Comments on: Malaysia’s GSC website hacked with 2117966.net http://www.drsafemode.com/2008/03/30/gsc-website-hacked-2117966net/ Currently blogging tech and tips on computer security threats. Mon, 08 Sep 2008 01:19:39 +0000 http://wordpress.org/?v=2.5.1 By: i’m saimatkong » GSC Website Hacked? http://www.drsafemode.com/2008/03/30/gsc-website-hacked-2117966net/#comment-124 i’m saimatkong » GSC Website Hacked? Fri, 25 Jul 2008 12:51:46 +0000 http://www.drsafemode.com/2008/03/30/gsc-website-hacked-2117966net/#comment-124 [...] we found related code entries to load a javascript “fuckjp.js” from 2117966.net. source : drsafemode.com addthis_url = [...] [...] we found related code entries to load a javascript “fuckjp.js” from 2117966.net. source : drsafemode.com addthis_url = [...]

]]> By: emmiscient http://www.drsafemode.com/2008/03/30/gsc-website-hacked-2117966net/#comment-70 emmiscient Thu, 10 Apr 2008 10:51:01 +0000 http://www.drsafemode.com/2008/03/30/gsc-website-hacked-2117966net/#comment-70 thank god, i'm using a more secured operating system .. =D thank god, i’m using a more secured operating system .. =D

]]> By: Dr. Safemode http://www.drsafemode.com/2008/03/30/gsc-website-hacked-2117966net/#comment-61 Dr. Safemode Wed, 02 Apr 2008 13:44:25 +0000 http://www.drsafemode.com/2008/03/30/gsc-website-hacked-2117966net/#comment-61 To check for suspicious files installed in your system in the last 30 days, you can use Deckard System Scanner(dss) which is downloadable at http://www.geekstogo.com/forum/index.php?autocom=downloads&showfile=19 To check for suspicious files installed in your system in the last 30 days, you can use Deckard System Scanner(dss) which is downloadable at

http://www.geekstogo.com/forum/index.php?autocom=downloads&showfile=19

]]> By: winter@mmu http://www.drsafemode.com/2008/03/30/gsc-website-hacked-2117966net/#comment-60 winter@mmu Wed, 02 Apr 2008 13:01:24 +0000 http://www.drsafemode.com/2008/03/30/gsc-website-hacked-2117966net/#comment-60 Thx Mr.SafeMode for alerting us :P Juz drop by after seeing ur post appear in Lowyat.net . Huhuhu, anything harm coming soon, pls do alert me ^^ Thx Mr.SafeMode for alerting us :P Juz drop by after seeing ur post appear in Lowyat.net .
Huhuhu, anything harm coming soon, pls do alert me ^^

]]> By: GSC website compromised « ~* ße HÆpy Æ|way§ *~ http://www.drsafemode.com/2008/03/30/gsc-website-hacked-2117966net/#comment-56 GSC website compromised « ~* ße HÆpy Æ|way§ *~ Tue, 01 Apr 2008 04:28:31 +0000 http://www.drsafemode.com/2008/03/30/gsc-website-hacked-2117966net/#comment-56 [...] tipped us off earlier today on a malicious piece of code present on the GSC online website. We did some checking ourselves on his story, and true enough, [...] [...] tipped us off earlier today on a malicious piece of code present on the GSC online website. We did some checking ourselves on his story, and true enough, [...]

]]> By: Dr. Safemode http://www.drsafemode.com/2008/03/30/gsc-website-hacked-2117966net/#comment-55 Dr. Safemode Mon, 31 Mar 2008 16:53:58 +0000 http://www.drsafemode.com/2008/03/30/gsc-website-hacked-2117966net/#comment-55 Because not all anti-virus is gonna be able to detect it. I guess installing a firewall would help personal data from being stolen. Firewall could track suspicious programs trying to send data over to the net. Because not all anti-virus is gonna be able to detect it.

I guess installing a firewall would help personal data from being stolen.

Firewall could track suspicious programs trying to send data over to the net.

]]> By: GSC website hacked « leejeok http://www.drsafemode.com/2008/03/30/gsc-website-hacked-2117966net/#comment-54 GSC website hacked « leejeok Mon, 31 Mar 2008 07:17:14 +0000 http://www.drsafemode.com/2008/03/30/gsc-website-hacked-2117966net/#comment-54 [...] Posted by leejeok on March 31, 2008 One of my colleague just saw this article and shared with me about this link “GSC website compromised by Lowyat.NET” and blog from Dr. Safemode [...] [...] Posted by leejeok on March 31, 2008 One of my colleague just saw this article and shared with me about this link “GSC website compromised by Lowyat.NET” and blog from Dr. Safemode [...]

