Jump to content
SAU Community

Recommended Posts

Another one here for a whole lot of characters appearing when clicking on an image.

Also noticed when i first logged in today this site wanted to install an Active X control, some Microsoft Data something or other. I didnt install it as i didnt see a notice to say that it was okay to run on the bulletin board.

Some of the fonts are showing up larger than they usually do aswell

Are these related?

I still can't upload images into private messages.

I browse, double click and the image name appears but when I ckick on add attachment it goes to a blank page rather than show the attachment in the pm.

Anyone else have this problem or have I picked up a virus or something?

i stil cant upload, and now i cant even login to msn.. that dsb.exe must have infected my pc, and now i feel like taking SAU to court.. :\

lol, if you read the conditions when you join the site there is a bit in there about SAU not being liable for such actions as you should have adequate protection.

lol, if you read the conditions when you join the site there is a bit in there about SAU not being liable for such actions as you should have adequate protection.

im just mucking around, relax.. but i suggest u get someone to fix this crap.. the exploit is still there..

We realise there is an issue.

Its a lot harder to fix something than you realise because there are limited people with access.

And the people with access are busy, they have thier own personal lives as SAU Admins/Mods are unpaid...

If your own PC is correctly protected then you wont have an issue.

Please be patient. Constantly posting about the fact it isnt fixed, simply is not going to help the issue especially when your not even a donor :D

For the exploit to work it *needs* Microsoft XML Core Services to be installed. Microsoft XML Core Services are not installed by default on Windows XP, but there seems to be a lot of packages using it, Visual Studio appears to be one common one. You can check in the Add or Remove Programs applet if you have it installed.

> The exploit works in both IE6 and IE7, which makes sense since it's exploiting a vulnerability in an ActiveX object, not in the browser itself. When executed the exploit creates an MSXML 4.0 ActiveX object (88d969c5-f192-11d4-a65f-0040963251e5). It then uses multiple setRequestHeader() method calls to execute shellcode which is included with the exploit. Once executed the shellcode (of course) first downloads the first stage downloader. At the moment it's a file called tester.dat:

16ac9982d177a47a20c4717183493e95 tester.dat

This downloader then downloads subsequent files (yet to be analysed). It looks like some AV vendors are beggining to detect the exploit. At this moment it is being detected by McAfee as Exploit-XMLCoreSrvcs and Symantec as Bloodhound.Exploit.96*. Microsoft also detects it as Exploit:HTML/Xmlreq.A. The best protection, is to prevent the XMLHTTP 4.0 ActiveX Control from running in Internet Explorer, as stated in Microsoft's advisory: http://www.microsoft.com/technet/security/...ory/927892.mspx ."

* http://www.symantec.com/security_response/...-110611-5730-99

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now


  • Similar Content

  • Latest Posts

    • Just trying to get my head around this. At 5psi of boost, you turn on your wmi pump, and then you're using a 3000cc injector, to allow flow upto the actual engine, where you have your 6x200cc injectors and a 500cc injector. If the above is correct, what advantage are you obtaining by having the 3000cc injector blocking flow, is this just incase a line breaks between that injector and the motor you can stop flow immediately? Or are the 6x200cc and 500cc less injectors and just spray nozzle?
    • Welcome! New member myself, but I had an R33 back in 2002. Best advice I could give, based on my experience: if you're running the factory turbo, be very conservative with boost. I made the mistake of just fiddling around with the boost controller and cranking the boost for fun, and the end result was my intake pipes popping off frequently from the constant deluge of oil that was being blown into the recirc by the stressed-out turbo, which itself was siphoning oil from the engine and farting it out both sides of its centre bearing (or something to that effect). If I could do it all again, I would have gotten a new turbo and had a tune dialled in professionally and then just left it alone! Funny you mention the metal shavings in the gearbox, as I had the same thing - the probe plug (magnetic drain plug, essentially) would come out caked with shavings. At least it was doing its job. Not sure if that's just sacrificial wear and part of the deal, or if my gearbox was shagged, but I wasn't abusing it. Enjoy the R33 - they're a dying breed, and if they weren't $35k+ on CarSales in Queensland, I might have picked up one of those again, instead of the 370GT I own now (though I'm loving the 370GT, that big 3.7L V6 just hits different).
    • Howdy folks. I owned an R33 back in 2002, which was thoroughly beyond my capacity (financially speaking) to maintain/insure, so we parted ways in 2004. Fast forward 21 years (to literally yesterday, in fact) and I'm now the proud owner of a 2007 V36 370GT. I'm happily surprised by how much power the VQ37VHR makes, compared to the RB25DET, considering the latter is turbocharged. I had planned to add a turbo at some point but I'm on the fence about whether I'll even need it (though I do love the sudden onset of extra torque). Any other 370GT owners around the traps, I'd love to hear about your experiences with this car (good and bad).
    • Perhaps the answer is... more jacks!* *proper jacks must be used.  
    • I NEVER think about using a scissor jack unless there is absolutely no other alternative. f**king things are dangerous, annoying and stupid.
×
×
  • Create New...