Page 118 of 295
Re: Important Information
Posted: Thu Apr 21, 2005 9:38 pm
by Phoenixan
I still don't believe hacking brought RZ down the final time.
If they make new Rayman forums, the best they can do is keep the admins active. There was a lack of upgrades, and no one around to fix anything right away when something went wrong. You always have to wait around days... weeks.. months just to see an admin update something.
Re: Important Information
Posted: Thu Apr 21, 2005 9:51 pm
by Jona
How else would they have a reason to switch to these goddamn infopop forums?
Re: Important Information
Posted: Thu Apr 21, 2005 10:01 pm
by Phoenixan
The "Never-Ever-No-Sanity" webworm only effects PHP sites and forums. I looked into that.
*edit*
THIS is the thing that struck RZ... and
THIS is pretty much what RZ looked like when it first went down. I even sent Block a screenshot at first.
Not exactly hacked purposely.. Simply a spreading virus.
*edit*
http://www.byrgan.com/store/index.php And here's an example of an infected site that hasn't been fixed.
http://www.oruzje.co.yu/top_lista/index.php This is the generation of the worm that got RZ.
*more edits*
http://www.computerworld.com/securityto ... 53,00.html More info.
Just search "NeverEverNoSanity Webworm" in Google or any other search engine, and you'll get plenty of results. Exact same message that popped up on RZ when it FIRST went down.

Re: Important Information
Posted: Thu Apr 21, 2005 11:57 pm
by Xeiqu
Like I just said in another topic: These people are Rayman haters who took the blame for something they had nothing to do with, so that we'd be scared of them again.
There's no proof to support their claims, and a lot to prove Phoenixian's.
Re: Important Information
Posted: Fri Apr 22, 2005 12:08 am
by Phoenixan
I realized... if this thing ever finds another search engine other than Google to use, this thing could spread again...o_o;
*edit*
w00t! I found a screenshot CTW took of the defacing on mine and Pyra's boards.
http://img241.echo.cx/img241/2005/rzdefaced9pg.jpg
Re: Important Information
Posted: Fri Apr 22, 2005 10:26 am
by Jona
Xeiqu wrote:Like I just said in another topic: These people are Rayman haters who took the blame for something they had nothing to do with, so that we'd be scared of them again.
There's no proof to support their claims, and a lot to prove Phoenixian's.
Well, neither of it can really be proved. Those worms can have been given to the site on purpose, we don't know exactly what happened, except the worm destroyed the forums...
Re: Important Information
Posted: Fri Apr 22, 2005 7:25 pm
by Phoenixan
It uses Google search on its own to find sites to infect though.

It searches for key phrases to find PHP sites to infect.
I only found this out because I was on another forum where people were reporting that their personal sites were being destroyed. XD
Re: Important Information
Posted: Fri Apr 22, 2005 7:41 pm
by Jona
Hmm... it's a pretty good find. Ubisoft was told that the forums were hacked, and that if it would return as phpBB, it would be hacked again. They had to believe it, so... but now that this has been found, it might be possible to get RZ back as a phpBB (unless the ones who claimed they hacked it are real hackers actually). What do you think?
Re: Important Information
Posted: Fri Apr 22, 2005 7:53 pm
by Phoenixan
I don't know really... Whether it was hacked or not, the NeverEverNoSanity could even come back on the boards if they switch again. It happened to some people. They think they purged it, but once they put their backup files back onto the server, the files only get infected again.

Re: Important Information
Posted: Fri Apr 22, 2005 7:58 pm
by Xeiqu
It looks like definite proof that this had nothing to do with ARZO and co. then. We can now tell them in the utmost safety that they are soulless gits.
Nice find, Phoenixian.
WHEN Raymanzone upgrades to phpBB2, which is inevitable, we should be safe from this worm attacking. Which is good.

Re: Important Information
Posted: Fri Apr 22, 2005 8:01 pm
by Phoenixan
Yeah... They have to make sure they get the updates if they return. PHPBB was actually aware of this thing, and patched up the backdoor the worm was using.
Re: Important Information
Posted: Mon Apr 25, 2005 10:46 am
by Newray
Well, i heard that phpBB versions lower than 2.0.11 can be affected with this thing. And W00T, if ARZO didn't really hacked it we really have to say that to Ubi!!
Re: Important Information
Posted: Mon Apr 25, 2005 3:21 pm
by Xenon
But I don't think we would have experimented this without the hack of RaymanZone, we're just disgussing what they could have done to prevent this.
Re: Important Information
Posted: Mon Apr 25, 2005 4:46 pm
by Jona
It's easy to prevent this, so there's nothing to discuss about it. And what are you talking about with that 'experimenting'? It makes no sense at all...
Re: Important Information
Posted: Mon Apr 25, 2005 5:24 pm
by Xenon
Metaphors like this aren't exactly meant to make sence... We aren't really experimenting literally...
Re: Important Information
Posted: Mon Apr 25, 2005 5:29 pm
by Jona
Even if this is supposed to be a figure of speech, I don't really get what you mean. I hate figure of speech in English anyway. But you could still be wrong, so explain what it's supposed to mean.
Re: Important Information
Posted: Mon Apr 25, 2005 5:42 pm
by Xenon
Well, look.
Ruy wrote:Well, i heard that phpBB versions lower than 2.0.11 can be affected with this thing. And W00T, if ARZO didn't really hacked it we really have to say that to Ubi!!
Ruy claims he asked information from other possibly phpBB members to see if RaymanZone could have escaped the hack if it was higher than 2.0.11, so if you get what I mean...
Re: Important Information
Posted: Mon Apr 25, 2005 5:47 pm
by Jona
Oh, that's what you meant. We wouldn't have tried to find out what could prevent the worm infection, if these weird people from ARZO (if it even exists) didn't claim that they hacked it (even though there's still the possibility they used the worm themselves).
Re: Important Information
Posted: Mon Apr 25, 2005 5:57 pm
by Xenon
Well, I certainly believe ARZO exists. We kind of have proof, because an ARZO member joined here, Blackorb.
Re: Important Information
Posted: Mon Apr 25, 2005 6:09 pm
by Jona
I'm amazed at how little you understand...
If you can believe ARZO made up that they hacked the forums, why wouldn't you be able to believe that somebody joined as 'blackorb' and pretended to be from an organisation against RZ?