]]> By: BlogMalaysia.com http://www.drsafemode.com/2008/03/30/gsc-website-hacked-2117966net/#comment-53 BlogMalaysia.com Mon, 31 Mar 2008 06:47:17 +0000 http://www.drsafemode.com/2008/03/30/gsc-website-hacked-2117966net/#comment-53 How to know if a computer is infected or not? How to know if a computer is infected or not?

]]> By: Blog of Kepongboy » Blog Archive » GSC Website Get Hacked http://www.drsafemode.com/2008/03/30/gsc-website-hacked-2117966net/#comment-52 Blog of Kepongboy » Blog Archive » GSC Website Get Hacked Mon, 31 Mar 2008 04:37:41 +0000 http://www.drsafemode.com/2008/03/30/gsc-website-hacked-2117966net/#comment-52 [...] GSC网站被入侵。消息从manutdotcom的文章传来。 据说网站的主要页面被置入javascript代码，代码有能力通过ActiveX安装窃取密码的程式。 [...] [...] GSC网站被入侵。消息从manutdotcom的文章传来。 据说网站的主要页面被置入javascript代码，代码有能力通过ActiveX安装窃取密码的程式。 [...]

]]> By: surfer http://www.drsafemode.com/2008/03/30/gsc-website-hacked-2117966net/#comment-51 surfer Sun, 30 Mar 2008 17:07:01 +0000 http://www.drsafemode.com/2008/03/30/gsc-website-hacked-2117966net/#comment-51 good news that it has been removed. but damaged has been done. with the promotion of free tickets for gsc in alamanda, i bet many has visited the site and been infected. perhaps a method to check for infection & ways to remove it would be helpful. good news that it has been removed. but damaged has been done. with the promotion of free tickets for gsc in alamanda, i bet many has visited the site and been infected. perhaps a method to check for infection & ways to remove it would be helpful.

]]> By: - Different http://www.drsafemode.com/2008/03/30/gsc-website-hacked-2117966net/#comment-49 - Different Sun, 30 Mar 2008 15:45:58 +0000 http://www.drsafemode.com/2008/03/30/gsc-website-hacked-2117966net/#comment-49 [...] Forumer manutdotcom tipped us off earlier today on a malicious piece of code present on the GSC online website. We did some checking ourselves on his story, and true enough, [...] [...] Forumer manutdotcom tipped us off earlier today on a malicious piece of code present on the GSC online website. We did some checking ourselves on his story, and true enough, [...]

]]> By: Dr. Safemode http://www.drsafemode.com/2008/03/30/gsc-website-hacked-2117966net/#comment-46 Dr. Safemode Sun, 30 Mar 2008 15:21:41 +0000 http://www.drsafemode.com/2008/03/30/gsc-website-hacked-2117966net/#comment-46 The exploit has been removed from GSC. Yay! The exploit has been removed from GSC. Yay!

]]> By: Dr. Safemode http://www.drsafemode.com/2008/03/30/gsc-website-hacked-2117966net/#comment-45 Dr. Safemode Sun, 30 Mar 2008 15:16:40 +0000 http://www.drsafemode.com/2008/03/30/gsc-website-hacked-2117966net/#comment-45 Yea, GSC is a very popular website. Someone without a proper protection could get hurt. >.< I'm currently using AVG version 8.0 which has a security toolbar installed on my web browser. It is based on the LinkScanner technology which was recently acquired by AVG. Even though I have turn off the security toolbar plugin for Firefox because the plugin was not supported by Firefox 2.0.0.13, AVG managed to block the infected script with its Web Shield. Yea, GSC is a very popular website. Someone without a proper protection could get hurt. >.<

I’m currently using AVG version 8.0 which has a security toolbar installed on my web browser. It is based on the LinkScanner technology which was recently acquired by AVG.

Even though I have turn off the security toolbar plugin for Firefox because the plugin was not supported by Firefox 2.0.0.13, AVG managed to block the infected script with its Web Shield.

]]> By: Shafique http://www.drsafemode.com/2008/03/30/gsc-website-hacked-2117966net/#comment-44 Shafique Sun, 30 Mar 2008 14:44:13 +0000 http://www.drsafemode.com/2008/03/30/gsc-website-hacked-2117966net/#comment-44 Hye There! Thanks a lot for the alert. I already alert all my friend. Ermm.. myspace also have been attack with the same method. all using iframe. Hye There! Thanks a lot for the alert. I already alert all my friend. Ermm.. myspace also have been attack with the same method. all using iframe.

]]> By: Throx http://www.drsafemode.com/2008/03/30/gsc-website-hacked-2117966net/#comment-43 Throx Sun, 30 Mar 2008 14:25:44 +0000 http://www.drsafemode.com/2008/03/30/gsc-website-hacked-2117966net/#comment-43 Yeah, this is one nasty iFrame hack. My webhosting provider got whole server infected and causing big lost of customer. Yeah, this is one nasty iFrame hack. My webhosting provider got whole server infected and causing big lost of customer.

]]>