Forums

Forums (http://www.abandonia.com/vbullet/index.php)
-   Blah, blah, blah... (http://www.abandonia.com/vbullet/forumdisplay.php?f=14)
-   -   www.replacementdocs.com, THREAT SITE! (http://www.abandonia.com/vbullet/showthread.php?t=27179)

Luchsen 24-06-2011 09:06 AM

I'm calm. I only did all caps because he didn't answer my question but went further on his threadnapping career.

_r.u.s.s. 26-06-2011 09:21 PM

WY U NOT HELP MI WIT MAKROSOFT WORD

Maxor127 27-06-2011 07:37 PM

If I needed help, I would've asked for help. Jeez, I check this thread a week later and see a spaz attack. Do your lamaze and breathe. Sorry for trying to share a possible connection with emails getting hijacked and all of these game site hacks that have been going on lately.

Japo 27-06-2011 07:55 PM

It was off topic, and anyone could have read it as a plea for help, I also did.

Mystvan 27-06-2011 10:15 PM

Quote:

Originally Posted by _r.u.s.s. (Post 429398)
can pliis someoen help mi reinstall makrosoft word on ma komputer?

Quote:

Originally Posted by _r.u.s.s. (Post 429552)
WY U NOT HELP MI WIT MAKROSOFT WORD

Nice Engrish words! I am certainly learning a lot from them! XD Thank you so much! :OK:

Hmmm... :umm: I wonder if you know (Bill) Gates of Hell... :devil: Or is Bill Gates in Hell? ;)

Windows Vista... Hasta la Vista, baby :XP: :rocket:

rabadi 28-06-2011 12:19 AM

I do not read the whole thread, but let me get this right: replacementdocs is infected with malware? 'Cause I visited the site a few times in the last several weeks and do not notice anything unusual. Would the downloaded documents be infected with virus or anything?

I am asking this because I did download a few manuals from the site lately. I do not care much about the site malware itself since I am browsing with Linux. However I do care about the downloaded manuals since now and then I still boot up to Windows to play games (the ones not yet playable in Linux with wine) and chances are I do open those downloaded manuals under Windows. In Windows I use Avira, and so far it does not detect anything on those manuals.

dosraider 28-06-2011 05:53 AM

The manuals themselves are not infected.

Japo 28-06-2011 10:13 PM

It was a cross-site drive-by-download attack, the malware trying to download themselves were PDFs, but different from the manuals. Depending on your browser preferences the malicious PDFs could succeed in being downloaded without user consent, or could prompt a dialog box... There was probably a social engineering component, that a user might be less suspicious of an unsolicited PDF download if it was at replacementdocs.com, but it probably relied on most browsers being configured to open PDFs right away without user interaction with the Acrobat plugin. Also probably they targeted only Acrobar Reader for Windows only (I'm speculating here).

_r.u.s.s. 29-06-2011 09:04 PM

Quote:

Originally Posted by Mystvan (Post 429607)
Nice Engrish words! I am certainly learning a lot from them! XD Thank you so much! :OK:

Hmmm... :umm: I wonder if you know (Bill) Gates of Hell... :devil: Or is Bill Gates in Hell? ;)

Windows Vista... Hasta la Vista, baby :XP: :rocket:

are you on drugs?

rabadi 30-06-2011 12:47 AM

My Firefox is configured to open PDF right away with Adobe Acrobat Reader plugin. So far I do not see any PDF downloaded other than those I really choose to download. No dialog box prompt either.

Anyway, at least it is good to know that the manual themselves are not infected.


The current time is 06:57 AM (GMT)

Powered by vBulletin® Version 3.7.1
Copyright ©2000 - 2025, Jelsoft Enterprises Ltd.