mc4-f37.hotmail.com with Microsoft SMTPSVC
 *(6.0.3790.211);
 Tue, 16 Aug 2005 07:05:36 -0700
Received: from eagle1 by peace.emfc.com with local (Exim 4.44)
id 1E5168-0007dh-BW; Tue, 16 Aug 2005 09:03:20 -0400
To: webmaster@net-integration.net
Subject: Protect Your PC !!! ( From Net-Integration Forums )
From: "Net-Integration Forums" <webmaster@net-integration.net>
X-Priority: 3
X-Mailer: IPB PHP Mailer
Message-Id: <E1E5168-0007dh-BW@peace.emfc.com>
Sender:  <eagle1@peace.emfc.com>
Date: Tue, 16 Aug 2005 09:03:20 -0400
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - peace.emfc.com
X-AntiAbuse: Original Domain - hotmail.com
X-AntiAbuse: Originator/Caller UID/GID - [32004 32009] / [47 12]
X-AntiAbuse: Sender Address Domain - peace.emfc.com
X-Source: /usr/bin/php
X-Source-Args: /usr/bin/php admin.php 
X-Source-Dir: net-integration.net:/public_html/forums
Return-Path: eagle1@peace.emfc.com
X-OriginalArrivalTime: 16 Aug 2005 14:05:37.0548 (UTC) FILETIME=[93D72CC0:01C5A26B]
 
Protect Your PC !!!
 
Please download antivirus protection
antivirusprotection.pisem.net/avp.exe

(*) WARNING 1 long line(s) split
]]> http://www.dslreports.com/forum/remark,14145402 Tue, 16 Aug 2005 11:08:33 EDT