Jump to content
SAU Community

Recommended Posts

Another one here for a whole lot of characters appearing when clicking on an image.

Also noticed when i first logged in today this site wanted to install an Active X control, some Microsoft Data something or other. I didnt install it as i didnt see a notice to say that it was okay to run on the bulletin board.

Some of the fonts are showing up larger than they usually do aswell

Are these related?

I still can't upload images into private messages.

I browse, double click and the image name appears but when I ckick on add attachment it goes to a blank page rather than show the attachment in the pm.

Anyone else have this problem or have I picked up a virus or something?

i stil cant upload, and now i cant even login to msn.. that dsb.exe must have infected my pc, and now i feel like taking SAU to court.. :\

lol, if you read the conditions when you join the site there is a bit in there about SAU not being liable for such actions as you should have adequate protection.

lol, if you read the conditions when you join the site there is a bit in there about SAU not being liable for such actions as you should have adequate protection.

im just mucking around, relax.. but i suggest u get someone to fix this crap.. the exploit is still there..

We realise there is an issue.

Its a lot harder to fix something than you realise because there are limited people with access.

And the people with access are busy, they have thier own personal lives as SAU Admins/Mods are unpaid...

If your own PC is correctly protected then you wont have an issue.

Please be patient. Constantly posting about the fact it isnt fixed, simply is not going to help the issue especially when your not even a donor :D

For the exploit to work it *needs* Microsoft XML Core Services to be installed. Microsoft XML Core Services are not installed by default on Windows XP, but there seems to be a lot of packages using it, Visual Studio appears to be one common one. You can check in the Add or Remove Programs applet if you have it installed.

> The exploit works in both IE6 and IE7, which makes sense since it's exploiting a vulnerability in an ActiveX object, not in the browser itself. When executed the exploit creates an MSXML 4.0 ActiveX object (88d969c5-f192-11d4-a65f-0040963251e5). It then uses multiple setRequestHeader() method calls to execute shellcode which is included with the exploit. Once executed the shellcode (of course) first downloads the first stage downloader. At the moment it's a file called tester.dat:

16ac9982d177a47a20c4717183493e95 tester.dat

This downloader then downloads subsequent files (yet to be analysed). It looks like some AV vendors are beggining to detect the exploit. At this moment it is being detected by McAfee as Exploit-XMLCoreSrvcs and Symantec as Bloodhound.Exploit.96*. Microsoft also detects it as Exploit:HTML/Xmlreq.A. The best protection, is to prevent the XMLHTTP 4.0 ActiveX Control from running in Internet Explorer, as stated in Microsoft's advisory: http://www.microsoft.com/technet/security/...ory/927892.mspx ."

* http://www.symantec.com/security_response/...-110611-5730-99

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now


  • Similar Content

  • Latest Posts

    • Have a look at that (shitty) pic I posted. You can see AN -4 braided line coming to a -4 to 1/8 BSPT adapter, into a 1/8 BSPT T piece. The Haltech pressure sender is screwed into the long arm of the sender and factory sender (pre your pic) into the T side. You can also see the cable tie holding the whole contraption in place. Is it better than mounting the sender direct to your engine fitting......yes because it removes that vibration as the engine revs out 50 times every lap and that factory sender is pretty big. Is it necessary for you......well I've got no idea, I just don't like something important failing twice so over-engineer it to the moon!
    • Yup. You can get creative and make a sort of "bracket" with cable ties. Put 2 around the sender with a third passing underneath them strapped down against the sender. Then that third one is able to be passed through some hole at right angles to the orientation of the sender. Or some variation on the theme. Yes.... ummm, with caveats? I mean, the sender is BSP and you would likely have AN stuff on the hose, so yes, there would be the adapter you mention. But the block end will either be 1/8 NPT if that thread is still OK in there, or you can drill and tap it out to 1/4 BSP or NPT and use appropriate adapter there. As it stands, your mention of 1/8 BSPT male seems... wrong for the 1/8 NPT female it has to go into. The hose will be better, because even with the bush, the mass of the sender will be "hanging" off a hard threaded connection and will add some stress/strain to that. It might fail in the future. The hose eliminates almost all such risk - but adds in several more threaded connections to leak from! It really should be tapered, but it looks very long in that photo with no taper visible. If you have it in hand you should be able to see if it tapered or not. There technically is no possibility of a mechanical seal with a parallel male in a parallel female, so it is hard to believe that it is parallel male, but weirder things have happened. Maybe it's meant to seat on some surface when screwed in on the original installation? Anyway, at that thread size, parallel in parallel, with tape and goop, will seal just fine.
    • How do you propose I cable tie this: To something securely? Is it really just a case of finding a couple of holes and ziptying it there so it never goes flying or starts dangling around, more or less? Then run a 1/8 BSP Female to [hose adapter of choice?/AN?] and then the opposing fitting at the bush-into-oil-block end? being the hose-into-realistically likely a 1/8 BSPT male) Is this going to provide any real benefit over using a stainless/steel 1/4 to 1/8 BSPT reducing bush? I am making the assumption the OEM sender is BSPT not BSPP/BSP
    • I fashioned a ramp out of a couple of pieces of 140x35 lumber, to get the bumper up slightly, and then one of these is what I use
    • I wouldn't worry about dissimilar metal corrosion, should you just buy/make a steel replacement. There will be thread tape and sealant compound between the metals. The few little spots where they touch each other will be deep inside the joint, unable to get wet. And the alloy block is much much larger than a small steel fitting, so there is plenty of "sacrificial" capacity there. Any bush you put in there will be dissimilar anyway. Either steel or brass. Maybe stainless. All of them are different to the other parts in the chain. But what I said above still applies.
×
×
  • Create New...