ffxi-atlas site infected?

A

Acks

Artifact Armor
Adventurer
Joined
Jul 9, 2004
Messages
826
Location
San Jose, CA
Website
www.acks-effect.com
Linkshell
Crimson Pirates
I went to ffxi-atlas to look at maps when Avast! came up with a warning that a trojan, VBS:Obfuscated-gen, was trying to load and direct to usa.ccxtt.com.

Anyone else getting this? I can't seem to find what it does, but if you've been to this site recently, I suggest you scan your comp asap.
 
Nice warning.
 
uh oh I was there last night
 
I haven't been to ffxi-atlas since the first wave of hackings. Wasn't it in the list of untrustable sites, along with somepage and alla?
 
im having a similar problem with ffxiclopedia right now. Says something about a trojan house when i tryed to go to the link.
 
Dudika said:
im having a similar problem with ffxiclopedia right now. Says something about a trojan house when i tryed to go to the link.
Click to expand...

What page? I'm not seeing any new scripts on the main index.
 
from the main page. It first popped up on me when i went to the link (ffxiclopedia) on ffxiah. Took forever to load then the trojan house popped up but my antivirus blocked it. Then i went to the ffxiclopedia.com main page and the same thing happened
 
well, and you might have merely typo'd here, the ffxiclopedia site TLD is .org, not .com, although i'd be certain that they have a redirect in place.

*edit* nevermind, found where ffxiclopedia.org did purchase the .com variant last year.
 
Tristam Green said:
well, and you might have merely typo'd here, the ffxiclopedia site TLD is .org, not .com, although i'd be certain that they have a redirect in place.
Click to expand...

There's a script from wikia.com on the .org pages. Can't remember if that's always been there...do you know offhand if that's always been there?
 
in my favorites i have ffxiclopedia.org and it takes forever to load, which it never did. thats when the trojan horse popped up on my anitvirus. I saw the topic and i was wondering if someone else was having the same problem with this site as well.
 
jamal said:
There's a script from wikia.com on the .org pages. Can't remember if that's always been there...do you know offhand if that's always been there?
Click to expand...


wiki.ffxiclopedia.org/wiki/main_page is the exact link i have on my favorites. i have never had any problem w/ this or any site like this before, from any of my PCs
 
jamal said:
There's a script from wikia.com on the .org pages. Can't remember if that's always been there...do you know offhand if that's always been there?
Click to expand...

Can't check it from work, so I couldn't tell you. If I go out for lunch I can find out.

Although, I wouldn't doubt that it's been there for a while since Wikia owns the site. I wouldn't think (at first glance) that it would be malicious.
 
just went back to ffxiclopedia and it seems fine now. maybe it was just my PC at work. sry to bother/worry anyone. gotta check when i get home if the problem is there
 
Acks said:
I went to ffxi-atlas to look at maps when Avast! came up with a warning that a trojan, VBS:Obfuscated-gen, was trying to load and direct to usa.ccxtt.com.

Anyone else getting this? I can't seem to find what it does, but if you've been to this site recently, I suggest you scan your comp asap.
Click to expand...

Question do you have the full paid for version of Avast? or is it a trial version?
 
The wikia script is for the timer, and also for the Never Ending Quiz
 
Bluefrost said:
I haven't been to ffxi-atlas since the first wave of hackings. Wasn't it in the list of untrustable sites, along with somepage and alla?
Click to expand...

Blue.. Love ya hun, but there is no way that alla is infected. They literally have people who sit there all day long and stare at the code. All of their adds are put up by the Devs. I used to work for alla.. I was an admin, and they explained all of this to us when we were having DDOS attacks... It's likely one of the safest ffxi sites.

Edit: I'd like to say though.. Alla isn't anywhere near as good as FFXI wiki for your everyday needs.. to look up info. BUT.. I'd say it's very very safe. So if you're worried about something like that..You could safely use it.
 
Last edited:
As long as you're using Firefox and NoScript like a good internet user, you should be fine. If you don't, check your windows\system32 folder for any file starting with "thtpni". If you see one, sux4u.
 
You must log in or register to reply here.
Back
Top